403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.11.09.txt
 ## swap threshold exceeded
## server overview
2025-11-21.11.09 load[0] mem[63/60] mysql[1/25] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1402          70          31         890         744
Swap:          1999        1381         618
 11:09:01 up  1:33,  0 users,  load average: 0.59, 1.33, 3.63
## system overview
top - 11:09:01 up  1:33,  0 users,  load average: 0.59, 1.33, 3.63
Tasks: 215 total,   5 running, 209 sleeping,   0 stopped,   1 zombie
%Cpu(s): 68.8 us, 31.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    63336 free,  1443228 used,   913736 buff/cache
KiB Swap:  2047996 total,   633836 free,  1414160 used.   755604 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1764 mysql     20   0 1464576 231336   5048 S  62.5  9.6   1:13.06 /usr/sbin+
 13252 root      20   0  169868  16852   2880 S  31.2  0.7   0:00.08 /usr/loca+
 13269 nigeria   20   0  404052  16144  10384 S  12.5  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44276   3412   1516 S   6.2  0.1   0:08.61 /usr/lib/+
   474 dbus      20   0   58748   1412    684 S   6.2  0.1   0:03.10 /usr/bin/+
  4174 nobody    20   0  277584  18888   4580 S   6.2  0.8   0:01.09 /usr/sbin+
 13280 cloudw    20   0  353712  15968  10488 S   6.2  0.7   0:00.01 /opt/cpan+
 13286 cloudw    20   0  353712  15964  10484 S   6.2  0.7   0:00.01 /opt/cpan+
 13300 cloudsms  20   0  404052  15876  10224 R   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.42 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.26 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:05.37 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.24 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.10 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 R   0.0  0.0   0:21.04 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   131 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:01.91 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:02.15 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.47 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   323 nobody    20   0  277584  20376   4988 S   0.0  0.8   0:01.63 /usr/sbin+
   359 root      20   0   40244   5028   4768 S   0.0  0.2   0:03.59 /usr/lib/+
   385 root      20   0   45356     32     28 S   0.0  0.0   0:00.37 /usr/lib/+
   410 root      16  -4   55532    472    340 S   0.0  0.0   0:00.60 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    100     56 S   0.0  0.0   0:00.00 /usr/sbin+
   473 root      20   0  224144   5328   1512 S   0.0  0.2   0:00.22 queueproc+
   478 nscd      20   0  926904   1368    792 S   0.0  0.1   0:04.64 /usr/sbin+
   483 rpc       20   0   69256    100     40 S   0.0  0.0   0:00.01 /sbin/rpc+
   505 polkitd   20   0  610540    764    428 S   0.0  0.0   0:00.83 /usr/lib/+
   507 root      20   0   24696   1124    792 S   0.0  0.0   0:01.38 /usr/lib/+
   509 root      20   0   21540    344    260 S   0.0  0.0   0:00.12 /usr/sbin+
   514 root      20   0   52852    240    168 S   0.0  0.0   0:00.00 /usr/sbin+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   528 root      20   0    4388     16     12 S   0.0  0.0   0:00.00 /usr/sbin+
   562 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    428    296 S   0.0  0.0   0:00.17 /usr/sbin+
   580 root      20   0  108296     24     20 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   612 mailnull  20   0   89108   3900    900 S   0.0  0.2   0:00.12 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:02.55 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   731 nobody    20   0  277720  20380   5068 S   0.0  0.8   0:01.33 /usr/sbin+
   755 nobody    20   0  277924  19820   4860 S   0.0  0.8   0:01.72 /usr/sbin+
   939 root      20   0 1902216 386872    552 S   0.0 16.0   0:38.47 /usr/loca+
   942 named     20   0  990260  27252   1656 S   0.0  1.1   0:04.01 /usr/sbin+
   947 root      20   0  247992 121960   5376 S   0.0  5.0   0:02.78 /usr/loca+
   949 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   952 systuser  20   0   11540     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   953 root      20   0   51508    644    456 S   0.0  0.0   0:00.11 /usr/sbin+
   954 root      20   0 1277056   2128     16 S   0.0  0.1   0:21.88 /usr/bin/+
   955 telegraf  20   0 5654048  36972   6052 S   0.0  1.5   0:03.44 /usr/loca+
   956 root      20   0  445028    592    484 S   0.0  0.0   0:00.22 sw-engine+
   960 root      20   0  396248    272    192 S   0.0  0.0   0:00.24 php-fpm: +
   963 systuser  20   0  114016   9676   2636 S   0.0  0.4   0:01.51 /usr/loca+
   964 root      20   0  153404    240    160 S   0.0  0.0   0:00.11 pure-ftpd+
   965 cpanelc+  20   0   10320   3284   2304 S   0.0  0.1   0:05.05 /usr/loca+
   966 root      20   0  111304    368    264 S   0.0  0.0   0:00.87 /usr/sbin+
   967 root      20   0 1276356   6236      0 S   0.0  0.3   0:30.57 /usr/bin/+
   970 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   978 memcach+  20   0  342400     32     32 S   0.0  0.0   0:00.12 /usr/bin/+
