403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-23.02.54.txt
 ## swap threshold exceeded
## server overview
2025-11-23.02.54 load[0] mem[63/72] mysql[2/12] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1371         118          79         873         727
Swap:          1999        1597         402
 02:54:01 up 15:51,  0 users,  load average: 0.32, 0.56, 0.60
## system overview
top - 02:54:02 up 15:51,  0 users,  load average: 0.32, 0.56, 0.60
Tasks: 208 total,   4 running, 202 sleeping,   0 stopped,   2 zombie
%Cpu(s): 67.6 us, 11.8 sy,  0.0 ni, 17.6 id,  0.0 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,   129176 free,  1396196 used,   894928 buff/cache
KiB Swap:  2047996 total,   412560 free,  1635436 used.   753152 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1916 mysql     20   0 1478544 240592   2824 S 118.8  9.9  13:04.32 /usr/sbin+
 57997 nigeria   20   0  404052  16140  10384 R  18.8  0.7   0:00.04 /opt/cpan+
 57985 pactpay   20   0  480124  17672  11880 S   6.2  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44508   3284   1452 S   0.0  0.1   1:17.27 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:03.23 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.23 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:56.19 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.15 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.20 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:08.81 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:33.96 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.06 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:01.28 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.51 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:04.13 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:03.01 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40240   3928   3684 S   0.0  0.2   0:32.48 /usr/lib/+
   384 root      20   0   45352      8      4 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    448    328 S   0.0  0.0   0:05.26 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    348    260 S   0.0  0.0   0:01.30 /usr/sbin+
   501 root      20   0   24704   1168    808 S   0.0  0.0   0:13.02 /usr/lib/+
   502 dbus      20   0   58720   1356    612 S   0.0  0.1   0:29.86 /usr/bin/+
   504 rpc       20   0   69256     44      0 S   0.0  0.0   0:00.05 /sbin/rpc+
   514 root      20   0  224148   3048    812 S   0.0  0.1   0:00.60 queueproc+
   515 polkitd   20   0  610540    836    460 S   0.0  0.0   0:07.58 /usr/lib/+
   521 root      20   0  152780     72     28 S   0.0  0.0   0:00.03 /usr/sbin+
   523 root      20   0   52852    140     52 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0 1336536   1840    644 S   0.0  0.1   0:39.94 /usr/sbin+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     12      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124508    844    416 S   0.0  0.0   0:01.58 /usr/sbin+
   591 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   3576    648 S   0.0  0.1   0:01.13 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:03.37 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     28     28 S   0.0  0.0   0:01.23 /usr/bin/+
   912 root      20   0 1277312   5772      4 S   0.0  0.2   0:24.76 /usr/bin/+
   913 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.02 /usr/loca+
   914 root      20   0  572372    640    172 S   0.0  0.0   0:04.87 /usr/bin/+
   915 root      20   0   51508    456    292 S   0.0  0.0   0:00.84 /usr/sbin+
   916 telegraf  20   0 5654304  35936   5808 S   0.0  1.5   0:30.37 /usr/loca+
   917 systuser  20   0   12756      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   925 systuser  20   0  114016  12312   2084 S   0.0  0.5   0:13.28 /usr/loca+
   926 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   927 root      20   0  111304    356    256 S   0.0  0.0   0:07.90 /usr/sbin+
   928 root      20   0 1276100   7716      0 S   0.0  0.3   0:25.72 /usr/bin/+
   930 root      20   0  445028    592    480 S   0.0  0.0   0:02.24 sw-engine+
   931 root      20   0  153404    220    136 S   0.0  0.0   0:01.24 pure-ftpd+
   932 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.02 /usr/loca+
   934 root      20   0  439788    404    312 S   0.0  0.0   0:01.50 php-fpm: +
   938 root      20   0  388892    536    436 S   0.0  0.0   0:01.53 php-fpm: +
   939 root      20   0 1828368 328428    416 S   0.0 13.6   0:30.18 /usr/loca+
   940 root      20   0  331088   4644   4020 S   0.0  0.2   0:16.21 /usr/sbin+
   949 named     20   0 1054796  34496   1840 S   0.0  1.4   0:25.80 /usr/sbin+
   958 root      20   0  400740   2444    604 S   0.0  0.1   0:07.40 php-fpm: +
   962 root      20   0  261692   6128   1408 S   0.0  0.3   0:09.07 cpsrvd (S+
   969 cpanelc+  20   0   10564   3452   2288 S   0.0  0.1   0:45.39 /usr/loca+
