403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.04.45.txt
 ## swap threshold exceeded
## server overview
2025-11-22.04.45 load[0] mem[64/64] mysql[1/25] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1427         127          39         808         712
Swap:          1999        1480         519
 04:45:02 up  3:48,  0 users,  load average: 0.73, 0.79, 0.68
## system overview
top - 04:45:02 up  3:48,  0 users,  load average: 0.73, 0.79, 0.68
Tasks: 210 total,   2 running, 207 sleeping,   0 stopped,   1 zombie
%Cpu(s): 53.5 us, 30.2 sy,  0.0 ni, 14.0 id,  0.0 wa,  0.0 hi,  2.3 si,  0.0 st
KiB Mem :  2420300 total,   122512 free,  1463476 used,   834312 buff/cache
KiB Swap:  2047996 total,   532084 free,  1515912 used.   728508 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1816 mysql     20   0 1464484 256700   3304 S  55.0 10.6   2:55.23 /usr/sbin+
 60702 nigeria   20   0  404052  16144  10384 R  15.0  0.7   0:00.03 /opt/cpan+
 56422 nobody    20   0  277584  18432   4268 S   5.0  0.8   0:00.59 /usr/sbin+
 60689 root      20   0  188216  11092   5152 S   5.0  0.5   0:00.01 /usr/loca+
 60706 pactpay   20   0  480124  16780  11080 S   5.0  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44396   3228   1464 S   0.0  0.1   0:17.94 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.79 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.58 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:13.54 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.56 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.19 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:26.38 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.27 [kauditd]
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.63 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:02.18 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.75 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   39500   3240   2996 S   0.0  0.1   0:07.37 /usr/lib/+
   380 root      20   0   45352     52     48 S   0.0  0.0   0:00.33 /usr/lib/+
   406 root      16  -4   55532    460    340 S   0.0  0.0   0:01.15 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   483 root      20   0   21540    344    260 S   0.0  0.0   0:00.30 /usr/sbin+
   485 root      20   0   24712   1152    792 S   0.0  0.0   0:03.22 /usr/lib/+
   486 root      20   0  152780     92     52 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0  224148   4376   1036 S   0.0  0.2   0:00.22 queueproc+
   488 root      20   0   52852    180    112 S   0.0  0.0   0:00.00 /usr/sbin+
   495 polkitd   20   0  612240    736    368 S   0.0  0.0   0:01.94 /usr/lib/+
   498 dbus      20   0   58748   1360    604 S   0.0  0.1   0:07.44 /usr/bin/+
   506 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   518 root      20   0    4388     24     20 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   543 nscd      20   0  928956   1228    584 S   0.0  0.1   0:10.05 /usr/sbin+
   554 root      20   0   24208     12      8 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124476    544    392 S   0.0  0.0   0:00.39 /usr/sbin+
   577 root      20   0  108296     36     32 S   0.0  0.0   0:00.00 /sbin/age+
   578 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   595 mailnull  20   0   90824   3464    536 S   0.0  0.1   0:00.37 /usr/sbin+
   628 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:06.24 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  572372    748    280 S   0.0  0.0   0:01.26 /usr/bin/+
   920 root      20   0  257360   3184   2664 S   0.0  0.1   0:03.70 /usr/sbin+
   926 root      20   0 1902000 417200   1088 S   0.0 17.2   0:37.12 /usr/loca+
   927 named     20   0 1185864  33668   2012 S   0.0  1.4   0:07.43 /usr/sbin+
   930 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.31 /usr/bin/+
   931 root      20   0  389508    336    244 S   0.0  0.0   0:00.44 php-fpm: +
   932 root      20   0  445028    604    488 S   0.0  0.0   0:00.62 sw-engine+
   939 root      20   0  439788    432    340 S   0.0  0.0   0:00.48 php-fpm: +
   941 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  388892    304    216 S   0.0  0.0   0:00.42 php-fpm: +
   944 cpanelc+  20   0   10608   3660   2328 S   0.0  0.2   0:10.95 /usr/loca+
   946 systuser  20   0  114016   9796   2340 S   0.0  0.4   0:03.45 /usr/loca+
   949 systuser  20   0  113016     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   958 root      20   0  396248    272    188 S   0.0  0.0   0:00.45 php-fpm: +
   959 root      20   0  111304    368    268 S   0.0  0.0   0:01.53 /usr/sbin+
   960 root      20   0   51508    468    304 S   0.0  0.0   0:00.24 /usr/sbin+
   962 root      20   0  261156   6168   1720 S   0.0  0.3   0:01.97 cpsrvd (S+