   979 root      20   0  261028   7552   2204 S   0.0  0.3   0:32.33 cpsrvd (S+
   980 root      20   0  572372    892    312 S   0.0  0.0   0:00.57 /usr/bin/+
   984 root      20   0  389508    488    284 S   0.0  0.0   0:00.23 php-fpm: +
   998 root      20   0  388892    456    364 S   0.0  0.0   0:00.33 php-fpm: +
  1001 root      20   0  400740   2404    608 S   0.0  0.1   0:00.83 php-fpm: +
  1002 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.00 /usr/loca+
  1003 root      20   0  232784   4592   4092 S   0.0  0.2   0:01.69 /usr/sbin+
  1010 root      20   0  439788    420    328 S   0.0  0.0   0:00.30 php-fpm: +
  1097 dovenull  20   0   46912   1528    992 S   0.0  0.1   0:00.08 dovecot/p+
  1098 dovenull  20   0   47324   2612   1668 S   0.0  0.1   0:00.09 dovecot/i+
  1099 dovecot   20   0   10320    272    168 S   0.0  0.0   0:00.02 dovecot/a+
  1100 root      20   0   10452    548    396 S   0.0  0.0   0:00.07 dovecot/l+
  1101 dovenull  20   0   47064   2096   1544 S   0.0  0.1   0:00.14 dovecot/p+
  1102 dovenull  20   0   47192   2624   1784 S   0.0  0.1   0:00.10 dovecot/i+
  1106 root      20   0   24564   1864    304 S   0.0  0.1   0:00.06 dovecot/c+
  1107 dovecot   20   0   13568    592    376 S   0.0  0.0   0:00.01 dovecot/s+
  1157 dovecot   20   0   41152   1480   1020 S   0.0  0.1   0:00.15 dovecot/a+
  1197 systuser  20   0  157700   2876    836 S   0.0  0.1   0:00.04 SonarPush+
  1199 wp-tool+  20   0  387528   4068   1876 S   0.0  0.2   0:00.14 /usr/bin/+
  1200 wp-tool+  20   0  412368  13968   1856 S   0.0  0.6   0:02.03 /usr/bin/+
  1281 root      20   0  183900   6696   3460 S   0.0  0.3   0:00.49 cpdavd - +
  1283 root      20   0  167452   1212    664 S   0.0  0.1   0:00.13 dnsadmin +
  1285 root      20   0  209340  21596   4148 S   0.0  0.9   0:00.95 tailwatchd
  1671 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  1709 root      20   0  299272    444    280 S   0.0  0.0   0:00.15 php-fpm: +
  1717 root      38  18  130416   1372    700 S   0.0  0.1   0:00.01 cpanellog+
  1930 root      20   0  267052   5540    536 S   0.0  0.2   0:00.62 /usr/sbin+
  1931 root      20   0   12792    332    216 S   0.0  0.0   0:00.61 /usr/loca+
  1932 root      20   0   12732    288    212 S   0.0  0.0   0:00.52 /usr/loca+
  1933 root      20   0   12816    344    220 S   0.0  0.0   0:00.58 /usr/loca+
  1934 root      20   0   53340     24     24 S   0.0  0.0   0:00.05 /usr/loca+
  2045 root      20   0  181684   7536   1112 S   0.0  0.3   0:04.91 lfd - sle+
  4184 nobody    20   0  277904  19748   4764 S   0.0  0.8   0:01.07 /usr/sbin+
  4577 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  4601 nobody    20   0  277584  19720   4808 S   0.0  0.8   0:01.04 /usr/sbin+
  5113 nobody    20   0  277908  19680   4840 S   0.0  0.8   0:00.93 /usr/sbin+
  5816 nobody    20   0  277924  19292   4508 S   0.0  0.8   0:01.02 /usr/sbin+
  5829 nobody    20   0  277584  18912   4616 S   0.0  0.8   0:00.97 /usr/sbin+
  7184 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
  7358 nobody    20   0  277584  19352   4536 S   0.0  0.8   0:00.67 /usr/sbin+
  8324 nobody    20   0  277584  18904   4428 S   0.0  0.8   0:00.53 /usr/sbin+
  9242 nobody    20   0  277584  18456   4344 S   0.0  0.8   0:00.65 /usr/sbin+
  9726 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 11207 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 11842 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 11844 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12058 nobody    20   0  277780  18228   4004 S   0.0  0.8   0:00.15 /usr/sbin+
 12115 worencom  20   0   38472   3832   2992 S   0.0  0.2   0:00.00 dovecot/i+
 12586 root      20   0  111304   4280   3256 S   0.0  0.2   0:00.00 sshd: [ac+
 12732 root      20   0  249128 119532   1928 S   0.0  4.9   0:00.03 spamd chi+
 12733 root      20   0  247992 118024   1476 S   0.0  4.9   0:00.00 spamd chi+
 12764 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 13044 root      20   0  111304   4276   3256 S   0.0  0.2   0:00.00 sshd: [ac+
 13112 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 13124 wp-tool+  20   0  445028    320    196 S   0.0  0.0   0:00.00 sw-engine+
 13126 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 13148 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 13155 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 13158 mailnull  20   0   89488   5672   2456 S   0.0  0.2   0:00.00 /usr/sbin+
 13168 root      20   0  157100   5080   3792 S   0.0  0.2   0:00.00 sshd: unk+
 13169 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 13170 nigeria   20   0  400460   5000   2208 S   0.0  0.2   0:00.00 php-fpm: +
 13180 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 13181 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 13188 nobody    20   0  277236  16072   2896 S   0.0  0.7   0:00.00 /usr/sbin+
 13189 root      20   0  157100   5088   3796 S   0.0  0.2   0:00.00 sshd: unk+
 13190 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: unk+
