403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-23.01.24.txt
 ## swap threshold exceeded
## server overview
2025-11-23.01.24 load[0] mem[60/74] mysql[1/12] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1396         115          35         851         763
Swap:          1999        1634         365
 01:24:01 up 14:21,  0 users,  load average: 0.11, 0.18, 0.39
## system overview
top - 01:24:01 up 14:21,  0 users,  load average: 0.11, 0.18, 0.39
Tasks: 204 total,   2 running, 201 sleeping,   0 stopped,   1 zombie
%Cpu(s): 57.1 us, 14.3 sy,  0.0 ni, 25.7 id,  0.0 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,   138292 free,  1410440 used,   871568 buff/cache
KiB Swap:  2047996 total,   374108 free,  1673888 used.   801620 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1916 mysql     20   0 1478544 222236   4096 S 112.5  9.2  11:30.90 /usr/sbin+
 98827 nigeria   20   0  404052  16140  10384 S  18.8  0.7   0:00.05 /opt/cpan+
 70746 nobody    20   0  277616  14504   4892 S   6.2  0.6   0:03.84 /usr/sbin+
     1 root      20   0   44508   3236   1464 S   0.0  0.1   1:10.34 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.83 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.05 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:50.18 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.02 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:07.89 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:31.14 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:01.18 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.04 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:03.67 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:02.68 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40240   4192   3948 S   0.0  0.2   0:29.77 /usr/lib/+
   384 root      20   0   45352      8      4 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    112      0 S   0.0  0.0   0:04.84 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    348    260 S   0.0  0.0   0:01.17 /usr/sbin+
   501 root      20   0   24704   1148    792 S   0.0  0.0   0:11.71 /usr/lib/+
   502 dbus      20   0   58720   1356    612 S   0.0  0.1   0:26.79 /usr/bin/+
   504 rpc       20   0   69256     56     12 S   0.0  0.0   0:00.05 /sbin/rpc+
   514 root      20   0  224148   3168    940 S   0.0  0.1   0:00.55 queueproc+
   515 polkitd   20   0  610540    940    568 S   0.0  0.0   0:06.79 /usr/lib/+
   521 root      20   0  152780     80     36 S   0.0  0.0   0:00.03 /usr/sbin+
   523 root      20   0   52852    264    176 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0 1336536   1800    620 S   0.0  0.1   0:36.23 /usr/sbin+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     12      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124476    424    296 S   0.0  0.0   0:01.42 /usr/sbin+
   591 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   3800    872 S   0.0  0.2   0:01.01 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.56 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     28     28 S   0.0  0.0   0:01.11 /usr/bin/+
   912 root      20   0 1277312   5772      4 S   0.0  0.2   0:24.74 /usr/bin/+
   913 systuser  20   0  111864     16      0 S   0.0  0.0   0:00.01 /usr/loca+
   914 root      20   0  572372    644    176 S   0.0  0.0   0:04.41 /usr/bin/+
   915 root      20   0   51508    460    292 S   0.0  0.0   0:00.76 /usr/sbin+
   916 telegraf  20   0 5654304  35976   5884 S   0.0  1.5   0:27.49 /usr/loca+
   917 systuser  20   0   12756      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   925 systuser  20   0  114016  11816   2420 S   0.0  0.5   0:12.03 /usr/loca+
   926 systuser  20   0  112524     16      0 S   0.0  0.0   0:00.01 /usr/loca+
   927 root      20   0  111304    356    256 S   0.0  0.0   0:07.34 /usr/sbin+
   928 root      20   0 1276100   7716      0 S   0.0  0.3   0:25.66 /usr/bin/+
   930 root      20   0  445028    592    480 S   0.0  0.0   0:02.01 sw-engine+
   931 root      20   0  153404    220    136 S   0.0  0.0   0:01.12 pure-ftpd+
   932 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   934 root      20   0  439788    404    312 S   0.0  0.0   0:01.35 php-fpm: +
   938 root      20   0  388892    344    260 S   0.0  0.0   0:01.23 php-fpm: +
   939 root      20   0 1828368 391872    264 S   0.0 16.2   0:30.01 /usr/loca+
   940 root      20   0  331088   4584   4068 S   0.0  0.2   0:14.77 /usr/sbin+
   949 named     20   0 1055800  29252   1956 S   0.0  1.2   0:23.09 /usr/sbin+
   958 root      20   0  400740   2436    596 S   0.0  0.1   0:06.32 php-fpm: +
   962 root      20   0  261692   6228   1664 S   0.0  0.3   0:07.99 cpsrvd (S+
   969 cpanelc+  20   0   10564   3468   2304 S   0.0  0.1   0:41.00 /usr/loca+
   979 root      20   0  396248    360    280 S   0.0  0.0   0:01.29 php-fpm: +
   985 root      20   0  389508    408    316 S   0.0  0.0   0:01.35 php-fpm: +
  1083 dovenull  20   0   47116   2200   1588 S   0.0  0.1   0:01.62 dovecot/p+
  1084 dovenull  20   0   48232   2632   1676 S   0.0  0.1   0:00.56 dovecot/i+
  1085 dovecot   20   0   10320    224    108 S   0.0  0.0   0:00.38 dovecot/a+
  1086 root      20   0   10452    616    428 S   0.0  0.0   0:01.00 dovecot/l+
  1087 dovenull  20   0   47264   2040   1440 S   0.0  0.1   0:01.87 dovecot/p+
