403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.15.00.txt
 ## swap threshold exceeded
## server overview
2025-11-07.15.00 load[0] mem[57/72] mysql[5/25] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1279         160          45         923         866
Swap:          1999        1526         473
 15:00:01 up  5:13,  0 users,  load average: 0.17, 0.43, 0.47
## system overview
top - 15:00:01 up  5:13,  0 users,  load average: 0.17, 0.43, 0.47
Tasks: 210 total,   4 running, 205 sleeping,   0 stopped,   1 zombie
%Cpu(s): 75.0 us, 21.9 sy,  3.1 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   168452 free,  1299592 used,   952256 buff/cache
KiB Swap:  2047996 total,   484708 free,  1563288 used.   897872 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1469608 263756   4288 S 133.3 10.9   5:57.64 /usr/sbin+
 42340 nigeria   20   0  400652  15932  10220 S  13.3  0.7   0:00.06 /opt/cpan+
     1 root      20   0   44424   3516   1552 S   6.7  0.1   0:26.93 /usr/lib/+
   499 nscd      20   0 1334484   1936    764 S   6.7  0.1   0:06.42 /usr/sbin+
 42039 cloudw    20   0  470992   6364   3336 S   6.7  0.3   0:00.10 php-fpm: +
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 R   0.0  0.0   0:01.44 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.30 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:20.67 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.27 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.24 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:23.42 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.34 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.44 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.73 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.26 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   39500   6800   6556 S   0.0  0.3   0:09.29 /usr/lib/+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    456    336 S   0.0  0.0   0:01.43 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0   24720   1224    788 D   0.0  0.1   0:04.25 /usr/lib/+
   493 root      20   0  224268   4680   1096 S   0.0  0.2   0:00.36 queueproc+
   494 root      20   0  152780     76     36 S   0.0  0.0   0:00.01 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   503 dbus      20   0   57032   1328    616 S   0.0  0.1   0:09.76 /usr/bin/+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    376    268 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    984    608 S   0.0  0.0   0:02.51 /usr/lib/+
   541 root      20   0   21540    388    280 S   0.0  0.0   0:00.44 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    428    296 S   0.0  0.0   0:00.53 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3804    888 S   0.0  0.2   0:00.28 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.24 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   959 systuser  20   0  114016  10484   2680 S   0.0  0.4   0:04.52 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   961 root      20   0  572372    624    164 S   0.0  0.0   0:01.69 /usr/bin/+
   963 telegraf  20   0 5654048  35020   5976 S   0.0  1.4   0:10.41 /usr/loca+
   964 root      20   0   51508    460    296 S   0.0  0.0   0:00.26 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   981 named     20   0  785392  31412   2056 S   0.0  1.3   0:12.58 /usr/sbin+
   982 root      20   0 1828076 184704    848 S   0.0  7.6   0:35.48 /usr/loca+
   984 root      20   0  386112    516    420 S   0.0  0.0   0:00.58 php-fpm: +
   992 root      20   0  397344   2416    612 S   0.0  0.1   0:03.98 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.41 /usr/bin/+
  1007 root      20   0  392856    292    208 S   0.0  0.0   0:00.56 php-fpm: +
  1012 root      20   0  385496    400    300 S   0.0  0.0   0:00.57 php-fpm: +
  1013 root      20   0  265552   6696   5900 S   0.0  0.3   0:04.85 /usr/sbin+
  1014 root      20   0  261032  27984   5532 S   0.0  1.2   0:06.56 cpsrvd (S+
  1017 root      20   0  436392    404    316 S   0.0  0.0   0:00.67 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.41 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:01.99 /usr/sbin+
  1026 cpanelc+  20   0   10540   3572   2312 S   0.0  0.1   0:14.21 /usr/loca+
  1096 dovenull  20   0   46912   1328    792 S   0.0  0.1   0:00.27 dovecot/p+
  1097 dovenull  20   0   47720   2948   1836 S   0.0  0.1   0:00.13 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.05 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.23 dovecot/l+
  1100 dovenull  20   0   46912   2164   1596 S   0.0  0.1   0:00.39 dovecot/p+
  1101 dovenull  20   0   47680   3056   1812 S   0.0  0.1   0:00.22 dovecot/i+
  1108 root      20   0   24568   2524    512 S   0.0  0.1   0:00.16 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.05 dovecot/s+
  1182 dovecot   20   0   41136   1468   1012 S   0.0  0.1   0:00.42 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.10 SonarPush+
  1233 wp-tool+  20   0  410452  25772   1424 S   0.0  1.1   0:15.48 /usr/bin/+