 13195 root      20   0  157100   5076   3792 S   0.0  0.2   0:00.00 sshd: unk+
 13196 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: unk+
 13205 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13206 root      20   0  183044   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 13207 root      20   0  183044   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 13208 root      20   0  183044   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 13209 root      20   0  183044   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 13210 root      20   0  183044   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 13212 root      20   0  183044   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 13213 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 13214 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 13215 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13216 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13218 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13221 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 13223 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 13224 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 13238 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 13239 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 13240 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13241 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13242 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13243 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13244 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 13245 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13246 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13248 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 13249 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 13264 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 13265 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 13268 pactpay   20   0  480124  17312  11576 S   0.0  0.7   0:00.01 /opt/cpan+
 13281 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 13291 root      20   0  113496   1424   1236 S   0.0  0.1   0:00.00 bash /usr+
 13292 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 13297 root      20   0   18276   2248   1324 R   0.0  0.1   0:00.00 /usr/bin/+
 13298 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 13299 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 13301 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 13302 cloudsms  20   0  113284    180      0 R   0.0  0.0   0:00.00 /usr/loca+
 23203 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 23216 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.09 [kworker]
 40901 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 51246 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 55180 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 60610 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 69601 nobody    20   0  277964  20592   5004 S   0.0  0.9   0:01.89 /usr/sbin+
 78643 nobody    20   0  277916  20304   4876 S   0.0  0.8   0:01.94 /usr/sbin+
 78966 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 85015 nobody    20   0  277616  20452   5100 S   0.0  0.8   0:01.86 /usr/sbin+
 87547 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:36   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    09:36   0:05  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    09:36   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [watchdogd]
root         36  0.3  0.0      0     0 ?        S    09:36   0:21  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:36   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:36   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [deferwq]
root        131  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   09:36   0:01  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   09:36   0:02  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   09:36   0:02  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    09:36   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   09:36   0:00  \_ [ext4-rsv-conver]
root      40901  0.0  0.0      0     0 ?        S    10:22   0:00  \_ [kworker/1:1]
root      51246  0.0  0.0      0     0 ?        S    10:35   0:00  \_ [kworker/1:0]
root      55180  0.0  0.0      0     0 ?        S    10:40   0:00  \_ [kworker/0:3]
root      60610  0.0  0.0      0     0 ?        S    10:47   0:00  \_ [kworker/0:0]
root      78966  0.0  0.0      0     0 ?        S    10:50   0:00  \_ [kworker/u200:2]
root      87547  0.0  0.0      0     0 ?        S    10:51   0:00  \_ [kworker/1:4]
root       1671  0.0  0.0      0     0 ?        S    10:54   0:00  \_ [kworker/0:2]
root       4577  0.0  0.0      0     0 ?        S    10:57   0:00  \_ [kworker/u200:0]
root       7184  0.0  0.0      0     0 ?        S    11:01   0:00  \_ [kworker/1:2]
root       9726  0.0  0.0      0     0 ?        S    11:04   0:00  \_ [kworker/0:1]
root      11207  0.0  0.0      0     0 ?        S    11:06   0:00  \_ [kworker/0:4]