   965 systuser  20   0   14068     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   972 root      20   0  400740   1484    612 S   0.0  0.1   0:01.67 php-fpm: +
   973 root      20   0  153404    260    176 S   0.0  0.0   0:00.29 pure-ftpd+
   974 root      20   0 1277312   4164     32 S   0.0  0.2   0:28.04 /usr/bin/+
   975 root      20   0 1276356   6472      0 S   0.0  0.3   0:25.56 /usr/bin/+
   977 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 telegraf  20   0 5654304  34628   5776 S   0.0  1.4   0:07.86 /usr/loca+
  1079 dovenull  20   0   47136   1504    804 S   0.0  0.1   0:00.44 dovecot/p+
  1080 dovenull  20   0   47392   2408   1620 S   0.0  0.1   0:00.21 dovecot/i+
  1081 dovecot   20   0   10320    276    168 S   0.0  0.0   0:00.12 dovecot/a+
  1082 root      20   0   10452    548    344 S   0.0  0.0   0:00.28 dovecot/l+
  1083 dovenull  20   0   47300   1644   1040 S   0.0  0.1   0:00.56 dovecot/p+
  1084 dovenull  20   0   47424   2320   1488 S   0.0  0.1   0:00.23 dovecot/i+
  1090 root      20   0   24572   2060    496 S   0.0  0.1   0:00.10 dovecot/c+
  1091 dovecot   20   0   13568    400    200 S   0.0  0.0   0:00.03 dovecot/s+
  1141 root      20   0  247944   2876    724 S   0.0  0.1   0:04.50 /usr/loca+
  1153 dovecot   20   0   41156   1528   1012 S   0.0  0.1   0:00.78 dovecot/a+
  1158 systuser  20   0  157704   2888    908 S   0.0  0.1   0:00.08 SonarPush+
  1177 wp-tool+  20   0  387528   3184   1280 S   0.0  0.1   0:00.20 /usr/bin/+
  1178 wp-tool+  20   0  412368  23060   1236 S   0.0  1.0   0:04.52 /usr/bin/+
  1261 root      20   0  183900   6692   3460 S   0.0  0.3   0:00.92 cpdavd - +
  1262 root      20   0  209248  10232   2408 S   0.0  0.4   0:01.73 tailwatchd
  1263 root      20   0  167452   4168   2796 S   0.0  0.2   0:00.32 dnsadmin +
  1662 root      38  18  130416   1376    704 S   0.0  0.1   0:00.04 cpanellog+
  1690 root      20   0  299272    504    344 S   0.0  0.0   0:00.38 php-fpm: +
  1927 root      20   0  267052   4948    528 S   0.0  0.2   0:01.19 /usr/sbin+
  1929 root      20   0   12840    316    216 S   0.0  0.0   0:01.40 /usr/loca+
  1930 root      20   0   12732    288    212 S   0.0  0.0   0:01.24 /usr/loca+
  1931 root      20   0   12876    328    220 S   0.0  0.0   0:01.28 /usr/loca+
  1939 root      20   0   53268     44     44 S   0.0  0.0   0:00.04 /usr/loca+
  2021 root      20   0  182700   9848   1116 S   0.0  0.4   0:11.76 lfd - sle+
  4410 root      20   0  183048      4      4 S   0.0  0.0   0:00.00 /usr/sbin+
  4453 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
  4476 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
  4531 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4539 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.28 [kworker]
  6717 root      20   0  259460  90032   2436 S   0.0  3.7   0:03.35 spamd chi+
  6719 root      20   0  247944   1396    428 S   0.0  0.1   0:00.00 spamd chi+
  7575 root      30  10  132964     32     28 S   0.0  0.0   0:00.00 ConfigSer+
  7587 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 152+
 32544 nobody    20   0  277604  20312   4872 S   0.0  0.8   0:03.76 /usr/sbin+
 37541 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 41477 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 46894 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 49137 nobody    20   0  277592  19780   4816 S   0.0  0.8   0:01.43 /usr/sbin+
 49155 nobody    20   0  277716  19868   4772 S   0.0  0.8   0:01.38 /usr/sbin+
 49156 nobody    20   0  277584  19556   4800 S   0.0  0.8   0:01.53 /usr/sbin+
 49528 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 49545 nobody    20   0  277716  18996   4556 S   0.0  0.8   0:01.48 /usr/sbin+
 50271 nobody    20   0  277776  20004   4788 S   0.0  0.8   0:01.23 /usr/sbin+
 50287 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 50707 nobody    20   0  277908  19844   4684 S   0.0  0.8   0:01.30 /usr/sbin+
 52844 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 53541 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 54737 nobody    20   0  277520  18876   4544 S   0.0  0.8   0:00.73 /usr/sbin+
 54751 nobody    20   0  277584  19320   4600 S   0.0  0.8   0:00.70 /usr/sbin+
 54752 nobody    20   0  277780  18832   4388 S   0.0  0.8   0:00.71 /usr/sbin+
 55379 nobody    20   0  277648  18524   4444 S   0.0  0.8   0:00.78 /usr/sbin+
 55395 nobody    20   0  277908  18916   4464 S   0.0  0.8   0:00.67 /usr/sbin+
 57442 nobody    20   0  277536  17952   4124 S   0.0  0.7   0:00.26 /usr/sbin+
 57794 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 57825 nobody    20   0  277520  18216   4140 S   0.0  0.8   0:00.32 /usr/sbin+
 58650 nobody    20   0  277520  17820   3984 S   0.0  0.7   0:00.29 /usr/sbin+
 59579 mailnull  20   0   91208   4244   1136 S   0.0  0.2   0:00.00 /usr/sbin+
