403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.03.30.txt
 ## swap threshold exceeded
## server overview
2025-11-22.03.30 load[0] mem[60/62] mysql[6/25] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1337          80          59         945         799
Swap:          1999        1366         633
 03:30:01 up  2:33,  0 users,  load average: 0.18, 0.30, 0.33
## system overview
top - 03:30:01 up  2:33,  0 users,  load average: 0.18, 0.30, 0.33
Tasks: 215 total,   3 running, 211 sleeping,   0 stopped,   1 zombie
%Cpu(s): 75.0 us, 15.6 sy,  0.0 ni,  6.2 id,  3.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    67424 free,  1368116 used,   984760 buff/cache
KiB Swap:  2047996 total,   648912 free,  1399084 used.   820412 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1816 mysql     20   0 1463296 285704   4508 S 146.7 11.8   1:51.48 /usr/sbin+
  8471 nigeria   20   0  404052  16128  10376 S  13.3  0.7   0:00.05 /opt/cpan+
   485 root      20   0   24712   1172    808 S   6.7  0.0   0:02.20 /usr/lib/+
  8533 root      20   0  160224   2360   1632 S   6.7  0.1   0:00.01 top -n 2 +
     1 root      20   0   44396   3308   1472 S   0.0  0.1   0:12.35 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.48 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.40 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:08.77 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.38 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.32 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:11.31 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kauditd]
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:01.19 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:01.02 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.51 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   39500   5216   4916 S   0.0  0.2   0:04.93 /usr/lib/+
   380 root      20   0   45352    244     72 S   0.0  0.0   0:00.33 /usr/lib/+
   406 root      16  -4   55532    484    356 S   0.0  0.0   0:00.75 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   483 root      20   0   21540    384    276 S   0.0  0.0   0:00.20 /usr/sbin+
   486 root      20   0  152780    108     68 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0  224148   5564    840 S   0.0  0.2   0:00.17 queueproc+
   488 root      20   0   52852    436    332 S   0.0  0.0   0:00.00 /usr/sbin+
   495 polkitd   20   0  612240   1044    608 S   0.0  0.0   0:01.33 /usr/lib/+
   498 dbus      20   0   58748   1464    700 S   0.0  0.1   0:05.07 /usr/bin/+
   506 rpc       20   0   69256    148     44 S   0.0  0.0   0:00.01 /sbin/rpc+
   518 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   543 nscd      20   0  928956   1384    684 S   0.0  0.1   0:06.79 /usr/sbin+
   554 root      20   0   24208     64     44 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124476    440    308 S   0.0  0.0   0:00.26 /usr/sbin+
   577 root      20   0  108296     44     40 S   0.0  0.0   0:00.00 /sbin/age+
   578 root      20   0  114704      8      8 S   0.0  0.0   0:00.02 /bin/bash
   595 mailnull  20   0   90824   3916    828 S   0.0  0.2   0:00.28 /usr/sbin+
   628 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:02.87 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  572372    976    392 S   0.0  0.0   0:00.87 /usr/bin/+
   920 root      20   0  240976   4908   4236 S   0.0  0.2   0:02.41 /usr/sbin+
   926 root      20   0 1763124 267592   1200 S   0.0 11.1   0:13.58 /usr/loca+
   927 named     20   0 1054792  41168   2012 S   0.0  1.7   0:04.91 /usr/sbin+
   930 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.20 /usr/bin/+
   931 root      20   0  389508    496    288 S   0.0  0.0   0:00.30 php-fpm: +
   932 root      20   0  445028   3232   3116 S   0.0  0.1   0:00.43 sw-engine+
   939 root      20   0  439788  11344  11012 S   0.0  0.5   0:00.33 php-fpm: +
   941 systuser  20   0  113932   2064      0 S   0.0  0.1   0:00.01 /usr/loca+
   943 root      20   0  388892    520    316 S   0.0  0.0   0:00.28 php-fpm: +
   944 cpanelc+  20   0   10608   3524   2320 S   0.0  0.1   0:07.29 /usr/loca+
   946 systuser  20   0  114016  15912   2696 S   0.0  0.7   0:02.35 /usr/loca+
   949 systuser  20   0  113016   1600      0 S   0.0  0.1   0:00.01 /usr/loca+
   958 root      20   0  396248    504    328 S   0.0  0.0   0:00.29 php-fpm: +
   959 root      20   0  111304    392    292 S   0.0  0.0   0:01.00 /usr/sbin+
   960 root      20   0   51508    488    328 S   0.0  0.0   0:00.16 /usr/sbin+
   962 root      20   0  261024   6648   1716 S   0.0  0.3   0:01.37 cpsrvd (S+
   965 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   972 root      20   0  400740   2652    644 S   0.0  0.1   0:01.03 php-fpm: +
   973 root      20   0  153404    280    200 S   0.0  0.0   0:00.19 pure-ftpd+
   974 root      20   0 1277312  10432     40 S   0.0  0.4   0:28.02 /usr/bin/+
