403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-23.03.15.txt
 ## swap threshold exceeded
## server overview
2025-11-23.03.15 load[1] mem[67/71] mysql[3/12] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1517          88          79         756         592
Swap:          1999        1626         373
 03:15:02 up 16:12,  0 users,  load average: 1.24, 0.74, 0.60
## system overview
top - 03:15:02 up 16:12,  0 users,  load average: 1.24, 0.74, 0.60
Tasks: 212 total,   5 running, 206 sleeping,   0 stopped,   1 zombie
%Cpu(s): 51.4 us, 28.6 sy,  0.0 ni, 17.1 id,  0.0 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,    85452 free,  1558712 used,   776136 buff/cache
KiB Swap:  2047996 total,   382924 free,  1665072 used.   602208 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1916 mysql     20   0 1478544 240972   2580 S  58.8 10.0  13:27.93 /usr/sbin+
 73635 wp-tool+  20   0  504320  65524  17984 R  11.8  2.7   0:00.31 /usr/bin/+
 73723 nigeria   20   0  404052  16140  10380 R  11.8  0.7   0:00.04 /opt/cpan+
   501 root      20   0   24704   1172    808 S   5.9  0.0   0:13.34 /usr/lib/+
 55670 nobody    20   0  277584  20388   4908 S   5.9  0.8   0:01.88 /usr/sbin+
 73460 oyotech+  20   0  389236   6336   2940 S   5.9  0.3   0:00.05 php-fpm: +
 73781 root      20   0  160220   2064   1580 R   5.9  0.1   0:00.01 top -bcn1
 73815 cloudw    20   0  353712  15968  10484 S   5.9  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44508   3296   1464 S   0.0  0.1   1:18.95 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:03.34 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.27 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:57.63 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.16 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.24 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:09.06 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:34.97 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.06 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:01.31 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.63 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:04.26 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:03.10 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   39500   8088   7848 S   0.0  0.3   0:33.39 /usr/lib/+
   384 root      20   0   45352      8      4 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    444    324 S   0.0  0.0   0:05.42 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    348    260 S   0.0  0.0   0:01.33 /usr/sbin+
   502 dbus      20   0   58720   1356    612 S   0.0  0.1   0:30.57 /usr/bin/+
   504 rpc       20   0   69256     44      0 S   0.0  0.0   0:00.05 /sbin/rpc+
   514 root      20   0  224148   3076    840 S   0.0  0.1   0:00.61 queueproc+
   515 polkitd   20   0  610540    832    456 S   0.0  0.0   0:07.77 /usr/lib/+
   521 root      20   0  152780     72     28 S   0.0  0.0   0:00.03 /usr/sbin+
   523 root      20   0   52852    316    220 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0 1336536   1836    640 S   0.0  0.1   0:40.86 /usr/sbin+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     12      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124508    844    416 S   0.0  0.0   0:01.63 /usr/sbin+
   591 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   3820    892 S   0.0  0.2   0:01.18 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:03.38 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     28     28 S   0.0  0.0   0:01.25 /usr/bin/+
   912 root      20   0 1277312   5772      4 S   0.0  0.2   0:24.77 /usr/bin/+
   913 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.02 /usr/loca+
   914 root      20   0  572372    640    172 S   0.0  0.0   0:04.98 /usr/bin/+
   915 root      20   0   51508    456    292 S   0.0  0.0   0:00.86 /usr/sbin+
   916 telegraf  20   0 5654304  36664   5848 S   0.0  1.5   0:31.06 /usr/loca+
   917 systuser  20   0   12756     52      0 S   0.0  0.0   0:00.02 /usr/loca+
   925 systuser  20   0  114016  12956   2580 S   0.0  0.5   0:13.58 /usr/loca+
   926 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   927 root      20   0  111304    356    256 S   0.0  0.0   0:08.14 /usr/sbin+
   928 root      20   0 1276100   7716      0 S   0.0  0.3   0:25.74 /usr/bin/+
   930 root      20   0  445028    592    480 S   0.0  0.0   0:02.29 sw-engine+
   931 root      20   0  153404    220    136 S   0.0  0.0   0:01.27 pure-ftpd+
   932 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.02 /usr/loca+
   934 root      20   0  439788    404    312 S   0.0  0.0   0:01.53 php-fpm: +
   938 root      20   0  388892    536    436 S   0.0  0.0   0:01.63 php-fpm: +
   939 root      20   0 1828368 294480    864 S   0.0 12.2   0:30.34 /usr/loca+
   940 root      20   0  331088   8324   7664 S   0.0  0.3   0:16.68 /usr/sbin+
   949 named     20   0 1054796  34852   1808 S   0.0  1.4   0:26.48 /usr/sbin+
