403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.21.30.txt
 ## swap threshold exceeded
## server overview
2025-11-22.21.30 load[0] mem[55/70] mysql[4/9] httpd[9]
              total        used        free      shared  buff/cache   available
Mem:           2363        1232         125         135        1005         814
Swap:          1999        1519         480
 21:30:01 up 10:27,  0 users,  load average: 1.36, 0.67, 0.43
## system overview
top - 21:30:01 up 10:27,  0 users,  load average: 1.36, 0.67, 0.43
Tasks: 206 total,   2 running, 203 sleeping,   0 stopped,   1 zombie
%Cpu(s): 75.0 us, 21.9 sy,  0.0 ni,  3.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   151668 free,  1239484 used,  1029148 buff/cache
KiB Swap:  2047996 total,   492480 free,  1555516 used.   857428 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1916 mysql     20   0 1477108 299156   3556 S 117.6 12.4   8:01.10 /usr/sbin+
 46284 nigeria   20   0  404052  16144  10384 S  11.8  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44508   3452   1576 S   5.9  0.1   0:51.48 /usr/lib/+
   501 root      20   0   24704   1260    888 S   5.9  0.1   0:08.51 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.97 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.54 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:36.64 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.53 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.70 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:17.66 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:00.89 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:01.84 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.28 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:01.88 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40240   3228   2924 S   0.0  0.1   0:22.31 /usr/lib/+
   384 root      20   0   45352    440    296 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    552    424 S   0.0  0.0   0:03.65 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    480    368 S   0.0  0.0   0:00.85 /usr/sbin+
   502 dbus      20   0   58720   1520    792 S   0.0  0.1   0:19.42 /usr/bin/+
   504 rpc       20   0   69256    108      4 S   0.0  0.0   0:00.04 /sbin/rpc+
   514 root      20   0  224148   5872   1164 S   0.0  0.2   0:00.42 queueproc+
   515 polkitd   20   0  610540   3116    600 S   0.0  0.1   0:04.94 /usr/lib/+
   521 root      20   0  152780    228    184 S   0.0  0.0   0:00.02 /usr/sbin+
   523 root      20   0   52852    428    320 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0  994492   1480    756 S   0.0  0.1   0:26.88 /usr/sbin+
   544 root      20   0  195208     24     24 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     52     48 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     56     36 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124476    504    376 S   0.0  0.0   0:01.03 /usr/sbin+
   591 root      20   0  108296    136    132 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704    108    108 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   4044   1008 S   0.0  0.2   0:00.77 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.41 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     84     84 S   0.0  0.0   0:00.80 /usr/bin/+
   912 root      20   0 1277312  11080    140 S   0.0  0.5   0:24.68 /usr/bin/+
   913 systuser  20   0  111864     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   914 root      20   0  572372    920    332 S   0.0  0.0   0:03.22 /usr/bin/+
   915 root      20   0   51508    592    428 S   0.0  0.0   0:00.56 /usr/sbin+
   916 telegraf  20   0 5654304  38608   5808 S   0.0  1.6   0:19.98 /usr/loca+
   917 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 systuser  20   0  114016  14436   2568 S   0.0  0.6   0:08.81 /usr/loca+
   926 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   927 root      20   0  111304    492    392 S   0.0  0.0   0:05.53 /usr/sbin+
   928 root      20   0 1276100   9428    104 S   0.0  0.4   0:25.51 /usr/bin/+
   930 root      20   0  445028   2140   2028 S   0.0  0.1   0:01.42 sw-engine+
   931 root      20   0  153404    392    308 S   0.0  0.0   0:00.82 pure-ftpd+
   932 systuser  20   0   10132     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   934 root      20   0  439788  11432  11224 S   0.0  0.5   0:00.99 php-fpm: +
   938 root      20   0  388892    704    492 S   0.0  0.0   0:00.88 php-fpm: +
   939 root      20   0 1763124 130204    648 S   0.0  5.4   0:13.84 /usr/loca+
   940 root      20   0  331088   5464   3276 S   0.0  0.2   0:10.90 /usr/sbin+
   949 named     20   0 1055800  43052   2212 S   0.0  1.8   0:16.48 /usr/sbin+
   958 root      20   0  400740   3020    720 S   0.0  0.1   0:04.30 php-fpm: +
   962 root      20   0  261692   9852   2760 S   0.0  0.4   0:05.48 cpsrvd (S+
   969 cpanelc+  20   0   10564   3824   2420 S   0.0  0.2   0:29.97 /usr/loca+
   979 root      20   0  396248    732    556 S   0.0  0.0   0:00.93 php-fpm: +
   985 root      20   0  389508    844    632 S   0.0  0.0   0:00.97 php-fpm: +