 59619 cloudw    20   0   61848   6268   4468 S   0.0  0.3   0:00.00 dovecot/l+
 59858 nobody    20   0  277912  17660   3744 S   0.0  0.7   0:00.10 /usr/sbin+
 59928 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 60188 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 60307 nigeria   20   0  400460   4336   2232 S   0.0  0.2   0:00.01 php-fpm: +
 60352 healtho+  20   0  462688  69460   4216 S   0.0  2.9   0:05.65 php-fpm: +
 60364 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 60395 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 60511 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 60558 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 60563 root      20   0  162436   5828   4336 S   0.0  0.2   0:00.01 sshd: roo+
 60565 root      20   0  111304   4444   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 60566 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 60567 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 60568 root      20   0  111304   4448   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 60569 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 60570 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 60571 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 60574 root      20   0  111304   4440   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 60575 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 60582 root      20   0  183044   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 60584 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 60585 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 60586 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 60587 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 60588 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 60589 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 60591 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 60592 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 60593 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 60594 root      20   0  183044   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 60595 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60597 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 60602 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 60608 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 60611 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 60655 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 60667 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 60668 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 60670 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 60671 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 60672 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 60673 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 60674 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 60676 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 60679 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 60681 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 60685 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 60693 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 60699 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 60700 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 60727 root      20   0  160220   2060   1580 S   0.0  0.1   0:00.00 top -n 2 +
 69703 root      20   0       0      0      0 S   0.0  0.0   0:00.31 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:56   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    00:56   0:13  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:56   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:56   0:26  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kauditd]
root        244  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   00:56   0:02  \_ [kworker/1:1H]
root        270  0.0  0.0      0     0 ?        S<   00:56   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [xprtiod]
root        628  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   00:56   0:06  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root      69703  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/u200:0]
root      37541  0.0  0.0      0     0 ?        S    04:11   0:00  \_ [kworker/0:0]
root      41477  0.0  0.0      0     0 ?        S    04:17   0:00  \_ [kworker/1:5]
root      46894  0.0  0.0      0     0 ?        S    04:25   0:00  \_ [kworker/1:4]
root      49528  0.0  0.0      0     0 ?        S    04:29   0:00  \_ [kworker/0:3]
root      50287  0.0  0.0      0     0 ?        S    04:30   0:00  \_ [kworker/u200:2]
root      52844  0.0  0.0      0     0 ?        S    04:34   0:00  \_ [kworker/1:1]
root      53541  0.0  0.0      0     0 ?        S    04:35   0:00  \_ [kworker/0:2]