   958 root      20   0  400740   2444    604 S   0.0  0.1   0:07.69 php-fpm: +
   962 root      20   0  261692   6468   1716 S   0.0  0.3   0:09.25 cpsrvd (S+
   969 cpanelc+  20   0   10564   3448   2284 R   0.0  0.1   0:46.43 /usr/loca+
   979 root      20   0  396248    344    260 S   0.0  0.0   0:01.46 php-fpm: +
   985 root      20   0  389508    416    320 S   0.0  0.0   0:01.52 php-fpm: +
  1083 dovenull  20   0   47116   1604    980 S   0.0  0.1   0:01.81 dovecot/p+
  1084 dovenull  20   0   48232   2596   1596 S   0.0  0.1   0:00.64 dovecot/i+
  1085 dovecot   20   0   10320    360    244 S   0.0  0.0   0:00.44 dovecot/a+
  1086 root      20   0   10452    480    292 S   0.0  0.0   0:01.11 dovecot/l+
  1087 dovenull  20   0   47264   2168   1540 S   0.0  0.1   0:02.08 dovecot/p+
  1088 dovenull  20   0   48324   2552   1592 S   0.0  0.1   0:00.61 dovecot/i+
  1093 root      20   0   24556   2044    492 S   0.0  0.1   0:00.38 dovecot/c+
  1101 dovecot   20   0   13568    556    336 S   0.0  0.0   0:00.16 dovecot/s+
  1142 root      20   0  247932  18672   1188 S   0.0  0.8   0:09.75 /usr/loca+
  1161 dovecot   20   0   41320   1520   1012 S   0.0  0.1   0:02.82 dovecot/a+
  1175 systuser  20   0  157708   2936    888 S   0.0  0.1   0:00.26 SonarPush+
  1177 wp-tool+  20   0  387556   3324   1392 S   0.0  0.1   0:00.50 /usr/bin/+
  1178 wp-tool+  20   0  412396   9436   1380 S   0.0  0.4   0:18.36 /usr/bin/+
  1260 root      20   0  183900   6696   3460 S   0.0  0.3   0:05.96 cpdavd - +
  1263 root      20   0  167452   3144   1776 S   0.0  0.1   0:00.92 dnsadmin +
  1264 root      20   0  209648  10136   2100 S   0.0  0.4   0:06.85 tailwatchd
  1800 root      20   0  299272    440    280 S   0.0  0.0   0:01.54 php-fpm: +
  1834 root      38  18  130416   1372    692 S   0.0  0.1   0:00.15 cpanellog+
  2048 root      20   0  267052   7672    476 S   0.0  0.3   0:04.11 /usr/sbin+
  2050 root      20   0   12804    332    212 S   0.0  0.0   0:06.20 /usr/loca+
  2051 root      20   0   12732    284    208 S   0.0  0.0   0:05.47 /usr/loca+
  2052 root      20   0   12836    344    216 S   0.0  0.0   0:05.83 /usr/loca+
  2059 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  5634 root      20   0  261884  95604   3660 S   0.0  4.0   0:02.21 spamd chi+
 44620 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [kworker/+
 44973 root      20   0  182276   9852   1100 S   0.0  0.4   0:10.34 lfd - sle+
 47566 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152     64     24 S   0.0  0.0   0:01.05 [kworker]
 48208 nobody    20   0  277680  20688   4900 S   0.0  0.9   0:02.79 /usr/sbin+
 54061 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 54854 root      20   0  247932  21484   1432 S   0.0  0.9   0:00.00 spamd chi+
 55509 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 57579 nobody    20   0  277736  20604   4960 S   0.0  0.9   0:01.71 /usr/sbin+
 60608 nobody    20   0  277592  20428   4768 S   0.0  0.8   0:01.49 /usr/sbin+
 62527 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 62813 nobody    20   0  277552  20116   4728 S   0.0  0.8   0:01.30 /usr/sbin+
 63462 root      20   0  123364    684    456 S   0.0  0.0   0:00.00 /usr/sbin+
 63559 nobody    20   0  277640  20152   4616 S   0.0  0.8   0:01.11 /usr/sbin+
 66447 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66872 nobody    20   0  277584  19736   4444 S   0.0  0.8   0:00.84 /usr/sbin+
 66886 nobody    20   0  277612  19684   4316 S   0.0  0.8   0:00.90 /usr/sbin+
 67099 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67604 nobody    20   0  277520  19752   4576 S   0.0  0.8   0:00.76 /usr/sbin+
 67769 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 68180 nobody    20   0  277552  19668   4312 S   0.0  0.8   0:00.57 /usr/sbin+
 68530 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 69156 nobody    20   0  277552  19536   4276 S   0.0  0.8   0:00.53 /usr/sbin+
 69614 nobody    20   0  277552  19468   4264 S   0.0  0.8   0:00.54 /usr/sbin+
 70534 nobody    20   0  277584  19268   4036 S   0.0  0.8   0:00.41 /usr/sbin+
 70707 nobody    20   0  277520  19244   4112 S   0.0  0.8   0:00.35 /usr/sbin+
 70729 nobody    20   0  277908  19400   4060 S   0.0  0.8   0:00.35 /usr/sbin+
 70903 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 71590 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72237 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72254 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72423 root      20   0   41052   2796   2132 S   0.0  0.1   0:00.00 dovecot/a+
 72613 nobody    20   0  277520  18660   3668 S   0.0  0.8   0:00.14 /usr/sbin+
 72669 nobody    20   0  277584  18500   3480 S   0.0  0.8   0:00.01 /usr/sbin+
 72824 nobody    20   0  277908  19212   3860 S   0.0  0.8   0:00.14 /usr/sbin+
 72997 nobody    20   0  277904  19048   3772 S   0.0  0.8   0:00.07 /usr/sbin+