  1083 dovenull  20   0   47116   3580   2640 S   0.0  0.1   0:01.19 dovecot/p+
  1084 dovenull  20   0   48236   4620   2764 S   0.0  0.2   0:00.42 dovecot/i+
  1085 dovecot   20   0   10320    344    228 S   0.0  0.0   0:00.29 dovecot/a+
  1086 root      20   0   10452    544    368 S   0.0  0.0   0:00.73 dovecot/l+
  1087 dovenull  20   0   47264   3688   2644 S   0.0  0.2   0:01.34 dovecot/p+
  1088 dovenull  20   0   48324   4680   2748 S   0.0  0.2   0:00.37 dovecot/i+
  1093 root      20   0   24528   2564    592 S   0.0  0.1   0:00.24 dovecot/c+
  1101 dovecot   20   0   13568    628    412 S   0.0  0.0   0:00.09 dovecot/s+
  1142 root      20   0  247932 116988   1164 S   0.0  4.8   0:07.28 /usr/loca+
  1161 dovecot   20   0   41320   1780   1104 S   0.0  0.1   0:01.85 dovecot/a+
  1175 systuser  20   0  157708   3052   1004 S   0.0  0.1   0:00.16 SonarPush+
  1177 wp-tool+  20   0  387528   5056   1788 S   0.0  0.2   0:00.35 /usr/bin/+
  1178 wp-tool+  20   0  412368  28760   2024 S   0.0  1.2   0:11.87 /usr/bin/+
  1260 root      20   0  262224  24620   6760 S   0.0  1.0   0:04.35 cpdavd - +
  1263 root      20   0  167452   1404    804 S   0.0  0.1   0:00.54 dnsadmin +
  1264 root      20   0  209648  12540   2456 S   0.0  0.5   0:04.65 tailwatchd
  1417 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
  1800 root      20   0  299272    872    496 S   0.0  0.0   0:00.98 php-fpm: +
  1834 root      38  18  130416   1512    776 S   0.0  0.1   0:00.10 cpanellog+
  2048 root      20   0  267052   9072    744 S   0.0  0.4   0:02.50 /usr/sbin+
  2050 root      20   0   12820    428    320 S   0.0  0.0   0:03.87 /usr/loca+
  2051 root      20   0   12732    380    304 S   0.0  0.0   0:03.43 /usr/loca+
  2052 root      20   0   12840    428    308 S   0.0  0.0   0:03.62 /usr/loca+
  2059 root      20   0   53340    180    180 S   0.0  0.0   0:00.05 /usr/loca+
  2138 root      20   0  186152  15784   1228 S   0.0  0.7   0:38.69 lfd - sle+
  5633 root      20   0  271996 136436   3356 S   0.0  5.6   0:04.71 spamd chi+
  5634 root      20   0  247932 116244    456 S   0.0  4.8   0:00.01 spamd chi+
 13074 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kworker/+
 19803 nobody    20   0  277928  21284   4964 S   0.0  0.9   0:03.01 /usr/sbin+
 21185 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 29659 nobody    20   0  277608  21380   5048 S   0.0  0.9   0:02.03 /usr/sbin+
 30289 nobody    20   0  277584  21092   4940 S   0.0  0.9   0:01.98 /usr/sbin+
 32596 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 33509 nobody    20   0  277588  20900   4792 S   0.0  0.9   0:01.65 /usr/sbin+
 34930 nobody    20   0  277540  20736   4684 S   0.0  0.9   0:01.39 /usr/sbin+
 36043 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 37862 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 39854 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 40822 nobody    20   0  277520  20452   4432 S   0.0  0.8   0:00.74 /usr/sbin+
 40837 nobody    20   0  277584  20364   4356 S   0.0  0.8   0:00.67 /usr/sbin+
 40847 nobody    20   0  277908  20480   4316 S   0.0  0.8   0:00.77 /usr/sbin+
 40848 nobody    20   0  277584  20468   4408 S   0.0  0.8   0:00.73 /usr/sbin+
 40935 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 41060 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 42350 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 43703 nobody    20   0  277520  20300   4340 S   0.0  0.8   0:00.31 /usr/sbin+
 43968 nobody    20   0  277908  20492   4328 S   0.0  0.8   0:00.33 /usr/sbin+
 44950 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 45474 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 45568 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 45618 nobody    20   0  277516  19808   3884 S   0.0  0.8   0:00.10 /usr/sbin+
 45635 nobody    20   0  277520  19544   3672 S   0.0  0.8   0:00.09 /usr/sbin+
 45636 nobody    20   0  277784  19672   3544 S   0.0  0.8   0:00.07 /usr/sbin+
 45691 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 46043 nigeria   20   0  400460   5496   2388 S   0.0  0.2   0:00.00 php-fpm: +
 46107 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 46108 mailnull  20   0   91204   5688   2452 S   0.0  0.2   0:00.00 /usr/sbin+
 46113 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 46157 root      20   0  157100   5080   3788 S   0.0  0.2   0:00.00 sshd: unk+
 46158 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: unk+