   979 root      20   0  396248    396    312 S   0.0  0.0   0:01.43 php-fpm: +
   985 root      20   0  389508    476    380 S   0.0  0.0   0:01.49 php-fpm: +
  1083 dovenull  20   0   47116   1688   1064 S   0.0  0.1   0:01.78 dovecot/p+
  1084 dovenull  20   0   48232   2048   1044 S   0.0  0.1   0:00.62 dovecot/i+
  1085 dovecot   20   0   10320    360    244 S   0.0  0.0   0:00.42 dovecot/a+
  1086 root      20   0   10452    480    292 S   0.0  0.0   0:01.08 dovecot/l+
  1087 dovenull  20   0   47264   2012   1384 S   0.0  0.1   0:02.04 dovecot/p+
  1088 dovenull  20   0   48324   1964   1004 S   0.0  0.1   0:00.59 dovecot/i+
  1093 root      20   0   24528   1912    484 S   0.0  0.1   0:00.37 dovecot/c+
  1101 dovecot   20   0   13568    612    392 S   0.0  0.0   0:00.15 dovecot/s+
  1142 root      20   0  247932  18740   1256 S   0.0  0.8   0:09.60 /usr/loca+
  1161 dovecot   20   0   41320   1520   1012 S   0.0  0.1   0:02.75 dovecot/a+
  1175 systuser  20   0  157708   3004    956 S   0.0  0.1   0:00.25 SonarPush+
  1177 wp-tool+  20   0  387556   3324   1392 S   0.0  0.1   0:00.49 /usr/bin/+
  1178 wp-tool+  20   0  412396   9428   1372 S   0.0  0.4   0:17.97 /usr/bin/+
  1260 root      20   0  262224  20976   3116 S   0.0  0.9   0:05.85 cpdavd - +
  1263 root      20   0  167452   3140   1772 S   0.0  0.1   0:00.90 dnsadmin +
  1264 root      20   0  209648   9156   1224 S   0.0  0.4   0:06.67 tailwatchd
  1800 root      20   0  299272    440    280 S   0.0  0.0   0:01.51 php-fpm: +
  1834 root      38  18  130416   1328    648 S   0.0  0.1   0:00.14 cpanellog+
  2048 root      20   0  267052   7672    476 S   0.0  0.3   0:04.02 /usr/sbin+
  2050 root      20   0   12868    332    212 S   0.0  0.0   0:06.03 /usr/loca+
  2051 root      20   0   12732    284    208 S   0.0  0.0   0:05.32 /usr/loca+
  2052 root      20   0   12916    344    216 S   0.0  0.0   0:05.67 /usr/loca+
  2059 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  5634 root      20   0  247932  14752    236 S   0.0  0.6   0:00.03 spamd chi+
 13081 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kworker/+
 21598 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 38422 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 43320 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 44620 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 44894 nobody    20   0  277664  20328   4652 S   0.0  0.8   0:01.15 /usr/sbin+
 44973 root      20   0  181972   9304   1100 S   0.0  0.4   0:09.12 lfd - sle+
 45469 nobody    20   0  277676  20368   4792 S   0.0  0.8   0:01.21 /usr/sbin+
 47189 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47566 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152     64     24 S   0.0  0.0   0:01.02 [kworker]
 48022 nobody    20   0  277632  19956   4644 S   0.0  0.8   0:01.10 /usr/sbin+
 48208 nobody    20   0  277664  19932   4460 S   0.0  0.8   0:00.99 /usr/sbin+
 49121 nobody    20   0  277648  19836   4352 S   0.0  0.8   0:01.01 /usr/sbin+
 49354 nobody    20   0  277644  20004   4508 S   0.0  0.8   0:00.77 /usr/sbin+
 49533 nobody    20   0  277620  19904   4404 S   0.0  0.8   0:01.00 /usr/sbin+
 50702 nobody    20   0  277496  19584   4412 R   0.0  0.8   0:00.97 /usr/sbin+
 52304 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 52388 nobody    20   0  277928  20008   4464 S   0.0  0.8   0:00.58 /usr/sbin+
 52705 nobody    20   0  277784  20016   4376 S   0.0  0.8   0:00.66 /usr/sbin+
 52781 nobody    20   0  277552  19508   4212 S   0.0  0.8   0:00.39 /usr/sbin+
 53565 nobody    20   0  277784  20040   4492 S   0.0  0.8   0:00.46 /usr/sbin+
 54061 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 54693 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 54854 root      20   0  247932  21524   1464 S   0.0  0.9   0:00.00 spamd chi+
 55509 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 55670 nobody    20   0  277520  19168   4004 S   0.0  0.8   0:00.18 /usr/sbin+
 55928 nobody    20   0  277584  19536   4144 S   0.0  0.8   0:00.22 /usr/sbin+
 56129 nobody    20   0  277520  19132   3924 S   0.0  0.8   0:00.28 /usr/sbin+
 56421 nobody    20   0  277916  19268   3904 S   0.0  0.8   0:00.22 /usr/sbin+
 56551 nobody    20   0  277580  19176   4000 S   0.0  0.8   0:00.15 /usr/sbin+
 56723 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 56894 mailnull  20   0   91216   5044   1852 S   0.0  0.2   0:00.00 /usr/sbin+
 56949 mailnull  20   0   91136   5400   2180 S   0.0  0.2   0:00.00 /usr/sbin+
 57489 root      20   0   41052   2800   2132 S   0.0  0.1   0:00.00 dovecot/a+
 57571 oyotech+  20   0  389236   6344   2948 S   0.0  0.3   0:00.09 php-fpm: +
 57579 nobody    20   0  277736  19028   3816 S   0.0  0.8   0:00.05 /usr/sbin+
 57596 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 57603 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 57657 healtho+  20   0  468140  75652   4108 S   0.0  3.1   0:03.03 php-fpm: +