 73058 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 73064 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 73214 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 73221 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 73356 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 73442 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 73451 healtho+  20   0  468140  76332   4504 S   0.0  3.2   0:01.80 php-fpm: +
 73507 healtho+  20   0  469992  76880   4112 S   0.0  3.2   0:01.06 php-fpm: +
 73545 mailnull  20   0   91212   5700   2460 S   0.0  0.2   0:00.00 /usr/sbin+
 73568 healtho+  20   0  443268  50108   4092 S   0.0  2.1   0:00.40 php-fpm: +
 73597 oyotech+  20   0  389236   6152   2844 S   0.0  0.3   0:00.00 php-fpm: +
 73599 nobody    20   0  277832  17152   2416 S   0.0  0.7   0:00.00 /usr/sbin+
 73604 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 73625 nigeria   20   0  400460   4776   2160 S   0.0  0.2   0:00.00 php-fpm: +
 73632 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
 73634 root      20   0  113284   1200   1028 S   0.0  0.0   0:00.00 bash /usr+
 73651 root      20   0  183076   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73652 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73654 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73655 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73656 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73657 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73660 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73661 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73662 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73663 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73665 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73675 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73676 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73677 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 73682 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 73683 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73685 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 73687 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 73689 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 73690 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73691 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 73693 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73695 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 73697 root      20   0  188224  11100   5148 S   0.0  0.5   0:00.02 /usr/loca+
 73700 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 73713 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 73715 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 73722 cloudw    20   0  353712  15968  10488 S   0.0  0.7   0:00.01 /opt/cpan+
 73724 pactpay   20   0  480124  17304  11572 S   0.0  0.7   0:00.01 /opt/cpan+
 73779 root      20   0  160224   2356   1636 S   0.0  0.1   0:00.00 top -n 2 +
 73821 cloudw    20   0  284172  11252   7840 R   0.0  0.5   0:00.00 /opt/cpan+
 81298 worencom  20   0   38488   2580   1596 S   0.0  0.1   0:00.04 dovecot/i+
 83419 root      20   0  183044   1656   1100 S   0.0  0.1   0:00.00 /usr/sbin+
 83479 root      20   0  113284   1100    912 S   0.0  0.0   0:00.00 /bin/sh -+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov22   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov22   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov22   0:57  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov22   0:09  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov22   0:34  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   Nov22   0:04  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov22   0:03  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root      44620  0.0  0.0      0     0 ?        S    02:36   0:00  \_ [kworker/0:0]
root      54061  0.0  0.0      0     0 ?        S    02:48   0:00  \_ [kworker/u200:0]
root      55509  0.0  0.0      0     0 ?        S    02:50   0:00  \_ [kworker/1:2]
root      62527  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/0:4]
root      66447  0.0  0.0      0     0 ?        S    03:05   0:00  \_ [kworker/1:0]
root      67099  0.0  0.0      0     0 ?        S    03:06   0:00  \_ [kworker/0:3]
root      67769  0.0  0.0      0     0 ?        S    03:07   0:00  \_ [kworker/1:3]
root      68530  0.0  0.0      0     0 ?        S    03:08   0:00  \_ [kworker/u200:1]
root      70903  0.0  0.0      0     0 ?        S    03:11   0:00  \_ [kworker/0:1]
root      71590  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/1:1]
root      72237  0.0  0.0      0     0 ?        S    03:13   0:00  \_ [kworker/1:4]
root      72254  0.0  0.0      0     0 ?        S    03:13   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44508  3296 ?        Ss   Nov22   1:18 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.3  39500  8088 ?        Ss   Nov22   0:33 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352     8 ?        Ss   Nov22   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   444 ?        S<sl Nov22   0:05 /sbin/auditd