   975 root      20   0 1276356   9348      8 S   0.0  0.4   0:25.50 /usr/bin/+
   977 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 telegraf  20   0 5654304  36444   5956 S   0.0  1.5   0:05.22 /usr/loca+
  1079 dovenull  20   0   47136   2812   1828 S   0.0  0.1   0:00.27 dovecot/p+
  1080 dovenull  20   0   47392   3516   2332 S   0.0  0.1   0:00.15 dovecot/i+
  1081 dovecot   20   0   10320    372    260 S   0.0  0.0   0:00.08 dovecot/a+
  1082 root      20   0   10452    488    308 S   0.0  0.0   0:00.18 dovecot/l+
  1083 dovenull  20   0   47300   3248   2212 S   0.0  0.1   0:00.38 dovecot/p+
  1084 dovenull  20   0   47424   2684   1620 S   0.0  0.1   0:00.13 dovecot/i+
  1090 root      20   0   24528   2236    504 S   0.0  0.1   0:00.08 dovecot/c+
  1091 dovecot   20   0   13568    560    356 S   0.0  0.0   0:00.02 dovecot/s+
  1141 root      20   0  247944 116884    856 S   0.0  4.8   0:03.94 /usr/loca+
  1153 dovecot   20   0   41156   1496   1020 S   0.0  0.1   0:00.54 dovecot/a+
  1158 systuser  20   0  157704   2752    768 S   0.0  0.1   0:00.06 SonarPush+
  1177 wp-tool+  20   0  387528  13028   1400 S   0.0  0.5   0:00.16 /usr/bin/+
  1178 wp-tool+  20   0  412368  32184   1396 S   0.0  1.3   0:03.07 /usr/bin/+
  1187 nobody    20   0  277968  20148   4488 S   0.0  0.8   0:00.90 /usr/sbin+
  1261 root      20   0  183900   6448   3216 S   0.0  0.3   0:00.57 cpdavd - +
  1262 root      20   0  209248  11588   2084 S   0.0  0.5   0:01.22 tailwatchd
  1263 root      20   0  167452   2168    792 S   0.0  0.1   0:00.22 dnsadmin +
  1662 root      38  18  130416   1440    704 S   0.0  0.1   0:00.02 cpanellog+
  1690 root      20   0  299272    672    292 S   0.0  0.0   0:00.25 php-fpm: +
  1927 root      20   0  267052   8340    648 S   0.0  0.3   0:00.83 /usr/sbin+
  1929 root      20   0   12776    332    232 S   0.0  0.0   0:00.93 /usr/loca+
  1930 root      20   0   12732    300    224 S   0.0  0.0   0:00.81 /usr/loca+
  1931 root      20   0   12784    336    228 S   0.0  0.0   0:00.85 /usr/loca+
  1939 root      20   0   53268     60     60 S   0.0  0.0   0:00.04 /usr/loca+
  2021 root      20   0  182084  10968   1120 S   0.0  0.5   0:07.99 lfd - sle+
  2472 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
  3371 nobody    20   0  277908  19972   4392 S   0.0  0.8   0:00.68 /usr/sbin+
  4327 nobody    20   0  277584  19724   4300 S   0.0  0.8   0:00.34 /usr/sbin+
  4410 root      20   0  183048    572     32 S   0.0  0.0   0:00.00 /usr/sbin+
  4453 root      20   0  113284    180      0 S   0.0  0.0   0:00.00 /bin/sh -+
  4476 root      20   0  108056     76      0 S   0.0  0.0   0:00.00 sleep 4h +
  4531 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  4539 oysipao+  20   0    3152    504     16 S   0.0  0.0   0:00.17 [kworker]
  4610 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  5286 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  5447 nobody    20   0  277916  19952   4244 S   0.0  0.8   0:00.38 /usr/sbin+
  5450 nobody    20   0  277588  19648   4212 S   0.0  0.8   0:00.38 /usr/sbin+
  5451 nobody    20   0  277588  19796   4368 S   0.0  0.8   0:00.35 /usr/sbin+
  5466 nobody    20   0  277924  19860   4152 S   0.0  0.8   0:00.35 /usr/sbin+
  5470 nobody    20   0  277908  19776   4212 S   0.0  0.8   0:00.38 /usr/sbin+
  5472 nobody    20   0  277588  19596   4180 S   0.0  0.8   0:00.45 /usr/sbin+
  5487 nobody    20   0  277584  19584   4180 S   0.0  0.8   0:00.32 /usr/sbin+
  5491 nobody    20   0  277584  19648   4232 S   0.0  0.8   0:00.40 /usr/sbin+
  5495 nobody    20   0  277584  19504   4124 S   0.0  0.8   0:00.33 /usr/sbin+
  5496 nobody    20   0  277584  19588   4100 S   0.0  0.8   0:00.40 /usr/sbin+
  5497 nobody    20   0  277908  19668   4124 S   0.0  0.8   0:00.37 /usr/sbin+
  5501 nobody    20   0  277908  19736   4176 S   0.0  0.8   0:00.35 /usr/sbin+
  6717 root      20   0  258552 125312   3204 S   0.0  5.2   0:01.11 spamd chi+
  6719 root      20   0  247944 116292    288 S   0.0  4.8   0:00.00 spamd chi+
  7568 root      30  10  113284   1488   1276 S   0.0  0.1   0:00.00 /bin/bash+
  7575 root      30  10  132964   4548   1012 S   0.0  0.2   0:00.00 ConfigSer+
  7587 root      30  10  108056    360    284 S   0.0  0.0   0:00.00 sleep 152+
  7838 root      30  10  113284   1496   1256 S   0.0  0.1   0:00.00 bash /etc+
  7839 root      30  10  113644    980    832 S   0.0  0.0   0:00.00 awk -v pr+
  7892 root      30  10  108056    356    284 S   0.0  0.0   0:00.00 sleep 312
  8057 root      20   0  111304   4444   3404 S   0.0  0.2   0:00.00 sshd: [ac+
  8058 sshd      20   0  115644   2628   1556 S   0.0  0.1   0:00.00 sshd: [ne+
  8135 nigeria   20   0  400460   5200   2412 S   0.0  0.2   0:00.01 php-fpm: +
  8198 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  8223 wp-tool+  20   0  445028    316    184 S   0.0  0.0   0:00.00 sw-engine+
