403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.15.45.txt
 ## swap threshold exceeded
## server overview
2025-11-07.15.45 load[0] mem[55/74] mysql[5/25] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1220         332          54         809         918
Swap:          1999        1565         434
 15:45:01 up  5:58,  0 users,  load average: 0.14, 0.43, 0.59
## system overview
top - 15:45:01 up  5:58,  0 users,  load average: 0.14, 0.43, 0.59
Tasks: 214 total,   3 running, 202 sleeping,   0 stopped,   9 zombie
%Cpu(s): 68.8 us, 21.9 sy,  0.0 ni,  9.4 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   342640 free,  1247936 used,   829724 buff/cache
KiB Swap:  2047996 total,   445180 free,  1602816 used.   942020 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1469608 264048   3556 S  87.5 10.9   6:49.85 /usr/sbin+
  1026 cpanelc+  20   0   10540   3564   2304 S   6.2  0.1   0:16.36 /usr/loca+
 65011 nigeria   20   0  400652  15932  10220 S   6.2  0.7   0:00.04 /opt/cpan+
 65101 cloudsms  20   0  400652  15408  10000 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44424   3520   1552 S   0.0  0.1   0:30.97 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.65 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.35 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:24.20 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.31 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.61 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:24.17 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.40 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.52 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.82 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.41 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40244   7192   6944 S   0.0  0.3   0:10.84 /usr/lib/+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    468    348 S   0.0  0.0   0:01.70 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0   24720   1224    788 S   0.0  0.1   0:04.87 /usr/lib/+
   493 root      20   0  224268   4536    952 S   0.0  0.2   0:00.38 queueproc+
   494 root      20   0  152780     76     36 S   0.0  0.0   0:00.01 /usr/sbin+
   499 nscd      20   0 1334484   1932    760 S   0.0  0.1   0:07.56 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   503 dbus      20   0   57032   1328    616 S   0.0  0.1   0:11.18 /usr/bin/+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    296    188 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    984    608 S   0.0  0.0   0:02.87 /usr/lib/+
   541 root      20   0   21540    388    280 S   0.0  0.0   0:00.50 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    428    296 S   0.0  0.0   0:00.60 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3792    872 S   0.0  0.2   0:00.35 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.27 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   959 systuser  20   0  114016  10440   2524 S   0.0  0.4   0:05.12 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   961 root      20   0  572372    624    164 S   0.0  0.0   0:01.91 /usr/bin/+
   963 telegraf  20   0 5654048  35036   5712 S   0.0  1.4   0:11.84 /usr/loca+
   964 root      20   0   51508    460    296 S   0.0  0.0   0:00.29 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   981 named     20   0  785392  33732   2108 S   0.0  1.4   0:14.26 /usr/sbin+
   982 root      20   0 1828076 141176    364 S   0.0  5.8   0:35.54 /usr/loca+
   984 root      20   0  386112    508    412 S   0.0  0.0   0:00.64 php-fpm: +
   992 root      20   0  397344   2420    612 S   0.0  0.1   0:04.61 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.46 /usr/bin/+
  1007 root      20   0  392856    380    296 S   0.0  0.0   0:00.62 php-fpm: +
  1012 root      20   0  385496    544    444 S   0.0  0.0   0:00.63 php-fpm: +
  1013 root      20   0  273744   7132   6264 S   0.0  0.3   0:05.61 /usr/sbin+
  1014 root      20   0  261164  27476   4996 S   0.0  1.1   0:07.00 cpsrvd (S+
  1017 root      20   0  436392    404    316 S   0.0  0.0   0:00.74 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.46 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:02.37 /usr/sbin+
  1096 dovenull  20   0   46912   1580   1032 S   0.0  0.1   0:00.31 dovecot/p+
  1097 dovenull  20   0   47852   3160   1920 S   0.0  0.1   0:00.16 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.05 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.26 dovecot/l+
  1100 dovenull  20   0   46912   2164   1596 S   0.0  0.1   0:00.44 dovecot/p+
  1101 dovenull  20   0   47940   3096   1792 S   0.0  0.1   0:00.26 dovecot/i+
  1108 root      20   0   24568   2524    512 S   0.0  0.1   0:00.18 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.06 dovecot/s+
  1182 dovecot   20   0   41136   1468   1012 S   0.0  0.1   0:00.47 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.11 SonarPush+
  1233 wp-tool+  20   0  410452  25752   1404 S   0.0  1.1   0:17.67 /usr/bin/+
  1234 wp-tool+  20   0  387528   3284   1428 S   0.0  0.1   0:00.24 /usr/bin/+