root      57794  0.0  0.0      0     0 ?        S    04:41   0:00  \_ [kworker/0:1]
root      59928  0.0  0.0      0     0 ?        S    04:44   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44396  3228 ?        Ss   00:56   0:17 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.1  39500  3240 ?        Ss   00:56   0:07 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352    52 ?        Ss   00:56   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   460 ?        S<sl 00:56   0:01 /sbin/auditd
root        483  0.0  0.0  21540   344 ?        Ss   00:56   0:00 /usr/sbin/irqbalance --foreground
root        485  0.0  0.0  24712  1152 ?        Ss   00:56   0:03 /usr/lib/systemd/systemd-logind
root        486  0.0  0.0 152780    92 ?        Ss   00:56   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.1 224148  4376 ?        Ss   00:56   0:00 queueprocd - waiting up to 60s to process a task
root        488  0.0  0.0  52852   180 ?        Ss   00:56   0:00 /usr/sbin/smartd -n -q never
polkitd     495  0.0  0.0 612240   736 ?        Ssl  00:56   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        498  0.0  0.0  58748  1360 ?        Ss   00:56   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         506  0.0  0.0  69256    60 ?        Ss   00:56   0:00 /sbin/rpcbind -w
root        518  0.0  0.0   4388    24 ?        Ss   00:56   0:00 /usr/sbin/acpid
root        520  0.0  0.0 195208     0 ?        Ssl  00:56   0:00 /usr/sbin/gssproxy -D
nscd        543  0.0  0.0 928956  1228 ?        Ssl  00:56   0:10 /usr/sbin/nscd
root        554  0.0  0.0  24208    12 ?        Ss   00:56   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 124476   544 ?        Ss   00:56   0:00 /usr/sbin/crond -n
root       4410  0.0  0.0 183048     4 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       4453  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       4476  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 19m
root      60582  0.0  0.0 183044  2140 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      60602  0.0  0.0 113284  1212 ?        Ss   04:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      60608  0.0  0.0 108052   356 ?        S    04:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      60611  0.0  0.0 113288  1520 ?        S    04:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      60735  0.0  0.0 153840  2096 ?        R    04:45   0:00  |               \_ ps auxf
root      60584  0.0  0.0 183044  2144 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      60672  0.0  0.0  20164   808 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      60585  0.0  0.0 183044  2144 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      60671  0.0  0.0  20164   804 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      60586  0.0  0.0 183044  2144 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      60668  0.0  0.0  20164   808 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      60587  0.0  0.0 183044  2144 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      60667  0.0  0.0  20164   804 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      60588  0.0  0.0 183044  2144 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      60676  0.0  0.0  20164   808 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      60589  0.0  0.0 183044  2144 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      60679  0.0  0.0  20164   808 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      60591  0.0  0.0 183044  2144 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      60670  0.0  0.0  20164   808 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      60592  0.0  0.0 183044  2144 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      60673  0.0  0.0  20164   804 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      60593  0.0  0.0 183044  2144 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      60681  0.0  0.0  20164   808 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      60594  0.0  0.0 183044  2140 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      60674  0.0  0.0 113284  1212 ?        Ss   04:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      60689  0.0  0.4 188216 11092 ?        S    04:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      60727  0.0  0.0 160220  2060 ?        S    04:45   0:00  |           \_ top -n 2 -b -c