 57693 oyotech+  20   0  389236   6336   2944 S   0.0  0.3   0:00.06 php-fpm: +
 57711 nobody    20   0  277512  18280   3396 S   0.0  0.8   0:00.01 /usr/sbin+
 57797 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 57879 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [whostmgr+
 57880 healtho+  20   0  463748  70608   4096 S   0.0  2.9   0:00.77 php-fpm: +
 57890 oysipao+  20   0  439788   2244   1468 S   0.0  0.1   0:00.00 php-fpm: +
 57895 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 57900 nigeria   20   0  400460   4776   2160 S   0.0  0.2   0:00.00 php-fpm: +
 57912 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 57924 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 57925 root      20   0  183076   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 57927 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57929 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57930 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57931 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57932 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57933 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57934 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57935 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57936 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57937 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57939 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 57941 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 57943 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 57944 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 57963 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 57967 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 57968 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 57969 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 57970 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 57971 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 57972 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 57973 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 57974 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 57977 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 57978 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 57984 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 57994 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 58009 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 58010 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 58012 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 58016 root      20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
 81298 worencom  20   0   38488   2408   1424 S   0.0  0.1   0:00.03 dovecot/i+
 83419 root      20   0  183044   1656   1100 S   0.0  0.1   0:00.00 /usr/sbin+
 83479 root      20   0  113284    700    520 S   0.0  0.0   0:00.00 /bin/sh -+
 83501 root      20   0  108056    300    228 S   0.0  0.0   0:00.00 sleep 2h +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov22   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov22   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov22   0:56  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov22   0:08  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov22   0:33  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   Nov22   0:04  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov22   0:03  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root      13081  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/0:4]
root      21598  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/u200:2]
root      38422  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/0:1]
root      43320  0.0  0.0      0     0 ?        S    02:34   0:00  \_ [kworker/1:0]
root      44620  0.0  0.0      0     0 ?        S    02:36   0:00  \_ [kworker/0:0]
root      47189  0.0  0.0      0     0 ?        S    02:40   0:00  \_ [kworker/1:1]
root      52304  0.0  0.0      0     0 ?        S    02:45   0:00  \_ [kworker/1:3]
root      54061  0.0  0.0      0     0 ?        S    02:48   0:00  \_ [kworker/u200:0]
root      54693  0.0  0.0      0     0 ?        S    02:49   0:00  \_ [kworker/0:2]
root      55509  0.0  0.0      0     0 ?        S    02:50   0:00  \_ [kworker/1:2]
root      56723  0.0  0.0      0     0 ?        S    02:52   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44508  3284 ?        Ss   Nov22   1:17 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  40240  3928 ?        Ss   Nov22   0:32 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352     8 ?        Ss   Nov22   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   448 ?        S<sl Nov22   0:05 /sbin/auditd