 46161 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 46162 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 46173 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 46206 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 46207 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46208 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46210 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46211 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46212 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46213 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46214 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46215 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46216 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46217 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46218 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46219 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46220 root      20   0  183044   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 46221 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46223 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 46232 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 46233 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 46234 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 46235 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 46238 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 46240 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 46241 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 46242 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 46243 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 46245 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 46246 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 46247 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 46248 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 46249 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 46250 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 46251 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 46253 root      20   0  188220  11108   5148 S   0.0  0.5   0:00.01 /usr/loca+
 46256 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 46263 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 46264 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 46273 pactpay   20   0  480124  17668  11880 S   0.0  0.7   0:00.01 /opt/cpan+
 46274 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 46331 root      20   0  160224   2348   1632 S   0.0  0.1   0:00.00 top -n 2 +
 46343 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 46355 wp-tool+  20   0  445028    552    376 S   0.0  0.0   0:00.00 sw-engine+
 46356 root      20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
 47566 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.64 [kworker]
 70013 worencom  20   0   38472   3176   2172 S   0.0  0.1   0:00.05 dovecot/i+
 74849 nobody    20   0  277712  22152   5208 S   0.0  0.9   0:09.70 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    11:02   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    11:02   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    11:02   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    11:02   0:36  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    11:02   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    11:02   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    11:02   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   11:02   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   11:02   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   11:02   0:01  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   11:02   0:02  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    11:02   0:01  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   11:02   0:02  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ext4-rsv-conver]
root       1417  0.0  0.0      0     0 ?        S    20:24   0:00  \_ [kworker/u200:1]
root      13074  0.0  0.0      0     0 ?        S    20:41   0:00  \_ [kworker/0:2]
root      21185  0.0  0.0      0     0 ?        S    20:53   0:00  \_ [kworker/1:1]
root      32596  0.0  0.0      0     0 ?        S    21:09   0:00  \_ [kworker/0:1]
root      36043  0.0  0.0      0     0 ?        S    21:14   0:00  \_ [kworker/1:3]
root      37862  0.0  0.0      0     0 ?        S    21:17   0:00  \_ [kworker/0:4]
root      39854  0.0  0.0      0     0 ?        S    21:20   0:00  \_ [kworker/1:2]
root      40935  0.0  0.0      0     0 ?        S    21:21   0:00  \_ [kworker/u200:0]
root      41060  0.0  0.0      0     0 ?        S    21:22   0:00  \_ [kworker/1:4]
root      42350  0.0  0.0      0     0 ?        S    21:24   0:00  \_ [kworker/0:0]
root      44950  0.0  0.0      0     0 ?        S    21:28   0:00  \_ [kworker/0:3]
root      45568  0.0  0.0      0     0 ?        S    21:29   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44508  3452 ?        Ss   11:02   0:51 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  40240  3228 ?        Ss   11:02   0:22 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   440 ?        Ss   11:02   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   552 ?        S<sl 11:02   0:03 /sbin/auditd
root        499  0.0  0.0  21540   480 ?        Ss   11:02   0:00 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1260 ?        Ss   11:02   0:08 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58720  1520 ?        Ss   11:02   0:19 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256   108 ?        Ss   11:02   0:00 /sbin/rpcbind -w