  1088 dovenull  20   0   48324   2600   1708 S   0.0  0.1   0:00.55 dovecot/i+
  1093 root      20   0   24528   1804    404 S   0.0  0.1   0:00.33 dovecot/c+
  1101 dovecot   20   0   13568    508    328 S   0.0  0.0   0:00.13 dovecot/s+
  1142 root      20   0  247932  16364    720 S   0.0  0.7   0:08.96 /usr/loca+
  1161 dovecot   20   0   41320   1552   1008 S   0.0  0.1   0:02.51 dovecot/a+
  1175 systuser  20   0  157708   2928    884 S   0.0  0.1   0:00.23 SonarPush+
  1177 wp-tool+  20   0  387556   3588   1656 S   0.0  0.1   0:00.45 /usr/bin/+
  1178 wp-tool+  20   0  412396   9704   1636 S   0.0  0.4   0:16.28 /usr/bin/+
  1260 root      20   0  183900   6688   3460 S   0.0  0.3   0:05.39 cpdavd - +
  1263 root      20   0  228228  18888   5984 S   0.0  0.8   0:00.82 dnsadmin +
  1264 root      20   0  209648   9400   1752 S   0.0  0.4   0:06.06 tailwatchd
  1800 root      20   0  299272    492    332 S   0.0  0.0   0:01.36 php-fpm: +
  1834 root      38  18  130416   1364    692 S   0.0  0.1   0:00.13 cpanellog+
  2048 root      20   0  267052   7672    476 S   0.0  0.3   0:03.55 /usr/sbin+
  2050 root      20   0   12868    332    212 S   0.0  0.0   0:05.34 /usr/loca+
  2051 root      20   0   12732    284    208 S   0.0  0.0   0:04.73 /usr/loca+
  2052 root      20   0   12908    344    216 S   0.0  0.0   0:05.01 /usr/loca+
  2059 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  5633 root      20   0  271996  58680    960 S   0.0  2.4   0:06.10 spamd chi+
  5634 root      20   0  247932  14780    264 S   0.0  0.6   0:00.03 spamd chi+
  6423 root      20   0       0      0      0 S   0.0  0.0   0:00.63 [kworker/+
 44973 root      20   0  181468   7512   1100 S   0.0  0.3   0:04.37 lfd - sle+
 47566 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152     32      0 S   0.0  0.0   0:00.92 [kworker]
 64356 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 74385 nobody    20   0  277680  20276   4876 S   0.0  0.8   0:03.49 /usr/sbin+
 76551 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 79708 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 81298 worencom  20   0   38488   3852   2916 S   0.0  0.2   0:00.00 dovecot/i+
 83225 nobody    20   0  277908  20772   5004 S   0.0  0.9   0:01.99 /usr/sbin+
 83419 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 83465 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 83479 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 83501 root      20   0  108056    340    268 S   0.0  0.0   0:00.00 sleep 2h +
 86894 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 87226 nobody    20   0  277908  20724   4748 S   0.0  0.9   0:01.90 /usr/sbin+
 87353 nobody    20   0  277908  20556   4820 S   0.0  0.8   0:01.75 /usr/sbin+
 87471 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 88061 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 90756 nobody    20   0  277932  20472   4712 S   0.0  0.8   0:00.99 /usr/sbin+
 91654 nobody    20   0  277584  20036   4660 S   0.0  0.8   0:00.90 /usr/sbin+
 92173 nobody    20   0  277912  20088   4528 S   0.0  0.8   0:00.78 /usr/sbin+
 93454 nobody    20   0  277916  19844   4372 S   0.0  0.8   0:00.73 /usr/sbin+
 93462 nobody    20   0  277584  19820   4508 S   0.0  0.8   0:00.76 /usr/sbin+
 93937 nobody    20   0  277584  19568   4304 S   0.0  0.8   0:00.71 /usr/sbin+
 93938 nobody    20   0  277584  19752   4420 S   0.0  0.8   0:00.62 /usr/sbin+
 94337 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 95161 nobody    20   0  277796  19840   4316 S   0.0  0.8   0:00.52 /usr/sbin+
 95805 nobody    20   0  277788  19456   4072 S   0.0  0.8   0:00.47 /usr/sbin+
 96268 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96307 root      20   0  394724  53640  11824 S   0.0  2.2   0:00.83 /usr/loca+
 97027 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 97579 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 97676 root      20   0   41052   2812   2140 S   0.0  0.1   0:00.01 dovecot/a+
 97686 root      20   0  228228  15000   2040 S   0.0  0.6   0:00.00 dnsadmin +
 98083 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 98096 root      20   0  178144  26304   2812 S   0.0  1.1   0:00.12 /usr/loca+
 98122 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 98123 root      20   0  158816  15304   2712 S   0.0  0.6   0:00.07 /usr/loca+
 98138 root      20   0  195352  34696   3172 S   0.0  1.4   0:00.18 /usr/loca+
 98162 root      20   0   76780  16972   3040 S   0.0  0.7   0:00.11 /usr/loca+
 98219 nobody    20   0  277520  18644   3712 S   0.0  0.8   0:00.07 /usr/sbin+
 98311 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 98433 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 98503 nobody    20   0  277520  18588   3656 S   0.0  0.8   0:00.06 /usr/sbin+
 98635 nobody    20   0  277676  18316   3252 S   0.0  0.8   0:00.02 /usr/sbin+
 98661 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 98752 nigeria   20   0  400460   4776   2160 S   0.0  0.2   0:00.00 php-fpm: +
