403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.04.03.txt
 ## swap threshold exceeded
## server overview
2025-11-22.04.03 load[1] mem[71/63] mysql[2/25] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1600         221          31         541         545
Swap:          1999        1512         487
 04:03:01 up  3:06,  0 users,  load average: 1.06, 0.47, 0.41
## system overview
top - 04:03:01 up  3:06,  0 users,  load average: 1.06, 0.47, 0.41
Tasks: 211 total,   4 running, 206 sleeping,   0 stopped,   1 zombie
%Cpu(s): 50.0 us, 26.5 sy,  0.0 ni, 14.7 id,  8.8 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   224004 free,  1606096 used,   590200 buff/cache
KiB Swap:  2047996 total,   498848 free,  1549148 used.   592060 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1816 mysql     20   0 1464484 232836   4120 S  66.7  9.6   2:16.18 /usr/sbin+
     1 root      20   0   44396   3224   1464 S  11.1  0.1   0:14.86 /usr/lib/+
 32095 nigeria   20   0  404052  16140  10384 S  11.1  0.7   0:00.03 /opt/cpan+
 32099 root      20   0  160220   2060   1580 R   5.6  0.1   0:00.01 top -bcn1
 32104 cloudw    20   0  353712  15968  10484 S   5.6  0.7   0:00.01 /opt/cpan+
 32109 cloudsms  20   0  404052  15876  10224 R   5.6  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.63 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.49 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:10.78 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.47 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:01.76 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:24.94 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [kauditd]
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.37 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:01.94 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.62 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   39500   3432   3188 S   0.0  0.1   0:06.01 /usr/lib/+
   380 root      20   0   45352     52     48 S   0.0  0.0   0:00.33 /usr/lib/+
   406 root      16  -4   55532    264    152 S   0.0  0.0   0:00.93 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   483 root      20   0   21540    344    260 S   0.0  0.0   0:00.24 /usr/sbin+
   485 root      20   0   24712   1148    792 S   0.0  0.0   0:02.67 /usr/lib/+
   486 root      20   0  152780     96     68 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0  224148   4400   1076 S   0.0  0.2   0:00.20 queueproc+
   488 root      20   0   52852    264    196 S   0.0  0.0   0:00.00 /usr/sbin+
   495 polkitd   20   0  612240    780    412 S   0.0  0.0   0:01.62 /usr/lib/+
   498 dbus      20   0   58748   1356    604 S   0.0  0.1   0:06.15 /usr/bin/+
   506 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   518 root      20   0    4388     24     20 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   543 nscd      20   0  928956   1228    584 S   0.0  0.1   0:08.32 /usr/sbin+
   554 root      20   0   24208     28     24 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124476    424    292 S   0.0  0.0   0:00.32 /usr/sbin+
   577 root      20   0  108296     36     32 S   0.0  0.0   0:00.00 /sbin/age+
   578 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   595 mailnull  20   0   90824   3800    892 S   0.0  0.2   0:00.32 /usr/sbin+
   628 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:06.20 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  572372    756    288 S   0.0  0.0   0:01.06 /usr/bin/+
   920 root      20   0  249168   3260   2832 S   0.0  0.1   0:02.99 /usr/sbin+
   926 root      20   0 1902000 426948   1008 S   0.0 17.6   0:36.94 /usr/loca+
   927 named     20   0 1054792  28032   1980 S   0.0  1.2   0:06.05 /usr/sbin+
   930 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.25 /usr/bin/+
   931 root      20   0  389508    436    344 S   0.0  0.0   0:00.38 php-fpm: +
   932 root      20   0  445028    604    488 S   0.0  0.0   0:00.52 sw-engine+
   939 root      20   0  439788    432    340 S   0.0  0.0   0:00.42 php-fpm: +
   941 systuser  20   0  113932      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  388892    236    156 S   0.0  0.0   0:00.36 php-fpm: +
   944 cpanelc+  20   0   10608   3540   2312 S   0.0  0.1   0:08.89 /usr/loca+
   946 systuser  20   0  114016   9952   2684 S   0.0  0.4   0:02.85 /usr/loca+
   949 systuser  20   0  113016     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   958 root      20   0  396248    384    300 S   0.0  0.0   0:00.39 php-fpm: +
   959 root      20   0  111304    368    268 S   0.0  0.0   0:01.24 /usr/sbin+
   960 root      20   0   51508    468    304 S   0.0  0.0   0:00.19 /usr/sbin+
   962 root      20   0  261024   4648   1032 S   0.0  0.2   0:01.64 cpsrvd (S+
   965 systuser  20   0   14068     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   972 root      20   0  400740   1488    616 S   0.0  0.1   0:01.29 php-fpm: +