  1264 root      20   0  262228  23808   5948 S   0.0  1.0   0:01.82 cpdavd - +
  1265 root      20   0  209480  11140   2392 S   0.0  0.5   0:02.35 tailwatchd
  1267 root      20   0  167452   1196    648 S   0.0  0.0   0:00.35 dnsadmin +
  1713 root      20   0  299272    632    448 S   0.0  0.0   0:00.58 php-fpm: +
  1728 root      38  18  130416   1372    688 S   0.0  0.1   0:00.05 cpanellog+
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:01.27 /usr/sbin+
  1970 root      20   0   12812    328    212 S   0.0  0.0   0:01.63 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:01.38 /usr/loca+
  1972 root      20   0   12848    340    216 S   0.0  0.0   0:01.50 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  182632  10916   1104 S   0.0  0.5   0:18.74 lfd - sle+
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.39 [kworker]
 19376 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 28537 root      20   0  248100 118080   1388 S   0.0  4.9   0:04.82 /usr/loca+
 28691 cloudw    20   0  471856   9496   5236 S   0.0  0.4   0:03.79 php-fpm: +
 32709 root      20   0  269720 136552   3060 S   0.0  5.6   0:21.66 spamd chi+
 32710 root      20   0  258916 125492   2892 S   0.0  5.2   0:00.73 spamd chi+
 33012 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 40212 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 42747 root      20   0 1341636  10476    600 S   0.0  0.4   0:00.07 /usr/bin/+
 42789 root      20   0 1277312  11680    596 S   0.0  0.5   0:00.07 /usr/bin/+
 44285 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 47381 nobody    20   0  277856  20376   4940 S   0.0  0.8   0:01.65 /usr/sbin+
 49002 nobody    20   0  277516  19872   4796 S   0.0  0.8   0:01.25 /usr/sbin+
 50117 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 51464 nobody    20   0  277584  20068   4848 S   0.0  0.8   0:01.23 /usr/sbin+
 53206 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 54633 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 56884 nobody    20   0  277864  18856   4272 S   0.0  0.8   0:00.30 /usr/sbin+
 56950 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59286 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 59398 cloudw    20   0  471840   9780   5328 S   0.0  0.4   0:00.67 php-fpm: +
 59630 nobody    20   0  277512  18780   4188 S   0.0  0.8   0:00.48 /usr/sbin+
 59812 nobody    20   0  277552  19224   4528 S   0.0  0.8   0:00.74 /usr/sbin+
 60718 nobody    20   0  277748  18884   4264 S   0.0  0.8   0:00.45 /usr/sbin+
 61482 nobody    20   0  277860  18808   4132 S   0.0  0.8   0:00.13 /usr/sbin+
 61810 nobody    20   0  277516  18976   4160 S   0.0  0.8   0:00.37 /usr/sbin+
 61831 nobody    20   0  277492  18152   4136 S   0.0  0.7   0:00.37 /usr/sbin+
 61836 nobody    20   0  277848  17940   3924 S   0.0  0.7   0:00.14 /usr/sbin+
 62550 worencom  20   0   38468   3840   3000 S   0.0  0.2   0:00.00 dovecot/i+
 62805 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62822 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 63551 nobody    20   0  277512  17428   3768 S   0.0  0.7   0:00.05 /usr/sbin+
 63700 nobody    20   0  277536  18316   3928 S   0.0  0.8   0:00.13 /usr/sbin+
 63791 cloudw    20   0  471784   9264   4980 S   0.0  0.4   0:00.21 php-fpm: +
 63907 cloudw    20   0  471784   9264   4980 S   0.0  0.4   0:00.21 php-fpm: +
 64009 cloudw    20   0  471784   9260   4972 S   0.0  0.4   0:00.21 php-fpm: +
 64171 nobody    20   0  277512  17052   3452 S   0.0  0.7   0:00.08 /usr/sbin+
 64188 nobody    20   0  277176  15912   2856 S   0.0  0.7   0:00.00 /usr/sbin+
 64189 nobody    20   0  277512  17184   3412 S   0.0  0.7   0:00.10 /usr/sbin+
 64355 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 64360 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 64361 sshd      20   0  115644   2628   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 64467 mailnull  20   0   89312   4368   1232 S   0.0  0.2   0:00.00 /usr/sbin+
 64723 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 64885 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 64886 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 64887 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 64888 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 64889 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 64890 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 64891 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 64892 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 64893 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 64908 root      20   0  157100   5076   3784 S   0.0  0.2   0:00.00 sshd: unk+
 64909 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: unk+