  8298 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  8309 mailnull  20   0   91208   5856   2588 S   0.0  0.2   0:00.00 /usr/sbin+
  8352 root      20   0  157100   4992   3716 S   0.0  0.2   0:00.00 sshd: unk+
  8388 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
  8393 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  8401 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8402 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8403 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8404 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8405 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8406 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8409 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8410 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8411 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8412 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8413 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8414 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8415 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8416 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8418 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8428 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8430 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8433 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
  8434 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8435 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  8436 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8437 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8438 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8439 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8440 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8441 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  8445 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  8446 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8447 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8448 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8449 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  8451 root      20   0  188216  11088   5148 S   0.0  0.5   0:00.02 /usr/loca+
  8457 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
  8462 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  8464 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  8467 pactpay   20   0  480124  17672  11880 S   0.0  0.7   0:00.02 /opt/cpan+
  8503 cloudw    20   0  353712  15968  10484 R   0.0  0.7   0:00.01 /opt/cpan+
  8565 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
  8567 root      20   0   36640   1376   1084 S   0.0  0.1   0:00.00 /usr/loca+
 63157 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 69703 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 80786 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 82223 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 88705 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 89341 root      20   0  123576    604    376 S   0.0  0.0   0:00.00 /usr/sbin+
 90413 worencom  20   0   38500   2680   1708 S   0.0  0.1   0:00.01 dovecot/i+
 91432 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 94906 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 97243 nobody    20   0  277600  20496   4916 S   0.0  0.8   0:01.55 /usr/sbin+
100191 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101349 nobody    20   0  277960  20596   4660 S   0.0  0.9   0:00.97 /usr/sbin+
101572 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:56   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        R    00:56   0:08  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    00:56   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:56   0:11  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kauditd]
root        244  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   00:56   0:01  \_ [kworker/1:1H]
root        270  0.0  0.0      0     0 ?        S<   00:56   0:01  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [xprtiod]
root        628  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   00:56   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root      63157  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/0:3]
root      69703  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/u200:0]
root      80786  0.0  0.0      0     0 ?        S    02:49   0:00  \_ [kworker/0:0]
root      82223  0.0  0.0      0     0 ?        S    02:51   0:00  \_ [kworker/1:4]
root      88705  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/u200:2]
root      91432  0.0  0.0      0     0 ?        S    03:04   0:00  \_ [kworker/1:0]
root      94906  0.0  0.0      0     0 ?        S    03:09   0:00  \_ [kworker/1:2]
root     100191  0.0  0.0      0     0 ?        S    03:16   0:00  \_ [kworker/0:2]
root     101572  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/1:3]