  1234 wp-tool+  20   0  387528   3284   1428 S   0.0  0.1   0:00.23 /usr/bin/+
  1264 root      20   0  262224  24620   6760 S   0.0  1.0   0:01.35 cpdavd - +
  1265 root      20   0  209480  11148   2416 S   0.0  0.5   0:02.13 tailwatchd
  1267 root      20   0  167452   1200    652 S   0.0  0.0   0:00.30 dnsadmin +
  1713 root      20   0  299272    632    448 S   0.0  0.0   0:00.51 php-fpm: +
  1728 root      38  18  130416   1372    692 S   0.0  0.1   0:00.04 cpanellog+
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:01.10 /usr/sbin+
  1970 root      20   0   12828    328    212 S   0.0  0.0   0:01.40 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:01.18 /usr/loca+
  1972 root      20   0   12852    340    216 S   0.0  0.0   0:01.28 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  182428  10504   1104 S   0.0  0.4   0:16.41 lfd - sle+
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.34 [kworker]
 10468 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 13483 root      20   0 1275844  10144    600 S   0.0  0.4   0:00.09 /usr/bin/+
 13517 root      20   0 1277312  11476    600 S   0.0  0.5   0:00.07 /usr/bin/+
 19376 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 25119 nobody    20   0  277848  19672   4756 S   0.0  0.8   0:00.70 /usr/sbin+
 25127 nobody    20   0  277584  20456   5008 S   0.0  0.8   0:01.70 /usr/sbin+
 28169 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 28537 root      20   0  248100 118080   1388 S   0.0  4.9   0:04.50 /usr/loca+
 28567 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 28691 cloudw    20   0  471856   9496   5236 S   0.0  0.4   0:01.60 php-fpm: +
 29693 nobody    20   0  277472  19452   4696 S   0.0  0.8   0:01.04 /usr/sbin+
 30743 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 31936 nobody    20   0  277472  19624   4772 S   0.0  0.8   0:01.06 /usr/sbin+
 32537 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 32709 root      20   0  269720 136652   3160 S   0.0  5.6   0:20.66 spamd chi+
 32710 root      20   0  258916 125784   3184 S   0.0  5.2   0:00.73 spamd chi+
 33012 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34517 nobody    20   0  277780  19348   4548 S   0.0  0.8   0:00.64 /usr/sbin+
 34540 nobody    20   0  277516  19320   4516 S   0.0  0.8   0:00.68 /usr/sbin+
 35184 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 37478 cloudw    20   0  471840   9784   5332 S   0.0  0.4   0:00.70 php-fpm: +
 38011 nobody    20   0  277480  18528   4312 S   0.0  0.8   0:00.57 /usr/sbin+
 38078 nobody    20   0  277860  18696   4152 S   0.0  0.8   0:00.46 /usr/sbin+
 38095 nobody    20   0  277536  18948   4332 S   0.0  0.8   0:00.47 /usr/sbin+
 38196 root      20   0       0      0      0 D   0.0  0.0   0:00.02 [kworker/+
 38653 nobody    20   0  277532  19016   4328 S   0.0  0.8   0:00.42 /usr/sbin+
 39065 nobody    20   0  277648  18176   3968 S   0.0  0.8   0:00.11 /usr/sbin+
 39181 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 40107 nobody    20   0  277440  18304   4132 S   0.0  0.8   0:00.31 /usr/sbin+
 40130 nobody    20   0  277512  18180   3928 S   0.0  0.8   0:00.16 /usr/sbin+
 40212 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 40234 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 41865 nigeria   20   0  397064   5272   2268 S   0.0  0.2   0:00.01 php-fpm: +
 41918 cloudw    20   0  471784   9264   4980 S   0.0  0.4   0:00.22 php-fpm: +
 41976 worencom  20   0   38468   3836   2996 S   0.0  0.2   0:00.00 dovecot/i+
 42053 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 42242 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 42243 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 42244 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 42245 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 42248 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 42249 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42250 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42251 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42252 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42253 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42254 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42255 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42257 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42258 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42261 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42262 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42263 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 42264 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42267 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42279 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 42281 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 42282 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 42283 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42284 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 42285 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 42286 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 