root        499  0.0  0.0  21540   348 ?        Ss   Nov22   0:01 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1168 ?        Ss   Nov22   0:13 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58720  1356 ?        Ss   Nov22   0:29 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256    44 ?        Ss   Nov22   0:00 /sbin/rpcbind -w
root        514  0.0  0.1 224148  3048 ?        Ss   Nov22   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.0 610540   836 ?        Ssl  Nov22   0:07 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780    72 ?        Ss   Nov22   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   140 ?        Ss   Nov22   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 1336536 1840 ?        Ssl  Nov22   0:39 /usr/sbin/nscd
root        544  0.0  0.0 195208     0 ?        Ssl  Nov22   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388     4 ?        Ss   Nov22   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    12 ?        Ss   Nov22   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124508   844 ?        Ss   Nov22   0:01 /usr/sbin/crond -n
root      83419  0.0  0.0 183044  1656 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      83479  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      83501  0.0  0.0 108056   300 ?        S    01:00   0:00  |       \_ sleep 2h 15m
root      57925  0.0  0.0 183076  2416 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      57941  0.0  0.0 113284  1212 ?        Ss   02:54   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      57943  0.0  0.0 108052   356 ?        S    02:54   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      57944  0.0  0.0 113288  1516 ?        S    02:54   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      58018  0.0  0.0 153840  2100 ?        R    02:54   0:00  |               \_ ps auxf
root      57927  0.0  0.0 183076  2420 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      57968  0.0  0.0  20164   804 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      57929  0.0  0.0 183076  2420 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      57967  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      57930  0.0  0.0 183076  2420 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      57963  0.0  0.0  20164   992 ?        Ss   02:54   0:00  |   \_ jailshell (cloudsms) [58016] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  58016  0.0  0.0  20164   260 ?        S    02:54   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  58017  0.0  0.0 113284  1212 ?        S    02:54   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      57931  0.0  0.0 183076  2416 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      57978  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      57932  0.0  0.0 183076  2416 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      57977  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      57933  0.0  0.0 183076  2416 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      57969  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      57934  0.0  0.0 183076  2412 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      57971  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      57935  0.0  0.0 183076  2412 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      57974  0.0  0.0  20164   804 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      57936  0.0  0.0 183076  2412 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      57972  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      57937  0.0  0.0 183076  2412 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      57970  0.0  0.0  20164   964 ?        Ss   02:54   0:00  |   \_ jailshell (pactpay) [57984] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   57984  0.0  0.0  20164   256 ?        S    02:54   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   57985  2.0  0.7 480124 17672 ?        S    02:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      57939  0.0  0.0 183076  2412 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      57973  0.0  0.0  20164   968 ?        Ss   02:54   0:00      \_ jailshell (nigeria) [57994] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   57994  0.0  0.0  20164   260 ?        S    02:54   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   57997  4.0  0.6 404052 16140 ?        S    02:54   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        591  0.0  0.0 108296     4 tty1     Ss+  Nov22   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov22   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  3576 ?        Ss   Nov22   0:01 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  56894  0.0  0.2  91216  5044 ?        S    02:52   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  56949  0.0  0.2  91136  5400 ?        S    02:52   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    28 ?        Ssl  Nov22   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.2 1277312 5772 ?        Ssl  Nov22   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    76 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372   640 ?        Ssl  Nov22   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   456 ?        Ss   Nov22   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.0  47116  1688 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.0  48232  2048 ?        S    Nov22   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   360 ?        S    Nov22   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   480 ?        S    Nov22   0:01  \_ dovecot/log