   973 root      20   0  153404    256    176 S   0.0  0.0   0:00.23 pure-ftpd+
   974 root      20   0 1277312   4164     32 S   0.0  0.2   0:28.03 /usr/bin/+
   975 root      20   0 1276356   6472      0 S   0.0  0.3   0:25.52 /usr/bin/+
   977 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 telegraf  20   0 5654304  33484   4632 S   0.0  1.4   0:06.46 /usr/loca+
  1079 dovenull  20   0   47136   2152   1604 S   0.0  0.1   0:00.34 dovecot/p+
  1080 dovenull  20   0   47392   2448   1712 S   0.0  0.1   0:00.18 dovecot/i+
  1081 dovecot   20   0   10320    212    108 S   0.0  0.0   0:00.10 dovecot/a+
  1082 root      20   0   10452    520    368 S   0.0  0.0   0:00.23 dovecot/l+
  1083 dovenull  20   0   47300   2116   1572 S   0.0  0.1   0:00.46 dovecot/p+
  1084 dovenull  20   0   47424   2456   1696 S   0.0  0.1   0:00.19 dovecot/i+
  1090 root      20   0   24556   2020    496 S   0.0  0.1   0:00.09 dovecot/c+
  1091 dovecot   20   0   13568    532    396 S   0.0  0.0   0:00.02 dovecot/s+
  1141 root      20   0  247944   2900    748 S   0.0  0.1   0:04.20 /usr/loca+
  1153 dovecot   20   0   41156   1484   1016 S   0.0  0.1   0:00.63 dovecot/a+
  1158 systuser  20   0  157704   2832    852 S   0.0  0.1   0:00.06 SonarPush+
  1177 wp-tool+  20   0  387528   3560   1660 S   0.0  0.1   0:00.18 /usr/bin/+
  1178 wp-tool+  20   0  412368  23496   1672 S   0.0  1.0   0:03.74 /usr/bin/+
  1261 root      20   0  262224  23992   6132 S   0.0  1.0   0:00.74 cpdavd - +
  1262 root      20   0  209248   8696   2020 S   0.0  0.4   0:01.45 tailwatchd
  1263 root      20   0  167452   1204    656 S   0.0  0.0   0:00.25 dnsadmin +
  1662 root      38  18  130416   1368    700 S   0.0  0.1   0:00.02 cpanellog+
  1690 root      20   0  299272    504    344 S   0.0  0.0   0:00.31 php-fpm: +
  1927 root      20   0  267052   4948    528 S   0.0  0.2   0:00.96 /usr/sbin+
  1929 root      20   0   12768    316    216 S   0.0  0.0   0:01.13 /usr/loca+
  1930 root      20   0   12732    284    212 S   0.0  0.0   0:01.00 /usr/loca+
  1931 root      20   0   12772    324    220 S   0.0  0.0   0:01.04 /usr/loca+
  1939 root      20   0   53268     44     44 S   0.0  0.0   0:00.04 /usr/loca+
  2021 root      20   0  182388   9172   1116 S   0.0  0.4   0:09.67 lfd - sle+
  4410 root      20   0  183048      4      4 S   0.0  0.0   0:00.00 /usr/sbin+
  4453 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
  4476 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
  4531 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4539 oysipao+  20   0    3152     52     16 S   0.0  0.0   0:00.23 [kworker]
  6717 root      20   0  259092  89588   2432 S   0.0  3.7   0:01.82 spamd chi+
  6719 root      20   0  247944   1404    436 S   0.0  0.1   0:00.00 spamd chi+
  7575 root      30  10  132964     32     28 S   0.0  0.0   0:00.00 ConfigSer+
  7587 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 152+
  9144 nobody    20   0  277580  13152   4916 S   0.0  0.5   0:02.91 /usr/sbin+
  9537 nobody    20   0  277584  11836   4708 S   0.0  0.5   0:02.98 /usr/sbin+
 10716 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 12060 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 16309 nobody    20   0  277908  20072   5004 S   0.0  0.8   0:01.70 /usr/sbin+
 18528 nobody    20   0  277584  19408   4868 S   0.0  0.8   0:01.55 /usr/sbin+
 18935 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 21256 nobody    20   0  277584  19096   4672 S   0.0  0.8   0:01.18 /usr/sbin+
 23024 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 23065 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 24021 nobody    20   0  277924  19440   4620 S   0.0  0.8   0:00.85 /usr/sbin+
 24035 nobody    20   0  277928  19028   4616 S   0.0  0.8   0:00.96 /usr/sbin+
 24191 nobody    20   0  277584  19072   4572 S   0.0  0.8   0:00.97 /usr/sbin+
 24192 nobody    20   0  277908  19176   4636 S   0.0  0.8   0:00.87 /usr/sbin+
 24441 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 24516 nobody    20   0  277584  18908   4480 S   0.0  0.8   0:00.99 /usr/sbin+
 25042 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26269 nobody    20   0  277520  18348   4324 S   0.0  0.8   0:00.66 /usr/sbin+
 27170 nobody    20   0  277528  18276   4304 S   0.0  0.8   0:00.62 /usr/sbin+
 27836 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 28482 nobody    20   0  277780  18536   4316 S   0.0  0.8   0:00.56 /usr/sbin+
 29048 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 29098 nobody    20   0  277908  18152   4080 S   0.0  0.7   0:00.29 /usr/sbin+
 29300 nobody    20   0  277584  18472   4228 S   0.0  0.8   0:00.27 /usr/sbin+
 29337 nobody    20   0  277780  18208   3996 S   0.0  0.8   0:00.31 /usr/sbin+
 31444 mailnull  20   0   91968   9708   4244 S   0.0  0.4   0:00.00 /usr/sbin+