root        499  0.0  0.0  21540   348 ?        Ss   Nov22   0:01 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1172 ?        Ss   Nov22   0:13 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58720  1356 ?        Ss   Nov22   0:30 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256    44 ?        Ss   Nov22   0:00 /sbin/rpcbind -w
root        514  0.0  0.1 224148  3076 ?        Ss   Nov22   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.0 610540   832 ?        Ssl  Nov22   0:07 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780    72 ?        Ss   Nov22   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   316 ?        Ss   Nov22   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 1336536 1836 ?        Ssl  Nov22   0:40 /usr/sbin/nscd
root        544  0.0  0.0 195208     0 ?        Ssl  Nov22   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388     4 ?        Ss   Nov22   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    12 ?        Ss   Nov22   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124508   844 ?        Ss   Nov22   0:01 /usr/sbin/crond -n
root      83419  0.0  0.0 183044  1656 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      83479  0.0  0.0 113284  1100 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      73634  0.0  0.0 113284  1200 ?        S    03:15   0:00  |       \_ bash /usr/local/bin/wp-toolkit update-configuration
wp-tool+  73635 31.0  2.7 504320 65524 ?        S    03:15   0:00  |           \_ /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script cli-runner.php update-configuration
root      73651  0.0  0.0 183076  2416 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      73682  0.0  0.0 113284  1212 ?        Ss   03:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      73695  0.0  0.0 108052   360 ?        S    03:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      73700  0.0  0.0 113288  1520 ?        S    03:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      73822  0.0  0.0 153840  2096 ?        R    03:15   0:00  |               \_ ps auxf
root      73652  0.0  0.0 183076  2420 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      73691  0.0  0.0  20164   804 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      73654  0.0  0.0 183076  2420 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      73690  0.0  0.0  20164   808 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      73655  0.0  0.0 183076  2416 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      73676  0.0  0.0  20164   808 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      73656  0.0  0.0 183076  2416 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      73693  0.0  0.0  20164   808 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      73657  0.0  0.0 183076  2416 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      73683  0.0  0.0  20164   808 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      73660  0.0  0.0 183076  2412 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      73687  0.0  0.0  20164   804 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      73661  0.0  0.0 183076  2412 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      73675  0.0  0.0  20164   808 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      73662  0.0  0.0 183076  2408 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      73689  0.0  0.0 113284  1212 ?        Ss   03:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      73697  0.0  0.4 188224 11100 ?        S    03:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      73779  0.0  0.0 160224  2356 ?        S    03:15   0:00  |           \_ top -n 2 -b -c
root      73663  0.0  0.0 183076  2412 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      73685  0.0  0.0  20164   972 ?        Ss   03:15   0:00  |   \_ jailshell (pactpay) [73715] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   73715  0.0  0.0  20164   264 ?        S    03:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   73724  0.0  0.7 480124 17668 ?        S    03:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      73665  0.0  0.0 183076  2408 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root      73677  0.0  0.0  20164   972 ?        Ss   03:15   0:00      \_ jailshell (nigeria) [73713] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   73713  0.0  0.0  20164   264 ?        S    03:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   73723  0.0  0.6 404052 16140 ?        S    03:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        591  0.0  0.0 108296     4 tty1     Ss+  Nov22   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov22   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  3820 ?        