42287 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 42290 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42291 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42292 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42293 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42294 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 42297 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 42299 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42300 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 42301 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 42302 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 42303 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 42306 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 42311 root      20   0 1276700  14480    596 S   0.0  0.6   0:00.06 /usr/bin/+
 42312 root      20   0 1277356  11532    596 S   0.0  0.5   0:00.06 /usr/bin/+
 42313 root      20   0  188220  11104   5152 S   0.0  0.5   0:00.02 /usr/loca+
 42314 root      35  15  113288   1432   1240 S   0.0  0.1   0:00.00 /bin/bash+
 42315 root      20   0 1276956  14664    596 S   0.0  0.6   0:00.06 /usr/bin/+
 42323 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 42329 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 42334 cloudw    20   0  364868  18972  10792 S   0.0  0.8   0:00.01 /opt/cpan+
 42338 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 42354 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 42358 root      20   0  160224   2380   1636 S   0.0  0.1   0:00.01 top -n 2 +
 42459 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 42463 root      35  15  128052   3028   2320 R   0.0  0.1   0:00.00 /usr/loca+
 42468 cloudsms  20   0       0      0      0 R   0.0  0.0   0:00.00 [jailshel+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:20  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      10468  0.0  0.0      0     0 ?        S    13:54   0:00  \_ [kworker/0:2]
root      19376  0.0  0.0      0     0 ?        S    14:12   0:00  \_ [kworker/u200:0]
root      28169  0.0  0.0      0     0 ?        S    14:31   0:00  \_ [kworker/0:4]
root      28567  0.0  0.0      0     0 ?        S    14:32   0:00  \_ [kworker/1:2]
root      30743  0.0  0.0      0     0 ?        S    14:37   0:00  \_ [kworker/u200:1]
root      32537  0.0  0.0      0     0 ?        S    14:41   0:00  \_ [kworker/1:0]
root      33012  0.0  0.0      0     0 ?        S    14:42   0:00  \_ [kworker/1:4]
root      35184  0.0  0.0      0     0 ?        S    14:46   0:00  \_ [kworker/0:5]
root      38196  0.0  0.0      0     0 ?        S    14:52   0:00  \_ [kworker/1:1]
root      39181  0.0  0.0      0     0 ?        S    14:54   0:00  \_ [kworker/0:0]
root      40212  0.0  0.0      0     0 ?        S    14:56   0:00  \_ [kworker/0:1]
root      40234  0.0  0.0      0     0 ?        S    14:56   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44424  3516 ?        Ss   09:46   0:26 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.2  39500  6800 ?        Ss   09:46   0:09 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   456 ?        S<sl 09:46   0:01 /sbin/auditd
root        489  0.0  0.0  24720  1224 ?        Ss   09:46   0:04 /usr/lib/systemd/systemd-logind
root        493  0.0  0.1 224268  4680 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    76 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1936 ?        Ssl  09:46   0:06 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1328 ?        Ss   09:46   0:09 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   376 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   984 ?        Ssl  09:46   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   388 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   428 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      42242  0.0  0.0 183048  2140 ?        S    15:00   0:00  \_ /usr/sbin/CROND -n
root      42297  0.0  0.0 113284  1212 ?        Ss   15:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      42311  6.0  0.5 1276700 14480 ?       Sl   15:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      42243  0.0  0.0 183048  2136 ?        S    15:00   0:00  \_ /usr/sbin/CROND -n
root      42285  0.0  0.0 113284  1212 ?        Ss   15:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      42312  6.0  0.4 1277356 11532 ?       Sl   15:00   0:00  |       \_ /usr/bin/update_imunify
root      42244  0.0  0.0 183048  2136 ?        S    15:00   0:00  \_ /usr/sbin/CROND -n
root      42303  0.0  0.0 113284  1208 ?        Ss   15:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      42315  6.0  0.6 1276956 14664 ?       Sl   15:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      42245  0.0  0.0 183048  2136 ?        S    15:00   0:00  \_ /usr/sbin/CROND -n
root      42284  0.0  0.0 113284  1208 ?        Ss   15:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      42314  0.0  0.0 113288  1432 ?        SN   15:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      42463  0.0  0.1 128184  3292 ?        RN   15:00   0:00  |           \_ /usr/local/lp/sonarperl/bin/perl /usr/local/lp/apps/sonarpush-helpers/hourly.d/eximData.pl