 31552 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 31553 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 31761 wp-tool+  20   0  445880  22240  19268 S   0.0  0.9   0:00.04 sw-engine+
 31803 mailnull  20   0   91208   4240   1136 S   0.0  0.2   0:00.00 /usr/sbin+
 31805 mailnull  20   0   91208   5856   2584 S   0.0  0.2   0:00.00 /usr/sbin+
 31891 mailnull  20   0   91208   5600   2344 S   0.0  0.2   0:00.00 /usr/sbin+
 31908 root      20   0   28936   2368   1948 S   0.0  0.1   0:00.00 dovecot/q+
 31909 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 31925 nigeria   20   0  400460   4336   2232 S   0.0  0.2   0:00.00 php-fpm: +
 31931 healtho+  20   0  443268  50076   4104 S   0.0  2.1   0:00.42 php-fpm: +
 31933 healtho+  20   0  463748  70568   4108 S   0.0  2.9   0:00.79 php-fpm: +
 31936 nobody    20   0  277640  16912   3328 S   0.0  0.7   0:00.00 /usr/sbin+
 31948 workflo+  20   0  497936  33808   6212 S   0.0  1.4   0:00.24 php-fpm: +
 31956 workflo+  20   0  497704  32328   4732 S   0.0  1.3   0:00.22 php-fpm: +
 31983 mailnull  20   0   90992   4240   1132 S   0.0  0.2   0:00.00 /usr/sbin+
 32004 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 32007 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 32008 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: unk+
 32011 mailnull  20   0   90992   4240   1132 S   0.0  0.2   0:00.00 /usr/sbin+
 32012 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 32015 mailnull  20   0   91204   4908   1748 S   0.0  0.2   0:00.00 /usr/sbin+
 32028 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32029 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32030 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32031 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32032 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32033 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32034 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32035 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32037 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32038 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32040 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32042 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 32043 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 32044 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 32058 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32059 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32061 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32062 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32063 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32064 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32065 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 32067 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32068 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 32069 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 32080 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 32083 pactpay   20   0  480124  17308  11572 R   0.0  0.7   0:00.01 /opt/cpan+
 32093 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 32107 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 32108 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 69703 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [kworker/+
 94906 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:56   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    00:56   0:10  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    00:56   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    00:56   0:24  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kauditd]
root        244  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   00:56   0:02  \_ [kworker/1:1H]
root        270  0.0  0.0      0     0 ?        S<   00:56   0:01  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [xprtiod]
root        628  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   00:56   0:06  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root      69703  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/u200:0]
root      94906  0.0  0.0      0     0 ?        S    03:09   0:00  \_ [kworker/1:2]
root      10716  0.0  0.0      0     0 ?        S    03:33   0:00  \_ [kworker/0:2]
root      12060  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:1]
root      18935  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/0:3]
root      23024  0.0  0.0      0     0 ?        S    03:50   0:00  \_ [kworker/1:1]
root      23065  0.0  0.0      0     0 ?        S    03:50   0:00  \_ [kworker/0:0]
root      24441  0.0  0.0      0     0 ?        S    03:52   0:00  \_ [kworker/1:4]
root      25042  0.0  0.0      0     0 ?        S    03:53   0:00  \_ [kworker/0:5]
root      27836  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [kworker/1:0]
