403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.04.09.txt
 ## swap threshold exceeded
## server overview
2025-11-22.04.09 load[0] mem[64/63] mysql[2/25] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1440         159          31         763         711
Swap:          1999        1496         503
 04:09:01 up  3:12,  0 users,  load average: 0.19, 0.62, 0.55
## system overview
top - 04:09:01 up  3:12,  0 users,  load average: 0.19, 0.62, 0.55
Tasks: 212 total,   4 running, 206 sleeping,   0 stopped,   2 zombie
%Cpu(s): 75.0 us, 15.6 sy,  0.0 ni,  0.0 id,  6.2 wa,  0.0 hi,  3.1 si,  0.0 st
KiB Mem :  2420300 total,   141408 free,  1489716 used,   789176 buff/cache
KiB Swap:  2047996 total,   515744 free,  1532252 used.   714088 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1816 mysql     20   0 1464484 235952   3812 S 100.0  9.7   2:21.95 /usr/sbin+
 36153 root      20   0  169868  16848   2880 S  25.0  0.7   0:00.08 /usr/loca+
 36186 root      20   0  239736  11364   5440 R  18.8  0.5   0:00.03 /usr/bin/+
 36168 nigeria   20   0  404052  16140  10384 S  12.5  0.7   0:00.03 /opt/cpan+
 36184 root      20   0  160220   2064   1580 R   6.2  0.1   0:00.01 top -bcn1
     1 root      20   0   44396   3216   1452 S   0.0  0.1   0:15.29 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.66 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.50 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:11.13 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.49 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.82 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:25.28 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.23 [kauditd]
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.40 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:01.98 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.63 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   39500   4292   4048 S   0.0  0.2   0:06.19 /usr/lib/+
   380 root      20   0   45352     52     48 S   0.0  0.0   0:00.33 /usr/lib/+
   406 root      16  -4   55532    460    340 S   0.0  0.0   0:00.96 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   483 root      20   0   21540    344    260 S   0.0  0.0   0:00.25 /usr/sbin+
   485 root      20   0   24712   1148    792 S   0.0  0.0   0:02.75 /usr/lib/+
   486 root      20   0  152780    108     68 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0  224148   4324    984 S   0.0  0.2   0:00.20 queueproc+
   488 root      20   0   52852    224    156 S   0.0  0.0   0:00.00 /usr/sbin+
   495 polkitd   20   0  612240    744    376 S   0.0  0.0   0:01.66 /usr/lib/+
   498 dbus      20   0   58748   1356    604 S   0.0  0.1   0:06.33 /usr/bin/+
   506 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   518 root      20   0    4388     24     20 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   543 nscd      20   0  928956   1192    548 S   0.0  0.0   0:08.59 /usr/sbin+
   554 root      20   0   24208     12      8 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124476    424    292 S   0.0  0.0   0:00.33 /usr/sbin+
   577 root      20   0  108296     36     32 S   0.0  0.0   0:00.00 /sbin/age+
   578 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   595 mailnull  20   0   90824   3544    636 S   0.0  0.1   0:00.32 /usr/sbin+
   628 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:06.21 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  572372    752    284 S   0.0  0.0   0:01.08 /usr/bin/+
   920 root      20   0  249168   4008   3548 S   0.0  0.2   0:03.08 /usr/sbin+
   926 root      20   0 1902000 427072   1064 S   0.0 17.6   0:36.98 /usr/loca+
   927 named     20   0 1054792  28960   2000 S   0.0  1.2   0:06.23 /usr/sbin+
   930 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.26 /usr/bin/+
   931 root      20   0  389508    388    296 S   0.0  0.0   0:00.39 php-fpm: +
   932 root      20   0  445028    604    488 S   0.0  0.0   0:00.53 sw-engine+
   939 root      20   0  439788    384    292 S   0.0  0.0   0:00.43 php-fpm: +
   941 systuser  20   0  113932      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  388892    236    156 S   0.0  0.0   0:00.37 php-fpm: +
   944 cpanelc+  20   0   10608   3536   2308 S   0.0  0.1   0:09.18 /usr/loca+
   946 systuser  20   0  114016   9896   2556 S   0.0  0.4   0:02.94 /usr/loca+
   949 systuser  20   0  113016     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   958 root      20   0  396248    384    300 S   0.0  0.0   0:00.40 php-fpm: +
   959 root      20   0  111304    368    268 S   0.0  0.0   0:01.28 /usr/sbin+
   960 root      20   0   51508    468    304 S   0.0  0.0   0:00.20 /usr/sbin+
   962 root      20   0  261024   4680   1040 S   0.0  0.2   0:01.68 cpsrvd (S+
   965 systuser  20   0   14068     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   972 root      20   0  400740   1488    616 S   0.0  0.1   0:01.37 php-fpm: +