root       2472  0.0  0.0      0     0 ?        S    03:22   0:00  \_ [kworker/0:1]
root       4610  0.0  0.0      0     0 ?        S    03:25   0:00  \_ [kworker/1:1]
root       5286  0.0  0.0      0     0 ?        S    03:26   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44396  3308 ?        Ss   00:56   0:12 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.2  39500  5220 ?        Ss   00:56   0:04 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352   244 ?        Ss   00:56   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   484 ?        S<sl 00:56   0:00 /sbin/auditd
root        483  0.0  0.0  21540   384 ?        Ss   00:56   0:00 /usr/sbin/irqbalance --foreground
root        485  0.0  0.0  24712  1172 ?        Ss   00:56   0:02 /usr/lib/systemd/systemd-logind
root        486  0.0  0.0 152780   108 ?        Ss   00:56   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.2 224148  5564 ?        Ss   00:56   0:00 queueprocd - waiting up to 60s to process a task
root        488  0.0  0.0  52852   436 ?        Ss   00:56   0:00 /usr/sbin/smartd -n -q never
polkitd     495  0.0  0.0 612240  1044 ?        Ssl  00:56   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        498  0.0  0.0  58748  1464 ?        Ss   00:56   0:05 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         506  0.0  0.0  69256   148 ?        Ss   00:56   0:00 /sbin/rpcbind -w
root        518  0.0  0.0   4388    36 ?        Ss   00:56   0:00 /usr/sbin/acpid
root        520  0.0  0.0 195208     0 ?        Ssl  00:56   0:00 /usr/sbin/gssproxy -D
nscd        543  0.0  0.0 928956  1384 ?        Ssl  00:56   0:06 /usr/sbin/nscd
root        554  0.0  0.0  24208    64 ?        Ss   00:56   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 124476   440 ?        Ss   00:56   0:00 /usr/sbin/crond -n
root       4410  0.0  0.0 183048   572 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       4453  0.0  0.0 113284   180 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       4476  0.0  0.0 108056    76 ?        S    01:00   0:00  |       \_ sleep 4h 19m
root       8401  0.0  0.0 183044  2148 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       8435  0.0  0.0 113284  1212 ?        Ss   03:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       8449  0.0  0.0 108052   360 ?        S    03:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       8457  0.0  0.0 113288  1512 ?        S    03:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       8571  0.0  0.0 153840  2092 ?        R    03:30   0:00  |               \_ ps auxf
root       8402  0.0  0.0 183044  2152 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       8436  0.0  0.0  20164   808 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       8403  0.0  0.0 183044  2152 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       8439  0.0  0.0  20164   808 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root       8404  0.0  0.0 183044  2152 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       8438  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root       8405  0.0  0.0 183044  2152 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       8446  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       8406  0.0  0.0 183044  2152 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       8447  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       8409  0.0  0.0 183044  2152 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       8440  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       8410  0.0  0.0 183044  2148 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       8448  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root       8411  0.0  0.0 183044  2148 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       8434  0.0  0.0  20164   808 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       8412  0.0  0.0 183044  2148 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       8430  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       8413  0.0  0.0 183044  2144 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       8428  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       8414  0.0  0.0 183044  2144 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       8437  0.0  0.0  20164   808 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       8415  0.0  0.0 183044  2140 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       8433  0.0  0.0 113284  1208 ?        Ss   03:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root       8451  0.0  0.4 188216 11088 ?        S    03:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root       8533  0.0  0.0 160224  2360 ?        S    03:30   0:00  |           \_ top -n 2 -b -c