 64953 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64954 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64955 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64956 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64957 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64958 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64959 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64960 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64961 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64963 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64964 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64965 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 64967 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64974 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64975 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64976 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 64979 root      20   0  188228  11120   5152 S   0.0  0.5   0:00.01 /usr/loca+
 64981 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 64982 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 64983 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 64984 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 64985 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 64986 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 64988 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 64989 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64990 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64992 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 65000 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 65003 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 65004 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 65005 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 65010 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 65039 root      20   0  160224   2368   1636 S   0.0  0.1   0:00.00 top -n 2 +
 65055 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65061 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 65095 cloudsms  20   0       0      0      0 R   0.0  0.0   0:00.00 [jailshel+
 65099 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 65100 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 65102 staging+  20   0   30224   3720   2100 R   0.0  0.2   0:00.00 suspended+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    09:46   0:24  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:24  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      19376  0.0  0.0      0     0 ?        D    14:12   0:00  \_ [kworker/u200:0]
root      33012  0.0  0.0      0     0 ?        S    14:42   0:00  \_ [kworker/1:4]
root      40212  0.0  0.0      0     0 ?        S    14:56   0:00  \_ [kworker/0:1]
root      44285  0.0  0.0      0     0 ?        S    15:03   0:00  \_ [kworker/0:2]
root      50117  0.0  0.0      0     0 ?        S    15:15   0:00  \_ [kworker/u200:2]
root      53206  0.0  0.0      0     0 ?        S    15:21   0:00  \_ [kworker/0:4]
root      54633  0.0  0.0      0     0 ?        S    15:24   0:00  \_ [kworker/1:3]
root      56950  0.0  0.0      0     0 ?        S    15:29   0:00  \_ [kworker/0:0]
root      59286  0.0  0.0      0     0 ?        D    15:34   0:00  \_ [kworker/1:1]
root      62805  0.0  0.0      0     0 ?        S    15:41   0:00  \_ [kworker/1:0]
root      62822  0.0  0.0      0     0 ?        S    15:41   0:00  \_ [kworker/0:3]
root      65055  0.0  0.0      0     0 ?        S    15:45   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44424  3520 ?        Ss   09:46   0:30 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.2  40244  7192 ?        Ss   09:46   0:10 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   468 ?        S<sl 09:46   0:01 /sbin/auditd
root        489  0.0  0.0  24720  1224 ?        Ss   09:46   0:04 /usr/lib/systemd/systemd-logind
root        493  0.0  0.1 224268  4536 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    76 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1932 ?        Ssl  09:46   0:07 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1328 ?        Ss   09:46   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   296 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   984 ?        Ssl  09:46   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   388 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   428 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      64953  0.0  0.0 183048  2140 ?        S    15:45   0:00  \_ /usr/sbin/CROND -n
root      64988  0.0  0.0 113284  1212 ?        Ss   15:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      65000  0.0  0.0 108052   360 ?        S    15:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      65003  0.0  0.0 113288  1520 ?        S    15:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      65105  0.0  0.0 153840  2096 ?        R    15:45   0:00  |               \_ ps auxf
root      64954  0.0  0.0 183048  2140 ?        S    15:45   0:00  \_ /usr/sbin/CROND -n
root      64986  0.0  0.0  20164   804 ?        Ss   15:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      64955  0.0  0.0 183048  2140 ?        S    15:45   0:00  \_ /usr/sbin/CROND -n
root      64990  0.0  0.0  20164   808 ?        Ss   15:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      64956  0.0  0.0 183048  2140 ?        S    15:45   0:00  \_ /usr/sbin/CROND -n