dovenull   1087  0.0  0.0  47264  2012 ?        S    Nov22   0:02  \_ dovecot/pop3-login
dovenull   1088  0.0  0.0  48324  1964 ?        S    Nov22   0:00  \_ dovecot/imap-login
root       1093  0.0  0.0  24528  1912 ?        S    Nov22   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   612 ?        S    Nov22   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1520 ?        S    Nov22   0:02  \_ dovecot/auth
worencom  81298  0.0  0.0  38488  2408 ?        S    00:56   0:00  \_ dovecot/imap
root      57489  0.0  0.1  41052  2800 ?        S    02:53   0:00  \_ dovecot/auth -w
telegraf    916  0.0  1.4 5654304 35936 ?       SLsl Nov22   0:30 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756     0 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.5 114016 12312 ?        Ssl  Nov22   0:13 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    68 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   356 ?        Ss   Nov22   0:07 /usr/sbin/sshd -D
root      57596  0.0  0.1 111304  4268 ?        Ss   02:53   0:00  \_ sshd: [accepted]
sshd      57603  0.0  0.1 115644  2628 ?        S    02:53   0:00  |   \_ sshd: [net]
root      57895  0.0  0.1 111304  4272 ?        Ss   02:53   0:00  \_ sshd: [accepted]
root      57924  0.0  0.1 111304  4272 ?        Ss   02:54   0:00  \_ sshd: [accepted]
root      58009  0.0  0.1 111304  4268 ?        Ss   02:54   0:00  \_ sshd: [accepted]
sshd      58012  0.0  0.1 115644  2624 ?        S    02:54   0:00      \_ sshd: [net]
root        928  0.0  0.3 1276100 7716 ?        Ssl  Nov22   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028   592 ?        Ss   Nov22   0:02 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  57797  0.0  0.0 445028   320 ?        S    02:53   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   220 ?        Ss   Nov22   0:01 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132    36 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.0 439788   404 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
oysipao+  57890  0.0  0.0 439788  2244 ?        S    02:53   0:00  \_ php-fpm: pool oysipa_oyostate_gov_ng
root        938  0.0  0.0 388892   536 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
oyotech+  57571  0.2  0.2 389236  6344 ?        S    02:53   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
oyotech+  57693  0.2  0.2 389236  6336 ?        S    02:53   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
root        939  0.0 13.5 1828368 328428 ?      Ssl  Nov22   0:30 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.1 331088  4644 ?        Ssl  Nov22   0:16 /usr/sbin/rsyslogd -n
named       949  0.0  1.4 1054796 34496 ?       Ssl  Nov22   0:25 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  2444 ?        Ss   Nov22   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  57657 11.6  3.1 468140 75652 ?        S    02:53   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  57880 15.4  2.9 463748 70608 ?        S    02:53   0:00  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   57900  0.0  0.1 400460  4776 ?        S    02:53   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.2 261692  6128 ?        Ss   Nov22   0:09 cpsrvd (SSL) - waiting for connections                   
root      57879  0.0  0.0      0     0 ?        Z    02:53   0:00  \_ [whostmgrd - ser] <defunct>
root      57912  0.0  0.0      0     0 ?        Z    02:53   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10564  3452 ?        Ss   Nov22   0:45 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   396 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   476 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  0.7 247932 18740 ?        Ss   Nov22   0:09 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5634  0.0  0.6 247932 14752 ?        S    Nov22   0:00  \_ spamd child
root      54854  0.0  0.8 247932 21524 ?        S    02:49   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  3004 ?        S    Nov22   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387556  3324 ?        Ss   Nov22   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.3 412396  9428 ?        Ss   Nov22   0:17 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  0.8 262224 20976 ?        Ss   Nov22   0:05 cpdavd - accepting connections on: 2091, 2077, 2078