root      29048  0.0  0.0      0     0 ?        S    03:59   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44396  3224 ?        Ss   00:56   0:14 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.1  39500  3432 ?        Ss   00:56   0:06 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352    52 ?        Ss   00:56   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   264 ?        S<sl 00:56   0:00 /sbin/auditd
root        483  0.0  0.0  21540   344 ?        Ss   00:56   0:00 /usr/sbin/irqbalance --foreground
root        485  0.0  0.0  24712  1148 ?        Ss   00:56   0:02 /usr/lib/systemd/systemd-logind
root        486  0.0  0.0 152780    96 ?        Ss   00:56   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.1 224148  4400 ?        Ss   00:56   0:00 queueprocd - waiting up to 60s to process a task
root        488  0.0  0.0  52852   264 ?        Ss   00:56   0:00 /usr/sbin/smartd -n -q never
polkitd     495  0.0  0.0 612240   780 ?        Ssl  00:56   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        498  0.0  0.0  58748  1356 ?        Ss   00:56   0:06 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         506  0.0  0.0  69256    60 ?        Ss   00:56   0:00 /sbin/rpcbind -w
root        518  0.0  0.0   4388    24 ?        Ss   00:56   0:00 /usr/sbin/acpid
root        520  0.0  0.0 195208     0 ?        Ssl  00:56   0:00 /usr/sbin/gssproxy -D
nscd        543  0.0  0.0 928956  1228 ?        Ssl  00:56   0:08 /usr/sbin/nscd
root        554  0.0  0.0  24208    28 ?        Ss   00:56   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 124476   424 ?        Ss   00:56   0:00 /usr/sbin/crond -n
root       4410  0.0  0.0 183048     4 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       4453  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       4476  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 19m
root      32028  0.0  0.0 183044  2148 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      32042  0.0  0.0 113284  1212 ?        Ss   04:03   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      32043  0.0  0.0 108052   356 ?        S    04:03   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      32044  0.0  0.0 113288  1516 ?        S    04:03   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      32110  0.0  0.0 153840  2096 ?        R    04:03   0:00  |               \_ ps auxf
root      32029  0.0  0.0 183044  2148 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      32064  0.0  0.0  20164   804 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      32030  0.0  0.0 183044  2148 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      32061  0.0  0.0  20164   804 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      32031  0.0  0.0 183044  2148 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      32063  0.0  0.0  20164   804 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      32032  0.0  0.0 183044  2144 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      32062  0.0  0.0  20164   804 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      32033  0.0  0.0 183044  2144 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      32067  0.0  0.0  20164   804 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      32034  0.0  0.0 183044  2144 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      32058  0.0  0.0  20164   808 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      32035  0.0  0.0 183044  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      32065  0.0  0.0  20164   988 ?        Ss   04:03   0:00  |   \_ jailshell (cloudsms) [32107] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  32107  0.0  0.0      0     0 ?        D    04:03   0:00  |       \_ [jailshell]
root      32037  0.0  0.0 183044  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      32059  0.0  0.0  20164   804 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      32038  0.0  0.0 183044  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      32069  0.0  0.0  20164   964 ?        Ss   04:03   0:00  |   \_ jailshell (pactpay) [32080] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   32080  0.0  0.0  20164   256 ?        S    04:03   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   32083  0.0  0.7 480124 17672 ?        S    04:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      32040  0.0  0.0 183044  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      32068  0.0  0.0  20164   972 ?        Ss   04:03   0:00      \_ jailshell (nigeria) [32093] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   32093  0.0  0.0  20164   264 ?        S    04:03   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   32095  0.0  0.6 404052 16140 ?        R    04:03   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0 108296    36 tty1     Ss+  00:56   0:00 /sbin/agetty --noclear tty1 linux