root      64984  0.0  0.0  20164   804 ?        Ss   15:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      64957  0.0  0.0 183048  2140 ?        S    15:45   0:00  \_ /usr/sbin/CROND -n
root      64992  0.0  0.0  20164   988 ?        Ss   15:45   0:00  |   \_ jailshell (cloudsms) [65099] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  65099  0.0  0.0  20164   264 ?        S    15:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  65100  0.0  0.0 113284  1212 ?        S    15:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  65101  0.0  0.6 400652 15408 ?        S    15:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      64958  0.0  0.0 183048  2140 ?        S    15:45   0:00  \_ /usr/sbin/CROND -n
root      64975  0.0  0.0  20164   808 ?        Ss   15:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      64959  0.0  0.0 183048  2140 ?        S    15:45   0:00  \_ /usr/sbin/CROND -n
root      64981  0.0  0.0  20164   804 ?        Ss   15:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      64960  0.0  0.0 183048  2140 ?        S    15:45   0:00  \_ /usr/sbin/CROND -n
root      64974  0.0  0.0  20164   808 ?        Ss   15:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      64963  0.0  0.0 183048  2140 ?        S    15:45   0:00  \_ /usr/sbin/CROND -n
root      64989  0.0  0.0  20164   808 ?        Ss   15:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      64964  0.0  0.0 183048  2140 ?        S    15:45   0:00  \_ /usr/sbin/CROND -n
root      64976  0.0  0.0 113284  1212 ?        Ss   15:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      64979  1.0  0.4 188228 11120 ?        S    15:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      65039  0.0  0.0 160224  2368 ?        S    15:45   0:00  |           \_ top -n 2 -b -c
root      64965  0.0  0.0 183048  2144 ?        S    15:45   0:00  \_ /usr/sbin/CROND -n
root      64985  0.0  0.0  20164   968 ?        Ss   15:45   0:00  |   \_ jailshell (pactpay) [65005] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   65005  0.0  0.0  20164   264 ?        S    15:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   65010  1.0  0.7 476724 17484 ?        S    15:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      64967  0.0  0.0 183048  2140 ?        S    15:45   0:00  \_ /usr/sbin/CROND -n
root      64982  0.0  0.0  20164   964 ?        Ss   15:45   0:00      \_ jailshell (nigeria) [65004] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   65004  0.0  0.0  20164   260 ?        S    15:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   65011  5.0  0.6 400652 15932 ?        S    15:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3792 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  64467  0.0  0.1  89312  4368 ?        S    15:44   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 10440 ?        Ssl  09:46   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   624 ?        Ssl  09:46   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654048 35036 ?       SLsl 09:46   0:11 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   460 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.0  46912  1580 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  47852  3160 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  2164 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  47940  3096 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.1  24568  2524 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41136  1468 ?        S    09:46   0:00  \_ dovecot/auth
worencom  62550  0.0  0.1  38468  3840 ?        S    15:40   0:00  \_ dovecot/imap
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.3 785392 33732 ?        Ssl  09:46   0:14 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.1  5.8 1828076 141176 ?      Ssl  09:46   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   508 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.0 397344  2420 ?        Ss   09:46   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    28691  0.0  0.3 471856  9496 ?        S    14:32   0:03  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    59398  0.1  0.4 471840  9780 ?        S    15:34   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    63791  0.1  0.3 471784  9264 ?        S    15:43   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    63907  0.2  0.3 471784  9264 ?        S    15:43   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    64009  0.2  0.3 471784  9260 ?        S    15:43   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   380 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   544 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.2 273744  7132 ?        Ssl  09:46   0:05 /usr/sbin/rsyslogd -n
root       1014  0.0  1.1 261164 27476 ?        Ss   09:46   0:07 cpsrvd (SSL) - waiting for connections                   
root      64885  0.0  0.0      0     0 ?        Z    15:44   0:00  \_ [webmaild - serv] <defunct>
root      64886  0.0  0.0      0     0 ?        Z    15:44   0:00  \_ [webmaild - serv] <defunct>