root       1263  0.0  0.1 167452  3140 ?        Ss   Nov22   0:00 dnsadmin - dormant mode
root       1264  0.0  0.3 209648  9156 ?        Ss   Nov22   0:06 tailwatchd
root       1800  0.0  0.0 299272   440 ?        Ss   Nov22   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1328 ?        SN   Nov22   0:00 cpanellogd - sleeping for logs
mysql      1916  1.3  9.9 1478544 240592 ?      Sl   Nov22  13:04 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  7672 ?        Ss   Nov22   0:04 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12868   332 ?        S    Nov22   0:06  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   284 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12916   344 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340     4 ?        S    Nov22   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    44894  0.1  0.8 277664 20328 ?        S    02:36   0:01  \_ /usr/sbin/httpd -k start
nobody    45469  0.1  0.8 277676 20368 ?        S    02:37   0:01  \_ /usr/sbin/httpd -k start
nobody    48022  0.1  0.8 277632 19956 ?        S    02:41   0:01  \_ /usr/sbin/httpd -k start
nobody    48208  0.1  0.8 277664 19932 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    49121  0.1  0.8 277648 19836 ?        S    02:43   0:01  \_ /usr/sbin/httpd -k start
nobody    49354  0.1  0.8 277644 20004 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    49533  0.1  0.8 277620 19904 ?        S    02:43   0:01  \_ /usr/sbin/httpd -k start
nobody    50702  0.1  0.8 277496 19584 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    52388  0.1  0.8 277928 20008 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    52705  0.1  0.8 277784 20016 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    52781  0.0  0.8 277552 19508 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    53565  0.1  0.8 277784 20040 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    55670  0.0  0.7 277520 19168 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    55928  0.1  0.8 277584 19536 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    56129  0.1  0.7 277520 19132 ?        S    02:51   0:00  \_ /usr/sbin/httpd -k start
nobody    56421  0.1  0.7 277916 19268 ?        S    02:51   0:00  \_ /usr/sbin/httpd -k start
nobody    56551  0.1  0.7 277580 19176 ?        S    02:51   0:00  \_ /usr/sbin/httpd -k start
nobody    57579  0.1  0.7 277736 19028 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    57711  0.0  0.7 277512 18280 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47566  0.0  0.0   3148     8 ?        Ss   Nov22   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152    64 ?        S    Nov22   0:01  \_ [kworker]
root      44973  0.0  0.3 181972  9304 ?        Ss   00:00   0:09 lfd - sleeping
## mysql stats
Uptime: 57056  Threads: 3  Questions: 5084254  Slow queries: 0  Opens: 11370  Flush tables: 1  Open tables: 2000  Queries per second avg: 89.109
*************************** 1. row ***************************
     Id: 78425
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 78428
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 78432
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.248.62.173 TIME_WAIT
      1 146.70.124.211 TIME_WAIT
      1 148.113.128.212 TIME_WAIT
      1 15.235.27.201 TIME_WAIT
      1 157.230.223.160 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 ::1 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 192.178.4.103 TIME_WAIT
      2 207.46.13.54 TIME_WAIT
      3 167.99.107.231 TIME_WAIT
      3 185.226.197.68 TIME_WAIT
      3 185.226.197.70 TIME_WAIT
      4 185.226.197.67 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 02:54:02 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 15 hours 50 minutes 51 seconds
   Server load: 0.32 0.56 0.60
   Total accesses: 269055 - Total Traffic: 6.4 GB - Total Duration: 142611930
   CPU Usage: u8.56 s6.86 cu3233.5 cs2522.56 - 10.1% CPU load
   4.72 requests/sec - 117.4 kB/second - 24.9 kB/request - 530.048 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

K_WK_KK_WKKKKRK_.K.K._..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS    Req    Dur   Conn  Child  Slot      Client     Protocol            VHost                                        Request
   0-0  49533 3/233/14390 K 3.78 1     348   7329314 94.2  8.68  352.36 192.178.4.99   http/1.1 team.cloudware.ng:443       GET /?l=1720051976 HTTP/1.1
   1-0  55928 0/65/14074  _ 0.72 1     7     7581214 0.0   1.26  348.20 58.97.220.33   http/1.1 covid-19.oyostate.gov.ng:80 GET /wp-admin/mrjn.php HTTP/1.1
   2-0  57579 0/15/13876  W 0.16 0     0     7448735 0.0   0.21  334.55 ::1            http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   3-0  45469 2/327/13359 K 4.24 0     274   6926390 64.7  11.95 330.90 192.178.4.100  http/1.1 team.cloudware.ng:443       GET /?l=2324585497 HTTP/1.1