root      60595  0.0  0.0 183044  2148 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      60655  0.0  0.0  20164   968 ?        Ss   04:45   0:00  |   \_ jailshell (pactpay) [60693] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   60693  0.0  0.0  20164   264 ?        S    04:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   60706  0.0  0.6 480124 16780 ?        S    04:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      60597  0.0  0.0 183044  2144 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      60685  0.0  0.0  20164   964 ?        Ss   04:45   0:00      \_ jailshell (nigeria) [60699] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   60699  0.0  0.0  20164   260 ?        S    04:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   60702  0.0  0.6 404052 16144 ?        S    04:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0 108296    36 tty1     Ss+  00:56   0:00 /sbin/agetty --noclear tty1 linux
root        578  0.0  0.0 114704     0 ttyS0    Ss+  00:56   0:00 /bin/bash
mailnull    595  0.0  0.1  90824  3464 ?        Ss   00:56   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  59579  0.0  0.1  91208  4244 ?        S    04:43   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 572372   748 ?        Ssl  00:56   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        920  0.0  0.1 257360  3184 ?        Ssl  00:56   0:03 /usr/sbin/rsyslogd -n
root        926  0.2 17.2 1902000 417200 ?      Ssl  00:56   0:37 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.3 1185864 33668 ?       Ssl  00:56   0:07 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    930  0.0  0.0 342400     0 ?        Ssl  00:56   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        931  0.0  0.0 389508   336 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        932  0.0  0.0 445028   604 ?        Ss   00:56   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  60395  0.0  0.0 445028   324 ?        S    04:44   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        939  0.0  0.0 439788   432 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    941  0.0  0.0 113932    68 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 388892   304 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    944  0.0  0.1  10608  3660 ?        Ss   00:56   0:10 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    946  0.0  0.4 114016  9796 ?        Ssl  00:56   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    949  0.0  0.0 113016    36 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        958  0.0  0.0 396248   272 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        959  0.0  0.0 111304   368 ?        Ss   00:56   0:01 /usr/sbin/sshd -D
root      60188  0.0  0.1 111304  4264 ?        Ss   04:44   0:00  \_ sshd: [accepted]
root      60511  0.0  0.1 111304  4260 ?        Ss   04:44   0:00  \_ sshd: [accepted]
root      60563  1.0  0.2 162436  5828 ?        Ss   04:45   0:00  \_ sshd: root [priv]
sshd      60567  0.0  0.1 115644  2628 ?        S    04:45   0:00  |   \_ sshd: root [net]
root      60565  0.0  0.1 111304  4444 ?        Ss   04:45   0:00  \_ sshd: [accepted]
sshd      60566  0.0  0.1 115644  2624 ?        S    04:45   0:00  |   \_ sshd: [net]
root      60568  0.0  0.1 111304  4448 ?        Ss   04:45   0:00  \_ sshd: [accepted]
sshd      60569  0.0  0.1 115644  2632 ?        S    04:45   0:00  |   \_ sshd: [net]
root      60570  0.0  0.1 111304  4264 ?        Ss   04:45   0:00  \_ sshd: [accepted]
sshd      60571  0.0  0.1 115644  2632 ?        S    04:45   0:00  |   \_ sshd: [net]
root      60574  0.0  0.1 111304  4440 ?        Ss   04:45   0:00  \_ sshd: [accepted]
sshd      60575  0.0  0.1 115644  2628 ?        S    04:45   0:00      \_ sshd: [net]
root        960  0.0  0.0  51508   468 ?        Ss   00:56   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1079  0.0  0.0  47136  1504 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.0  47392  2408 ?        S    00:56   0:00  \_ dovecot/imap-login
dovecot    1081  0.0  0.0  10320   276 ?        S    00:56   0:00  \_ dovecot/anvil
root       1082  0.0  0.0  10452   548 ?        S    00:56   0:00  \_ dovecot/log
dovenull   1083  0.0  0.0  47300  1644 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.0  47424  2320 ?        S    00:56   0:00  \_ dovecot/imap-login
root       1090  0.0  0.0  24572  2060 ?        S    00:56   0:00  \_ dovecot/config
dovecot    1091  0.0  0.0  13568   400 ?        S    00:56   0:00  \_ dovecot/stats
dovecot    1153  0.0  0.0  41156  1528 ?        S    00:56   0:00  \_ dovecot/auth
cloudw    59619  0.0  0.2  61848  6268 ?        S    04:43   0:00  \_ dovecot/lmtp
root      60364  0.0  0.1  41052  2724 ?        S    04:44   0:00  \_ dovecot/auth -w
root        962  0.0  0.2 261156  6168 ?        Ss   00:56   0:01 cpsrvd (SSL) - waiting for connections                   
root      60558  0.0  0.0      0     0 ?        Z    04:44   0:00  \_ [cpaneld - servi] <defunct>