root       8416  0.0  0.0 183044  2144 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       8441  0.0  0.0  20164   964 ?        Ss   03:30   0:00  |   \_ jailshell (pactpay) [8464] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    8464  0.0  0.0  20164   260 ?        S    03:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    8467  0.0  0.7 480124 17672 ?        S    03:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       8418  0.0  0.0 183044  2144 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       8445  0.0  0.0  20164   964 ?        Ss   03:30   0:00      \_ jailshell (nigeria) [8462] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    8462  0.0  0.0  20164   260 ?        S    03:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    8471  0.0  0.6 404052 16128 ?        S    03:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0 108296    44 tty1     Ss+  00:56   0:00 /sbin/agetty --noclear tty1 linux
root        578  0.0  0.0 114704     8 ttyS0    Ss+  00:56   0:00 /bin/bash
mailnull    595  0.0  0.1  90824  3916 ?        Ss   00:56   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   8309  0.0  0.2  91208  5856 ?        S    03:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 572372   976 ?        Ssl  00:56   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        920  0.0  0.2 240976  4916 ?        Ssl  00:56   0:02 /usr/sbin/rsyslogd -n
root        926  0.1 11.0 1763124 267592 ?      Ssl  00:56   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.7 1054792 41168 ?       Ssl  00:56   0:04 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    930  0.0  0.0 342400     0 ?        Ssl  00:56   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        931  0.0  0.0 389508   496 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        932  0.0  0.1 445028  3232 ?        Ss   00:56   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+   8223  0.0  0.0 445028   316 ?        S    03:29   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        939  0.0  0.4 439788 11344 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    941  0.0  0.0 113932  2064 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 388892   520 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    944  0.0  0.1  10608  3524 ?        Rs   00:56   0:07 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    946  0.0  0.6 114016 15912 ?        Ssl  00:56   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    949  0.0  0.0 113016  1600 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        958  0.0  0.0 396248   504 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        959  0.0  0.0 111304   392 ?        Ss   00:56   0:01 /usr/sbin/sshd -D
root       8057  0.0  0.1 111304  4444 ?        Ss   03:29   0:00  \_ sshd: [accepted]
sshd       8058  0.0  0.1 115644  2628 ?        S    03:29   0:00  |   \_ sshd: [net]
root       8198  0.0  0.1 111304  4264 ?        Ss   03:29   0:00  \_ sshd: [accepted]
root       8298  0.0  0.1 111304  4264 ?        Ss   03:29   0:00  \_ sshd: [accepted]
root       8352  0.0  0.2 157100  5072 ?        Ss   03:29   0:00  \_ sshd: unknown [priv]
sshd       8388  0.0  0.1 115644  2628 ?        S    03:29   0:00      \_ sshd: unknown [net]
root        960  0.0  0.0  51508   488 ?        Ss   00:56   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1079  0.0  0.1  47136  2812 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47392  3516 ?        S    00:56   0:00  \_ dovecot/imap-login
dovecot    1081  0.0  0.0  10320   372 ?        S    00:56   0:00  \_ dovecot/anvil
root       1082  0.0  0.0  10452   488 ?        S    00:56   0:00  \_ dovecot/log
dovenull   1083  0.0  0.1  47300  3248 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  47424  2684 ?        S    00:56   0:00  \_ dovecot/imap-login
root       1090  0.0  0.0  24528  2236 ?        S    00:56   0:00  \_ dovecot/config
dovecot    1091  0.0  0.0  13568   560 ?        S    00:56   0:00  \_ dovecot/stats
dovecot    1153  0.0  0.0  41156  1496 ?        S    00:56   0:00  \_ dovecot/auth
worencom  90413  0.0  0.1  38500  2680 ?        S    03:02   0:00  \_ dovecot/imap
root        962  0.0  0.2 261024  6648 ?        Ss   00:56   0:01 cpsrvd (SSL) - waiting for connections                   
root       8393  0.0  0.0      0     0 ?        Z    03:29   0:00  \_ [cpaneld - servi] <defunct>
systuser    965  0.0  0.0  14068    48 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        972  0.0  0.1 400740  2652 ?        Ss   00:56   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    8135  0.0  0.2 400460  5200 ?        S    03:29   0:00  \_ php-fpm: pool nigeriadecide_org
root        973  0.0  0.0 153404   280 ?        Ss   00:56   0:00 pure-ftpd (SERVER)
root        974  0.3  0.4 1277312 10432 ?       Ssl  00:56   0:28 /usr/bin/checkstatus
root        975  0.2  0.3 1276356 9348 ?        Ssl  00:56   0:25 /usr/bin/cspdaemon