   973 root      20   0  153404    256    176 S   0.0  0.0   0:00.24 pure-ftpd+
   974 root      20   0 1277312   4164     32 S   0.0  0.2   0:28.03 /usr/bin/+
   975 root      20   0 1276356   6472      0 S   0.0  0.3   0:25.53 /usr/bin/+
   977 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 telegraf  20   0 5654304  34564   5680 S   0.0  1.4   0:06.66 /usr/loca+
  1079 dovenull  20   0   47136   2528   1848 S   0.0  0.1   0:00.37 dovecot/p+
  1080 dovenull  20   0   47392   2364   1616 S   0.0  0.1   0:00.18 dovecot/i+
  1081 dovecot   20   0   10320    212    108 S   0.0  0.0   0:00.10 dovecot/a+
  1082 root      20   0   10452    520    368 S   0.0  0.0   0:00.23 dovecot/l+
  1083 dovenull  20   0   47300   2112   1536 S   0.0  0.1   0:00.48 dovecot/p+
  1084 dovenull  20   0   47424   2336   1520 S   0.0  0.1   0:00.20 dovecot/i+
  1090 root      20   0   24564   2020    496 S   0.0  0.1   0:00.09 dovecot/c+
  1091 dovecot   20   0   13568    508    372 S   0.0  0.0   0:00.02 dovecot/s+
  1141 root      20   0  247944   2892    740 S   0.0  0.1   0:04.24 /usr/loca+
  1153 dovecot   20   0   41156   1484   1016 S   0.0  0.1   0:00.66 dovecot/a+
  1158 systuser  20   0  157704   2768    788 S   0.0  0.1   0:00.08 SonarPush+
  1177 wp-tool+  20   0  387528   3180   1276 S   0.0  0.1   0:00.18 /usr/bin/+
  1178 wp-tool+  20   0  412368  23080   1256 S   0.0  1.0   0:03.86 /usr/bin/+
  1261 root      20   0  262224  22224   4364 S   0.0  0.9   0:00.74 cpdavd - +
  1262 root      20   0  209248   8476   1740 S   0.0  0.4   0:01.49 tailwatchd
  1263 root      20   0  167452   1212    664 S   0.0  0.1   0:00.25 dnsadmin +
  1662 root      38  18  130416   1364    696 S   0.0  0.1   0:00.02 cpanellog+
  1690 root      20   0  299272    432    272 S   0.0  0.0   0:00.32 php-fpm: +
  1927 root      20   0  267052   4948    528 S   0.0  0.2   0:01.05 /usr/sbin+
  1929 root      20   0   12836    316    216 S   0.0  0.0   0:01.17 /usr/loca+
  1930 root      20   0   12732    284    212 S   0.0  0.0   0:01.03 /usr/loca+
  1931 root      20   0   12868    324    220 S   0.0  0.0   0:01.07 /usr/loca+
  1939 root      20   0   53268     44     44 S   0.0  0.0   0:00.04 /usr/loca+
  2021 root      20   0  182388   9292   1116 S   0.0  0.4   0:09.98 lfd - sle+
  4410 root      20   0  183048      4      4 S   0.0  0.0   0:00.00 /usr/sbin+
  4453 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
  4476 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
  4531 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4539 oysipao+  20   0    3152     44      8 S   0.0  0.0   0:00.23 [kworker]
  6717 root      20   0  259284  89852   2432 S   0.0  3.7   0:02.17 spamd chi+
  6719 root      20   0  247944   1404    436 S   0.0  0.1   0:00.00 spamd chi+
  7575 root      30  10  132964     32     28 S   0.0  0.0   0:00.00 ConfigSer+
  7587 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 152+
 12060 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 18935 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 23024 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 23065 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 25042 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 27836 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 29048 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 29300 nobody    20   0  277688  19060   4488 S   0.0  0.8   0:00.57 /usr/sbin+
 32156 nobody    20   0  277584  18560   4356 S   0.0  0.8   0:00.57 /usr/sbin+
 32175 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 32544 nobody    20   0  277596  18280   4300 S   0.0  0.8   0:00.46 /usr/sbin+
 32937 nobody    20   0  277712  18600   4364 S   0.0  0.8   0:00.37 /usr/sbin+
 33042 nobody    20   0  277788  18692   4384 S   0.0  0.8   0:00.33 /usr/sbin+
 33048 nobody    20   0  277672  18764   4308 S   0.0  0.8   0:00.39 /usr/sbin+
 33169 nobody    20   0  277776  18296   4152 S   0.0  0.8   0:00.19 /usr/sbin+
 33175 nobody    20   0  277552  18384   4256 S   0.0  0.8   0:00.35 /usr/sbin+
 33176 nobody    20   0  277584  18308   4320 S   0.0  0.8   0:00.24 /usr/sbin+
 34223 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34328 nobody    20   0  277580  18052   4168 S   0.0  0.7   0:00.26 /usr/sbin+
 34373 nobody    20   0  277584  17892   3984 S   0.0  0.7   0:00.10 /usr/sbin+
 34390 nobody    20   0  277520  17684   3936 S   0.0  0.7   0:00.28 /usr/sbin+
 34392 nobody    20   0  277520  17896   4112 S   0.0  0.7   0:00.23 /usr/sbin+
 34393 nobody    20   0  277600  17932   4116 S   0.0  0.7   0:00.25 /usr/sbin+
 35265 nobody    20   0  277520  17760   4056 S   0.0  0.7   0:00.13 /usr/sbin+
 35319 nobody    20   0  277908  17656   3824 S   0.0  0.7   0:00.10 /usr/sbin+
 35539 nobody    20   0  277520  17404   3776 S   0.0  0.7   0:00.07 /usr/sbin+
 35576 nobody    20   0  277520  17272   3720 S   0.0  0.7   0:00.10 /usr/sbin+