 98753 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 98763 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 98765 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98766 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98768 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98769 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98770 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98771 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98772 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98773 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98774 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98775 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 98777 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 98779 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 98782 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 98783 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 98793 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 98801 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 98802 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 98804 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 98805 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 98806 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 98808 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 98809 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 98810 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 98812 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 98813 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 98824 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 98828 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 98830 pactpay   20   0  480124  17668  11880 S   0.0  0.7   0:00.01 /opt/cpan+
 98844 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 98848 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 98850 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov22   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov22   0:50  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov22   0:07  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov22   0:31  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov22   0:02  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root       6423  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kworker/u200:1]
root      64356  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/1:4]
root      76551  0.0  0.0      0     0 ?        S    00:49   0:00  \_ [kworker/u200:2]
root      79708  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:0]
root      83465  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/0:1]
root      86894  0.0  0.0      0     0 ?        S    01:05   0:00  \_ [kworker/1:0]
root      87471  0.0  0.0      0     0 ?        S    01:06   0:00  \_ [kworker/1:2]
root      88061  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/0:4]
root      94337  0.0  0.0      0     0 ?        S    01:17   0:00  \_ [kworker/1:3]
root      97027  0.0  0.0      0     0 ?        S    01:21   0:00  \_ [kworker/0:2]
root      97579  0.0  0.0      0     0 ?        S    01:22   0:00  \_ [kworker/0:3]
root      98122  0.0  0.0      0     0 ?        S    01:23   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44508  3236 ?        Ss   Nov22   1:10 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  40240  4192 ?        Ss   Nov22   0:29 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352     8 ?        Ss   Nov22   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   112 ?        S<sl Nov22   0:04 /sbin/auditd
root        499  0.0  0.0  21540   348 ?        Ss   Nov22   0:01 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1148 ?        Ss   Nov22   0:11 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58720  1356 ?        Ss   Nov22   0:26 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256    56 ?        Ss   Nov22   0:00 /sbin/rpcbind -w
root        514  0.0  0.1 224148  3168 ?        Ss   Nov22   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.0 610540   940 ?        Ssl  Nov22   0:06 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780    80 ?        Ss   Nov22   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   264 ?        Ss   Nov22   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 1336536 1800 ?        Ssl  Nov22   0:36 /usr/sbin/nscd
root        544  0.0  0.0 195208     0 ?        Ssl  Nov22   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388     4 ?        Ss   Nov22   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    12 ?        Ss   Nov22   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124476   424 ?        Ss   Nov22   0:01 /usr/sbin/crond -n
root      83419  0.0  0.0 183044  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      83479  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      83501  0.0  0.0 108056   340 ?        S    01:00   0:00  |       \_ sleep 2h 15m
root      96268  0.0  0.0 183044  2144 ?        S    01:20   0:00  \_ /usr/sbin/CROND -n
root      96307  0.3  2.2 394724 53640 ?        Ssl  01:20   0:00  |   \_ /usr/local/cpanel/bin/autossl_check --all