   4-0  49121 0/222/13640 _ 4.28 0     289   6925679 0.0   6.36  333.31 58.97.220.33   http/1.1 health.oyostate.gov.ng:80   GET /wp-admin/js/about.php HTTP/1.1
   5-0  48208 1/241/13989 K 3.82 3     272   7159841 33.7  7.90  363.84 192.178.4.98   http/1.1 team.cloudware.ng:443       GET /?l=2382351503 HTTP/1.1
   6-0  52388 1/174/12928 K 1.90 1     331   6447706 34.0  3.59  324.68 192.178.4.104  http/1.1 team.cloudware.ng:443       GET /?l=495757772 HTTP/1.1
   7-0  52705 0/172/13386 _ 2.40 1     0     6786683 0.0   3.94  323.44 58.97.220.33   http/1.1 oysipa.oyostate.gov.ng:80   GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.p
   8-0  56129 0/65/12747  W 1.09 0     0     6424705 0.0   1.38  307.17 192.178.4.102  http/1.1 team.cloudware.ng:443       GET /?l=3934185548 HTTP/1.1
   9-0  56421 4/43/11839  K 0.87 3     297   6198258 126.0 1.45  295.18 192.178.4.99   http/1.1 team.cloudware.ng:443       GET /?l=861507474 HTTP/1.1
   10-0 57711 1/6/11769   K 0.01 3     0     6086736 6.0   0.12  280.91 185.226.197.70 http/1.1 theforge.com.ng:443         GET /favicon.ico HTTP/1.1
   11-0 52781 1/120/11959 K 1.47 0     22    6146037 0.8   3.05  297.26 58.97.220.33   http/1.1 covid-19.oyostate.gov.ng:80 GET /wp-admin/kn.php HTTP/1.1
   12-0 53565 1/134/11909 K 1.50 3     282   6190600 35.1  2.99  306.85 192.178.4.103  http/1.1 team.cloudware.ng:443       GET /?l=1428579323 HTTP/1.1
   13-0 50702 0/188/11504 R 3.97 2     7     5894234 0.0   5.72  276.51 58.97.220.33   http/1.1 covid19.oyostate.gov.ng:443
   14-0 55670 1/47/10328  K 0.62 3     277   5244732 34.2  1.22  245.46 192.178.4.101  http/1.1 team.cloudware.ng:443       GET /?l=711500662 HTTP/1.1
   15-0 49354 0/225/8747  _ 2.74 0     990   4393703 0.0   5.63  217.42 58.97.220.33   http/1.1 health.oyostate.gov.ng:80   GET /jetpack.php HTTP/1.1
   16-0 -     0/0/8816    . 0.00 53    0     4468967 0.0   0.00  209.80 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   17-0 48022 5/249/8139  K 4.43 0     284   4150654 158.3 9.71  202.74 192.178.4.105  http/1.1 team.cloudware.ng:443       GET /?l=2543033906 HTTP/1.1
   18-0 -     0/0/6951    . 0.00 128   0     3699558 0.0   0.00  165.55 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   19-0 56551 1/42/7862   K 0.49 0     399   3858081 35.4  0.62  195.28 66.249.74.34   http/1.1 team.cloudware.ng:443       GET /?l=4017186155 HTTP/1.1
   20-0 -     0/0/5745    . 0.00 765   0     3141193 0.0   0.00  132.07 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   21-0 44894 0/341/4578  _ 4.00 0     0     2662833 0.0   12.22 110.98 ::1            http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   22-0 -     0/0/3221    . 0.00 967   0     1904649 0.0   0.00  85.04  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   23-0 -     0/0/2854    . 0.00 3886  0     1555805 0.0   0.00  58.97  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   24-0 -     0/0/1636    . 0.00 3495  0     1282876 0.0   0.00  39.63  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   25-0 -     0/0/2570    . 0.00 3991  0     1163271 0.0   0.00  57.91  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   26-0 -     0/0/1903    . 0.00 3504  0     1185213 0.0   0.00  47.42  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   27-0 -     0/0/1301    . 0.00 3954  0     843370  0.0   0.00  38.82  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   28-0 -     0/0/1528    . 0.00 3947  0     741140  0.0   0.00  34.17  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   29-0 -     0/0/1651    . 0.00 3487  0     952853  0.0   0.00  34.23  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-0 -     0/0/1294    . 0.00 5255  0     796559  0.0   0.00  30.37  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   31-0 -     0/0/535     . 0.00 5248  0     418251  0.0   0.00  9.62   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   32-0 -     0/0/521     . 0.00 5261  0     501649  0.0   0.00  10.47  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   33-0 -     0/0/226     . 0.00 5215  0     242996  0.0   0.00  4.32   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   34-0 -     0/0/723     . 0.00 4667  0     452012  0.0   0.00  11.57  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   35-0 -     0/0/645     . 0.00 5265  0     507090  0.0   0.00  14.62  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   36-0 -     0/0/89      . 0.00 5229  0     137985  0.0   0.00  0.74   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 -     0/0/222     . 0.00 5134  0     187355  0.0   0.00  4.82   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   38-0 -     0/0/661     . 0.00 5254  0     330279  0.0   0.00  12.67  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   39-0 -     0/0/582     . 