 35577 nobody    20   0  277520  16736   3260 S   0.0  0.7   0:00.03 /usr/sbin+
 35592 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 35593 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 35610 nobody    20   0  277520  17224   3616 S   0.0  0.7   0:00.09 /usr/sbin+
 35714 nobody    20   0  277520  17388   3824 S   0.0  0.7   0:00.03 /usr/sbin+
 35726 nobody    20   0  277904  17396   3568 S   0.0  0.7   0:00.05 /usr/sbin+
 35727 nobody    20   0  277520  17388   3784 S   0.0  0.7   0:00.04 /usr/sbin+
 35839 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 35887 nigeria   20   0  401380   8516   4972 S   0.0  0.4   0:00.03 php-fpm: +
 36022 nigeria   20   0  400460   4336   2232 S   0.0  0.2   0:00.00 php-fpm: +
 36071 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 36072 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 36076 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 36077 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 36085 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 36086 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 36105 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 36107 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 36108 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 36109 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 36110 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 36111 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 36112 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 36113 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 36114 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 36115 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 36116 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 36118 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 36121 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 36122 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 36123 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 36133 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 36134 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 36135 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 36136 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 36137 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 36138 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 36139 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 36140 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 36141 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 36143 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 36144 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 36154 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 36155 pactpay   20   0  480124  17676  11880 S   0.0  0.7   0:00.01 /opt/cpan+
 36165 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 36185 root      20   0  113496   1420   1232 S   0.0  0.1   0:00.00 bash /usr+
 36188 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 36189 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 36190 nobody    20   0  277672  17764    220 R   0.0  0.7   0:00.00 /usr/sbin+
 36191 cloudsms  20   0  131852   3324   2388 R   0.0  0.1   0:00.00 /usr/loca+
 69703 root      20   0       0      0      0 S   0.0  0.0   0:00.23 [kworker/+
 94906 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:56   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    00:56   0:11  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:56   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    00:56   0:25  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kauditd]
root        244  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   00:56   0:02  \_ [kworker/1:1H]
root        270  0.0  0.0      0     0 ?        S<   00:56   0:01  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [xprtiod]
root        628  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   00:56   0:06  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root      69703  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/u200:0]
root      94906  0.0  0.0      0     0 ?        S    03:09   0:00  \_ [kworker/1:2]
root      12060  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:1]
root      18935  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/0:3]
root      23024  0.0  0.0      0     0 ?        S    03:50   0:00  \_ [kworker/1:1]
root      23065  0.0  0.0      0     0 ?        S    03:50   0:00  \_ [kworker/0:0]
root      25042  0.0  0.0      0     0 ?        S    03:53   0:00  \_ [kworker/0:5]
root      27836  0.0  0.0      0     0 ?        S    03:57   0:00  \_ [kworker/1:0]
root      29048  0.0  0.0      0     0 ?        S    03:59   0:00  \_ [kworker/1:3]
root      32175  0.0  0.0      0     0 ?        S    04:03   0:00  \_ [kworker/0:1]
