403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.14.30.txt
 ## swap threshold exceeded
## server overview
2025-11-07.14.30 load[0] mem[57/72] mysql[5/25] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1272         184          45         906         872
Swap:          1999        1514         485
 14:30:01 up  4:43,  0 users,  load average: 0.40, 0.52, 0.58
## system overview
top - 14:30:01 up  4:43,  0 users,  load average: 0.40, 0.52, 0.58
Tasks: 215 total,   5 running, 200 sleeping,   0 stopped,  10 zombie
%Cpu(s): 79.4 us, 20.6 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   174760 free,  1316924 used,   928616 buff/cache
KiB Swap:  2047996 total,   496892 free,  1551104 used.   880116 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1469608 262644   3808 S 125.0 10.9   5:31.94 /usr/sbin+
 27582 nigeria   20   0  400652  15936  10220 R  18.8  0.7   0:00.05 /opt/cpan+
 27655 root      20   0  218728  17620   2288 S  18.8  0.7   0:00.03 tailwatch+
 27658 cloudsms  20   0  400784  15564  10020 S  12.5  0.6   0:00.02 /opt/cpan+
 27659 root      20   0  108108    616    524 R   6.2  0.0   0:00.01 /bin/dmesg
     1 root      20   0   44424   3656   1692 S   0.0  0.2   0:24.47 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.35 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.26 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:18.64 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.23 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.06 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:23.16 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.29 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.38 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.65 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.06 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   39500   1596   1352 S   0.0  0.1   0:08.16 /usr/lib/+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    468    348 S   0.0  0.0   0:01.25 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0   24720   1224    788 S   0.0  0.1   0:03.86 /usr/lib/+
   493 root      20   0  224268   4680   1096 S   0.0  0.2   0:00.34 queueproc+
   494 root      20   0  152780     76     36 S   0.0  0.0   0:00.01 /usr/sbin+
   499 nscd      20   0 1334484   1968    760 S   0.0  0.1   0:05.71 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   503 dbus      20   0   57032   1328    616 S   0.0  0.1   0:08.87 /usr/bin/+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    376    268 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    984    608 S   0.0  0.0   0:02.27 /usr/lib/+
   541 root      20   0   21540    388    280 S   0.0  0.0   0:00.39 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    428    296 S   0.0  0.0   0:00.48 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3804    888 S   0.0  0.2   0:00.25 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.21 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   959 systuser  20   0  114016  10240   2456 S   0.0  0.4   0:04.10 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   961 root      20   0  572372    624    164 S   0.0  0.0   0:01.53 /usr/bin/+
   963 telegraf  20   0 5654048  35244   6064 S   0.0  1.5   0:09.49 /usr/loca+
   964 root      20   0   51508    460    296 S   0.0  0.0   0:00.23 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   981 named     20   0  785392  30852   2084 S   0.0  1.3   0:11.44 /usr/sbin+
   982 root      20   0 1828076 198152    932 S   0.0  8.2   0:34.03 /usr/loca+
   984 root      20   0  386112    428    332 S   0.0  0.0   0:00.53 php-fpm: +
   992 root      20   0  397344   2416    612 S   0.0  0.1   0:03.63 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.37 /usr/bin/+
  1007 root      20   0  392856    344    260 S   0.0  0.0   0:00.52 php-fpm: +
  1012 root      20   0  385496    400    300 S   0.0  0.0   0:00.53 php-fpm: +
  1013 root      20   0  265552   1992   1248 S   0.0  0.1   0:04.32 /usr/sbin+
  1014 root      20   0  261032  27976   5536 S   0.0  1.2   0:06.01 cpsrvd (S+
  1017 root      20   0  436392    356    268 S   0.0  0.0   0:00.63 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.37 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:01.75 /usr/sbin+
  1026 cpanelc+  20   0   10540   3572   2312 S   0.0  0.1   0:12.86 /usr/loca+
  1096 dovenull  20   0   46912   1328    792 S   0.0  0.1   0:00.25 dovecot/p+
  1097 dovenull  20   0   47720   2948   1836 S   0.0  0.1   0:00.13 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.05 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.21 dovecot/l+
  1100 dovenull  20   0   46912   2164   1596 S   0.0  0.1   0:00.36 dovecot/p+
  1101 dovenull  20   0   47680   3064   1820 S   0.0  0.1   0:00.21 dovecot/i+
  1108 root      20   0   24564   2500    500 S   0.0  0.1   0:00.13 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.04 dovecot/s+
  1182 dovecot   20   0   41136   1468   1012 S   0.0  0.1   0:00.37 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.10 SonarPush+