root      11842  0.0  0.0      0     0 ?        S    11:07   0:00  \_ [kworker/1:3]
root      11844  0.0  0.0      0     0 ?        S    11:07   0:00  \_ [kworker/1:5]
root          1  0.1  0.1  44276  3412 ?        Ss   09:36   0:08 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  40244  5028 ?        Ss   09:36   0:03 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45356    32 ?        Ss   09:36   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   472 ?        S<sl 09:36   0:00 /sbin/auditd
root        470  0.0  0.0 152780   100 ?        Ss   09:36   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        473  0.0  0.2 224144  5328 ?        Ss   09:36   0:00 queueprocd - waiting up to 60s to process a task
dbus        474  0.0  0.0  58748  1412 ?        Ss   09:36   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        478  0.0  0.0 926904  1368 ?        Ssl  09:36   0:04 /usr/sbin/nscd
rpc         483  0.0  0.0  69256   100 ?        Ss   09:36   0:00 /sbin/rpcbind -w
polkitd     505  0.0  0.0 610540   764 ?        Ssl  09:36   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        507  0.0  0.0  24696  1124 ?        Ss   09:36   0:01 /usr/lib/systemd/systemd-logind
root        509  0.0  0.0  21540   344 ?        Ss   09:36   0:00 /usr/sbin/irqbalance --foreground
root        514  0.0  0.0  52852   240 ?        Ss   09:36   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0 195208     0 ?        Ssl  09:36   0:00 /usr/sbin/gssproxy -D
root        528  0.0  0.0   4388    16 ?        Ss   09:36   0:00 /usr/sbin/acpid
root        562  0.0  0.0  24208     0 ?        Ss   09:36   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   428 ?        Ss   09:36   0:00 /usr/sbin/crond -n
root      13205  0.0  0.0 183044  2148 ?        S    11:09   0:00  \_ /usr/sbin/CROND -n
root      13221  0.0  0.0 113284  1212 ?        Ss   11:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      13223  0.0  0.0 108052   356 ?        S    11:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      13224  0.0  0.0 113288  1516 ?        S    11:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      13303  0.0  0.0 153840  2092 ?        R    11:09   0:00  |               \_ ps auxf
root      13206  0.0  0.0 183044  2156 ?        S    11:09   0:00  \_ /usr/sbin/CROND -n
root      13246  0.0  0.0  20164   804 ?        Ss   11:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      13207  0.0  0.0 183044  2156 ?        S    11:09   0:00  \_ /usr/sbin/CROND -n
root      13241  0.0  0.0  20164   804 ?        Ss   11:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      13208  0.0  0.0 183044  2156 ?        S    11:09   0:00  \_ /usr/sbin/CROND -n
root      13248  0.0  0.0  20164   988 ?        Ss   11:09   0:00  |   \_ jailshell (cloudsms) [13292] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  13292  0.0  0.0  20164   260 ?        S    11:09   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  13301  0.0  0.0 113284  1212 ?        S    11:09   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  13302  0.0  0.2 243944  5844 ?        R    11:09   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue2.php
root      13209  0.0  0.0 183044  2156 ?        S    11:09   0:00  \_ /usr/sbin/CROND -n
root      13243  0.0  0.0  20164   804 ?        Ss   11:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      13210  0.0  0.0 183044  2152 ?        S    11:09   0:00  \_ /usr/sbin/CROND -n
root      13240  0.0  0.0  20164   808 ?        Ss   11:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      13212  0.0  0.0 183044  2152 ?        S    11:09   0:00  \_ /usr/sbin/CROND -n
root      13249  0.0  0.0  20164   992 ?        Ss   11:09   0:00  |   \_ jailshell (cloudsms) [13298] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  13298  0.0  0.0      0     0 ?        D    11:09   0:00  |       \_ [jailshell]
root      13213  0.0  0.0 183044  2148 ?        S    11:09   0:00  \_ /usr/sbin/CROND -n
root      13245  0.0  0.0  20164   808 ?        Ss   11:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      13214  0.0  0.0 183044  2148 ?        S    11:09   0:00  \_ /usr/sbin/CROND -n
root      13242  0.0  0.0  20164   804 ?        Ss   11:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      13215  0.0  0.0 183044  2140 ?        S    11:09   0:00  \_ /usr/sbin/CROND -n
root      13239  0.0  0.0 113284  1208 ?        Ss   11:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      13252  0.0  0.6 169868 16852 ?        S    11:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      13291  0.0  0.0 113496  1424 ?        S    11:09   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      13297  0.0  0.1  18868  3284 ?        R    11:09   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      13216  0.0  0.0 183044  2144 ?        S    11:09   0:00  \_ /usr/sbin/CROND -n