Ss   Nov22   0:01 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  73545  0.0  0.2  91212  5700 ?        S    03:14   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    28 ?        Ssl  Nov22   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.2 1277312 5772 ?        Ssl  Nov22   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    76 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372   640 ?        Ssl  Nov22   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   456 ?        Ss   Nov22   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.0  47116  1604 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  48232  2596 ?        S    Nov22   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   360 ?        S    Nov22   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   480 ?        S    Nov22   0:01  \_ dovecot/log
dovenull   1087  0.0  0.0  47264  2168 ?        S    Nov22   0:02  \_ dovecot/pop3-login
dovenull   1088  0.0  0.1  48324  2552 ?        S    Nov22   0:00  \_ dovecot/imap-login
root       1093  0.0  0.0  24556  2044 ?        S    Nov22   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   556 ?        S    Nov22   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1520 ?        S    Nov22   0:02  \_ dovecot/auth
worencom  81298  0.0  0.1  38488  2580 ?        S    00:56   0:00  \_ dovecot/imap
root      72423  0.0  0.1  41052  2796 ?        S    03:13   0:00  \_ dovecot/auth -w
root      73356  0.0  0.1  60820  4512 ?        S    03:14   0:00  \_ dovecot/lmtp
telegraf    916  0.0  1.5 5654304 36664 ?       SLsl Nov22   0:31 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756    52 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.5 114016 12956 ?        Ssl  Nov22   0:13 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    68 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   356 ?        Ss   Nov22   0:08 /usr/sbin/sshd -D
root      73058  0.0  0.1 111304  4272 ?        Ss   03:14   0:00  \_ sshd: [accepted]
sshd      73064  0.0  0.1 115644  2628 ?        S    03:14   0:00  |   \_ sshd: [net]
root      73214  0.0  0.1 111304  4264 ?        Ss   03:14   0:00  \_ sshd: [accepted]
sshd      73221  0.0  0.1 115644  2628 ?        S    03:14   0:00  |   \_ sshd: [net]
root      73442  0.0  0.1 111304  4272 ?        Ss   03:14   0:00  \_ sshd: [accepted]
root        928  0.0  0.3 1276100 7716 ?        Ssl  Nov22   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028   592 ?        Ss   Nov22   0:02 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  73632  0.0  0.0 445028   324 ?        S    03:15   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   220 ?        Ss   Nov22   0:01 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132    36 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.0 439788   404 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   536 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
oyotech+  73460  0.2  0.2 389236  6336 ?        S    03:14   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
oyotech+  73597  0.0  0.2 389236  6152 ?        S    03:14   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
root        939  0.0 12.1 1828368 294480 ?      Ssl  Nov22   0:30 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.3 331088  8324 ?        Ssl  Nov22   0:16 /usr/sbin/rsyslogd -n
named       949  0.0  1.4 1054796 34852 ?       Ssl  Nov22   0:26 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  2444 ?        Ss   Nov22   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  73451  9.4  3.1 468140 76332 ?        S    03:14   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  73507  9.6  3.1 469992 76880 ?        S    03:14   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  73568  8.0  2.0 443268 50108 ?        S    03:14   0:00  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   73625  0.0  0.1 400460  4776 ?        S    03:14   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.2 261692  6468 ?        Ss   Nov22   0:09 cpsrvd (SSL) - waiting for connections                   
root      73604  0.0  0.0      0     0 ?        Z    03:14   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10564  3448 ?        Ss   Nov22   0:46 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   344 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   416 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  0.7 247932 18672 ?        Ss   Nov22   0:09 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5634  0.0  3.9 261884 95604 ?        S    Nov22   0:02  \_ spamd child
root      54854  0.0  0.8 247932 21484 ?        S    02:49   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  2936 ?        S    Nov22   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387556  3324 ?        Ss   Nov22   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.3 412396  9436 ?        Ss   Nov22   0:18 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  0.2 183900  6696 ?        Ss   Nov22   0:05 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1263  0.0  0.1 167452  3144 ?        Ss   Nov22   0:00 dnsadmin - dormant mode