root      98083  0.0  0.0 183044  2144 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root      98096  0.2  1.0 178144 26304 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root      98123  0.1  0.6 158816 15304 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root      98138  0.3  1.4 195352 34696 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root      98162  0.1  0.7  76780 16972 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root      98763  0.0  0.0 183044  2144 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      98779  0.0  0.0 113284  1212 ?        Ss   01:24   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      98782  0.0  0.0 108052   356 ?        S    01:24   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      98783  0.0  0.0 113288  1516 ?        S    01:24   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      98852  0.0  0.0 153840  2088 ?        R    01:24   0:00  |               \_ ps auxf
root      98765  0.0  0.0 183044  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      98802  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      98766  0.0  0.0 183044  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      98801  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      98768  0.0  0.0 183044  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      98805  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      98769  0.0  0.0 183044  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      98810  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      98770  0.0  0.0 183044  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      98809  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      98771  0.0  0.0 183044  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      98804  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      98772  0.0  0.0 183044  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      98793  0.0  0.0  20164   984 ?        Ss   01:24   0:00  |   \_ jailshell (cloudsms) [98848] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  98848  0.0  0.0  20164   256 ?        S    01:24   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  98850  0.0  0.0 113284  1212 ?        S    01:24   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  98851  0.0  0.1 131852  3324 ?        R    01:24   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/bin/php -q -f /home/cloudsms/public_html/cron/process_queue4.php
root      98773  0.0  0.0 183044  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      98808  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      98774  0.0  0.0 183044  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      98813  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      98775  0.0  0.0 183044  2144 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      98806  0.0  0.0  20164   964 ?        Ss   01:24   0:00  |   \_ jailshell (pactpay) [98828] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   98828  0.0  0.0  20164   256 ?        S    01:24   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   98830  0.0  0.7 480124 17668 ?        S    01:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      98777  0.0  0.0 183044  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      98812  0.0  0.0  20164   968 ?        Ss   01:24   0:00      \_ jailshell (nigeria) [98824] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   98824  0.0  0.0  20164   264 ?        S    01:24   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   98827  0.0  0.6 404052 16140 ?        S    01:24   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        591  0.0  0.0 108296     4 tty1     Ss+  Nov22   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov22   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  3800 ?        Ss   Nov22   0:01 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    28 ?        Ssl  Nov22   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.2 1277312 5772 ?        Ssl  Nov22   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    16 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372   644 ?        Ssl  Nov22   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   460 ?        Ss   Nov22   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.0  47116  2200 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  48232  2632 ?        S    Nov22   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   224 ?        S    Nov22   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   616 ?        S    Nov22   0:01  \_ dovecot/log
dovenull   1087  0.0  0.0  47264  2040 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1088  0.0  0.1  48324  2600 ?        S    Nov22   0:00  \_ dovecot/imap-login
root       1093  0.0  0.0  24528  1804 ?        S    Nov22   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   508 ?        S    Nov22   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1552 ?        S    Nov22   0:02  \_ dovecot/auth
worencom  81298  0.0  0.1  38488  3852 ?        S    00:56   0:00  \_ dovecot/imap
root      97676  0.0  0.1  41052  2812 ?        S    01:22   0:00  \_ dovecot/auth -w
root      98311  0.0  0.1  60820  4508 ?        S    01:23   0:00  \_ dovecot/lmtp
telegraf    916  0.0  1.4 5654304 35976 ?       SLsl Nov22   0:27 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756     0 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.4 114016 11816 ?        Ssl  Nov22   0:12 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    16 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   356 ?        Ss   Nov22   0:07 /usr/sbin/sshd -D
root      98433  0.0  0.1 111304  4264 ?        Ss   01:23   0:00  \_ sshd: [accepted]