root      13238  0.0  0.0  20164   972 ?        Ss   11:09   0:00  |   \_ jailshell (pactpay) [13264] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   13264  0.0  0.0  20164   264 ?        S    11:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   13268  0.0  0.7 480124 17672 ?        S    11:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      13218  0.0  0.0 183044  2144 ?        S    11:09   0:00  \_ /usr/sbin/CROND -n
root      13244  0.0  0.0  20164   972 ?        Ss   11:09   0:00      \_ jailshell (nigeria) [13265] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   13265  0.0  0.0  20164   260 ?        S    11:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   13269  0.0  0.6 404052 16144 ?        S    11:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        580  0.0  0.0 108296    24 tty1     Ss+  09:36   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704     0 ttyS0    Ss+  09:36   0:00 /bin/bash
mailnull    612  0.0  0.1  89108  3900 ?        Ss   09:36   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  13158  0.0  0.2  89488  5672 ?        S    11:08   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        939  0.6 15.9 1902216 386508 ?      Ssl  09:36   0:38 /usr/local/cpanel/3rdparty/bin/clamd -F
named       942  0.0  1.1 990260 27236 ?        Ssl  09:36   0:04 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    949  0.0  0.0 111608    60 ?        Ssl  09:36   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    952  0.0  0.0  11540    44 ?        Ssl  09:36   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        953  0.0  0.0  51508   644 ?        Ss   09:36   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.0  46912  1528 ?        S    09:36   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47324  2612 ?        S    09:36   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   272 ?        S    09:36   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   548 ?        S    09:36   0:00  \_ dovecot/log
dovenull   1101  0.0  0.0  47064  2096 ?        S    09:36   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.1  47192  2624 ?        S    09:36   0:00  \_ dovecot/imap-login
root       1106  0.0  0.0  24564  1864 ?        S    09:36   0:00  \_ dovecot/config
dovecot    1107  0.0  0.0  13568   592 ?        S    09:36   0:00  \_ dovecot/stats
dovecot    1157  0.0  0.0  41152  1480 ?        S    09:36   0:00  \_ dovecot/auth
worencom  12115  0.0  0.1  38472  3832 ?        S    11:07   0:00  \_ dovecot/imap
root      12764  0.0  0.1  60820  4508 ?        S    11:08   0:00  \_ dovecot/lmtp
root      13112  0.0  0.1  41052  2728 ?        S    11:08   0:00  \_ dovecot/auth -w
root        954  0.3  0.0 1277056 2128 ?        Ssl  09:36   0:21 /usr/bin/checkstatus
telegraf    955  0.0  1.5 5654048 36968 ?       SLsl 09:36   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        956  0.0  0.0 445028   592 ?        Ss   09:36   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  13124  0.0  0.0 445028   320 ?        S    11:08   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        960  0.0  0.0 396248   272 ?        Ss   09:36   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser    963  0.0  0.3 114016  9676 ?        Ssl  09:36   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        964  0.0  0.0 153404   240 ?        Ss   09:36   0:00 pure-ftpd (SERVER)
cpanelc+    965  0.0  0.1  10320  3284 ?        Rs   09:36   0:05 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        966  0.0  0.0 111304   368 ?        Ss   09:36   0:00 /usr/sbin/sshd -D
root      12586  0.0  0.1 111304  4280 ?        Ss   11:08   0:00  \_ sshd: [accepted]
root      13044  0.0  0.1 111304  4276 ?        Ss   11:08   0:00  \_ sshd: [accepted]
root      13148  0.0  0.1 111304  4448 ?        Ss   11:08   0:00  \_ sshd: [accepted]
sshd      13155  0.0  0.1 115644  2628 ?        S    11:08   0:00  |   \_ sshd: [net]
root      13168  0.0  0.2 157100  5080 ?        Ss   11:08   0:00  \_ sshd: unknown [priv]
sshd      13169  0.0  0.1 115644  2628 ?        S    11:08   0:00  |   \_ sshd: unknown [net]
root      13180  0.0  0.1 111304  4448 ?        Ss   11:08   0:00  \_ sshd: [accepted]
sshd      13181  0.0  0.1 115644  2628 ?        S    11:08   0:00  |   \_ sshd: [net]
root      13189  0.0  0.2 157100  5088 ?        Ss   11:09   0:00  \_ sshd: unknown [priv]
sshd      13190  0.0  0.1 115644  2632 ?        S    11:09   0:00  |   \_ sshd: unknown [net]
root      13195  0.0  0.2 157100  5076 ?        Ss   11:09   0:00  \_ sshd: unknown [priv]
sshd      13196  0.0  0.1 115644  2624 ?        S    11:09   0:00      \_ sshd: unknown [net]
root        967  0.5  0.2 1276356 6236 ?        Ssl  09:36   0:30 /usr/bin/cspdaemon
systuser    970  0.0  0.0  11348    36 ?        Ssl  09:36   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
memcach+    978  0.0  0.0 342400    32 ?        Ssl  09:36   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        979  0.5  0.3 261028  7552 ?        Ss   09:36   0:32 cpsrvd (SSL) - waiting for connections                   
root      13126  0.0  0.0      0     0 ?        Z    11:08   0:00  \_ [cpaneld - servi] <defunct>