systuser    977  0.0  0.0  10132    44 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    992  0.0  1.5 5654304 36444 ?       SLsl 00:56   0:05 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1141  0.0  4.8 247944 116884 ?       Ss   00:56   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6717  0.0  5.1 258552 125312 ?       S    01:02   0:01  \_ spamd child
root       6719  0.0  4.8 247944 116292 ?       S    01:02   0:00  \_ spamd child
systuser   1158  0.0  0.1 157704  2752 ?        S    00:56   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.5 387528 13028 ?        Ss   00:56   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  1.3 412368 32184 ?        Ss   00:56   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1261  0.0  0.2 183900  6448 ?        Ss   00:56   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1262  0.0  0.4 209248 11588 ?        Ss   00:56   0:01 tailwatchd
root       1263  0.0  0.0 167452  2168 ?        Ss   00:56   0:00 dnsadmin - dormant mode
root       1662  0.0  0.0 130416  1440 ?        SN   00:56   0:00 cpanellogd - sleeping for logs
root       1690  0.0  0.0 299272   672 ?        Ss   00:56   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1816  1.2 11.8 1463296 285704 ?      Sl   00:56   1:51 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1927  0.0  0.3 267052  8340 ?        Ss   00:56   0:00 /usr/sbin/httpd -k start
root       1929  0.0  0.0  12776   332 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1930  0.0  0.0  12732   300 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1931  0.0  0.0  12784   336 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53268    60 ?        S    00:56   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    97243  0.1  0.8 277600 20496 ?        S    03:11   0:01  \_ /usr/sbin/httpd -k start
nobody   101349  0.1  0.8 277960 20596 ?        S    03:17   0:00  \_ /usr/sbin/httpd -k start
nobody     1187  0.1  0.8 277968 20148 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody     3371  0.1  0.8 277908 19972 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
nobody     4327  0.1  0.8 277584 19724 ?        S    03:24   0:00  \_ /usr/sbin/httpd -k start
nobody     5447  0.1  0.8 277916 19952 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody     5450  0.1  0.8 277588 19648 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody     5451  0.1  0.8 277588 19796 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody     5466  0.1  0.8 277924 19860 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody     5470  0.1  0.8 277908 19776 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody     5472  0.2  0.8 277588 19596 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody     5487  0.1  0.8 277584 19584 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody     5491  0.1  0.8 277584 19648 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody     5495  0.1  0.8 277584 19504 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody     5496  0.1  0.8 277584 19588 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody     5497  0.1  0.8 277908 19668 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody     5501  0.1  0.8 277908 19736 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
root       2021  0.0  0.4 182084 10968 ?        Ss   00:56   0:07 lfd - sleeping
oysipao+   4531  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   4539  0.0  0.0   3152   504 ?        S    01:00   0:00  \_ [kworker]
root      89341  0.0  0.0 123576   604 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
root       7568  0.0  0.0 113284  1488 ?        SN   03:29   0:00  \_ /bin/bash /bin/run-parts /etc/cron.daily
root       7838  0.0  0.0 113284  1496 ?        SN   03:29   0:00      \_ bash /etc/cron.daily/maldet
root       7892  0.0  0.0 108056   356 ?        SN   03:29   0:00      |   \_ sleep 312
root       7839  0.0  0.0 113644   980 ?        SN   03:29   0:00      \_ awk -v progname=/etc/cron.daily/maldet progname { ????   print progname ":\n" ????   progname=""; ???       } ???       { print; }
root       7575  0.0  0.1 132964  4548 ?        SN   03:29   0:00 ConfigServer Version Check
root       7587  0.0  0.0 108056   360 ?        SN   03:29   0:00  \_ sleep 15214
## mysql stats
Uptime: 9190  Threads: 3  Questions: 605841  Slow queries: 0  Opens: 3848  Flush tables: 1  Open tables: 2000  Queries per second avg: 65.923
*************************** 1. row ***************************
     Id: 11039
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 11042
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 11048
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 ::1 TIME_WAIT
      1 54.39.0.113 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 03:30:02 WAT
   Restart Time: Saturday, 22-Nov-2025 00:56:55 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 2 hours 33 minutes 6 seconds
   Server load: 0.18 0.30 0.33