root      64887  0.0  0.0      0     0 ?        Z    15:44   0:00  \_ [cpaneld - servi] <defunct>
root      64888  0.0  0.0      0     0 ?        Z    15:44   0:00  \_ [cpaneld - servi] <defunct>
root      64889  0.0  0.0      0     0 ?        Z    15:44   0:00  \_ [webmaild - serv] <defunct>
root      64890  0.0  0.0      0     0 ?        Z    15:44   0:00  \_ [cpaneld - servi] <defunct>
root      64891  0.0  0.0      0     0 ?        Z    15:44   0:00  \_ [cpaneld - servi] <defunct>
root      64892  0.0  0.0      0     0 ?        Z    15:44   0:00  \_ [webmaild - serv] <defunct>
root      64893  0.0  0.0      0     0 ?        Z    15:44   0:00  \_ [cpaneld - servi] <defunct>
root       1017  0.0  0.0 436392   404 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:02 /usr/sbin/sshd -D
root      64355  0.0  0.1 111304  4264 ?        Ss   15:44   0:00  \_ sshd: [accepted]
root      64360  0.0  0.1 111304  4272 ?        Ss   15:44   0:00  \_ sshd: [accepted]
sshd      64361  0.0  0.1 115644  2628 ?        S    15:44   0:00  |   \_ sshd: [net]
root      64723  0.0  0.1 111304  4264 ?        Ss   15:44   0:00  \_ sshd: [accepted]
root      64908  0.0  0.2 157100  5076 ?        Ss   15:44   0:00  \_ sshd: unknown [priv]
sshd      64909  0.0  0.1 115644  2632 ?        S    15:44   0:00      \_ sshd: unknown [net]
cpanelc+   1026  0.0  0.1  10540  3564 ?        Ss   09:46   0:16 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  1.0 410452 25752 ?        Ss   09:46   0:17 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3284 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.9 262228 23808 ?        Ss   09:46   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1265  0.0  0.4 209480 11140 ?        Ss   09:46   0:02 tailwatchd
root       1267  0.0  0.0 167452  1196 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1713  0.0  0.0 299272   632 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.0 130416  1372 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  1.9 10.9 1469608 264048 ?      Sl   09:46   6:49 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:01 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12812   328 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12848   340 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    47381  0.0  0.8 277856 20376 ?        S    15:09   0:01  \_ /usr/sbin/httpd -k start
nobody    49002  0.0  0.8 277516 19872 ?        S    15:12   0:01  \_ /usr/sbin/httpd -k start
nobody    51464  0.0  0.8 277584 20068 ?        S    15:17   0:01  \_ /usr/sbin/httpd -k start
nobody    56884  0.0  0.7 277864 18856 ?        S    15:28   0:00  \_ /usr/sbin/httpd -k start
nobody    59630  0.0  0.7 277512 18780 ?        S    15:34   0:00  \_ /usr/sbin/httpd -k start
nobody    59812  0.1  0.7 277552 19224 ?        S    15:35   0:00  \_ /usr/sbin/httpd -k start
nobody    60718  0.0  0.7 277748 18884 ?        S    15:37   0:00  \_ /usr/sbin/httpd -k start
nobody    61482  0.0  0.7 277860 18808 ?        S    15:38   0:00  \_ /usr/sbin/httpd -k start
nobody    61810  0.1  0.7 277516 18976 ?        S    15:39   0:00  \_ /usr/sbin/httpd -k start
nobody    61831  0.1  0.7 277492 18152 ?        S    15:39   0:00  \_ /usr/sbin/httpd -k start
nobody    61836  0.0  0.7 277848 17940 ?        S    15:39   0:00  \_ /usr/sbin/httpd -k start
nobody    63551  0.0  0.7 277512 17428 ?        S    15:42   0:00  \_ /usr/sbin/httpd -k start
nobody    63700  0.1  0.7 277536 18316 ?        S    15:42   0:00  \_ /usr/sbin/httpd -k start
nobody    64171  0.1  0.7 277512 17052 ?        S    15:43   0:00  \_ /usr/sbin/httpd -k start
nobody    64188  0.0  0.6 277176 15912 ?        S    15:44   0:00  \_ /usr/sbin/httpd -k start
nobody    64189  0.1  0.7 277512 17184 ?        S    15:44   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.0  0.4 182632 10916 ?        Ss   09:46   0:18 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      28537  0.0  4.8 248100 118080 ?       Ss   10:50   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.1  5.6 269720 136552 ?       S    11:00   0:21  \_ spamd child
root      32710  0.0  5.1 258916 125492 ?       S    11:00   0:00  \_ spamd child
root      42747  0.0  0.4 1341636 10476 ?       Ssl  15:00   0:00 /usr/bin/cspdaemon
root      42789  0.0  0.4 1277312 11680 ?       Ssl  15:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 43226  Threads: 3  Questions: 2703917  Slow queries: 0  Opens: 8576  Flush tables: 1  Open tables: 2000  Queries per second avg: 62.553
*************************** 1. row ***************************
     Id: 40915
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 40917
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 40927
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 110.249.201.60 TIME_WAIT
      1 15.235.98.10 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 18.208.11.93 TIME_WAIT
      1 18.232.36.1 TIME_WAIT
      1 ::1 TIME_WAIT
      1 3.215.59.93 TIME_WAIT
      1 44.196.118.6 TIME_WAIT
      1 44.207.69.106 TIME_WAIT
      1 50.16.216.166 TIME_WAIT