  1233 wp-tool+  20   0  410452  26032   1684 S   0.0  1.1   0:14.02 /usr/bin/+
  1234 wp-tool+  20   0  387528   3516   1660 S   0.0  0.1   0:00.22 /usr/bin/+
  1264 root      20   0  262224  24612   6760 S   0.0  1.0   0:01.25 cpdavd - +
  1265 root      20   0  209320  10724   2212 S   0.0  0.4   0:01.84 tailwatchd
  1267 root      20   0  167452   1200    652 S   0.0  0.0   0:00.28 dnsadmin +
  1713 root      20   0  299272    632    448 S   0.0  0.0   0:00.46 php-fpm: +
  1728 root      38  18  130416   1364    692 S   0.0  0.1   0:00.04 cpanellog+
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:01.01 /usr/sbin+
  1970 root      20   0   12812    328    212 S   0.0  0.0   0:01.29 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:01.09 /usr/loca+
  1972 root      20   0   12852    340    216 S   0.0  0.0   0:01.19 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  182228  10248   1104 S   0.0  0.4   0:14.83 lfd - sle+
  6776 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
  8329 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.31 [kworker]
  9303 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 10468 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 13483 root      20   0 1275844  10144    600 S   0.0  0.4   0:00.06 /usr/bin/+
 13517 root      20   0 1277312  11476    600 S   0.0  0.5   0:00.07 /usr/bin/+
 13824 nobody    20   0  277828  20472   4900 S   0.0  0.8   0:01.39 /usr/sbin+
 19043 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 19308 nobody    20   0  277556  19504   4668 S   0.0  0.8   0:00.87 /usr/sbin+
 19376 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 19982 nobody    20   0  277840  18488   4240 S   0.0  0.8   0:00.43 /usr/sbin+
 22078 nobody    20   0  277512  18336   4124 S   0.0  0.8   0:00.50 /usr/sbin+
 22635 nobody    20   0  277512  17896   3964 S   0.0  0.7   0:00.12 /usr/sbin+
 23076 nobody    20   0  277468  18844   4380 S   0.0  0.8   0:00.42 /usr/sbin+
 23163 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 23225 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 25043 cloudw    20   0  471840   9496   5236 S   0.0  0.4   0:00.46 php-fpm: +
 25119 nobody    20   0  277848  17620   3696 S   0.0  0.7   0:00.07 /usr/sbin+
 25127 nobody    20   0  277584  18116   3980 S   0.0  0.7   0:00.16 /usr/sbin+
 25138 nobody    20   0  277804  18360   4072 S   0.0  0.8   0:00.20 /usr/sbin+
 25146 nobody    20   0  277512  17704   4012 S   0.0  0.7   0:00.18 /usr/sbin+
 25147 nobody    20   0  277508  17744   3936 S   0.0  0.7   0:00.20 /usr/sbin+
 25150 nobody    20   0  277864  17916   3736 S   0.0  0.7   0:00.08 /usr/sbin+
 25152 nobody    20   0  277512  18232   4160 S   0.0  0.8   0:00.27 /usr/sbin+
 25153 nobody    20   0  277844  17836   3948 S   0.0  0.7   0:00.22 /usr/sbin+
 25792 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25794 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 26195 nobody    20   0  277512  17512   3788 S   0.0  0.7   0:00.08 /usr/sbin+
 26872 cloudw    20   0  471784   9260   4976 S   0.0  0.4   0:00.23 php-fpm: +
 27067 cloudw    20   0  471784   9264   4976 S   0.0  0.4   0:00.23 php-fpm: +
 27148 nigeria   20   0  397064   5272   2268 S   0.0  0.2   0:00.01 php-fpm: +
 27298 cloudw    20   0  470992   6368   3336 S   0.0  0.3   0:00.17 php-fpm: +
 27415 healtho+  20   0  439840  49884   4080 S   0.0  2.1   0:00.41 php-fpm: +
 27476 nobody    20   0  277044  15156   2252 S   0.0  0.6   0:00.00 /usr/sbin+
 27487 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 27488 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 27489 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 27490 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 27491 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 27492 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 27493 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 27494 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 27495 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 27496 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 27501 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 27502 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27503 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27504 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27505 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27506 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27508 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27509 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27510 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27511 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27512 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27513 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27514 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27515 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 27516 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 