root        578  0.0  0.0 114704     0 ttyS0    Ss+  00:56   0:00 /bin/bash
mailnull    595  0.0  0.1  90824  3800 ?        Ss   00:56   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  31444  0.0  0.4  91968  9708 ?        S    04:02   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  31803  0.0  0.1  91208  4240 ?        S    04:02   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  31805  0.0  0.2  91208  5856 ?        S    04:02   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  31891  0.0  0.2  91208  5600 ?        S    04:02   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  31983  0.0  0.1  90992  4240 ?        S    04:02   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  32011  0.0  0.1  90992  4240 ?        S    04:02   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  32015  0.0  0.2  91204  4908 ?        S    04:02   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 572372   756 ?        Ssl  00:56   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        920  0.0  0.1 249168  3260 ?        Ssl  00:56   0:02 /usr/sbin/rsyslogd -n
root        926  0.3 17.6 1902000 426948 ?      Ssl  00:56   0:36 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.1 1054792 28032 ?       Ssl  00:56   0:06 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    930  0.0  0.0 342400     0 ?        Ssl  00:56   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        931  0.0  0.0 389508   436 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        932  0.0  0.0 445028   604 ?        Ss   00:56   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  31761  0.2  0.9 445880 22240 ?        S    04:02   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        939  0.0  0.0 439788   432 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    941  0.0  0.0 113932     4 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 388892   236 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    944  0.0  0.1  10608  3540 ?        Rs   00:56   0:08 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    946  0.0  0.4 114016  9952 ?        Ssl  00:56   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    949  0.0  0.0 113016    36 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        958  0.0  0.0 396248   384 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        959  0.0  0.0 111304   368 ?        Ss   00:56   0:01 /usr/sbin/sshd -D
root      31552  0.0  0.1 111304  4272 ?        Ss   04:02   0:00  \_ sshd: [accepted]
sshd      31553  0.0  0.1 115644  2624 ?        S    04:02   0:00  |   \_ sshd: [net]
root      32004  0.0  0.1 111304  4272 ?        Ss   04:02   0:00  \_ sshd: [accepted]
root      32007  0.0  0.2 157100  5076 ?        Ss   04:02   0:00  \_ sshd: unknown [priv]
sshd      32008  0.0  0.1 115644  2632 ?        S    04:02   0:00      \_ sshd: unknown [net]
root        960  0.0  0.0  51508   468 ?        Ss   00:56   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1079  0.0  0.0  47136  2152 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47392  2448 ?        S    00:56   0:00  \_ dovecot/imap-login
dovecot    1081  0.0  0.0  10320   212 ?        S    00:56   0:00  \_ dovecot/anvil
root       1082  0.0  0.0  10452   520 ?        S    00:56   0:00  \_ dovecot/log
dovenull   1083  0.0  0.0  47300  2116 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  47424  2456 ?        S    00:56   0:00  \_ dovecot/imap-login
root       1090  0.0  0.0  24556  2020 ?        S    00:56   0:00  \_ dovecot/config
dovecot    1091  0.0  0.0  13568   532 ?        S    00:56   0:00  \_ dovecot/stats
dovecot    1153  0.0  0.0  41156  1484 ?        S    00:56   0:00  \_ dovecot/auth
root      31908  0.0  0.0  28936  2368 ?        S    04:02   0:00  \_ dovecot/quota-status -p postfix
root      31909  0.0  0.1  41052  2728 ?        S    04:02   0:00  \_ dovecot/auth -w
root        962  0.0  0.1 261024  4648 ?        Ss   00:56   0:01 cpsrvd (SSL) - waiting for connections                   
root      32012  0.0  0.0      0     0 ?        Z    04:02   0:00  \_ [cpaneld - servi] <defunct>
systuser    965  0.0  0.0  14068    28 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        972  0.0  0.0 400740  1488 ?        Ss   00:56   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   31925  0.0  0.1 400460  4336 ?        S    04:02   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  31931  5.2  2.0 443268 50076 ?        S    04:02   0:00  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  31933  9.8  2.9 463748 70568 ?        S    04:02   0:00  \_ php-fpm: pool health_oyostate_gov_ng
workflo+  31948  4.0  1.3 497936 33808 ?        S    04:02   0:00  \_ php-fpm: pool blog_workflow-management-software_com
workflo+  31956  3.6  1.3 497704 32328 ?        S    04:02   0:00  \_ php-fpm: pool blog_workflow-management-software_com
root        973  0.0  0.0 153404   256 ?        Ss   00:56   0:00 pure-ftpd (SERVER)