root        928  0.0  0.3 1276100 7716 ?        Ssl  Nov22   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028   592 ?        Ss   Nov22   0:02 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  98661  0.0  0.0 445028   320 ?        S    01:23   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   220 ?        Ss   Nov22   0:01 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132     0 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.0 439788   404 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   344 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        939  0.0 16.1 1828368 391872 ?      Ssl  Nov22   0:30 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.1 331088  4584 ?        Ssl  Nov22   0:14 /usr/sbin/rsyslogd -n
named       949  0.0  1.2 1055800 29252 ?       Ssl  Nov22   0:23 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  2436 ?        Ss   Nov22   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   98752  0.0  0.1 400460  4776 ?        S    01:23   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.2 261692  6228 ?        Ss   Nov22   0:07 cpsrvd (SSL) - waiting for connections                   
root      98753  0.0  0.0      0     0 ?        Z    01:23   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10564  3468 ?        Ss   Nov22   0:41 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   360 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   408 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  0.6 247932 16364 ?        Ss   Nov22   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5633  0.0  2.4 271996 58680 ?        S    Nov22   0:06  \_ spamd child
root       5634  0.0  0.6 247932 14780 ?        S    Nov22   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  2928 ?        S    Nov22   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387556  3588 ?        Ss   Nov22   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.4 412396  9704 ?        Ss   Nov22   0:16 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  0.2 183900  6688 ?        Ss   Nov22   0:05 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1263  0.0  0.7 228228 18888 ?        Ss   Nov22   0:00 dnsadmin - server mode
root      97686  0.0  0.6 228228 15000 ?        S    01:22   0:00  \_ dnsadmin - waiting for request 3 on connected socket
root       1264  0.0  0.3 209648  9400 ?        Ss   Nov22   0:06 tailwatchd
root       1800  0.0  0.0 299272   492 ?        Ss   Nov22   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1364 ?        SN   Nov22   0:00 cpanellogd - sleeping for logs
mysql      1916  1.3  9.1 1478544 222236 ?      Sl   Nov22  11:30 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  7672 ?        Ss   Nov22   0:03 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12868   332 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   284 ?        S    Nov22   0:04  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12908   344 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340     4 ?        S    Nov22   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    70746  0.1  0.5 277616 14504 ?        S    00:40   0:03  \_ /usr/sbin/httpd -k start
nobody    74385  0.1  0.8 277680 20276 ?        S    00:45   0:03  \_ /usr/sbin/httpd -k start
nobody    83225  0.1  0.8 277908 20772 ?        S    00:59   0:01  \_ /usr/sbin/httpd -k start
nobody    87226  0.1  0.8 277908 20724 ?        S    01:05   0:01  \_ /usr/sbin/httpd -k start
nobody    87353  0.1  0.8 277908 20556 ?        S    01:05   0:01  \_ /usr/sbin/httpd -k start
nobody    90756  0.1  0.8 277932 20472 ?        S    01:11   0:00  \_ /usr/sbin/httpd -k start
nobody    91654  0.1  0.8 277584 20036 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody    92173  0.1  0.8 277912 20088 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
nobody    93454  0.1  0.8 277916 19844 ?        S    01:15   0:00  \_ /usr/sbin/httpd -k start
nobody    93462  0.1  0.8 277584 19820 ?        S    01:15   0:00  \_ /usr/sbin/httpd -k start
nobody    93937  0.1  0.8 277584 19568 ?        S    01:16   0:00  \_ /usr/sbin/httpd -k start
nobody    93938  0.1  0.8 277584 19752 ?        S    01:16   0:00  \_ /usr/sbin/httpd -k start
nobody    95161  0.1  0.8 277796 19840 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody    95805  0.1  0.8 277788 19456 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    98219  0.1  0.7 277520 18644 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    98503  0.1  0.7 277520 18588 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    98635  0.1  0.7 277676 18316 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47566  0.0  0.0   3148     8 ?        Ss   Nov22   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152    32 ?        S    Nov22   0:00  \_ [kworker]
root      44973  0.0  0.3 181468  7512 ?        Ss   00:00   0:04 lfd - sleeping
## mysql stats
Uptime: 51655  Threads: 3  Questions: 4430278  Slow queries: 0  Opens: 10345  Flush tables: 1  Open tables: 2000  Queries per second avg: 85.766
*************************** 1. row ***************************
     Id: 69368
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 69370
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 69373