   Total accesses: 41488 - Total Traffic: 1020.3 MB - Total Duration: 20209732
   CPU Usage: u6.48 s3.24 cu526.65 cs417.5 - 10.4% CPU load
   4.52 requests/sec - 113.7 kB/second - 25.2 kB/request - 487.122 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

..K...K.K.WW._KK......R...._.KK...K..._R_...K...................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS  Req   Dur   Conn  Child  Slot    Client     Protocol           VHost                                        Request
   0-0  -      0/0/2041   . 0.00 51   0   1024157 0.0   0.00  48.98 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   1-0  -      0/0/2060   . 0.00 202  0   952640  0.0   0.00  54.12 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-0  5447   4/90/2058  K 1.83 3    358 1019068 126.7 1.35  54.21 192.178.4.104 http/1.1 team.cloudware.ng:443      GET /?l=2543713023 HTTP/1.1
   3-0  -      0/0/1997   . 0.00 204  0   1137187 0.0   0.00  51.00 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   4-0  -      0/0/2092   . 0.00 211  0   1064824 0.0   0.00  52.29 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   5-0  -      0/0/1879   . 0.00 200  0   861391  0.0   0.00  43.26 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-0  5450   3/73/2257  K 1.73 1    346 1033447 96.8  1.58  52.94 192.178.4.102 http/1.1 team.cloudware.ng:443      GET /?l=2477392323 HTTP/1.1
   7-0  -      0/0/2243   . 0.00 212  0   1032416 0.0   0.00  51.55 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-0  97243  1/297/2167 K 7.42 2    408 963126  35.4  6.47  52.52 192.178.4.97  http/1.1 team.cloudware.ng:443      GET /?l=4045671863 HTTP/1.1
   9-0  -      0/0/1636   . 0.00 209  0   814279  0.0   0.00  40.35 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 3371   0/123/1479 W 3.19 0    0   723047  0.0   2.97  35.85 192.178.4.105 http/1.1 team.cloudware.ng:443      GET /?l=1889375465 HTTP/1.1
   11-0 4327   0/67/1877  W 1.40 0    0   911294  0.0   1.45  49.03 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   12-0 -      0/0/1229   . 0.00 213  0   532046  0.0   0.00  28.14 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 101349 0/236/1807 _ 4.03 0    16  983365  0.0   3.86  45.10 184.72.95.195 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/2019elections/images/blog
   14-0 5451   1/73/1480  K 1.46 3    341 758766  34.1  1.34  37.07 192.178.4.104 http/1.1 team.cloudware.ng:443      GET /?l=4186755761 HTTP/1.1
   15-0 1187   2/164/1202 K 4.13 0    349 612555  62.7  3.97  32.00 192.178.4.101 http/1.1 team.cloudware.ng:443      GET /?l=3533795551 HTTP/1.1
   16-0 -      0/0/1293   . 0.00 215  0   617903  0.0   0.00  31.43 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -      0/0/801    . 0.00 217  0   415608  0.0   0.00  20.10 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -      0/0/1676   . 0.00 205  0   653957  0.0   0.00  51.12 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -      0/0/583    . 0.00 203  0   302417  0.0   0.00  13.95 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -      0/0/605    . 0.00 194  0   276250  0.0   0.00  13.68 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -      0/0/1051   . 0.00 216  0   564464  0.0   0.00  27.34 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 5466   0/74/1459  R 1.63 1    1   721616  0.0   1.44  35.06 192.178.4.105 http/1.1 team.cloudware.ng:443
   23-0 -      0/0/849    . 0.00 193  0   577788  0.0   0.00  20.58 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -      0/0/333    . 0.00 210  0   186833  0.0   0.00  8.04  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -      0/0/50     . 0.00 201  0   31736   0.0   0.00  1.23  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -      0/0/238    . 0.00 214  0   130930  0.0   0.00  5.99  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 5470   0/97/108   _ 2.27 0    0   34046   0.0   1.31  1.43  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   28-0 -      0/0/57     . 0.00 198  0   59379   0.0   0.00  1.25  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 5472   1/80/119   K 2.06 1    360 91967   34.2  2.02  3.04  192.178.4.100 http/1.1 team.cloudware.ng:443      GET /?l=1163790904 HTTP/1.1
   30-0 5487   3/84/112   K 1.36 2    342 41204   94.0  1.08  1.72  192.178.4.103 http/1.1 team.cloudware.ng:443      GET /?l=2174471282 HTTP/1.1
   31-0 -      0/0/609    . 0.00 206  0   309233  0.0   0.00  15.78 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -      0/0/11     . 0.00 196  0   3774    0.0   0.00  0.17  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -      0/0/7      . 0.00 208  0   1828    0.0   0.00  0.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 5491   1/88/90    K 2.04 0    308 32145   35.4  1.50  1.51  192.178.4.100 http/1.1 team.cloudware.ng:443      GET /?l=811686352 HTTP/1.1