root      42248  0.0  0.0 183048  2136 ?        S    15:00   0:00  \_ /usr/sbin/CROND -n
root      42282  0.0  0.0 113284  1208 ?        Ss   15:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      42306  0.0  0.0 108052   356 ?        S    15:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      42323  0.0  0.0 113288  1520 ?        S    15:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      42476  0.0  0.0 153840  2096 ?        R    15:00   0:00  |               \_ ps auxf
root      42250  0.0  0.0 183048  2140 ?        S    15:00   0:00  \_ /usr/sbin/CROND -n
root      42287  0.0  0.0  20164   804 ?        Ss   15:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      42251  0.0  0.0 183048  2140 ?        S    15:00   0:00  \_ /usr/sbin/CROND -n
root      42300  0.0  0.0  20164   804 ?        Ss   15:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      42252  0.0  0.0 183048  2140 ?        S    15:00   0:00  \_ /usr/sbin/CROND -n
root      42290  0.0  0.0  20164   808 ?        Ss   15:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      42253  0.0  0.0 183048  2140 ?        S    15:00   0:00  \_ /usr/sbin/CROND -n
root      42299  0.0  0.0  20164   808 ?        Ss   15:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      42254  0.0  0.0 183048  2140 ?        S    15:00   0:00  \_ /usr/sbin/CROND -n
root      42286  0.0  0.0  20164   804 ?        Ss   15:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      42255  0.0  0.0 183048  2140 ?        S    15:00   0:00  \_ /usr/sbin/CROND -n
root      42283  0.0  0.0  20164   808 ?        Ss   15:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      42257  0.0  0.0 183048  2140 ?        S    15:00   0:00  \_ /usr/sbin/CROND -n
root      42292  0.0  0.0  20164   808 ?        Ss   15:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      42258  0.0  0.0 183048  2140 ?        S    15:00   0:00  \_ /usr/sbin/CROND -n
root      42291  0.0  0.0  20164   808 ?        Ss   15:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      42261  0.0  0.0 183048  2140 ?        S    15:00   0:00  \_ /usr/sbin/CROND -n
root      42281  0.0  0.0  20164   804 ?        Ss   15:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      42262  0.0  0.0 183048  2140 ?        S    15:00   0:00  \_ /usr/sbin/CROND -n
root      42293  0.0  0.0  20164   808 ?        Ss   15:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root      42263  0.0  0.0 183048  2136 ?        S    15:00   0:00  \_ /usr/sbin/CROND -n
root      42279  0.0  0.0 113284  1208 ?        Ss   15:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      42313  2.0  0.4 188220 11104 ?        S    15:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      42358  1.0  0.0 160224  2380 ?        S    15:00   0:00  |           \_ top -n 2 -b -c
root      42264  0.0  0.0 183048  2144 ?        S    15:00   0:00  \_ /usr/sbin/CROND -n
root      42301  0.0  0.0  20164   968 ?        Ss   15:00   0:00  |   \_ jailshell (pactpay) [42338] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   42338  0.0  0.0  20164   264 ?        S    15:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   42354  1.0  0.7 476724 17484 ?        S    15:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      42267  0.0  0.0 183048  2140 ?        S    15:00   0:00  \_ /usr/sbin/CROND -n
root      42294  0.0  0.0  20164   968 ?        Ss   15:00   0:00      \_ jailshell (nigeria) [42329] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   42329  0.0  0.0  20164   264 ?        S    15:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   42340  6.0  0.6 400652 15932 ?        S    15:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3804 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 10484 ?        Ssl  09:46   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   624 ?        Ssl  09:46   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654048 35020 ?       SLsl 09:46   0:10 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   460 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.0  46912  1328 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  47720  2948 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  2164 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  47680  3056 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.1  24568  2524 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41136  1468 ?        S    09:46   0:00  \_ dovecot/auth
worencom  41976  0.0  0.1  38468  3836 ?        S    14:59   0:00  \_ dovecot/imap
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.2 785392 31412 ?        Ssl  09:46   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.1  7.6 1828076 184704 ?      Ssl  09:46   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   516 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.0 397344  2416 ?        Ss   09:46   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    28691  0.0  0.3 471856  9496 ?        S    14:32   0:01  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    37478  0.1  0.4 471840  9784 ?        S    14:50   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