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 69374
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.150.65 TIME_WAIT
      1 114.119.153.50 TIME_WAIT
      1 167.71.203.246 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.103 TIME_WAIT
      1 192.178.4.104 TIME_WAIT
      1 ::1 TIME_WAIT
      1 37.139.53.80 TIME_WAIT
      1 44.220.188.230 TIME_WAIT
      1 51.161.65.7 TIME_WAIT
      1 54.39.0.128 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 192.178.4.102 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 01:24:01 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 14 hours 20 minutes 51 seconds
   Server load: 0.11 0.18 0.39
   Total accesses: 237679 - Total Traffic: 5.6 GB - Total Duration: 128944988
   CPU Usage: u14.25 s8.9 cu2920.84 cs2286.54 - 10.1% CPU load
   4.6 requests/sec - 113.5 kB/second - 24.7 kB/request - 542.517 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

__KK_K__W_KR_K.K.K_.............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc      M CPU    SS    Req    Dur   Conn  Child  Slot     Client     Protocol         VHost                                      Request
   0-0  87226 0/378/12744  _ 8.40  0     352   6616944 0.0   8.27  304.71 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=1908819692 HTTP/1.1
   1-0  93454 0/152/12464  _ 2.95  0     0     6593204 0.0   3.40  304.69 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   2-0  87353 5/314/12262  K 8.15  0     266   6747637 158.7 7.54  293.42 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=1620574393 HTTP/1.1
   3-0  95805 1/87/11883   K 1.97  2     267   6289273 35.1  2.14  294.03 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?l=806307914 HTTP/1.1
   4-0  98219 0/11/11961   _ 0.27  1     363   6207343 0.0   0.33  291.36 192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=174312844 HTTP/1.1
   5-0  70746 10/756/12282 K 17.37 0     307   6472561 308.9 15.77 321.53 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=3566219634 HTTP/1.1
   6-0  98503 0/9/11447    _ 0.21  1     358   5843009 0.0   0.25  287.64 192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=3524265284 HTTP/1.1
   7-0  90756 0/264/11846  _ 3.63  0     343   6192474 0.0   6.82  288.33 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=1099394762 HTTP/1.1
   8-0  91654 0/190/11355  W 4.05  0     0     5816891 0.0   5.62  271.63 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   9-0  95161 0/106/10412  _ 2.09  1     343   5552121 0.0   2.29  258.64 192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=1202370704 HTTP/1.1
   10-0 83225 1/370/10762  K 9.21  2     361   5665875 35.2  8.27  254.13 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?l=3479371350 HTTP/1.1
   11-0 98635 0/4/10633    R 0.06  2     1     5559294 0.0   0.13  255.93 192.178.4.99  http/1.1 team.cloudware.ng:443
   12-0 92173 0/155/10588  _ 3.68  0     344   5601149 0.0   3.40  266.41 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=532404893 HTTP/1.1
   13-0 74385 33/646/10009 K 16.05 0     27    5229147 217.6 14.71 239.76 5.135.131.86  http/1.1 cloudsms.com.ng:443    GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   14-0 -     0/0/9099     . 0.00  8     0     4751680 0.0   0.00  217.85 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 93462 2/142/7388   K 4.11  2     261   3856407 64.5  3.10  188.26 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=953176803 HTTP/1.1
   16-0 -     0/0/7799     . 0.00  376   0     4030439 0.0   0.00  181.49 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 93937 1/128/6888   K 3.24  2     261   3635991 34.8  2.99  170.08 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=3943739376 HTTP/1.1
   18-0 93938 0/176/5834   _ 3.16  2     418   3206318 0.0   2.41  137.67 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=3886660740 HTTP/1.1
   19-0 -     0/0/6528     . 0.00  614   0     3302223 0.0   0.00  150.43 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -     0/0/5146     . 0.00  2125  0     2898810 0.0   0.00  119.99 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/3856     . 0.00  2126  0     2376261 0.0   0.00  92.26  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/3102     . 0.00  2189  0     1849550 0.0   0.00  82.62  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/2475     . 0.00  2056  0     1405774 0.0   0.00  49.28  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/1487     . 0.00  2132  0     1192572 0.0   0.00  33.75  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/2419     . 0.00  6110  0     1072704 0.0   0.00  54.16  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/1551     . 0.00  6461  0     994271  0.0   0.00  36.51  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/1178     . 0.00  6916  0     781587  0.0   0.00  33.93  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/1507     . 0.00  6692  0     732468  0.0   0.00  31.91  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/1468     . 0.00  5654  0     896900  0.0   0.00  31.64  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/1287     . 0.00  6922  0     794356  0.0   0.00  30.29  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/528      . 0.00  6912  0     402740  0.0   0.00  9.57   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/518      . 