root        974  0.2  0.1 1277312 4164 ?        Ssl  00:56   0:28 /usr/bin/checkstatus
root        975  0.2  0.2 1276356 6472 ?        Ssl  00:56   0:25 /usr/bin/cspdaemon
systuser    977  0.0  0.0  10132    28 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    992  0.0  1.3 5654304 33484 ?       SLsl 00:56   0:06 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1141  0.0  0.1 247944  2900 ?        Ss   00:56   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6717  0.0  3.7 259092 89588 ?        S    01:02   0:01  \_ spamd child
root       6719  0.0  0.0 247944  1404 ?        S    01:02   0:00  \_ spamd child
systuser   1158  0.0  0.1 157704  2832 ?        S    00:56   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387528  3560 ?        Ss   00:56   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.9 412368 23496 ?        Ss   00:56   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1261  0.0  0.9 262224 23992 ?        Ss   00:56   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1262  0.0  0.3 209248  8696 ?        Ss   00:56   0:01 tailwatchd
root       1263  0.0  0.0 167452  1204 ?        Ss   00:56   0:00 dnsadmin - dormant mode
root       1662  0.0  0.0 130416  1368 ?        SN   00:56   0:00 cpanellogd - sleeping for logs
root       1690  0.0  0.0 299272   504 ?        Ss   00:56   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1816  1.2  9.6 1464484 232836 ?      Sl   00:56   2:16 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1927  0.0  0.2 267052  4948 ?        Ss   00:56   0:00 /usr/sbin/httpd -k start
root       1929  0.0  0.0  12768   316 ?        S    00:56   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1930  0.0  0.0  12732   284 ?        S    00:56   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1931  0.0  0.0  12772   324 ?        S    00:56   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53268    44 ?        S    00:56   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     9144  0.1  0.5 277580 13152 ?        S    03:30   0:02  \_ /usr/sbin/httpd -k start
nobody     9537  0.1  0.4 277584 11836 ?        S    03:31   0:02  \_ /usr/sbin/httpd -k start
nobody    16309  0.1  0.8 277908 20072 ?        S    03:40   0:01  \_ /usr/sbin/httpd -k start
nobody    18528  0.1  0.8 277584 19408 ?        S    03:43   0:01  \_ /usr/sbin/httpd -k start
nobody    21256  0.1  0.7 277584 19096 ?        S    03:47   0:01  \_ /usr/sbin/httpd -k start
nobody    24021  0.1  0.8 277924 19440 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
nobody    24035  0.1  0.7 277928 19028 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
cloudw    32104  0.0  0.6 353712 15968 ?        S    04:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    24191  0.1  0.7 277584 19072 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
nobody    24192  0.1  0.7 277908 19176 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
nobody    24516  0.1  0.7 277584 18908 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    26269  0.1  0.7 277520 18348 ?        S    03:54   0:00  \_ /usr/sbin/httpd -k start
nobody    27170  0.1  0.7 277528 18276 ?        S    03:56   0:00  \_ /usr/sbin/httpd -k start
nobody    28482  0.1  0.7 277780 18536 ?        S    03:58   0:00  \_ /usr/sbin/httpd -k start
nobody    29098  0.1  0.7 277908 18152 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody    29300  0.1  0.7 277584 18472 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody    29337  0.1  0.7 277780 18208 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody    31936  0.0  0.6 277640 16912 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
root       2021  0.0  0.3 182388  9172 ?        Ss   00:56   0:09 lfd - sleeping
oysipao+   4531  0.0  0.0   3148     8 ?        Ss   01:00   0:00 [kworker]
oysipao+   4539  0.0  0.0   3152    52 ?        S    01:00   0:00  \_ [kworker]
root       7575  0.0  0.0 132964    32 ?        SN   03:29   0:00 ConfigServer Version Check
root       7587  0.0  0.0 108056     0 ?        SN   03:29   0:00  \_ sleep 15214
## mysql stats
Uptime: 11170  Threads: 3  Questions: 740021  Slow queries: 0  Opens: 4758  Flush tables: 1  Open tables: 2000  Queries per second avg: 66.250
*************************** 1. row ***************************
     Id: 13589
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-22' LIMIT 1
*************************** 2. row ***************************
     Id: 13593
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 13596
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.35 TIME_WAIT
      1 114.119.134.51 TIME_WAIT
      1 114.119.157.111 TIME_WAIT
      1 196.49.26.134 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.161.65.161 TIME_WAIT
      1 66.249.64.163 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 203.75.213.2 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 04:03:01 WAT