systuser    965  0.0  0.0  14068    44 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        972  0.0  0.0 400740  1484 ?        Ss   00:56   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   60307  0.0  0.1 400460  4336 ?        S    04:44   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  60352 23.5  2.8 462688 69460 ?        S    04:44   0:05  \_ php-fpm: pool health_oyostate_gov_ng
root        973  0.0  0.0 153404   260 ?        Ss   00:56   0:00 pure-ftpd (SERVER)
root        974  0.2  0.1 1277312 4164 ?        Ssl  00:56   0:28 /usr/bin/checkstatus
root        975  0.1  0.2 1276356 6472 ?        Ssl  00:56   0:25 /usr/bin/cspdaemon
systuser    977  0.0  0.0  10132    28 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    992  0.0  1.4 5654304 34628 ?       SLsl 00:56   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1141  0.0  0.1 247944  2876 ?        Ss   00:56   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6717  0.0  3.7 259460 90032 ?        S    01:02   0:03  \_ spamd child
root       6719  0.0  0.0 247944  1396 ?        S    01:02   0:00  \_ spamd child
systuser   1158  0.0  0.1 157704  2888 ?        S    00:56   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387528  3184 ?        Ss   00:56   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.9 412368 23060 ?        Ss   00:56   0:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1261  0.0  0.2 183900  6692 ?        Ss   00:56   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1262  0.0  0.4 209248 10232 ?        Ss   00:56   0:01 tailwatchd
root       1263  0.0  0.1 167452  4168 ?        Ss   00:56   0:00 dnsadmin - dormant mode
root       1662  0.0  0.0 130416  1376 ?        SN   00:56   0:00 cpanellogd - sleeping for logs
root       1690  0.0  0.0 299272   504 ?        Ss   00:56   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1816  1.2 10.6 1464484 256700 ?      Sl   00:56   2:55 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1927  0.0  0.2 267052  4948 ?        Ss   00:56   0:01 /usr/sbin/httpd -k start
root       1929  0.0  0.0  12840   316 ?        S    00:56   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1930  0.0  0.0  12732   288 ?        S    00:56   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1931  0.0  0.0  12876   328 ?        S    00:56   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53268    44 ?        S    00:56   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    32544  0.1  0.8 277604 20312 ?        S    04:03   0:03  \_ /usr/sbin/httpd -k start
nobody    49137  0.1  0.8 277592 19780 ?        S    04:28   0:01  \_ /usr/sbin/httpd -k start
nobody    49155  0.1  0.8 277716 19868 ?        S    04:28   0:01  \_ /usr/sbin/httpd -k start
nobody    49156  0.1  0.8 277584 19556 ?        S    04:28   0:01  \_ /usr/sbin/httpd -k start
nobody    49545  0.1  0.7 277716 18996 ?        S    04:29   0:01  \_ /usr/sbin/httpd -k start
nobody    50271  0.1  0.8 277776 20004 ?        S    04:30   0:01  \_ /usr/sbin/httpd -k start
nobody    50707  0.1  0.8 277908 19844 ?        S    04:30   0:01  \_ /usr/sbin/httpd -k start
nobody    54737  0.1  0.7 277520 18876 ?        S    04:36   0:00  \_ /usr/sbin/httpd -k start
nobody    54751  0.1  0.7 277584 19320 ?        S    04:36   0:00  \_ /usr/sbin/httpd -k start
nobody    54752  0.1  0.7 277780 18832 ?        S    04:36   0:00  \_ /usr/sbin/httpd -k start
nobody    55379  0.1  0.7 277648 18524 ?        S    04:37   0:00  \_ /usr/sbin/httpd -k start
nobody    55395  0.1  0.7 277908 18916 ?        S    04:37   0:00  \_ /usr/sbin/httpd -k start
nobody    56422  0.1  0.7 277584 18432 ?        S    04:39   0:00  \_ /usr/sbin/httpd -k start
nobody    57442  0.0  0.7 277536 17952 ?        S    04:40   0:00  \_ /usr/sbin/httpd -k start
nobody    57825  0.1  0.7 277520 18216 ?        S    04:41   0:00  \_ /usr/sbin/httpd -k start
nobody    58650  0.1  0.7 277520 17820 ?        S    04:42   0:00  \_ /usr/sbin/httpd -k start
nobody    59858  0.1  0.7 277912 17660 ?        S    04:43   0:00  \_ /usr/sbin/httpd -k start
root       2021  0.0  0.4 182700  9848 ?        Ss   00:56   0:11 lfd - sleeping
oysipao+   4531  0.0  0.0   3148     8 ?        Ss   01:00   0:00 [kworker]
oysipao+   4539  0.0  0.0   3152    36 ?        S    01:00   0:00  \_ [kworker]
root       7575  0.0  0.0 132964    32 ?        SN   03:29   0:00 ConfigServer Version Check
root       7587  0.0  0.0 108056     0 ?        SN   03:29   0:00  \_ sleep 15214
## mysql stats
Uptime: 13691  Threads: 3  Questions: 995805  Slow queries: 0  Opens: 5332  Flush tables: 1  Open tables: 2000  Queries per second avg: 72.734
*************************** 1. row ***************************
     Id: 17575
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 17576
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 17581
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.143 TIME_WAIT
      1 114.119.134.51 TIME_WAIT
      1 114.119.150.65 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.227.253.15 TIME_WAIT