root      34223  0.0  0.0      0     0 ?        S    04:06   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44396  3216 ?        Ss   00:56   0:15 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.1  39500  4292 ?        Ss   00:56   0:06 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352    52 ?        Ss   00:56   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   460 ?        S<sl 00:56   0:00 /sbin/auditd
root        483  0.0  0.0  21540   344 ?        Ss   00:56   0:00 /usr/sbin/irqbalance --foreground
root        485  0.0  0.0  24712  1148 ?        Ss   00:56   0:02 /usr/lib/systemd/systemd-logind
root        486  0.0  0.0 152780   108 ?        Ss   00:56   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.1 224148  4324 ?        Ss   00:56   0:00 queueprocd - waiting up to 60s to process a task
root        488  0.0  0.0  52852   224 ?        Ss   00:56   0:00 /usr/sbin/smartd -n -q never
polkitd     495  0.0  0.0 612240   744 ?        Ssl  00:56   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        498  0.0  0.0  58748  1356 ?        Ss   00:56   0:06 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         506  0.0  0.0  69256    60 ?        Ss   00:56   0:00 /sbin/rpcbind -w
root        518  0.0  0.0   4388    24 ?        Ss   00:56   0:00 /usr/sbin/acpid
root        520  0.0  0.0 195208     0 ?        Ssl  00:56   0:00 /usr/sbin/gssproxy -D
nscd        543  0.0  0.0 928956  1192 ?        Ssl  00:56   0:08 /usr/sbin/nscd
root        554  0.0  0.0  24208    12 ?        Ss   00:56   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 124476   424 ?        Ss   00:56   0:00 /usr/sbin/crond -n
root       4410  0.0  0.0 183048     4 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       4453  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       4476  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 19m
root      36105  0.0  0.0 183044  2148 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      36121  0.0  0.0 113284  1212 ?        Ss   04:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      36122  0.0  0.0 108052   360 ?        S    04:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      36123  0.0  0.0 113288  1512 ?        S    04:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      36192  0.0  0.0 153840  2096 ?        R    04:09   0:00  |               \_ ps auxf
root      36107  0.0  0.0 183044  2148 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      36135  0.0  0.0  20164   808 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      36108  0.0  0.0 183044  2148 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      36133  0.0  0.0  20164   992 ?        Ss   04:09   0:00  |   \_ jailshell (cloudsms) [36188] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  36188  0.0  0.0  20164   264 ?        S    04:09   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  36189  0.0  0.0 113284  1212 ?        S    04:09   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  36191  0.0  0.4 399792 11488 ?        R    04:09   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue2.php
root      36109  0.0  0.0 183044  2144 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      36143  0.0  0.0  20164   804 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      36110  0.0  0.0 183044  2144 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      36134  0.0  0.0  20164   808 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      36111  0.0  0.0 183044  2144 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      36138  0.0  0.0  20164   808 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      36112  0.0  0.0 183044  2144 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      36139  0.0  0.0  20164   808 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      36113  0.0  0.0 183044  2140 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      36140  0.0  0.0  20164   808 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      36114  0.0  0.0 183044  2140 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      36137  0.0  0.0  20164   804 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      36115  0.0  0.0 183044  2140 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      36141  0.0  0.0 113284  1212 ?        Ss   04:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      36153  0.0  0.6 169868 16848 ?        S    04:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      36185  0.0  0.0 113496  1420 ?        S    04:09   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      36186  0.0  0.5 266176 13592 ?        R    04:09   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      36116  0.0  0.0 183044  2140 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      36136  0.0  0.0  20164   964 ?        Ss   04:09   0:00  |   \_ jailshell (pactpay) [36154] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   36154  0.0  0.0  20164   260 ?        S    04:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   36155  0.0  0.7 480124 17676 ?        S    04:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      36118  0.0  0.0 183044  2140 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      36144  0.0  0.0  20164   968 ?        Ss   04:09   0:00      \_ jailshell (nigeria) [36165] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   36165  0.0  0.0  20164   260 ?        S    04:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   36168  0.0  0.6 404052 16140 ?        S    04:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0 108296    36 tty1     Ss+  00:56   0:00 /sbin/agetty --noclear tty1 linux