nigeria   41865  0.0  0.2 397064  5272 ?        S    14:59   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    41918  0.7  0.3 471784  9264 ?        S    14:59   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    42039  1.1  0.2 470992  6364 ?        S    14:59   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   292 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   400 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.2 265552  6696 ?        Ssl  09:46   0:04 /usr/sbin/rsyslogd -n
root       1014  0.0  1.1 261032 27984 ?        Ss   09:46   0:06 cpsrvd (SSL) - waiting for connections                   
root      42053  0.0  0.0      0     0 ?        Z    14:59   0:00  \_ [cpaneld - servi] <defunct>
root       1017  0.0  0.0 436392   404 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:01 /usr/sbin/sshd -D
cpanelc+   1026  0.0  0.1  10540  3572 ?        Ss   09:46   0:14 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  1.0 410452 25772 ?        Ss   09:46   0:15 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3284 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  1.0 262224 24620 ?        Ss   09:46   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1265  0.0  0.4 209480 11148 ?        Ss   09:46   0:02 tailwatchd
root       1267  0.0  0.0 167452  1200 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1713  0.0  0.0 299272   632 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.0 130416  1372 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  1.9 10.8 1469608 263756 ?      Sl   09:46   5:57 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:01 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12828   328 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12852   340 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    25119  0.0  0.8 277848 19672 ?        S    14:25   0:00  \_ /usr/sbin/httpd -k start
nobody    25127  0.0  0.8 277584 20456 ?        S    14:25   0:01  \_ /usr/sbin/httpd -k start
nobody    29693  0.0  0.8 277472 19452 ?        S    14:35   0:01  \_ /usr/sbin/httpd -k start
nobody    31936  0.0  0.8 277472 19624 ?        S    14:39   0:01  \_ /usr/sbin/httpd -k start
nobody    34517  0.0  0.7 277780 19348 ?        S    14:44   0:00  \_ /usr/sbin/httpd -k start
cloudw    42334  1.0  0.7 364868 18972 ?        S    15:00   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    34540  0.0  0.7 277516 19320 ?        S    14:45   0:00  \_ /usr/sbin/httpd -k start
nobody    38011  0.1  0.7 277480 18528 ?        S    14:51   0:00  \_ /usr/sbin/httpd -k start
nobody    38078  0.0  0.7 277860 18696 ?        S    14:51   0:00  \_ /usr/sbin/httpd -k start
nobody    38095  0.0  0.7 277536 18948 ?        S    14:52   0:00  \_ /usr/sbin/httpd -k start
nobody    38653  0.0  0.7 277532 19016 ?        S    14:52   0:00  \_ /usr/sbin/httpd -k start
nobody    39065  0.0  0.7 277648 18176 ?        S    14:53   0:00  \_ /usr/sbin/httpd -k start
nobody    40107  0.1  0.7 277440 18304 ?        S    14:55   0:00  \_ /usr/sbin/httpd -k start
nobody    40130  0.0  0.7 277512 18180 ?        S    14:55   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.0  0.4 182428 10504 ?        Ss   09:46   0:16 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      28537  0.0  4.8 248100 118080 ?       Ss   10:50   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.1  5.6 269720 136652 ?       S    11:00   0:20  \_ spamd child
root      32710  0.0  5.1 258916 125784 ?       S    11:00   0:00  \_ spamd child
root      13483  0.0  0.4 1275844 10144 ?       Ssl  14:00   0:00 /usr/bin/cspdaemon
root      13517  0.0  0.4 1277312 11476 ?       Ssl  14:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 40526  Threads: 3  Questions: 2348871  Slow queries: 0  Opens: 7938  Flush tables: 1  Open tables: 2000  Queries per second avg: 57.959
*************************** 1. row ***************************
     Id: 35335
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 35338
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 35347
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.210.140.131 TIME_WAIT
      1 104.210.140.142 TIME_WAIT
      1 114.119.140.4 TIME_WAIT
      1 114.119.159.20 TIME_WAIT
      1 194.164.107.4 TIME_WAIT
      1 ::1 TIME_WAIT
      1 40.77.167.35 TIME_WAIT
      1 43.135.186.135 TIME_WAIT
      1 51.161.65.231 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 66.249.70.33 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 164.92.188.144 TIME_WAIT
      2 185.180.141.34 TIME_WAIT
      2 185.180.141.35 TIME_WAIT
      3 185.180.141.32 TIME_WAIT
      6 185.180.141.33 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 15:00:01 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 11 hours 15 minutes 19 seconds