      1 51.222.168.38 TIME_WAIT
      1 54.158.222.47 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 114.119.153.191 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 20.234.11.210 TIME_WAIT
     40 159.65.137.58 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 04:45:02 WAT
   Restart Time: Saturday, 22-Nov-2025 00:56:55 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 48 minutes 7 seconds
   Server load: 0.73 0.79 0.68
   Total accesses: 61866 - Total Traffic: 1.6 GB - Total Duration: 31291428
   CPU Usage: u12.85 s5.6 cu792.52 cs633.16 - 10.6% CPU load
   4.52 requests/sec - 118.9 kB/second - 26.3 kB/request - 505.794 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

__KR_KKWKK.W.K.__.CK...K........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur   Conn  Child  Slot    Client     Protocol           VHost                                        Request
   0-0  49545 0/276/3130 _ 6.13  0     0   1596786 0.0   6.57  77.17 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   1-0  55379 0/133/3171 _ 3.35  1     26  1578161 0.0   4.75  87.45 116.240.149.7 http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   2-0  55395 3/119/3119 K 2.67  1     345 1586687 97.1  2.88  81.76 192.178.4.105 http/1.1 team.cloudware.ng:443      GET /?l=2243810197 HTTP/1.1
   3-0  59858 0/20/2990  R 0.39  2     304 1689363 0.0   0.38  78.42 159.65.137.58 http/1.1
   4-0  50271 0/237/3146 _ 5.22  0     267 1598305 0.0   5.48  77.60 192.178.4.98  http/1.1 team.cloudware.ng:443      GET /?l=750070624 HTTP/1.1
   5-0  50707 5/238/2896 K 5.35  1     346 1384129 155.9 5.98  67.91 192.178.4.102 http/1.1 team.cloudware.ng:443      GET /?l=2066523872 HTTP/1.1
   6-0  56422 2/194/3189 K 2.30  0     355 1475368 63.9  2.12  75.64 192.178.4.99  http/1.1 team.cloudware.ng:443      GET /?l=3841017498 HTTP/1.1
   7-0  57442 3/50/2905  W 1.08  0     0   1380485 96.3  1.09  68.29 192.178.4.100 http/1.1 team.cloudware.ng:443      GET /?l=3653111079 HTTP/1.1
   8-0  57825 2/61/3038  K 1.79  0     355 1424954 65.5  1.27  77.81 192.178.4.104 http/1.1 team.cloudware.ng:443      GET /?l=3266180587 HTTP/1.1
   9-0  58650 5/53/2747  K 1.21  0     399 1381363 154.4 1.20  67.07 192.178.4.97  http/1.1 team.cloudware.ng:443      GET /?l=2141953290 HTTP/1.1
   10-0 -     0/0/2116   . 0.00  409   0   1048423 0.0   0.00  51.15 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-0 54737 0/148/2758 W 3.05  0     0   1446609 0.0   2.97  84.26 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   12-0 -     0/0/2108   . 0.00  408   0   1001154 0.0   0.00  50.50 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 49137 2/270/2860 K 5.99  1     275 1516392 62.7  7.66  72.79 192.178.4.103 http/1.1 team.cloudware.ng:443      GET /?l=633653653 HTTP/1.1
   14-0 -     0/0/2235   . 0.00  19    0   1424645 0.0   0.00  56.78 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 54751 0/134/1871 _ 2.98  0     0   964813  0.0   16.55 63.03 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   16-0 54752 0/137/1742 _ 2.87  0     337 866116  0.0   3.00  42.62 159.65.137.58 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   17-0 -     0/0/1387   . 0.00  864   0   718864  0.0   0.00  34.98 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 49155 1/274/2338 C 5.31  0     18  996240  8.7   6.10  67.54 23.23.99.55   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/blog/2019elections
   19-0 49156 8/298/992  K 5.95  2     345 527804  248.3 7.92  24.89 192.178.4.104 http/1.1 team.cloudware.ng:443      GET /?l=1832294675 HTTP/1.1
   20-0 -     0/0/851    . 0.00  563   0   412146  0.0   0.00  19.54 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/1451   . 0.00  986   0   793961  0.0   0.00  37.29 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1812   . 0.00  1410  0   915125  0.0   0.00  44.11 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 32544 3/702/1551 K 15.81 3     417 937127  98.4  16.87 37.45 192.178.4.101 http/1.1 team.cloudware.ng:443      GET /?l=1693934492 HTTP/1.1
   24-0 -     0/0/438    . 0.00  1367  0   245547  0.0   0.00  11.59 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/181    . 0.00  987   0   106820  0.0   0.00  4.71  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/302    . 0.00  1407  0   163792  0.0   0.00  10.38 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/184    . 0.00  1412  0   70902   0.0   0.00  3.16  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/179    . 0.00  1175  0   121763  0.0   0.00  4.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/765    . 0.00  1411  0   452473  0.0   0.00  35.26 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/519    . 0.00  1418  0   266267  0.0   0.00  11.90 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/609    . 