27518 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27527 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 27529 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 27530 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 27531 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 27532 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 27533 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 27534 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 27535 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 27536 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 27537 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 27538 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 27540 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 27541 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 27543 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 27544 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 27545 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 27548 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 27549 root      20   0  188220  11104   5152 S   0.0  0.5   0:00.01 /usr/loca+
 27556 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 27563 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 27569 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 27577 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 27586 root      20   0  160224   2360   1632 S   0.0  0.1   0:00.00 top -n 2 +
 27651 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 27656 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 27657 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 27660 root      20   0  262224  18484    632 R   0.0  0.8   0:00.00 cpdavd - +
 28537 root      20   0  248100 118080   1388 S   0.0  4.9   0:04.26 /usr/loca+
 32709 root      20   0  269720 136688   3196 S   0.0  5.6   0:06.08 spamd chi+
 32710 root      20   0  249228 118356    624 S   0.0  4.9   0:00.04 spamd chi+
 89546 cloudw    20   0  471840   9528   5256 S   0.0  0.4   0:04.60 php-fpm: +
 96977 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:18  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        R    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      96977  0.0  0.0      0     0 ?        S    13:20   0:00  \_ [kworker/u200:2]
root       6776  0.0  0.0      0     0 ?        S    13:45   0:00  \_ [kworker/1:4]
root       8329  0.0  0.0      0     0 ?        S    13:49   0:00  \_ [kworker/0:1]
root       9303  0.0  0.0      0     0 ?        S    13:51   0:00  \_ [kworker/1:0]
root      10468  0.0  0.0      0     0 ?        S    13:54   0:00  \_ [kworker/0:2]
root      19043  0.0  0.0      0     0 ?        S    14:11   0:00  \_ [kworker/0:4]
root      19376  0.0  0.0      0     0 ?        D    14:12   0:00  \_ [kworker/u200:0]
root      23163  0.0  0.0      0     0 ?        R    14:21   0:00  \_ [kworker/0:3]
root      23225  0.0  0.0      0     0 ?        S    14:21   0:00  \_ [kworker/1:1]
root      25792  0.0  0.0      0     0 ?        S    14:27   0:00  \_ [kworker/1:2]
root      25794  0.0  0.0      0     0 ?        D    14:27   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44424  3656 ?        Ss   09:46   0:24 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.0  39500  1596 ?        Ss   09:46   0:08 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   468 ?        R<sl 09:46   0:01 /sbin/auditd
root        489  0.0  0.0  24720  1224 ?        Ss   09:46   0:03 /usr/lib/systemd/systemd-logind
root        493  0.0  0.1 224268  4680 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    76 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1968 ?        Ssl  09:46   0:05 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1328 ?        Ss   09:46   0:08 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   376 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   984 ?        Ssl  09:46   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   388 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   428 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      27501  0.0  0.0 183048  2136 ?        S    14:30   0:00  \_ /usr/sbin/CROND -n
root      27527  0.0  0.0 113284  1212 ?        Ss   14:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      27548  0.0  0.0 108052   356 ?        S    14:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      27556  0.0  0.0 113288  1516 ?        S    14:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      27661  0.0  0.0 153840  2088 ?        R    14:30   0:00  |               \_ ps auxf
root      27503  0.0  0.0 183048  2140 ?        S    14:30   0:00  \_ /usr/sbin/CROND -n
root      27534  0.0  0.0  20164   808 ?        Ss   14:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      27504  0.0  0.0 183048  2140 ?        S    14:30   0:00  \_ /usr/sbin/CROND -n
root      27545  0.0  0.0  20164   808 ?        Ss   14:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      27505  0.0  0.0 183048  2140 ?        S    14:30   0:00  \_ /usr/sbin/CROND -n