root        514  0.0  0.2 224148  5872 ?        Ss   11:02   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.1 610540  3116 ?        Ssl  11:02   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780   228 ?        Ss   11:02   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   428 ?        Ss   11:02   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 994492  1480 ?        Ssl  11:02   0:26 /usr/sbin/nscd
root        544  0.0  0.0 195208    24 ?        Ssl  11:02   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    52 ?        Ss   11:02   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    56 ?        Ss   11:02   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124476   504 ?        Ss   11:02   0:01 /usr/sbin/crond -n
root      46206  0.0  0.0 183044  2136 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      46243  0.0  0.0 113284  1212 ?        Ss   21:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      46256  0.0  0.0 108052   360 ?        S    21:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      46263  0.0  0.0 113288  1516 ?        S    21:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      46357  0.0  0.0 153840  2088 ?        R    21:30   0:00  |               \_ ps auxf
root      46207  0.0  0.0 183044  2144 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      46241  0.0  0.0  20164   804 ?        Ss   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      46208  0.0  0.0 183044  2144 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      46242  0.0  0.0  20164   804 ?        Ss   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      46210  0.0  0.0 183044  2144 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      46245  0.0  0.0  20164   804 ?        Ss   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      46211  0.0  0.0 183044  2144 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      46240  0.0  0.0  20164   804 ?        Ss   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      46212  0.0  0.0 183044  2144 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      46246  0.0  0.0  20164   808 ?        Ss   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      46213  0.0  0.0 183044  2144 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      46238  0.0  0.0  20164   808 ?        Ss   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      46214  0.0  0.0 183044  2144 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      46247  0.0  0.0  20164   808 ?        Ss   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      46215  0.0  0.0 183044  2144 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      46234  0.0  0.0  20164   804 ?        Ss   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      46216  0.0  0.0 183044  2144 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      46250  0.0  0.0  20164   808 ?        Ss   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      46217  0.0  0.0 183044  2144 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      46233  0.0  0.0  20164   808 ?        Ss   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      46218  0.0  0.0 183044  2144 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      46232  0.0  0.0  20164   988 ?        Ss   21:30   0:00  |   \_ jailshell (cloudsms) [46356] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  46356  0.0  0.0  20164   260 ?        S    21:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  46358  0.0  0.0 113284  1212 ?        S    21:30   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  46359  0.0  0.1 157616  2824 ?        R    21:30   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue3.php
root      46219  0.0  0.0 183044  2144 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      46249  0.0  0.0  20164   804 ?        Ss   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      46220  0.0  0.0 183044  2136 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      46235  0.0  0.0 113284  1212 ?        Ss   21:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      46253  0.0  0.4 188220 11108 ?        S    21:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      46331  0.0  0.0 160224  2348 ?        S    21:30   0:00  |           \_ top -n 2 -b -c
root      46221  0.0  0.0 183044  2144 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      46251  0.0  0.0  20164   968 ?        Ss   21:30   0:00  |   \_ jailshell (pactpay) [46264] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   46264  0.0  0.0  20164   264 ?        S    21:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   46273  0.0  0.7 480124 17668 ?        S    21:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      46223  0.0  0.0 183044  2140 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      46248  0.0  0.0  20164   968 ?        Ss   21:30   0:00      \_ jailshell (nigeria) [46274] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   46274  0.0  0.0  20164   264 ?        S    21:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   46284  0.0  0.6 404052 16144 ?        