root        980  0.0  0.0 572372   892 ?        Ssl  09:36   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        984  0.0  0.0 389508   488 ?        Ss   09:36   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        998  0.0  0.0 388892   456 ?        Ss   09:36   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1001  0.0  0.0 400740  2404 ?        Ss   09:36   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   13170  0.0  0.2 400460  5000 ?        S    11:08   0:00  \_ php-fpm: pool nigeriadecide_org
systuser   1002  0.0  0.0 112524    68 ?        Ssl  09:36   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1003  0.0  0.1 232784  4592 ?        Ssl  09:36   0:01 /usr/sbin/rsyslogd -n
root       1010  0.0  0.0 439788   420 ?        Ss   09:36   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser   1197  0.0  0.1 157700  2876 ?        S    09:36   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1199  0.0  0.1 387528  4068 ?        Ss   09:36   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1200  0.0  0.5 412368 13968 ?        Ss   09:36   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1281  0.0  0.2 183900  6696 ?        Ss   09:36   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1283  0.0  0.0 167452  1212 ?        Ss   09:36   0:00 dnsadmin - dormant mode
root       1285  0.0  0.8 209340 21596 ?        Ss   09:36   0:00 tailwatchd
root       1709  0.0  0.0 299272   444 ?        Ss   09:36   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1372 ?        SN   09:36   0:00 cpanellogd - sleeping for logs
mysql      1764  1.3  9.5 1464576 231292 ?      Sl   09:36   1:13 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1930  0.0  0.2 267052  5540 ?        Ss   09:36   0:00 /usr/sbin/httpd -k start
root       1931  0.0  0.0  12792   332 ?        S    09:36   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1932  0.0  0.0  12732   288 ?        S    09:36   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1933  0.0  0.0  12816   344 ?        S    09:36   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1934  0.0  0.0  53340    24 ?        S    09:36   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    69601  0.1  0.8 277964 20592 ?        S    10:49   0:01  \_ /usr/sbin/httpd -k start
nobody    78643  0.1  0.8 277916 20304 ?        S    10:50   0:01  \_ /usr/sbin/httpd -k start
nobody    85015  0.1  0.8 277616 20452 ?        S    10:50   0:01  \_ /usr/sbin/httpd -k start
nobody      323  0.1  0.8 277584 20376 ?        S    10:53   0:01  \_ /usr/sbin/httpd -k start
nobody      731  0.1  0.8 277720 20380 ?        S    10:53   0:01  \_ /usr/sbin/httpd -k start
nobody      755  0.1  0.8 277924 19820 ?        S    10:53   0:01  \_ /usr/sbin/httpd -k start
nobody     4174  0.1  0.7 277584 18888 ?        S    10:57   0:01  \_ /usr/sbin/httpd -k start
cloudw    13286  0.0  0.6 353712 15964 ?        S    11:09   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     4184  0.1  0.8 277904 19748 ?        S    10:57   0:01  \_ /usr/sbin/httpd -k start
nobody     4601  0.1  0.8 277584 19720 ?        S    10:57   0:01  \_ /usr/sbin/httpd -k start
nobody     5113  0.1  0.8 277908 19680 ?        S    10:58   0:00  \_ /usr/sbin/httpd -k start
nobody     5816  0.1  0.7 277924 19292 ?        S    10:59   0:01  \_ /usr/sbin/httpd -k start
nobody     5829  0.1  0.7 277584 18912 ?        S    10:59   0:00  \_ /usr/sbin/httpd -k start
nobody     7358  0.1  0.7 277584 19352 ?        S    11:01   0:00  \_ /usr/sbin/httpd -k start
nobody     8324  0.1  0.7 277584 18904 ?        S    11:02   0:00  \_ /usr/sbin/httpd -k start
nobody     9242  0.1  0.7 277584 18456 ?        S    11:03   0:00  \_ /usr/sbin/httpd -k start
nobody    12058  0.1  0.7 277780 18228 ?        S    11:07   0:00  \_ /usr/sbin/httpd -k start
nobody    13188  0.0  0.6 277236 16072 ?        S    11:09   0:00  \_ /usr/sbin/httpd -k start
cloudw    13280  0.0  0.6 353712 15968 ?        R    11:09   0:00      \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
root       2045  0.0  0.3 181684  7536 ?        Ss   09:36   0:04 lfd - sleeping
oysipao+  23203  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  23216  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root        947  0.2  5.0 247992 121960 ?       Ss   10:53   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      12732  0.0  4.9 249128 119532 ?       S    11:08   0:00  \_ spamd child
root      12733  0.0  4.8 247992 118024 ?       S    11:08   0:00  \_ spamd child
## mysql stats
Uptime: 27285  Threads: 3  Questions: 377266  Slow queries: 0  Opens: 4281  Flush tables: 1  Open tables: 2000  Queries per second avg: 13.826
*************************** 1. row ***************************
     Id: 6283
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 6285
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-21' LIMIT 1
*************************** 3. row ***************************
     Id: 6291
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 148.113.128.250 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 192.178.4.104 TIME_WAIT