root      27531  0.0  0.0  20164   808 ?        Ss   14:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      27506  0.0  0.0 183048  2140 ?        S    14:30   0:00  \_ /usr/sbin/CROND -n
root      27535  0.0  0.0  20164   804 ?        Ss   14:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      27508  0.0  0.0 183048  2140 ?        S    14:30   0:00  \_ /usr/sbin/CROND -n
root      27529  0.0  0.0  20164   808 ?        Ss   14:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      27509  0.0  0.0 183048  2140 ?        S    14:30   0:00  \_ /usr/sbin/CROND -n
root      27538  0.0  0.0  20164   808 ?        Ss   14:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      27510  0.0  0.0 183048  2140 ?        S    14:30   0:00  \_ /usr/sbin/CROND -n
root      27540  0.0  0.0  20164   808 ?        Ss   14:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      27511  0.0  0.0 183048  2140 ?        S    14:30   0:00  \_ /usr/sbin/CROND -n
root      27543  0.0  0.0  20164   804 ?        Ss   14:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      27512  0.0  0.0 183048  2140 ?        S    14:30   0:00  \_ /usr/sbin/CROND -n
root      27544  0.0  0.0  20164   804 ?        Ss   14:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      27513  0.0  0.0 183048  2140 ?        S    14:30   0:00  \_ /usr/sbin/CROND -n
root      27533  0.0  0.0  20164   804 ?        Ss   14:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      27514  0.0  0.0 183048  2140 ?        S    14:30   0:00  \_ /usr/sbin/CROND -n
root      27536  0.0  0.0  20164   808 ?        Ss   14:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      27515  0.0  0.0 183048  2136 ?        S    14:30   0:00  \_ /usr/sbin/CROND -n
root      27541  0.0  0.0 113284  1212 ?        Ss   14:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      27549  1.0  0.4 188220 11104 ?        S    14:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      27586  0.0  0.0 160224  2360 ?        S    14:30   0:00  |           \_ top -n 2 -b -c
root      27516  0.0  0.0 183048  2144 ?        S    14:30   0:00  \_ /usr/sbin/CROND -n
root      27537  0.0  0.0  20164   968 ?        Ss   14:30   0:00  |   \_ jailshell (pactpay) [27563] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   27563  0.0  0.0  20164   264 ?        S    14:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   27577  0.0  0.7 476724 17484 ?        S    14:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      27518  0.0  0.0 183048  2140 ?        S    14:30   0:00  \_ /usr/sbin/CROND -n
root      27530  0.0  0.0  20164   960 ?        Ss   14:30   0:00      \_ jailshell (nigeria) [27569] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   27569  0.0  0.0  20164   256 ?        S    14:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   27582  0.0  0.6 400652 15936 ?        S    14:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3804 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 10240 ?        Ssl  09:46   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   624 ?        Ssl  09:46   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654048 35244 ?       SLsl 09:46   0:09 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   460 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.0  46912  1328 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  47720  2948 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  2164 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  47680  3064 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.1  24564  2500 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41136  1468 ?        S    09:46   0:00  \_ dovecot/auth
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.2 785392 30852 ?        Ssl  09:46   0:11 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.1  8.1 1828076 198152 ?      Ssl  09:46   0:34 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   428 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.0 397344  2416 ?        Ss   09:46   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    89546  0.0  0.3 471840  9528 ?        S    13:05   0:04  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    25043  0.1  0.3 471840  9496 ?        S    14:25   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    26872  0.4  0.3 471784  9260 ?        S    14:29   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    27067  0.6  0.3 471784  9264 ?        S    14:29   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
nigeria   27148  0.0  0.2 397064  5272 ?        S    14:29   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    27298  1.0  0.2 470992  6368 ?        R    14:29   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
healtho+  27415 13.6  2.0 439840 49884 ?        S    14:29   0:00  \_ php-fpm: pool health_oyostate_gov_ng