   Server load: 0.17 0.43 0.47
   Total accesses: 59375 - Total Traffic: 970.1 MB - Total Duration: 128073501
   CPU Usage: u6.08 s3.33 cu491.96 cs334.04 - 2.06% CPU load
   1.47 requests/sec - 24.5 kB/second - 16.7 kB/request - 2157.03 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

RWK_..W__K.W_.W.K.R.............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur    Conn  Child  Slot     Client      Protocol          VHost                                       Request
   0-0  25119 0/144/3785 R 2.79  7     1   6068175  0.0   2.74  51.62 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80   GET / HTTP/1.1
   1-0  25127 0/474/3945 W 16.16 73    0   5206476  0.0   8.74  59.02 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443 GET /postnews.php?ARRAY=7o2230223n313736323532373532382p2231223
   2-0  38011 1/166/3852 K 12.91 1     258 3926139  35.6  1.76  55.50 66.249.70.39    http/1.1 support.cloudware.ng:443 GET /?c=1057187186 HTTP/1.1
   3-0  38078 0/101/4066 _ 4.08  0     0   2174209  0.0   1.75  75.87 ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   4-0  -     0/0/3779   . 0.00  41    0   4083177  0.0   0.00  58.78 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   5-0  -     0/0/3980   . 0.00  36    0   4754164  0.0   0.00  69.48 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   6-0  40107 0/57/3219  W 1.98  0     0   4332431  0.0   1.32  59.68 ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   7-0  31936 0/239/3170 _ 4.27  0     77  47742066 0.0   4.08  48.57 128.140.8.200   http/1.1 cloudsms.com.ng:443      GET /cron/process_queue3.php HTTP/1.1
   8-0  39065 0/22/2931  _ 0.45  0     0   5145756  0.0   0.47  41.88 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80   GET /whm-server-status HTTP/1.0
   9-0  29693 3/242/3334 K 3.84  2     296 4128879  99.5  9.91  73.55 66.249.70.32    http/1.1 support.cloudware.ng:443 GET /?c=1232596807 HTTP/1.1
   10-0 -     0/0/2658   . 0.00  42    0   5156787  0.0   0.00  33.33 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   11-0 40130 0/35/2475  W 0.77  8     0   4583626  0.0   0.57  40.74 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443 GET /postnews.php?ARRAY=7o2230223n313736323532373539332p2231223
   12-0 38095 0/87/2794  _ 1.89  0     62  2665616  0.0   4.44  44.96 116.203.134.67  http/1.1 cloudsms.com.ng:443      GET /cron/process_queue4.php HTTP/1.1
   13-0 -     0/0/2569   . 0.00  337   0   4150407  0.0   0.00  46.09 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   14-0 38653 0/105/2739 W 6.59  28    0   3786579  0.0   1.63  41.19 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443 GET /postnews.php?ARRAY=7o2230223n313736323532373537332p2231223
   15-0 -     0/0/2220   . 0.00  291   0   4401157  0.0   0.00  29.98 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   16-0 34517 5/132/802  K 2.81  0     595 4314340  161.8 2.51  13.56 66.249.70.38    http/1.1 support.cloudware.ng:443 GET /?c=2006636256 HTTP/1.1
   17-0 -     0/0/1918   . 0.00  131   0   3736928  0.0   0.00  42.93 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   18-0 34540 0/135/1418 R 2.63  30    7   1336739  0.0   5.59  22.80 182.3.141.223   http/1.1
   19-0 -     0/0/419    . 0.00  1613  0   859816   0.0   0.00  8.92  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   20-0 -     0/0/104    . 0.00  2073  0   73342    0.0   0.00  1.47  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   21-0 -     0/0/289    . 0.00  827   0   1662947  0.0   0.00  3.78  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   22-0 -     0/0/866    . 0.00  1073  0   1178087  0.0   0.00  10.26 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   23-0 -     0/0/13     . 0.00  10828 0   32567    0.0   0.00  0.18  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   24-0 -     0/0/9      . 0.00  10834 0   29442    0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   25-0 -     0/0/8      . 0.00  10851 0   29769    0.0   0.00  0.23  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   26-0 -     0/0/12     . 0.00  10811 0   24649    0.0   0.00  0.26  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   27-0 -     0/0/31     . 0.00  10847 0   34716    0.0   0.00  0.61  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   28-0 -     0/0/259    . 0.00  10860 0   143065   0.0   0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   29-0 -     0/0/96     . 0.00  10876 0   59764    0.0   0.00  2.78  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   30-0 -     0/0/13     . 0.00  10801 0   22779    0.0   0.00  9.52  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   31-0 -     0/0/103    . 0.00  10602 0   179005   0.0   0.00  0.84  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   32-0 -     0/0/2      . 0.00  10877 0   9851     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   33-0 -     0/0/7      . 0.00  10826 0   21858    0.0   0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   34-0 -     0/0/2      . 