S    21:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        591  0.0  0.0 108296   136 tty1     Ss+  11:02   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704   108 ttyS0    Ss+  11:02   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  4044 ?        Ss   11:02   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  46108  0.0  0.2  91204  5688 ?        S    21:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    84 ?        Ssl  11:02   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.4 1277312 11080 ?       Ssl  11:02   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    80 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372   920 ?        Ssl  11:02   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   592 ?        Ss   11:02   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.1  47116  3580 ?        S    11:03   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  48236  4620 ?        S    11:03   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   344 ?        S    11:03   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   544 ?        S    11:03   0:00  \_ dovecot/log
dovenull   1087  0.0  0.1  47264  3688 ?        S    11:03   0:01  \_ dovecot/pop3-login
dovenull   1088  0.0  0.1  48324  4680 ?        S    11:03   0:00  \_ dovecot/imap-login
root       1093  0.0  0.1  24528  2564 ?        S    11:03   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   628 ?        S    11:03   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1780 ?        S    11:03   0:01  \_ dovecot/auth
worencom  70013  0.0  0.1  38472  3176 ?        S    17:07   0:00  \_ dovecot/imap
root      45474  0.0  0.1  41052  2728 ?        S    21:28   0:00  \_ dovecot/auth -w
root      45691  0.0  0.1  60820  4508 ?        S    21:29   0:00  \_ dovecot/lmtp
telegraf    916  0.0  1.5 5654304 38608 ?       SLsl 11:02   0:19 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756    56 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.5 114016 14436 ?        Ssl  11:02   0:08 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    72 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   492 ?        Ss   11:02   0:05 /usr/sbin/sshd -D
root      46107  0.0  0.1 111304  4268 ?        Ss   21:29   0:00  \_ sshd: [accepted]
sshd      46113  0.0  0.1 115644  2628 ?        S    21:29   0:00  |   \_ sshd: [net]
root      46157  0.0  0.2 157100  5080 ?        Ss   21:29   0:00  \_ sshd: unknown [priv]
sshd      46158  0.0  0.1 115644  2632 ?        S    21:29   0:00  |   \_ sshd: unknown [net]
root      46161  0.0  0.2 157100  5076 ?        Ss   21:29   0:00  \_ sshd: unknown [priv]
sshd      46162  0.0  0.1 115644  2628 ?        S    21:29   0:00      \_ sshd: unknown [net]
root        928  0.0  0.3 1276100 9428 ?        Ssl  11:02   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028  2140 ?        Ss   11:02   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  46355  0.0  0.0 445028   552 ?        S    21:30   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   392 ?        Ss   11:02   0:00 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132    40 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.4 439788 11432 ?        Ss   11:02   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   704 ?        Ss   11:02   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        939  0.0  5.3 1763124 130204 ?      Ssl  11:02   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.2 331088  5464 ?        Ssl  11:02   0:10 /usr/sbin/rsyslogd -n
named       949  0.0  1.7 1055800 43052 ?       Ssl  11:02   0:16 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  3020 ?        Ss   11:03   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   46043  0.0  0.2 400460  5496 ?        S    21:29   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.4 261692  9852 ?        Ss   11:03   0:05 cpsrvd (SSL) - waiting for connections                   
root      46173  0.0  0.0      0     0 ?        Z    21:29   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10564  3824 ?        Rs   11:03   0:29 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   732 ?        Ss   11:03   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   844 ?        Ss   11:03   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  4.8 247932 116988 ?       Ss   11:03   0:07 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5633  0.0  5.6 271996 136436 ?       S    11:06   0:04  \_ spamd child
root       5634  0.0  4.8 247932 116244 ?       S    11:06   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  3052 ?        S    11:03   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.2 387528  5056 ?        Ss   11:03   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  1.1 412368 28760 ?        Ss   11:03   0:11 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  1.0 262224 24620 ?        Ss   11:03   0:04 cpdavd - accepting connections on: 2091, 2077, 2078
root       1263  0.0  0.0 167452  1404 ?        Ss   11:03   0:00 dnsadmin - dormant mode
root       1264  0.0  0.5 209648 12540 ?        Ss   11:03   0:04 tailwatchd