root        578  0.0  0.0 114704     0 ttyS0    Ss+  00:56   0:00 /bin/bash
mailnull    595  0.0  0.1  90824  3544 ?        Ss   00:56   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 572372   752 ?        Ssl  00:56   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        920  0.0  0.1 249168  4008 ?        Ssl  00:56   0:03 /usr/sbin/rsyslogd -n
root        926  0.3 17.6 1902000 427072 ?      Ssl  00:56   0:36 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.1 1054792 28960 ?       Ssl  00:56   0:06 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    930  0.0  0.0 342400     0 ?        Ssl  00:56   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        931  0.0  0.0 389508   388 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        932  0.0  0.0 445028   604 ?        Ss   00:56   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  35839  0.0  0.0 445028   324 ?        S    04:08   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        939  0.0  0.0 439788   384 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    941  0.0  0.0 113932     4 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 388892   236 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    944  0.0  0.1  10608  3536 ?        Ss   00:56   0:09 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    946  0.0  0.4 114016  9896 ?        Ssl  00:56   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    949  0.0  0.0 113016    36 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        958  0.0  0.0 396248   384 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        959  0.0  0.0 111304   368 ?        Ss   00:56   0:01 /usr/sbin/sshd -D
root      35592  0.0  0.1 111304  4268 ?        Ss   04:08   0:00  \_ sshd: [accepted]
sshd      35593  0.0  0.1 115644  2624 ?        S    04:08   0:00  |   \_ sshd: [net]
root      36071  0.0  0.2 157100  5076 ?        Ss   04:08   0:00  \_ sshd: unknown [priv]
sshd      36072  0.0  0.1 115644  2628 ?        S    04:08   0:00  |   \_ sshd: unknown [net]
root      36076  0.0  0.2 157100  5076 ?        Ss   04:08   0:00  \_ sshd: unknown [priv]
sshd      36077  0.0  0.1 115644  2628 ?        S    04:08   0:00      \_ sshd: unknown [net]
root        960  0.0  0.0  51508   468 ?        Ss   00:56   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1079  0.0  0.1  47136  2528 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.0  47392  2364 ?        S    00:56   0:00  \_ dovecot/imap-login
dovecot    1081  0.0  0.0  10320   212 ?        S    00:56   0:00  \_ dovecot/anvil
root       1082  0.0  0.0  10452   520 ?        S    00:56   0:00  \_ dovecot/log
dovenull   1083  0.0  0.0  47300  2112 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.0  47424  2336 ?        S    00:56   0:00  \_ dovecot/imap-login
root       1090  0.0  0.0  24564  2020 ?        S    00:56   0:00  \_ dovecot/config
dovecot    1091  0.0  0.0  13568   508 ?        S    00:56   0:00  \_ dovecot/stats
dovecot    1153  0.0  0.0  41156  1484 ?        S    00:56   0:00  \_ dovecot/auth
root        962  0.0  0.1 261024  4680 ?        Ss   00:56   0:01 cpsrvd (SSL) - waiting for connections                   
root      36085  0.0  0.0      0     0 ?        Z    04:08   0:00  \_ [cpaneld - servi] <defunct>
root      36086  0.0  0.0      0     0 ?        Z    04:08   0:00  \_ [cpaneld - servi] <defunct>
systuser    965  0.0  0.0  14068    28 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        972  0.0  0.0 400740  1488 ?        Ss   00:56   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   35887  0.1  0.3 401380  8516 ?        S    04:08   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   36022  0.0  0.1 400460  4336 ?        S    04:08   0:00  \_ php-fpm: pool nigeriadecide_org
root        973  0.0  0.0 153404   256 ?        Ss   00:56   0:00 pure-ftpd (SERVER)
root        974  0.2  0.1 1277312 4164 ?        Ssl  00:56   0:28 /usr/bin/checkstatus
root        975  0.2  0.2 1276356 6472 ?        Ssl  00:56   0:25 /usr/bin/cspdaemon
systuser    977  0.0  0.0  10132    28 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    992  0.0  1.4 5654304 34564 ?       SLsl 00:56   0:06 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1141  0.0  0.1 247944  2892 ?        Ss   00:56   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6717  0.0  3.7 259284 89852 ?        S    01:02   0:02  \_ spamd child