   35-0 -      0/0/146    . 0.00 220  0   57340   0.0   0.00  3.26  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -      0/0/240    . 0.00 192  0   105059  0.0   0.00  5.69  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -      0/0/3      . 0.00 219  0   4588    0.0   0.00  0.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 5495   0/74/77    _ 1.52 0    0   26864   0.0   1.35  1.40  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   39-0 5496   0/159/161  R 1.59 6    4   36645   0.0   1.34  1.35  54.36.168.177 http/1.1 health.oyostate.gov.ng:443
   40-0 5497   0/87/90    _ 2.25 0    394 32583   0.0   1.34  1.35  192.178.4.99  http/1.1 team.cloudware.ng:443      GET /?l=3876890397 HTTP/1.1
   41-0 -      0/0/8      . 0.00 199  0   2066    0.0   0.00  0.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -      0/0/12     . 0.00 195  0   5210    0.0   0.00  0.28  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -      0/0/3      . 0.00 218  0   13      0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 5501   10/82/113  K 2.10 4    345 46664   307.1 1.31  2.13  192.178.4.96  http/1.1 team.cloudware.ng:443      GET /?l=2486582444 HTTP/1.1
   45-0 -      0/0/522    . 0.00 103  0   184884  0.0   0.00  9.85  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -      0/0/2      . 0.00 7010 0   4       0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -      0/0/3      . 0.00 6976 0   766     0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -      0/0/2      . 0.00 7003 0   48      0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -      0/0/2      . 0.00 6974 0   10      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -      0/0/3      . 0.00 6959 0   695     0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -      0/0/7      . 0.00 6952 0   3150    0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -      0/0/4      . 0.00 6955 0   538     0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -      0/0/13     . 0.00 6953 0   8196    0.0   0.00  0.36  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -      0/0/2      . 0.00 6966 0   519     0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -      0/0/1      . 0.00 6990 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -      0/0/110    . 0.00 6561 0   48080   0.0   0.00  2.48  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -      0/0/44     . 0.00 6844 0   13507   0.0   0.00  0.78  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -      0/0/12     . 0.00 6962 0   7269    0.0   0.00  0.33  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -      0/0/6      . 0.00 6946 0   1848    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -      0/0/1      . 0.00 6999 0   1       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -      0/0/48     . 0.00 6837 0   10684   0.0   0.00  0.71  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -      0/0/2      . 0.00 6971 0   7       0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -      0/0/1      . 0.00 6997 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -      0/0/5      . 0.00 6958 0   1750    0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -      0/0/1      . 0.00 6995 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -      0/0/1      . 0.00 6996 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -      0/0/2      . 0.00 6973 0   6       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -      0/0/5      . 0.00 6947 0   859     0.0   0.00  0.05  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -      0/0/74     . 0.00 6715 0   36843   0.0   0.00  1.92  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -      0/0/149    . 0.00 6352 0   74918   0.0   0.00  4.57  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -      0/0/1      . 0.00 6991 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -      0/0/1      . 0.00 6994 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -      0/0/6      . 0.00 6950 0   3305    0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -      0/0/6      . 0.00 6945 0   2230    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -      0/0/1      . 0.00 6993 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -      0/0/1      . 0.00 6992 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -      0/0/40     . 0.00 6854 0   15854   0.0   0.00  0.86  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -      0/0/1      . 0.00 6998 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -      0/0/1      . 0.00 6989 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1072
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...39)
   index usage: 18%, cache usage: 25%
   total entries stored since starting: 30522
   total entries replaced since starting: 0
   total entries expired since starting: 29445
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 37 miss
   total removes since starting: 5 hit, 7 miss
Youez - 2016 - github.com/yon3zu
LinuXploit