root       1800  0.0  0.0 299272   872 ?        Ss   11:03   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1512 ?        SN   11:03   0:00 cpanellogd - sleeping for logs
mysql      1916  1.2 12.3 1477108 299156 ?      Sl   11:03   8:01 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  9072 ?        Ss   11:03   0:02 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12820   428 ?        S    11:03   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   380 ?        S    11:03   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12840   428 ?        S    11:03   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340   180 ?        S    11:03   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    74849  0.1  0.9 277712 22152 ?        S    19:41   0:09  \_ /usr/sbin/httpd -k start
nobody    19803  0.1  0.8 277928 21284 ?        S    20:50   0:03  \_ /usr/sbin/httpd -k start
nobody    29659  0.1  0.8 277608 21380 ?        S    21:04   0:02  \_ /usr/sbin/httpd -k start
nobody    30289  0.1  0.8 277584 21092 ?        S    21:05   0:01  \_ /usr/sbin/httpd -k start
nobody    33509  0.1  0.8 277588 20900 ?        S    21:10   0:01  \_ /usr/sbin/httpd -k start
nobody    34930  0.1  0.8 277540 20736 ?        S    21:12   0:01  \_ /usr/sbin/httpd -k start
nobody    40822  0.1  0.8 277520 20452 ?        S    21:21   0:00  \_ /usr/sbin/httpd -k start
nobody    40837  0.1  0.8 277584 20364 ?        S    21:21   0:00  \_ /usr/sbin/httpd -k start
nobody    40847  0.1  0.8 277908 20480 ?        S    21:21   0:00  \_ /usr/sbin/httpd -k start
nobody    40848  0.1  0.8 277584 20468 ?        S    21:21   0:00  \_ /usr/sbin/httpd -k start
nobody    43703  0.1  0.8 277520 20300 ?        S    21:26   0:00  \_ /usr/sbin/httpd -k start
nobody    43968  0.1  0.8 277908 20492 ?        S    21:26   0:00  \_ /usr/sbin/httpd -k start
nobody    45618  0.1  0.8 277516 19808 ?        S    21:29   0:00  \_ /usr/sbin/httpd -k start
nobody    45635  0.1  0.8 277520 19544 ?        S    21:29   0:00  \_ /usr/sbin/httpd -k start
nobody    45636  0.1  0.8 277784 19672 ?        S    21:29   0:00  \_ /usr/sbin/httpd -k start
root       2138  0.1  0.6 186152 15784 ?        Ss   11:03   0:38 lfd - sleeping
oysipao+  47566  0.0  0.0   3148   416 ?        Ss   12:00   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152   424 ?        S    12:00   0:00  \_ [kworker]
## mysql stats
Uptime: 37615  Threads: 3  Questions: 2963866  Slow queries: 0  Opens: 7840  Flush tables: 1  Open tables: 2000  Queries per second avg: 78.794
*************************** 1. row ***************************
     Id: 46631
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `oyo_official_polling_unit` WHERE `pu_code`='30/02/05/002accreditationhasendedvotingab
*************************** 2. row ***************************
     Id: 46632
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 46641
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.132.104 TIME_WAIT
      1 15.235.27.222 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 192.178.4.103 TIME_WAIT
      1 192.178.4.99 TIME_WAIT
      1 ::1 TIME_WAIT
      1 213.180.203.4 TIME_WAIT
      1 40.77.167.6 TIME_WAIT
      1 74.7.230.58 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 47.128.121.90 TIME_WAIT
      5 185.138.88.86 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 21:30:01 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 10 hours 26 minutes 51 seconds
   Server load: 1.36 0.67 0.43
   Total accesses: 172596 - Total Traffic: 4.2 GB - Total Duration: 83153093
   CPU Usage: u17.26 s8.8 cu2157.58 cs1696.67 - 10.3% CPU load
   4.59 requests/sec - 116.2 kB/second - 25.3 kB/request - 481.779 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

_K._K__WWKKK..._K._.K...........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur   Conn  Child  Slot     Client     Protocol         VHost                                      Request
   0-0  43703 0/58/9172   _ 1.22  2     1   4453796 0.0   1.36  224.39 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   1-0  43968 2/59/8929   K 1.40  4     354 4424677 63.4  1.51  219.60 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?l=3510433780 HTTP/1.1
   2-0  -     0/0/8830    . 0.00  29    0   4587106 0.0   0.00  211.14 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   3-0  74849 0/1630/8802 _ 41.83 0     0   4317016 0.0   41.87 222.71 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   4-0  30289 3/337/8767  K 8.11  1     345 4311418 95.4  8.43  222.12 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=692443680 HTTP/1.1
   5-0  45618 0/52/8863   _ 0.23  0     347 4381746 0.0   0.65  242.48 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=3017217100 HTTP/1.1
   6-0  40822 0/122/8528  _ 3.35  1     3   4023359 0.0   3.18  215.35 3.89.170.186  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/blog/images/2019elections/images
   7-0  19803 0/547/8601  W 12.77 0     0   4176747 0.0   12.75 209.40 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   8-0  34930 2/230/8522  W 6.15  0     0   4034341 65.3  6.22  206.54 192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=692040457 HTTP/1.1