      1 ::1 TIME_WAIT
      1 27.254.134.67 TIME_WAIT
      1 3.222.6.250 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 182.42.111.213 TIME_WAIT
      4 209.250.242.219 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 11:09:01 WAT
   Restart Time: Friday, 21-Nov-2025 03:34:21 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 hours 34 minutes 40 seconds
   Server load: 0.59 1.33 3.63
   Total accesses: 27227 - Total Traffic: 734.4 MB - Total Duration: 145481717
   CPU Usage: u13.5 s5.6 cu391.76 cs295.39 - 2.59% CPU load
   .998 requests/sec - 27.6 kB/second - 27.6 kB/request - 5343.29 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

WKKWRK_WK_K._.K_K...K_..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur    Conn  Child  Slot     Client      Protocol         VHost                                      Request
   0-0  13188 0/0/1212    W 0.00 0     0   636045   0.0   0.00  30.94 192.178.4.100   http/1.1 team.cloudware.ng:443  GET /?l=475013922 HTTP/1.1
   1-0  7358  17/115/1354 K 2.80 3     293 726364   522.8 2.93  33.74 192.178.4.99    http/1.1 team.cloudware.ng:443  GET /?l=3797825496 HTTP/1.1
   2-0  78643 9/325/1366  K 8.56 0     356 798569   279.0 8.91  36.66 192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=1711597498 HTTP/1.1
   3-0  4601  0/178/1345  W 4.39 0     0   702687   0.0   4.57  35.67 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   4-0  8324  0/96/1252   R 2.14 1     24  44112084 0.0   2.44  35.00 105.112.238.131 http/1.1 nigeriadecide.org:443
   5-0  5816  11/170/1131 K 4.39 0     306 594928   339.0 4.59  30.89 192.178.4.103   http/1.1 team.cloudware.ng:443  GET /?l=294855039 HTTP/1.1
   6-0  85015 0/317/1280  _ 8.35 0     26  692383   0.0   9.86  35.08 116.203.129.16  http/1.1 cloudsms.com.ng:443    GET /cron/process_queue5.php HTTP/1.1
   7-0  4174  1/185/1213  W 4.51 0     0   723293   34.0  4.76  32.16 192.178.4.101   http/1.1 team.cloudware.ng:443  GET /?l=3495370791 HTTP/1.1
   8-0  9242  2/106/1234  K 2.78 0     264 691739   65.5  3.03  34.93 192.178.4.105   http/1.1 team.cloudware.ng:443  GET /?l=86431067 HTTP/1.1
   9-0  323   0/291/1267  _ 6.75 0     0   668396   0.0   7.27  34.87 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   10-0 12058 1/27/1150   K 0.63 3     307 626193   35.1  0.71  29.67 192.178.4.97    http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2576688
   11-0 -     0/0/1316    . 0.00 154   0   718253   0.0   0.00  34.19 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   12-0 69601 0/316/987   _ 8.41 1     24  566591   0.0   8.36  24.89 128.140.8.200   http/1.1 cloudsms.com.ng:443    GET /cron/process_queue3.php HTTP/1.1
   13-0 -     0/0/954     . 0.00 241   0   43954339 0.0   0.00  26.46 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-0 731   3/245/896   K 5.69 1     401 555342   99.1  5.86  25.56 192.178.4.102   http/1.1 team.cloudware.ng:443  GET /?l=4052055376 HTTP/1.1
   15-0 4184  0/185/1080  _ 4.41 0     27  606564   0.0   4.82  27.25 116.203.129.16  http/1.1 cloudsms.com.ng:443    GET /cron/process_queue1.php HTTP/1.1
   16-0 5113  3/161/1080  K 3.57 3     258 577192   97.2  4.02  29.04 192.178.4.96    http/1.1 team.cloudware.ng:443  GET /?l=2336478109 HTTP/1.1
   17-0 -     0/0/921     . 0.00 563   0   538058   0.0   0.00  23.28 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 -     0/0/654     . 0.00 454   0   459920   0.0   0.00  17.55 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 -     0/0/1135    . 0.00 477   0   608888   0.0   0.00  29.34 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 755   10/285/814  K 7.36 4     260 43941544 307.1 7.65  21.38 192.178.4.100   http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1300072
   21-0 5829  0/161/551   _ 4.23 0     259 316086   0.0   4.41  19.10 192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=1809675679 HTTP/1.1
   22-0 -     0/0/538     . 0.00 387   0   334437   0.0   0.00  16.19 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/280     . 0.00 23449 0   156923   0.0   0.00  7.55  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/437     . 0.00 23462 0   229576   0.0   0.00  11.87 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/62      . 0.00 23547 0   25776    0.0   0.00  1.43  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/30      . 0.00 25278 0   13761    0.0   0.00  0.90  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/6       . 0.00 26643 0   3360     0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/184     . 0.00 25937 0   93070    0.0   0.00  4.64  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/2       . 0.00 26687 0   9        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/2       . 0.00 26686 0   13       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/4       . 0.00 26666 0   2022     0.0   0.00  0.09  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/5       . 0.00 26642 0   1566     0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/5       . 0.00 26657 0   1895     0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/3       . 