root       6719  0.0  0.0 247944  1404 ?        S    01:02   0:00  \_ spamd child
systuser   1158  0.0  0.1 157704  2768 ?        S    00:56   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387528  3180 ?        Ss   00:56   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.9 412368 23080 ?        Ss   00:56   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1261  0.0  0.9 262224 22224 ?        Ss   00:56   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1262  0.0  0.3 209248  8476 ?        Ss   00:56   0:01 tailwatchd
root       1263  0.0  0.0 167452  1212 ?        Ss   00:56   0:00 dnsadmin - dormant mode
root       1662  0.0  0.0 130416  1364 ?        SN   00:56   0:00 cpanellogd - sleeping for logs
root       1690  0.0  0.0 299272   432 ?        Ss   00:56   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1816  1.2  9.7 1464484 235952 ?      Sl   00:56   2:21 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1927  0.0  0.2 267052  4948 ?        Ss   00:56   0:01 /usr/sbin/httpd -k start
root       1929  0.0  0.0  12836   316 ?        S    00:56   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1930  0.0  0.0  12732   284 ?        S    00:56   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1931  0.0  0.0  12868   324 ?        S    00:56   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53268    44 ?        S    00:56   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    29300  0.1  0.7 277688 19060 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody    32156  0.1  0.7 277584 18560 ?        S    04:03   0:00  \_ /usr/sbin/httpd -k start
nobody    32544  0.1  0.7 277596 18280 ?        S    04:03   0:00  \_ /usr/sbin/httpd -k start
nobody    32937  0.1  0.7 277712 18600 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
nobody    33042  0.1  0.7 277788 18692 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
nobody    33048  0.1  0.7 277672 18764 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
cloudw    36190  0.0  0.4 284172 10844 ?        R    04:09   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    33169  0.0  0.7 277776 18296 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
nobody    33175  0.1  0.7 277552 18384 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
nobody    33176  0.0  0.7 277584 18308 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
nobody    34328  0.1  0.7 277580 18052 ?        S    04:06   0:00  \_ /usr/sbin/httpd -k start
nobody    34373  0.0  0.7 277584 17892 ?        S    04:06   0:00  \_ /usr/sbin/httpd -k start
nobody    34390  0.1  0.7 277520 17684 ?        S    04:06   0:00  \_ /usr/sbin/httpd -k start
nobody    34392  0.1  0.7 277520 17896 ?        S    04:06   0:00  \_ /usr/sbin/httpd -k start
nobody    34393  0.1  0.7 277600 17932 ?        S    04:06   0:00  \_ /usr/sbin/httpd -k start
nobody    35265  0.1  0.7 277520 17760 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    35319  0.1  0.7 277908 17656 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    35539  0.1  0.7 277520 17404 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    35576  0.1  0.7 277520 17272 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    35577  0.0  0.6 277520 16736 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    35610  0.1  0.7 277520 17224 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    35714  0.0  0.7 277520 17388 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    35726  0.1  0.7 277904 17396 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    35727  0.0  0.7 277520 17388 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
root       2021  0.0  0.3 182388  9292 ?        Ss   00:56   0:09 lfd - sleeping
oysipao+   4531  0.0  0.0   3148     8 ?        Ss   01:00   0:00 [kworker]
oysipao+   4539  0.0  0.0   3152    44 ?        S    01:00   0:00  \_ [kworker]
root       7575  0.0  0.0 132964    32 ?        SN   03:29   0:00 ConfigServer Version Check
root       7587  0.0  0.0 108056     0 ?        SN   03:29   0:00  \_ sleep 15214
## mysql stats
Uptime: 11530  Threads: 3  Questions: 777210  Slow queries: 0  Opens: 4909  Flush tables: 1  Open tables: 2000  Queries per second avg: 67.407
*************************** 1. row ***************************
     Id: 14060
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 14065
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 14069
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 110.249.202.232 TIME_WAIT
      1 110.249.202.48 TIME_WAIT
      1 110.249.202.86 TIME_WAIT
      1 114.119.149.43 TIME_WAIT
      1 173.212.239.137 TIME_WAIT
      1 192.178.4.97 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.159.164.82 TIME_WAIT
      1 54.39.6.20 TIME_WAIT
      1 74.7.227.184 TIME_WAIT
      1 74.7.229.244 TIME_WAIT
      1 74.7.244.23 TIME_WAIT