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   344 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   400 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.0 265552  1992 ?        Ssl  09:46   0:04 /usr/sbin/rsyslogd -n
root       1014  0.0  1.1 261032 27976 ?        Ss   09:46   0:06 cpsrvd (SSL) - waiting for connections                   
root      27487  0.0  0.0      0     0 ?        Z    14:30   0:00  \_ [webmaild - serv] <defunct>
root      27488  0.0  0.0      0     0 ?        Z    14:30   0:00  \_ [webmaild - serv] <defunct>
root      27489  0.0  0.0      0     0 ?        Z    14:30   0:00  \_ [webmaild - serv] <defunct>
root      27490  0.0  0.0      0     0 ?        Z    14:30   0:00  \_ [webmaild - serv] <defunct>
root      27491  0.0  0.0      0     0 ?        Z    14:30   0:00  \_ [webmaild - serv] <defunct>
root      27492  0.0  0.0      0     0 ?        Z    14:30   0:00  \_ [webmaild - serv] <defunct>
root      27493  0.0  0.0      0     0 ?        Z    14:30   0:00  \_ [webmaild - serv] <defunct>
root      27494  0.0  0.0      0     0 ?        Z    14:30   0:00  \_ [webmaild - serv] <defunct>
root      27495  0.0  0.0      0     0 ?        Z    14:30   0:00  \_ [webmaild - serv] <defunct>
root      27496  0.0  0.0      0     0 ?        Z    14:30   0:00  \_ [webmaild - serv] <defunct>
root       1017  0.0  0.0 436392   356 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:01 /usr/sbin/sshd -D
cpanelc+   1026  0.0  0.1  10540  3572 ?        Ss   09:46   0:12 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  1.0 410452 26032 ?        Ss   09:46   0:14 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3516 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  1.0 262224 24612 ?        Ss   09:46   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1265  0.0  0.4 209320 10724 ?        Ss   09:46   0:01 tailwatchd
root      27655  0.0  0.7 221756 18492 ?        D    14:30   0:00  \_ tailwatchd - chkservd - queueprocd check
root       1267  0.0  0.0 167452  1200 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1713  0.0  0.0 299272   632 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.0 130416  1364 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  1.9 10.8 1469608 262644 ?      Sl   09:46   5:31 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:01 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12812   328 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12852   340 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    13824  0.0  0.8 277828 20472 ?        S    14:00   0:01  \_ /usr/sbin/httpd -k start
nobody    19308  0.0  0.8 277556 19504 ?        S    14:11   0:00  \_ /usr/sbin/httpd -k start
nobody    19982  0.0  0.7 277840 18488 ?        S    14:13   0:00  \_ /usr/sbin/httpd -k start
nobody    22078  0.0  0.7 277512 18336 ?        S    14:18   0:00  \_ /usr/sbin/httpd -k start
nobody    22635  0.0  0.7 277512 17896 ?        S    14:19   0:00  \_ /usr/sbin/httpd -k start
nobody    23076  0.0  0.7 277468 18844 ?        S    14:20   0:00  \_ /usr/sbin/httpd -k start
nobody    25119  0.0  0.7 277848 17620 ?        S    14:25   0:00  \_ /usr/sbin/httpd -k start
nobody    25127  0.0  0.7 277584 18116 ?        S    14:25   0:00  \_ /usr/sbin/httpd -k start
nobody    25138  0.0  0.7 277804 18360 ?        S    14:25   0:00  \_ /usr/sbin/httpd -k start
nobody    25146  0.0  0.7 277512 17704 ?        S    14:25   0:00  \_ /usr/sbin/httpd -k start
nobody    25147  0.0  0.7 277508 17744 ?        S    14:25   0:00  \_ /usr/sbin/httpd -k start
nobody    25150  0.0  0.7 277864 17916 ?        S    14:25   0:00  \_ /usr/sbin/httpd -k start
nobody    25152  0.0  0.7 277512 18232 ?        S    14:25   0:00  \_ /usr/sbin/httpd -k start
nobody    25153  0.0  0.7 277844 17836 ?        S    14:25   0:00  \_ /usr/sbin/httpd -k start
nobody    26195  0.0  0.7 277512 17512 ?        S    14:27   0:00  \_ /usr/sbin/httpd -k start
nobody    27476  0.0  0.6 277044 15156 ?        S    14:30   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.0  0.4 182228 10248 ?        Ss   09:46   0:14 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      28537  0.0  4.8 248100 118080 ?       Ss   10:50   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.0  5.6 269720 136688 ?       S    11:00   0:06  \_ spamd child
root      32710  0.0  4.8 249228 118356 ?       S    11:00   0:00  \_ spamd child
root      13483  0.0  0.4 1275844 10144 ?       Ssl  14:00   0:00 /usr/bin/cspdaemon
root      13517  0.0  0.4 1277312 11476 ?       Ssl  14:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 38727  Threads: 3  Questions: 2199576  Slow queries: 0  Opens: 7607  Flush tables: 1  Open tables: 2000  Queries per second avg: 56.796
*************************** 1. row ***************************
     Id: 33253
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 33256
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 33262
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.238.15.10 TIME_WAIT
      1 113.95.137.38 TIME_WAIT
      1 167.114.139.30 TIME_WAIT