root       1264  0.0  0.4 209648 10136 ?        Ss   Nov22   0:06 tailwatchd
root       1800  0.0  0.0 299272   440 ?        Ss   Nov22   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1372 ?        SN   Nov22   0:00 cpanellogd - sleeping for logs
mysql      1916  1.3  9.9 1478544 240972 ?      Sl   Nov22  13:27 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  7672 ?        Ss   Nov22   0:04 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12804   332 ?        S    Nov22   0:06  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   284 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12836   344 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340     4 ?        S    Nov22   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    48208  0.1  0.8 277680 20688 ?        S    02:41   0:02  \_ /usr/sbin/httpd -k start
nobody    55670  0.1  0.8 277584 20388 ?        S    02:50   0:01  \_ /usr/sbin/httpd -k start
nobody    57579  0.1  0.8 277736 20604 ?        S    02:53   0:01  \_ /usr/sbin/httpd -k start
nobody    60608  0.1  0.8 277592 20428 ?        S    02:57   0:01  \_ /usr/sbin/httpd -k start
nobody    62813  0.1  0.8 277552 20116 ?        S    03:00   0:01  \_ /usr/sbin/httpd -k start
nobody    63559  0.1  0.8 277640 20156 ?        S    03:01   0:01  \_ /usr/sbin/httpd -k start
nobody    66872  0.1  0.8 277584 19736 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
nobody    66886  0.1  0.8 277612 19684 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
nobody    67604  0.1  0.8 277520 19752 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
cloudw    73821  0.0  0.6 353712 15968 ?        S    03:15   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    68180  0.1  0.8 277552 19668 ?        S    03:07   0:00  \_ /usr/sbin/httpd -k start
nobody    69156  0.1  0.8 277552 19536 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    69614  0.1  0.8 277552 19468 ?        S    03:09   0:00  \_ /usr/sbin/httpd -k start
nobody    70534  0.1  0.7 277584 19268 ?        S    03:10   0:00  \_ /usr/sbin/httpd -k start
nobody    70707  0.1  0.7 277520 19244 ?        S    03:10   0:00  \_ /usr/sbin/httpd -k start
cloudw    73815  0.0  0.6 353712 15968 ?        S    03:15   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    70729  0.1  0.8 277908 19400 ?        S    03:10   0:00  \_ /usr/sbin/httpd -k start
nobody    72613  0.1  0.7 277520 18660 ?        S    03:13   0:00  \_ /usr/sbin/httpd -k start
nobody    72669  0.0  0.7 277584 18500 ?        S    03:13   0:00  \_ /usr/sbin/httpd -k start
nobody    72824  0.2  0.7 277908 19212 ?        S    03:13   0:00  \_ /usr/sbin/httpd -k start
nobody    72997  0.1  0.7 277904 19048 ?        S    03:14   0:00  \_ /usr/sbin/httpd -k start
nobody    73599  0.0  0.7 277832 17152 ?        S    03:14   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47566  0.0  0.0   3148     8 ?        Ss   Nov22   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152    64 ?        S    Nov22   0:01  \_ [kworker]
root      44973  0.0  0.4 182276  9852 ?        Ss   00:00   0:10 lfd - sleeping
root      63462  0.0  0.0 123364   684 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 58316  Threads: 3  Questions: 5251571  Slow queries: 0  Opens: 11762  Flush tables: 1  Open tables: 2000  Queries per second avg: 90.053
*************************** 1. row ***************************
     Id: 80583
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 80584
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 80591
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.145.187 TIME_WAIT
      1 114.119.150.65 TIME_WAIT
      1 142.44.228.227 TIME_WAIT
      1 142.44.228.27 TIME_WAIT
      1 180.153.236.31 TIME_WAIT
      1 192.178.4.96 TIME_WAIT
      1 192.178.4.97 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.161.65.223 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 58.97.220.33 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 03:15:02 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 16 hours 11 minutes 51 seconds
   Server load: 1.24 0.74 0.60
   Total accesses: 277029 - Total Traffic: 6.6 GB - Total Duration: 145996410
   CPU Usage: u11.74 s8.26 cu3299.8 cs2575.05 - 10.1% CPU load
   4.75 requests/sec - 118.3 kB/second - 24.9 kB/request - 527.008 ms/request
   16 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KKKKKKW_R_KK_WK.KR_KK...........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc      M CPU    SS    Req    Dur   Conn  Child  Slot      Client     Protocol              VHost                                          Request