      1 8.217.167.220 TIME_WAIT
      1 8.218.202.136 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 8.217.174.99 TIME_WAIT
     10 51.159.106.84 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 04:09:01 WAT
   Restart Time: Saturday, 22-Nov-2025 00:56:55 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 12 minutes 6 seconds
   Server load: 0.19 0.62 0.55
   Total accesses: 51813 - Total Traffic: 1.3 GB - Total Duration: 25873198
   CPU Usage: u3.93 s2.35 cu676.4 cs539.45 - 10.6% CPU load
   4.5 requests/sec - 117.2 kB/second - 26.1 kB/request - 499.357 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

K_K.K_R.KRKK_WRRK.R_.___W...._K.................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client      Protocol         VHost                                      Request
   0-0  34328 3/52/2582   K 1.04 1    352 1306483 98.0  2.06  64.20 192.178.4.96    http/1.1 team.cloudware.ng:443  GET /?l=3493808009 HTTP/1.1
   1-0  35265 0/28/2585   _ 0.50 0    0   1254831 0.0   0.65  68.41 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   2-0  35319 4/18/2568   K 0.36 0    310 1290643 129.1 0.44  68.32 192.178.4.102   http/1.1 team.cloudware.ng:443  GET /?l=3170794207 HTTP/1.1
   3-0  -     0/0/2550    . 0.00 19   0   1465932 0.0   0.00  67.03 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   4-0  32937 6/65/2600   K 1.55 0    280 1324441 187.0 2.02  64.84 192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=1340218307 HTTP/1.1
   5-0  35539 0/15/2353   _ 0.24 1    1   1106124 0.0   0.28  55.02 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   6-0  34373 0/19/2667   R 0.30 76   270 1261339 0.0   0.64  65.11 192.178.4.102   http/1.1 team.cloudware.ng:443  GET /?l=591167983 HTTP/1.1
   7-0  -     0/0/2639    . 0.00 22   0   1240682 0.0   0.00  61.85 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   8-0  34390 8/44/2678   K 1.23 2    416 1239839 246.4 1.26  69.67 192.178.4.103   http/1.1 team.cloudware.ng:443  GET /?l=1775236633 HTTP/1.1
   9-0  33169 0/35/2234   R 0.82 93   285 1112153 0.0   0.88  55.44 192.178.4.105   http/1.1 team.cloudware.ng:443  GET /?l=306556953 HTTP/1.1
   10-0 32156 30/110/1911 K 2.18 1    4   961628  271.1 2.84  46.80 145.239.69.106  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?state=Edo&lga=Ovia%20south%20wes
   11-0 35576 12/17/2277  K 0.42 2    342 1211686 367.3 0.47  72.94 192.178.4.105   http/1.1 team.cloudware.ng:443  GET /?l=3303357749 HTTP/1.1
   12-0 34392 0/39/1675   _ 0.96 3    350 771069  0.0   1.04  40.11 192.178.4.101   http/1.1 team.cloudware.ng:443  GET /?l=4035752973 HTTP/1.1
   13-0 34393 0/47/2379   W 1.00 0    0   1253045 0.0   1.28  59.49 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   14-0 35577 0/4/1818    R 0.10 39   298 971870  0.0   0.13  46.74 110.249.202.209 http/1.1
   15-0 29300 0/99/1520   R 2.50 91   6   793880  0.0   3.80  41.60 40.77.167.10    http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?state=fct&lga=kwali&ward=Ashara
   16-0 33175 6/59/1557   K 1.46 1    264 763869  187.6 1.66  38.56 192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=1827509474 HTTP/1.1
   17-0 -     0/0/1349    . 0.00 30   0   700836  0.0   0.00  34.05 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 33176 0/46/2060   R 1.12 82   9   861456  0.0   1.57  61.40 110.249.202.192 http/1.1 cloudware.ng:443       GET /wp-content/uploads/stm_uploads/skin-custom.css?ver=1326094
   19-0 35610 0/14/617    _ 0.36 0    343 335612  0.0   0.39  15.39 192.178.4.101   http/1.1 team.cloudware.ng:443  GET /?l=4189532678 HTTP/1.1
   20-0 -     0/0/643     . 0.00 31   0   300281  0.0   0.00  14.95 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 33042 0/66/1130   _ 1.30 0    266 607512  0.0   1.60  29.38 192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=1116353900 HTTP/1.1
   22-0 35714 0/7/1648    _ 0.09 2    2   834833  0.0   0.12  40.17 107.23.62.75    http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/blog/blog/images/images/2019elec
   23-0 32544 0/74/923    _ 2.05 1    1   633470  0.0   2.47  23.04 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   24-0 33048 0/66/405    W 1.69 0    0   228486  0.0   2.56  10.78 192.178.4.100   http/1.1 team.cloudware.ng:443  GET /?l=1108388001 HTTP/1.1
   25-0 -     0/0/63      . 0.00 20   0   38846   0.0   0.00  1.91  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/297     . 0.00 27   0   161031  0.0   0.00  10.33 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/180     . 0.00 23   0   70297   0.0   0.00  3.14  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/102     . 0.00 24   0   85988   0.0   0.00  2.47  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 35726 0/9/579     _ 0.15 0    9   334596  0.0   0.18  16.67 34.195.248.30   http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/blog/2019elections/images/2019el