      1 173.252.70.31 TIME_WAIT
      1 ::1 TIME_WAIT
      1 206.168.34.33 TIME_WAIT
      1 20.78.70.188 TIME_WAIT
      1 50.114.1.55 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 71.6.134.230 TIME_WAIT
      1 88.216.32.201 TIME_WAIT
      1 92.71.125.96 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 178.20.47.39 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 14:30:02 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 10 hours 45 minutes 19 seconds
   Server load: 0.93 0.63 0.62
   Total accesses: 55135 - Total Traffic: 869.0 MB - Total Duration: 111235898
   CPU Usage: u4.03 s2.14 cu430.71 cs292.43 - 1.88% CPU load
   1.42 requests/sec - 23.0 kB/second - 16.1 kB/request - 2017.52 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KWWK_W.W..._K_.WK.KK.K_.........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur    Conn Child  Slot     Client      Protocol              VHost                                          Request
   0-0  25119 1/16/3657  K 0.22 2    425 3897848  20.8 0.31  49.19 45.145.136.12   http/1.1 health.oyostate.gov.ng:443      GET /mandate/ HTTP/1.1
   1-0  25127 0/31/3502  W 0.64 16   0   4678947  0.0  0.85  51.12 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323532353738362p2231223
   2-0  19308 0/172/3554 W 3.67 0    0   2906871  0.0  4.51  51.01 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   3-0  26195 2/19/3756  K 0.33 3    408 2060101  66.7 0.38  69.87 66.249.70.37    http/1.1 support.cloudware.ng:443        GET /?c=3629146557 HTTP/1.1
   4-0  27476 0/1/3538   _ 0.00 0    1   3112439  0.0  0.02  52.90 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   5-0  22078 0/87/3805  W 2.31 56   0   3439650  0.0  8.92  65.73 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323532353734362p2231223
   6-0  -     0/0/2940   . 0.00 166  0   4220752  0.0  0.00  54.10 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   7-0  23076 0/85/2922  W 1.59 36   0   46764782 0.0  1.71  44.43 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323532353736362p2231223
   8-0  -     0/0/2814   . 0.00 260  0   4248764  0.0  0.00  39.60 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   9-0  -     0/0/3092   . 0.00 261  0   3120794  0.0  0.00  63.64 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   10-0 -     0/0/2553   . 0.00 268  0   4630368  0.0  0.00  30.91 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   11-0 22635 0/26/2235  _ 0.43 1    25  4013871  0.0  0.44  36.15 116.203.129.16  http/1.1 cloudsms.com.ng:443             GET /cron/process_queue1.php HTTP/1.1
   12-0 25138 3/127/2537 K 0.49 3    358 1828604  95.8 0.59  36.29 66.249.70.32    http/1.1 support.cloudware.ng:443        GET /?c=1366980273 HTTP/1.1
   13-0 13824 0/436/2478 _ 5.43 0    0   3628275  0.0  5.26  44.49 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80          GET /whm-server-status HTTP/1.0
   14-0 -     0/0/2617   . 0.00 93   0   3748891  0.0  0.00  38.92 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-0 25146 0/31/2018  W 0.69 94   0   2953861  0.0  0.76  25.53 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323532353730382p2231223
   16-0 19982 1/87/638   K 1.67 1    364 3810340  33.5 2.18  10.43 66.249.70.39    http/1.1 support.cloudware.ng:443        GET /?c=254996894 HTTP/1.1
   17-0 -     0/0/1746   . 0.00 74   0   3146909  0.0  0.00  31.99 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 25147 43/78/1150 K 0.67 0    36  847010   22.8 0.71  14.34 20.78.70.188    http/1.1 salutem.com.ng:443              GET /thai.php HTTP/1.1
   19-0 25150 43/53/385  K 0.24 0    28  852123   19.8 0.22  8.43  20.78.70.188    http/1.1 proxy-subdomains-vhost.localhos GET /thai.php HTTP/1.1
   20-0 -     0/0/104    . 0.00 273  0   73342    0.0  0.00  1.47  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 25152 2/50/244   K 1.18 0    273 249276   65.0 1.20  2.99  66.249.70.33    http/1.1 support.cloudware.ng:443        GET /?c=1078584753 HTTP/1.1
   22-0 25153 0/42/807   _ 0.91 1    178 396422   0.0  0.89  9.32  128.140.8.200   http/1.1 cloudsms.com.ng:443             GET /cron/process_queue3.php HTTP/1.1
   23-0 -     0/0/13     . 0.00 9028 0   32567    0.0  0.00  0.18  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -     0/0/9      . 0.00 9034 0   29442    0.0  0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/8      . 0.00 9051 0   29769    0.0  0.00  0.23  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/12     . 0.00 9011 0   24649    0.0  0.00  0.26  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/31     . 0.00 9047 0   34716    0.0  0.00  0.61  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/259    . 0.00 9060 0   143065   0.0  0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/96     . 0.00 9076 0   59764    0.0  0.00  2.78  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/13     . 0.00 9001 0   22779    0.0  0.00  9.52  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/103    . 