      1 52.44.148.203 TIME_WAIT
      1 52.71.46.142 TIME_WAIT
      1 66.249.70.35 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 74.176.193.146 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 15:45:02 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 12 hours 19 seconds
   Server load: 0.14 0.43 0.59
   Total accesses: 69520 - Total Traffic: 1.1 GB - Total Duration: 153839834
   CPU Usage: u5.69 s3.03 cu572.58 cs398.42 - 2.27% CPU load
   1.61 requests/sec - 26.9 kB/second - 16.7 kB/request - 2212.89 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

KWK_RKWWKW_....KWW.._K..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur    Conn  Child  Slot     Client      Protocol              VHost                                          Request
   0-0  49002 73/412/4318 K 4.57 0     78  8039395  305.6 4.89  59.11 74.176.193.146  http/1.1 legal-agreement.staging.cloudwa GET /cgi-sys/suspendedpage.cgi HTTP/1.1
   1-0  61482 0/31/4306   W 0.73 0     0   7885181  0.0   0.63  64.07 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   2-0  59630 1/169/4425  K 2.02 0     293 5044079  38.6  2.25  67.80 66.249.70.38    http/1.1 support.cloudware.ng:443        GET /?c=1990679311 HTTP/1.1
   3-0  59812 0/160/4529  _ 2.89 0     0   4430721  0.0   3.55  81.61 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80          GET /whm-server-status HTTP/1.0
   4-0  63700 0/25/4346   R 0.54 1     26  4755786  0.0   0.50  67.87 66.249.70.35    http/1.1 support.cloudware.ng:443
   5-0  64171 1/14/4621   K 0.34 1     274 5060780  35.7  0.40  80.28 66.249.70.36    http/1.1 support.cloudware.ng:443        GET /?c=1039558336 HTTP/1.1
   6-0  64188 0/0/3675    W 0.00 58    0   5765191  0.0   0.00  67.36 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323533303234332p2231223
   7-0  63551 0/9/3689    W 0.17 98    0   48422643 0.0   0.27  57.10 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323533303230332p2231223
   8-0  61810 2/76/3391   K 1.45 3     270 6327283  66.7  1.57  50.24 66.249.70.39    http/1.1 support.cloudware.ng:443        GET /?c=78510956 HTTP/1.1
   9-0  56884 0/67/3907   W 0.96 172   0   5833131  0.0   4.93  84.40 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323533303132392p2231223
   10-0 64189 0/18/3151   _ 0.46 0     131 6277520  0.0   0.39  40.69 44.207.69.106   http/1.1 team.cloudware.ng:80            GET /vendor/phpunit/php-code-coverage/ HTTP/1.1
   11-0 -     0/0/2823    . 0.00 302   0   6069676  0.0   0.00  46.78 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   12-0 -     0/0/3084    . 0.00 133   0   4094893  0.0   0.00  49.37 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   13-0 -     0/0/2939    . 0.00 138   0   5133549  0.0   0.00  52.26 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   14-0 -     0/0/3345    . 0.00 136   0   4938208  0.0   0.00  49.89 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-0 61831 2/154/2870  K 1.32 1     275 5517513  65.9  1.41  38.79 66.249.70.32    http/1.1 support.cloudware.ng:443        GET /?c=2455148097 HTTP/1.1
   16-0 51464 0/298/1138  W 4.42 78    0   6074317  0.0   6.73  21.10 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323533303232332p2231223
   17-0 60718 0/82/2249   W 1.88 118   0   3889817  0.0   2.10  48.93 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323533303138332p2231223
   18-0 -     0/0/1856    . 0.00 303   0   1458126  0.0   0.00  28.04 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-0 -     0/0/834     . 0.00 256   0   1445908  0.0   0.00  15.17 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-0 47381 0/500/604   _ 5.29 0     0   1463985  0.0   6.73  8.20  ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   21-0 61836 2/28/321    K 0.50 0     329 2036907  65.8  0.54  4.37  66.249.70.34    http/1.1 support.cloudware.ng:443        GET /?c=958284500 HTTP/1.1
   22-0 -     0/0/975     . 0.00 296   0   1235766  0.0   0.00  12.52 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/16      . 0.00 667   0   33259    0.0   0.00  0.20  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -     0/0/87      . 0.00 402   0   62551    0.0   0.00  1.41  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/8       . 0.00 13551 0   29769    0.0   0.00  0.23  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/12      . 0.00 13511 0   24649    0.0   0.00  0.26  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/31      . 0.00 13547 0   34716    0.0   0.00  0.61  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/259     . 0.00 13560 0   143065   0.0   0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/96      . 0.00 13576 0   59764    0.0   0.00  2.78  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/13      . 0.00 13501 0   22779    0.0   0.00  9.52  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/103     . 0.00 13302 0   179005   0.0   0.00  0.84  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/2       . 0.00 13577 0   9851     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/7       . 0.00 13526 0   21858    0.0   0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/2       . 