   Restart Time: Saturday, 22-Nov-2025 00:56:55 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 6 minutes 6 seconds
   Server load: 1.06 0.47 0.41
   Total accesses: 50055 - Total Traffic: 1.2 GB - Total Duration: 24583112
   CPU Usage: u12.92 s5.7 cu645.2 cs518.51 - 10.6% CPU load
   4.48 requests/sec - 113.8 kB/second - 25.4 kB/request - 491.122 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

K__KKKRKWK.RK_KRW_..............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req    Dur   Conn  Child  Slot    Client     Protocol              VHost                                          Request
   0-0  26269 1/103/2493 K 2.68  0    397  1254675 37.3  3.13  60.61 192.178.4.98  http/1.1 team.cloudware.ng:443           GET /?l=851212180 HTTP/1.1
   1-0  18528 0/260/2521 _ 6.78  0    6453 1204784 0.0   7.16  66.12 18.97.5.74    http/1.1 blog.workflow-management-softwa GET / HTTP/1.1
   2-0  16309 0/294/2496 _ 7.88  1    2    1239104 0.0   7.54  65.24 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80          GET / HTTP/1.1
   3-0  9144  5/482/2479 K 13.27 2    263  1412431 157.2 12.56 63.56 192.178.4.102 http/1.1 team.cloudware.ng:443           GET /?l=3558151203 HTTP/1.1
   4-0  31936 1/2/2517   K 0.00  3    271  1245958 33.6  0.14  61.84 192.178.4.104 http/1.1 team.cloudware.ng:443           GET /?l=2203623693 HTTP/1.1
   5-0  21256 1/206/2290 K 5.15  0    277  1062517 34.9  5.20  53.02 192.178.4.97  http/1.1 team.cloudware.ng:443           GET /?l=1780631049 HTTP/1.1
   6-0  24021 0/143/2615 R 3.99  1    264  1223346 0.0   4.41  62.64 192.178.4.97  http/1.1 team.cloudware.ng:443           GET /?l=1448013943 HTTP/1.1
   7-0  24516 2/160/2569 K 4.22  0    402  1204929 67.0  4.78  59.90 192.178.4.96  http/1.1 team.cloudware.ng:443           GET /?l=1162373789 HTTP/1.1
   8-0  24035 2/158/2607 W 4.08  0    0    1184884 64.3  8.33  67.33 192.178.4.104 http/1.1 team.cloudware.ng:443           GET /?l=3328824295 HTTP/1.1
   9-0  9537  5/545/2181 K 13.68 3    272  1076169 152.7 13.46 53.80 192.178.4.101 http/1.1 team.cloudware.ng:443           GET /?l=3241297843 HTTP/1.1
   10-0 -     0/0/1801   . 0.00  146  0    885137  0.0   0.00  43.95 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   11-0 27170 0/99/2240  R 2.58  5    348  1097268 0.0   2.78  58.07 102.89.82.16  http/1.1 oysipa.oyostate.gov.ng:443
   12-0 28482 5/86/1613  K 2.43  1    266  721036  158.7 2.67  37.76 192.178.4.105 http/1.1 team.cloudware.ng:443           GET /?l=1252671643 HTTP/1.1
   13-0 24191 0/157/2304 _ 4.53  0    5261 1215983 0.0   4.45  57.24 96.30.57.23   http/1.1 blog.workflow-management-softwa POST /wp-cron.php?doing_wp_cron=1763780575.48367309570312500000
   14-0 29098 2/48/1783  K 1.17  2    276  944558  66.0  1.47  45.11 192.178.4.100 http/1.1 team.cloudware.ng:443           GET /?l=1898397535 HTTP/1.1
   15-0 29300 0/46/1467  R 1.11  23   418  760275  0.0   1.57  39.37 114.122.38.21 http/1.1
   16-0 29337 0/56/1477  W 1.24  0    0    708336  0.0   1.48  36.04 ::1           http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   17-0 24192 0/150/1271 _ 3.91  0    0    643899  0.0   4.06  31.05 ::1           http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   18-0 -     0/0/1985   . 0.00  163  0    815501  0.0   0.00  58.65 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-0 -     0/0/583    . 0.00  2183 0    302417  0.0   0.00  13.95 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-0 -     0/0/605    . 0.00  2174 0    276250  0.0   0.00  13.68 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 -     0/0/1051   . 0.00  2196 0    564464  0.0   0.00  27.34 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 -     0/0/1622   . 0.00  1275 0    805861  0.0   0.00  39.12 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/849    . 0.00  2173 0    577788  0.0   0.00  20.58 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -     0/0/333    . 0.00  2190 0    186833  0.0   0.00  8.04  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/50     . 0.00  2181 0    31736   0.0   0.00  1.23  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/238    . 0.00  2194 0    130930  0.0   0.00  5.99  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/172    . 0.00  1640 0    67579   0.0   0.00  2.99  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/57     . 0.00  2178 0    59379   0.0   0.00  1.25  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/570    . 0.00  223  0    331737  0.0   0.00  16.49 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/321    . 0.00  1264 0    148504  0.0   0.00  6.83  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/609    . 0.00  2186 0    309233  0.0   0.00  15.78 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/11     . 0.00  2176 0    3774    0.0   0.00  0.17  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/7      . 