0.00 5095  0     506531  0.0   0.00  13.50  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   40-0 -     0/0/227     . 0.00 5257  0     280411  0.0   0.00  4.37   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/416     . 0.00 5251  0     308037  0.0   0.00  9.50   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/144     . 0.00 5228  0     280413  0.0   0.00  1.55   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/290     . 0.00 4415  0     344154  0.0   0.00  5.96   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/292     . 0.00 5264  0     301816  0.0   0.00  6.10   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/198     . 0.00 5227  0     141072  0.0   0.00  1.57   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   46-0 -     0/0/60      . 0.00 13979 0     180509  0.0   0.00  0.80   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   47-0 -     0/0/67      . 0.00 14001 0     226531  0.0   0.00  1.33   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   48-0 -     0/0/203     . 0.00 13992 0     142085  0.0   0.00  4.09   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   49-0 -     0/0/284     . 0.00 13643 0     181603  0.0   0.00  4.73   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   50-0 -     0/0/82      . 0.00 14005 0     44788   0.0   0.00  1.22   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   51-0 -     0/0/8       . 0.00 13965 0     43835   0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   52-0 -     0/0/9       . 0.00 13974 0     45747   0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   53-0 -     0/0/29      . 0.00 13972 0     44492   0.0   0.00  0.32   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   54-0 -     0/0/536     . 0.00 12089 0     268842  0.0   0.00  11.18  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   55-0 -     0/0/4       . 0.00 14009 0     23627   0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   56-0 -     0/0/9       . 0.00 13968 0     47344   0.0   0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   57-0 -     0/0/7       . 0.00 13970 0     44159   0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   58-0 -     0/0/43      . 0.00 14011 11655 23366   0.0   0.00  0.07   45.94.58.4     http/1.1 cloudware.ng:80             GET /requirements.txt HTTP/1.1
   59-0 -     0/0/141     . 0.00 13372 0     113874  0.0   0.00  3.52   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   60-0 -     0/0/132     . 0.00 14002 0     76946   0.0   0.00  2.87   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   61-0 -     0/0/6       . 0.00 14000 0     3701    0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   62-0 -     0/0/204     . 0.00 13559 0     97395   0.0   0.00  2.67   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   63-0 -     0/0/66      . 0.00 13984 0     27806   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   64-0 -     0/0/11      . 0.00 13977 0     25454   0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   65-0 -     0/0/9       . 0.00 13997 0     28822   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   66-0 -     0/0/27      . 0.00 15523 0     28      0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   67-0 -     0/0/42      . 0.00 15528 0     46      0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   68-0 -     0/0/3       . 0.00 15566 0     1240    0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   69-0 -     0/0/2       . 0.00 15565 0     703     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   70-0 -     0/0/5       . 0.00 15558 0     1790    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   71-0 -     0/0/47      . 0.00 15506 0     737     0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   72-0 -     0/0/1       . 0.00 15577 0     0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   73-0 -     0/0/458     . 0.00 14112 0     263682  0.0   0.00  8.36   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   74-0 -     0/0/9       . 0.00 15554 0     4803    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   75-0 -     0/0/1       . 0.00 15576 0     0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   76-0 -     0/0/23      . 0.00 15518 0     2942    0.0   0.00  0.21   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   77-0 -     0/0/200     . 0.00 14874 0     87870   0.0   0.00  4.44   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   78-0 -     0/0/63      . 0.00 15378 0     25484   0.0   0.00  1.24   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 953
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...35)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 189250
   total entries replaced since starting: 0
   total entries expired since starting: 188227
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 510 miss
   total removes since starting: 70 hit, 189 miss
Youez - 2016 - github.com/yon3zu
LinuXploit