0.00 26668 0   57       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/22      . 0.00 26608 0   11094    0.0   0.00  0.65  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/4       . 0.00 26645 0   823      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/80      . 0.00 26300 0   38300    0.0   0.00  1.90  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/14      . 0.00 26603 0   6642     0.0   0.00  0.35  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/2       . 0.00 26662 0   40       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/2       . 0.00 26665 4   40       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/2       . 0.00 26683 0   34       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/8       . 0.00 26636 0   4106     0.0   0.00  0.19  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/6       . 0.00 26637 0   2657     0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/9       . 0.00 26638 0   3864     0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/10      . 0.00 26616 0   3619     0.0   0.00  0.23  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/2       . 0.00 26684 0   113      0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/3       . 0.00 26647 0   38       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/2       . 0.00 26663 0   18       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/19      . 0.00 26606 0   9315     0.0   0.00  0.49  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/335     . 0.00 25372 0   176390   0.0   0.00  9.65  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/2       . 0.00 26682 0   23       0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2       . 0.00 26681 0   19       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/28      . 0.00 26532 0   31192    0.0   0.00  3.71  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2       . 0.00 26677 0   52       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/3       . 0.00 26660 0   73       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/2       . 0.00 26678 0   54       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/2       . 0.00 26676 0   40       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/86      . 0.00 26302 0   43953    0.0   0.00  2.25  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/9       . 0.00 26607 0   3369     0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/2       . 0.00 26680 0   51       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/2       . 0.00 26669 0   36       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/5       . 0.00 26640 0   1263     0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/2       . 0.00 26673 0   35       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/14      . 0.00 26634 0   8103     0.0   0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/2       . 0.00 26679 0   46       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/3       . 0.00 26653 0   53       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/2       . 0.00 26670 0   145      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/4       . 0.00 26639 0   753      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/224     . 0.00 25760 0   141502   0.0   0.00  5.80  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/2       . 0.00 26672 0   52       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/17      . 0.00 26604 0   9108     0.0   0.00  0.43  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/138     . 0.00 26126 0   86335    0.0   0.00  5.84  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/28      . 0.00 26535 0   14353    0.0   0.00  0.77  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/41      . 0.00 26474 0   23982    0.0   0.00  1.17  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/264     . 0.00 25614 0   150949   0.0   0.00  7.38  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/2       . 0.00 26675 0   44       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/3       . 0.00 26667 0   58       0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/5       . 0.00 26646 0   1963     0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/2       . 0.00 26671 0   34       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   80-0 -     0/0/48      . 0.00 26473 0   25894    0.0   0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   81-0 -     0/0/3       . 0.00 26648 0   672      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   82-0 -     0/0/8       . 0.00 26631 0   2458     0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1067
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 11 seconds, (range: 0...68)
   index usage: 18%, cache usage: 25%
   total entries stored since starting: 20355
   total entries replaced since starting: 0
   total entries expired since starting: 19277
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 36 miss
   total removes since starting: 11 hit, 2 miss
Youez - 2016 - github.com/yon3zu
LinuXploit