0.00  2188 0    1828    0.0   0.00  0.13  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/117    . 0.00  1762 0    46396   0.0   0.00  2.24  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/146    . 0.00  2200 0    57340   0.0   0.00  3.26  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/240    . 0.00  2172 0    105059  0.0   0.00  5.69  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/3      . 0.00  2199 0    4588    0.0   0.00  0.02  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/102    . 0.00  1764 0    37924   0.0   0.00  1.98  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/196    . 0.00  1715 3    51541   0.0   0.00  2.11  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/203    . 0.00  1472 0    91622   0.0   0.00  4.31  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/8      . 0.00  2179 0    2066    0.0   0.00  0.13  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/12     . 0.00  2175 0    5210    0.0   0.00  0.28  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/3      . 0.00  2198 0    13      0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/158    . 0.00  1718 0    66237   0.0   0.00  3.12  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/522    . 0.00  2083 0    184884  0.0   0.00  9.85  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/2      . 0.00  8989 0    4       0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/3      . 0.00  8956 0    766     0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00  8983 0    48      0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00  8954 0    10      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00  8939 0    695     0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00  8932 0    3150    0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00  8935 0    538     0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/13     . 0.00  8933 0    8196    0.0   0.00  0.36  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00  8946 0    519     0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/1      . 0.00  8970 0    0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/110    . 0.00  8541 0    48080   0.0   0.00  2.48  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00  8824 0    13507   0.0   0.00  0.78  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -     0/0/12     . 0.00  8942 0    7269    0.0   0.00  0.33  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-0 -     0/0/6      . 0.00  8926 0    1848    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -     0/0/1      . 0.00  8979 0    1       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -     0/0/48     . 0.00  8817 0    10684   0.0   0.00  0.71  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-0 -     0/0/2      . 0.00  8951 0    7       0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-0 -     0/0/1      . 0.00  8977 0    0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-0 -     0/0/5      . 0.00  8938 0    1750    0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00  8975 0    0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-0 -     0/0/1      . 0.00  8976 0    0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00  8953 0    6       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-0 -     0/0/5      . 0.00  8927 0    859     0.0   0.00  0.05  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-0 -     0/0/74     . 0.00  8695 0    36843   0.0   0.00  1.92  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-0 -     0/0/149    . 0.00  8331 0    74918   0.0   0.00  4.57  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-0 -     0/0/1      . 0.00  8971 0    0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-0 -     0/0/1      . 0.00  8974 0    0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-0 -     0/0/6      . 0.00  8930 0    3305    0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   74-0 -     0/0/6      . 0.00  8925 0    2230    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-0 -     0/0/1      . 0.00  8973 0    0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-0 -     0/0/1      . 0.00  8972 0    0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-0 -     0/0/40     . 0.00  8834 0    15854   0.0   0.00  0.86  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-0 -     0/0/1      . 0.00  8978 0    0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00  8969 0    0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1017
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...47)
   index usage: 17%, cache usage: 24%
   total entries stored since starting: 37191
   total entries replaced since starting: 0
   total entries expired since starting: 36166
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 82 miss
   total removes since starting: 8 hit, 8 miss
Youez - 2016 - github.com/yon3zu
LinuXploit