   9-0  45635 3/17/7731   K 0.38  2     343 3790403 96.8  0.43  194.46 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=3930161846 HTTP/1.1
   10-0 40837 1/116/7726  K 2.69  0     346 3648535 34.1  2.95  185.06 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=2066849274 HTTP/1.1
   11-0 45636 1/11/7997   K 0.26  0     351 3795493 34.3  0.31  197.09 192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=264961193 HTTP/1.1
   12-0 -     0/0/8278    . 0.00  28    0   4050256 0.0   0.00  208.44 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   13-0 -     0/0/6866    . 0.00  373   0   3335290 0.0   0.00  166.04 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-0 -     0/0/6627    . 0.00  337   0   3176947 0.0   0.00  163.67 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 29659 0/361/5314  _ 8.41  2     1   2476439 0.0   12.20 142.70 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   16-0 40847 8/131/5489  K 3.50  2     280 2543784 248.0 3.39  130.56 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=1849443431 HTTP/1.1
   17-0 -     0/0/5946    . 0.00  165   0   2848476 0.0   0.00  148.10 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 40848 0/179/4795  _ 2.85  0     0   2291571 0.0   3.03  118.17 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   19-0 -     0/0/5490    . 0.00  388   0   2464545 0.0   0.00  127.95 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 33509 2/295/3383  K 7.20  4     405 1601950 64.8  7.22  82.31  192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=682769346 HTTP/1.1
   21-0 -     0/0/3188    . 0.00  1127  0   1659708 0.0   0.00  79.86  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/2206    . 0.00  444   0   1104930 0.0   0.00  63.21  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/1392    . 0.00  1159  0   596747  0.0   0.00  28.89  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/818     . 0.00  10531 0   378992  0.0   0.00  19.55  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/1966    . 0.00  10755 0   781369  0.0   0.00  44.81  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/1194    . 0.00  10715 0   597677  0.0   0.00  29.57  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/786     . 0.00  10753 0   386891  0.0   0.00  27.98  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/1311    . 0.00  10756 0   605264  0.0   0.00  30.18  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/825     . 0.00  9472  0   350753  0.0   0.00  17.74  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/856     . 0.00  10746 0   461883  0.0   0.00  20.57  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/450     . 0.00  10468 0   205102  0.0   0.00  9.00   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/472     . 0.00  10752 0   210844  0.0   0.00  9.45   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/4       . 0.00  23485 0   15      0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/540     . 0.00  22187 0   165040  0.0   0.00  7.79   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/464     . 0.00  23469 0   245442  0.0   0.00  10.79  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/5       . 0.00  23488 0   702     0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/4       . 0.00  23495 0   2625    0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/610     . 0.00  22060 0   258099  0.0   0.00  11.85  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/24      . 0.00  23447 0   9567    0.0   0.00  0.44   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/168     . 0.00  23479 0   87577   0.0   0.00  3.50   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/28      . 0.00  23478 0   13961   0.0   0.00  0.67   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/5       . 0.00  23496 0   1132    0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/3       . 0.00  23494 0   10      0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/224     . 0.00  23486 0   116229  0.0   0.00  5.10   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/105     . 0.00  23481 0   24649   0.0   0.00  1.03   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/4       . 0.00  23475 0   798     0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/18      . 0.00  23451 0   8852    0.0   0.00  0.36   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/188     . 0.00  22817 0   96649   0.0   0.00  3.98   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/82      . 0.00  23217 0   47670   0.0   0.00  2.57   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 879
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 1...36)
   index usage: 15%, cache usage: 20%
   total entries stored since starting: 125401
   total entries replaced since starting: 0
   total entries expired since starting: 124494
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 279 miss
   total removes since starting: 28 hit, 177 miss
Youez - 2016 - github.com/yon3zu
LinuXploit