0.00  10872 0   17699    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00  10841 0   19399    0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   36-0 -     0/0/4      . 0.00  10850 0   14235    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   37-0 -     0/0/2      . 0.00  10873 0   15595    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   38-0 -     0/0/156    . 0.00  10606 0   148319   0.0   0.00  0.63  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00  10874 0   15338    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   40-0 -     0/0/6      . 0.00  10829 0   21858    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   41-0 -     0/0/208    . 0.00  10005 0   243070   0.0   0.00  2.95  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00  10869 0   19835    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00  10870 0   19620    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   44-0 -     0/0/6      . 0.00  10827 0   24371    0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00  10836 0   19070    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00  10831 0   20569    0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   47-0 -     0/0/4      . 0.00  10846 0   17777    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   48-0 -     0/0/4      . 0.00  10843 0   16933    0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00  10871 0   17743    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00  10853 0   22693    0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00  10840 0   22016    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00  10849 0   22448    0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   53-0 -     0/0/3      . 0.00  10857 0   9096     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   54-0 -     0/0/6      . 0.00  10845 0   23840    0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   55-0 -     0/0/17     . 0.00  10818 0   16331    0.0   0.00  0.47  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   56-0 -     0/0/184    . 0.00  10638 0   130360   0.0   0.00  0.50  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   57-0 -     0/0/3      . 0.00  10854 0   22445    0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   58-0 -     0/0/3      . 0.00  10858 0   7899     0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   59-0 -     0/0/5      . 0.00  10833 0   23139    0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   60-0 -     0/0/139    . 0.00  10503 0   237404   0.0   0.00  1.00  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   61-0 -     0/0/2      . 0.00  10867 0   2361     0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   62-0 -     0/0/11     . 0.00  10816 0   9214     0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   63-0 -     0/0/4      . 0.00  10842 0   8490     0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   64-0 -     0/0/1      . 0.00  10883 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00  10881 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   66-0 -     0/0/2      . 0.00  10865 0   8680     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   67-0 -     0/0/1      . 0.00  10880 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   68-0 -     0/0/3      . 0.00  10856 0   742      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   69-0 -     0/0/1      . 0.00  10882 11  22       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00  10863 0   10366    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   71-0 -     0/0/65     . 0.00  10675 0   105003   0.0   0.00  1.01  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   72-0 -     0/0/151    . 0.00  10504 0   218700   0.0   0.00  1.26  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   73-0 -     0/0/2      . 0.00  10862 0   8818     0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   74-0 -     0/0/4      . 0.00  10852 0   1447     0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   75-0 -     0/0/2      . 0.00  10868 0   463      0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   76-0 -     0/0/101    . 0.00  10588 0   159456   0.0   0.00  0.87  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   77-0 -     0/0/6      . 0.00  10837 0   4997     0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   78-0 -     0/0/338    . 0.00  9080  0   272159   0.0   0.00  5.63  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00  10879 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00  10861 0   7766     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   81-0 -     0/0/3      . 0.00  10844 0   10368    0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 558
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 17 seconds, (range: 0...52)
   index usage: 9%, cache usage: 13%
   total entries stored since starting: 37360
   total entries replaced since starting: 0
   total entries expired since starting: 36772
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 115 miss
   total removes since starting: 30 hit, 69 miss
Youez - 2016 - github.com/yon3zu
LinuXploit