   0-0  69614 1/119/14759  K 2.12  0     0     7500401 5.5   2.84  361.82 58.97.220.33   http/1.1 covid19.oyostate.gov.ng:443     GET /email_v2/js/tiny_mce/plugins/ajaxfilemanager/ajaxfilemanag
   1-0  69156 1/127/14500  K 2.06  0     11    7755979 0.9   2.94  357.85 58.97.220.33   http/1.1 covid-19.oyostate.gov.ng:80     GET /wp-includes/customize/index.php HTTP/1.1
   2-0  57579 2/422/14283  K 6.42  1     305   7618303 65.7  9.55  343.89 192.178.4.100  http/1.1 team.cloudware.ng:443           GET /?l=81369082 HTTP/1.1
   3-0  70707 3/86/13790   K 1.32  0     331   7116463 96.6  2.02  341.34 192.178.4.99   http/1.1 team.cloudware.ng:443           GET /?l=2075064624 HTTP/1.1
   4-0  63559 1/294/14053  K 4.07  0     390   7109311 33.7  6.91  342.87 192.178.4.97   http/1.1 team.cloudware.ng:443           GET /?l=2475457202 HTTP/1.1
   5-0  48208 3/657/14405  K 11.08 1     278   7337760 95.4  17.70 373.64 192.178.4.102  http/1.1 team.cloudware.ng:443           GET /?l=3667139434 HTTP/1.1
   6-0  67604 0/163/13301  W 3.04  0     0     6601197 0.0   3.79  332.88 192.178.4.103  http/1.1 team.cloudware.ng:443           GET /?l=1800583939 HTTP/1.1
   7-0  70534 0/127/13758  _ 1.35  0     350   6970238 0.0   6.27  335.70 192.178.4.103  http/1.1 team.cloudware.ng:443           GET /?l=1339616575 HTTP/1.1
   8-0  62813 0/385/13221  R 5.20  0     281   6594762 0.0   6.96  316.09 34.234.200.207 http/1.1 nigeriadecide.org:443
   9-0  72613 0/29/12180   _ 0.58  0     0     6345372 0.0   0.93  303.33 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80          GET /whm-server-status HTTP/1.0
   10-0 70729 3/83/12144   K 1.29  2     315   6250290 98.1  2.33  290.09 192.178.4.101  http/1.1 team.cloudware.ng:443           GET /?l=2307411112 HTTP/1.1
   11-0 66872 1/184/12344  K 3.20  4     347   6339786 34.2  4.50  306.48 192.178.4.102  http/1.1 team.cloudware.ng:443           GET /?l=207665765 HTTP/1.1
   12-0 73599 0/4/12217    _ 0.00  0     0     6328521 0.0   0.03  314.54 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   13-0 68180 0/156/11896  W 1.95  0     0     6052762 0.0   2.98  285.13 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   14-0 55670 52/458/10739 K 7.29  0     56    5407240 213.9 12.52 256.77 48.210.12.181  http/1.1 bookingapp.staging.cloudware.ng GET /cgi-sys/suspendedpage.cgi HTTP/1.1
   15-0 -     0/0/9134     . 0.00  52    0     4543756 0.0   0.00  226.48 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   16-0 66886 4/230/9076   K 4.56  3     394   4563438 127.8 7.29  217.58 192.178.4.96   http/1.1 team.cloudware.ng:443           GET /?l=498345477 HTTP/1.1
   17-0 72669 0/7/8497     R 0.03  65    0     4306658 0.0   0.13  212.13 98.97.160.232  http/1.1
   18-0 60608 0/424/7384   _ 5.14  0     923   3854587 0.0   8.06  173.66 58.97.220.33   http/1.1 health.oyostate.gov.ng:80       GET /wp-seo.php HTTP/1.1
   19-0 72824 9/26/8116    K 0.58  3     262   3965430 279.5 0.64  200.55 192.178.4.97   http/1.1 team.cloudware.ng:443           GET /?l=3463172307 HTTP/1.1
   20-0 72997 1/22/5862    K 0.18  0     323   3194928 35.3  0.63  135.37 192.178.4.105  http/1.1 team.cloudware.ng:443           GET /?l=1065889336 HTTP/1.1
   21-0 -     0/0/4847     . 0.00  49    0     2791890 0.0   0.00  121.73 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 -     0/0/3224     . 0.00  547   0     1905911 0.0   0.00  85.46  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/2854     . 0.00  5147  0     1555805 0.0   0.00  58.97  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -     0/0/1636     . 0.00  4755  0     1282876 0.0   0.00  39.63  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/2570     . 0.00  5251  0     1163271 0.0   0.00  57.91  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/1903     . 0.00  4764  0     1185213 0.0   0.00  47.42  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/1301     . 0.00  5214  0     843370  0.0   0.00  38.82  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/1528     . 0.00  5207  0     741140  0.0   0.00  34.17  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/1651     . 0.00  4747  0     952853  0.0   0.00  34.23  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/1294     . 0.00  6515  0     796559  0.0   0.00  30.37  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/535      . 0.00  6508  0     418251  0.0   0.00  9.62   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/521      . 0.00  6521  0     501649  0.0   0.00  10.47  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/226      . 0.00  6475  0     242996  0.0   0.00  4.32   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/723      . 0.00  5928  0     452012  0.0   0.00  11.57  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/645      . 0.00  6525  0     507090  0.0   0.00  14.62  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/89       . 0.00  6489  0     137985  0.0   0.00  0.74   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/222      . 