0.00  8595  0     501315  0.0   0.00  10.45  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/208      . 0.00  8007  0     237017  0.0   0.00  4.05   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/585      . 0.00  8594  0     401414  0.0   0.00  8.75   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/643      . 0.00  7974  0     507088  0.0   0.00  14.62  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/74       . 0.00  8566  0     128926  0.0   0.00  0.43   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/181      . 0.00  8562  0     172759  0.0   0.00  4.15   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/655      . 0.00  8590  0     329138  0.0   0.00  12.59  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/543      . 0.00  7674  0     484400  0.0   0.00  12.38  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/224      . 0.00  8550  0     279837  0.0   0.00  4.33   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/409      . 0.00  8585  0     303799  0.0   0.00  9.44   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/118      . 0.00  8435  0     273924  0.0   0.00  1.34   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/73       . 0.00  8588  0     237945  0.0   0.00  0.86   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/289      . 0.00  8579  0     301814  0.0   0.00  6.09   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/180      . 0.00  8582  0     137352  0.0   0.00  1.38   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/60       . 0.00  8578  0     180509  0.0   0.00  0.80   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/67       . 0.00  8600  0     226531  0.0   0.00  1.33   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/203      . 0.00  8591  0     142085  0.0   0.00  4.09   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/284      . 0.00  8243  0     181603  0.0   0.00  4.73   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/82       . 0.00  8604  0     44788   0.0   0.00  1.22   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/8        . 0.00  8564  0     43835   0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/9        . 0.00  8573  0     45747   0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/29       . 0.00  8571  0     44492   0.0   0.00  0.32   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/536      . 0.00  6688  0     268842  0.0   0.00  11.18  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/4        . 0.00  8608  0     23627   0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/9        . 0.00  8567  0     47344   0.0   0.00  0.17   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/7        . 0.00  8569  0     44159   0.0   0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/43       . 0.00  8610  11655 23366   0.0   0.00  0.07   45.94.58.4    http/1.1 cloudware.ng:80        GET /requirements.txt HTTP/1.1
   59-0 -     0/0/141      . 0.00  7972  0     113874  0.0   0.00  3.52   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/132      . 0.00  8601  0     76946   0.0   0.00  2.87   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/6        . 0.00  8599  0     3701    0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/204      . 0.00  8159  0     97395   0.0   0.00  2.67   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/66       . 0.00  8583  0     27806   0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/11       . 0.00  8576  0     25454   0.0   0.00  0.16   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/9        . 0.00  8596  0     28822   0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/27       . 0.00  10123 0     28      0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/42       . 0.00  10128 0     46      0.0   0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/3        . 0.00  10166 0     1240    0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/2        . 0.00  10165 0     703     0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/5        . 0.00  10158 0     1790    0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/47       . 0.00  10106 0     737     0.0   0.00  0.08   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/1        . 0.00  10177 0     0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/458      . 0.00  8712  0     263682  0.0   0.00  8.36   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/9        . 0.00  10154 0     4803    0.0   0.00  0.22   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/1        . 0.00  10176 0     0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/23       . 0.00  10118 0     2942    0.0   0.00  0.21   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/200      . 0.00  9474  0     87870   0.0   0.00  4.44   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/63       . 0.00  9978  0     25484   0.0   0.00  1.24   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 858
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...44)
   index usage: 15%, cache usage: 20%
   total entries stored since starting: 170985
   total entries replaced since starting: 0
   total entries expired since starting: 170064
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 452 miss
   total removes since starting: 63 hit, 189 miss
Youez - 2016 - github.com/yon3zu
LinuXploit