0.00 8802 0   179005   0.0  0.00  0.84  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/2      . 0.00 9077 0   9851     0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/7      . 0.00 9026 0   21858    0.0  0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/2      . 0.00 9072 0   17699    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00 9041 0   19399    0.0  0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/4      . 0.00 9050 0   14235    0.0  0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/2      . 0.00 9073 0   15595    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/156    . 0.00 8806 0   148319   0.0  0.00  0.63  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00 9074 0   15338    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/6      . 0.00 9029 0   21858    0.0  0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/208    . 0.00 8205 0   243070   0.0  0.00  2.95  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00 9069 0   19835    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 9070 0   19620    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/6      . 0.00 9027 0   24371    0.0  0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00 9036 0   19070    0.0  0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 9031 0   20569    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/4      . 0.00 9046 0   17777    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/4      . 0.00 9043 0   16933    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00 9071 0   17743    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00 9053 0   22693    0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 9040 0   22016    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00 9049 0   22448    0.0  0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/3      . 0.00 9057 0   9096     0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/6      . 0.00 9045 0   23840    0.0  0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/17     . 0.00 9018 0   16331    0.0  0.00  0.47  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/184    . 0.00 8839 0   130360   0.0  0.00  0.50  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -     0/0/3      . 0.00 9054 0   22445    0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -     0/0/3      . 0.00 9058 0   7899     0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-0 -     0/0/5      . 0.00 9033 0   23139    0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -     0/0/139    . 0.00 8703 0   237404   0.0  0.00  1.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -     0/0/2      . 0.00 9067 0   2361     0.0  0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-0 -     0/0/11     . 0.00 9016 0   9214     0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-0 -     0/0/4      . 0.00 9042 0   8490     0.0  0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-0 -     0/0/1      . 0.00 9083 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00 9081 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-0 -     0/0/2      . 0.00 9065 0   8680     0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-0 -     0/0/1      . 0.00 9080 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-0 -     0/0/3      . 0.00 9056 0   742      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-0 -     0/0/1      . 0.00 9082 11  22       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 9063 0   10366    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-0 -     0/0/65     . 0.00 8876 0   105003   0.0  0.00  1.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-0 -     0/0/151    . 0.00 8704 0   218700   0.0  0.00  1.26  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-0 -     0/0/2      . 0.00 9062 0   8818     0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   74-0 -     0/0/4      . 0.00 9052 0   1447     0.0  0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-0 -     0/0/2      . 0.00 9068 0   463      0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-0 -     0/0/101    . 0.00 8788 0   159456   0.0  0.00  0.87  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-0 -     0/0/6      . 0.00 9037 0   4997     0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-0 -     0/0/338    . 0.00 7280 0   272159   0.0  0.00  5.63  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 9079 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 9061 0   7766     0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   81-0 -     0/0/3      . 0.00 9044 0   10368    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 557
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 12 seconds, (range: 0...57)
   index usage: 9%, cache usage: 13%
   total entries stored since starting: 33863
   total entries replaced since starting: 0
   total entries expired since starting: 33276
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 99 miss
   total removes since starting: 30 hit, 45 miss
Youez - 2016 - github.com/yon3zu
LinuXploit