0.00  6394  0     187355  0.0   0.00  4.82   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/661      . 0.00  6514  0     330279  0.0   0.00  12.67  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/582      . 0.00  6355  0     506531  0.0   0.00  13.50  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/227      . 0.00  6517  0     280411  0.0   0.00  4.37   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/416      . 0.00  6511  0     308037  0.0   0.00  9.50   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/144      . 0.00  6488  0     280413  0.0   0.00  1.55   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/290      . 0.00  5675  0     344154  0.0   0.00  5.96   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/292      . 0.00  6524  0     301816  0.0   0.00  6.10   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/198      . 0.00  6487  0     141072  0.0   0.00  1.57   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/60       . 0.00  15239 0     180509  0.0   0.00  0.80   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/67       . 0.00  15261 0     226531  0.0   0.00  1.33   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/203      . 0.00  15252 0     142085  0.0   0.00  4.09   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/284      . 0.00  14904 0     181603  0.0   0.00  4.73   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/82       . 0.00  15265 0     44788   0.0   0.00  1.22   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/8        . 0.00  15225 0     43835   0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/9        . 0.00  15234 0     45747   0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/29       . 0.00  15232 0     44492   0.0   0.00  0.32   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/536      . 0.00  13349 0     268842  0.0   0.00  11.18  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/4        . 0.00  15269 0     23627   0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/9        . 0.00  15228 0     47344   0.0   0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -     0/0/7        . 0.00  15230 0     44159   0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -     0/0/43       . 0.00  15271 11655 23366   0.0   0.00  0.07   45.94.58.4     http/1.1 cloudware.ng:80                 GET /requirements.txt HTTP/1.1
   59-0 -     0/0/141      . 0.00  14633 0     113874  0.0   0.00  3.52   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -     0/0/132      . 0.00  15262 0     76946   0.0   0.00  2.87   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -     0/0/6        . 0.00  15260 0     3701    0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-0 -     0/0/204      . 0.00  14820 0     97395   0.0   0.00  2.67   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-0 -     0/0/66       . 0.00  15244 0     27806   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-0 -     0/0/11       . 0.00  15237 0     25454   0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-0 -     0/0/9        . 0.00  15257 0     28822   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-0 -     0/0/27       . 0.00  16784 0     28      0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-0 -     0/0/42       . 0.00  16789 0     46      0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-0 -     0/0/3        . 0.00  16827 0     1240    0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-0 -     0/0/2        . 0.00  16826 0     703     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-0 -     0/0/5        . 0.00  16819 0     1790    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-0 -     0/0/47       . 0.00  16767 0     737     0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-0 -     0/0/1        . 0.00  16838 0     0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-0 -     0/0/458      . 0.00  15373 0     263682  0.0   0.00  8.36   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   74-0 -     0/0/9        . 0.00  16815 0     4803    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-0 -     0/0/1        . 0.00  16837 0     0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-0 -     0/0/23       . 0.00  16779 0     2942    0.0   0.00  0.21   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-0 -     0/0/200      . 0.00  16135 0     87870   0.0   0.00  4.44   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-0 -     0/0/63       . 0.00  16638 0     25484   0.0   0.00  1.24   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 986
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 1...39)
   index usage: 17%, cache usage: 23%
   total entries stored since starting: 193403
   total entries replaced since starting: 0
   total entries expired since starting: 192345
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 521 miss
   total removes since starting: 72 hit, 189 miss
Youez - 2016 - github.com/yon3zu
LinuXploit