0.00 13572 0   17699    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/5       . 0.00 13541 0   19399    0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/4       . 0.00 13550 0   14235    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/2       . 0.00 13573 0   15595    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/156     . 0.00 13306 0   148319   0.0   0.00  0.63  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/2       . 0.00 13574 0   15338    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/6       . 0.00 13529 0   21858    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/208     . 0.00 12705 0   243070   0.0   0.00  2.95  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/2       . 0.00 13569 0   19835    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/2       . 0.00 13570 0   19620    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/6       . 0.00 13527 0   24371    0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/5       . 0.00 13536 0   19070    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/6       . 0.00 13531 0   20569    0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/4       . 0.00 13546 0   17777    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/4       . 0.00 13543 0   16933    0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/2       . 0.00 13571 0   17743    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/3       . 0.00 13553 0   22693    0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/4       . 0.00 13540 0   22016    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/4       . 0.00 13549 0   22448    0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/3       . 0.00 13557 0   9096     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/6       . 0.00 13545 0   23840    0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/17      . 0.00 13518 0   16331    0.0   0.00  0.47  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/184     . 0.00 13338 0   130360   0.0   0.00  0.50  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -     0/0/3       . 0.00 13554 0   22445    0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -     0/0/3       . 0.00 13558 0   7899     0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-0 -     0/0/5       . 0.00 13533 0   23139    0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -     0/0/139     . 0.00 13203 0   237404   0.0   0.00  1.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -     0/0/2       . 0.00 13567 0   2361     0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-0 -     0/0/11      . 0.00 13516 0   9214     0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-0 -     0/0/4       . 0.00 13542 0   8490     0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-0 -     0/0/1       . 0.00 13583 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-0 -     0/0/1       . 0.00 13581 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-0 -     0/0/2       . 0.00 13565 0   8680     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-0 -     0/0/1       . 0.00 13580 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-0 -     0/0/3       . 0.00 13556 0   742      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-0 -     0/0/1       . 0.00 13582 11  22       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-0 -     0/0/2       . 0.00 13563 0   10366    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-0 -     0/0/65      . 0.00 13376 0   105003   0.0   0.00  1.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-0 -     0/0/151     . 0.00 13204 0   218700   0.0   0.00  1.26  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-0 -     0/0/2       . 0.00 13562 0   8818     0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   74-0 -     0/0/4       . 0.00 13552 0   1447     0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-0 -     0/0/2       . 0.00 13568 0   463      0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-0 -     0/0/101     . 0.00 13288 0   159456   0.0   0.00  0.87  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-0 -     0/0/6       . 0.00 13537 0   4997     0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-0 -     0/0/338     . 0.00 11780 0   272159   0.0   0.00  5.63  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   79-0 -     0/0/1       . 0.00 13579 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   80-0 -     0/0/2       . 0.00 13561 0   7766     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   81-0 -     0/0/3       . 0.00 13544 0   10368    0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 620
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 15 seconds, (range: 0...43)
   index usage: 10%, cache usage: 14%
   total entries stored since starting: 43258
   total entries replaced since starting: 0
   total entries expired since starting: 42606
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 130 miss
   total removes since starting: 33 hit, 105 miss
Youez - 2016 - github.com/yon3zu
LinuXploit