   30-0 35727 1/8/329     K 0.12 2    351 151596  35.0  0.24  7.07  192.178.4.103   http/1.1 team.cloudware.ng:443  GET /?l=2751132360 HTTP/1.1
   31-0 -     0/0/609     . 0.00 2546 0   309233  0.0   0.00  15.78 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/11      . 0.00 2536 0   3774    0.0   0.00  0.17  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/7       . 0.00 2548 0   1828    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/117     . 0.00 2123 0   46396   0.0   0.00  2.24  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/146     . 0.00 2560 0   57340   0.0   0.00  3.26  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/240     . 0.00 2532 0   105059  0.0   0.00  5.69  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/3       . 0.00 2559 0   4588    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/102     . 0.00 2125 0   37924   0.0   0.00  1.98  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/196     . 0.00 2076 3   51541   0.0   0.00  2.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/203     . 0.00 1832 0   91622   0.0   0.00  4.31  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/8       . 0.00 2539 0   2066    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/12      . 0.00 2535 0   5210    0.0   0.00  0.28  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/3       . 0.00 2558 0   13      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/158     . 0.00 2079 0   66237   0.0   0.00  3.12  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/522     . 0.00 2443 0   184884  0.0   0.00  9.85  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/2       . 0.00 9349 0   4       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/3       . 0.00 9316 0   766     0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/2       . 0.00 9343 0   48      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/2       . 0.00 9314 0   10      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/3       . 0.00 9299 0   695     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/7       . 0.00 9292 0   3150    0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/4       . 0.00 9295 0   538     0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/13      . 0.00 9293 0   8196    0.0   0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2       . 0.00 9306 0   519     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/1       . 0.00 9330 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/110     . 0.00 8901 0   48080   0.0   0.00  2.48  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/44      . 0.00 9184 0   13507   0.0   0.00  0.78  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/12      . 0.00 9302 0   7269    0.0   0.00  0.33  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/6       . 0.00 9286 0   1848    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/1       . 0.00 9339 0   1       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/48      . 0.00 9177 0   10684   0.0   0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/2       . 0.00 9311 0   7       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/1       . 0.00 9337 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/5       . 0.00 9298 0   1750    0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/1       . 0.00 9335 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/1       . 0.00 9336 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/2       . 0.00 9313 0   6       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/5       . 0.00 9287 0   859     0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/74      . 0.00 9055 0   36843   0.0   0.00  1.92  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/149     . 0.00 8692 0   74918   0.0   0.00  4.57  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/1       . 0.00 9331 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/1       . 0.00 9334 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/6       . 0.00 9290 0   3305    0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/6       . 0.00 9285 0   2230    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/1       . 0.00 9333 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/1       . 0.00 9332 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/40      . 0.00 9194 0   15854   0.0   0.00  0.86  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/1       . 0.00 9338 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/1       . 0.00 9329 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1256
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 5 seconds, (range: 0...18)
   index usage: 22%, cache usage: 30%
   total entries stored since starting: 38789
   total entries replaced since starting: 0
   total entries expired since starting: 37525
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 87 miss
   total removes since starting: 8 hit, 8 miss
Youez - 2016 - github.com/yon3zu
LinuXploit