0.00  4707  0   309233  0.0   0.00  15.78 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/11     . 0.00  4697  0   3774    0.0   0.00  0.17  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/7      . 0.00  4709  0   1828    0.0   0.00  0.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/117    . 0.00  4283  0   46396   0.0   0.00  2.24  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/146    . 0.00  4721  0   57340   0.0   0.00  3.26  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/240    . 0.00  4693  0   105059  0.0   0.00  5.69  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/3      . 0.00  4720  0   4588    0.0   0.00  0.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/102    . 0.00  4285  0   37924   0.0   0.00  1.98  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/196    . 0.00  4236  3   51541   0.0   0.00  2.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/203    . 0.00  3993  0   91622   0.0   0.00  4.31  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/8      . 0.00  4700  0   2066    0.0   0.00  0.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/12     . 0.00  4696  0   5210    0.0   0.00  0.28  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/3      . 0.00  4719  0   13      0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/158    . 0.00  4239  0   66237   0.0   0.00  3.12  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/522    . 0.00  4603  0   184884  0.0   0.00  9.85  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/2      . 0.00  11510 0   4       0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/3      . 0.00  11477 0   766     0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00  11504 0   48      0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00  11475 0   10      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00  11460 0   695     0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00  11453 0   3150    0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00  11456 0   538     0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/13     . 0.00  11454 0   8196    0.0   0.00  0.36  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00  11467 0   519     0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/1      . 0.00  11491 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/110    . 0.00  11061 0   48080   0.0   0.00  2.48  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00  11345 0   13507   0.0   0.00  0.78  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/12     . 0.00  11463 0   7269    0.0   0.00  0.33  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/6      . 0.00  11447 0   1848    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/1      . 0.00  11500 0   1       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/48     . 0.00  11338 0   10684   0.0   0.00  0.71  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/2      . 0.00  11472 0   7       0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/1      . 0.00  11498 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/5      . 0.00  11459 0   1750    0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00  11496 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/1      . 0.00  11497 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00  11474 0   6       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/5      . 0.00  11448 0   859     0.0   0.00  0.05  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/74     . 0.00  11216 0   36843   0.0   0.00  1.92  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/149    . 0.00  10852 0   74918   0.0   0.00  4.57  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/1      . 0.00  11492 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/1      . 0.00  11495 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/6      . 0.00  11451 0   3305    0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/6      . 0.00  11446 0   2230    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/1      . 0.00  11494 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/1      . 0.00  11493 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/40     . 0.00  11355 0   15854   0.0   0.00  0.86  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/1      . 0.00  11499 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00  11490 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 901
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...35)
   index usage: 15%, cache usage: 21%
   total entries stored since starting: 45715
   total entries replaced since starting: 0
   total entries expired since starting: 44801
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 124 miss
   total removes since starting: 13 hit, 12 miss
Youez - 2016 - github.com/yon3zu
LinuXploit