403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.03.18.txt
 ## swap threshold exceeded
## server overview
2025-11-08.03.18 load[0] mem[57/79] mysql[5/12] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1240         198          64         924         879
Swap:          1999        1628         371
 03:18:01 up  8:28,  0 users,  load average: 0.79, 1.31, 1.35
## system overview
top - 03:18:02 up  8:28,  0 users,  load average: 0.97, 1.34, 1.36
Tasks: 205 total,   4 running, 200 sleeping,   0 stopped,   1 zombie
%Cpu(s): 73.5 us, 14.7 sy,  0.0 ni, 11.8 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   201112 free,  1272140 used,   947048 buff/cache
KiB Swap:  2047996 total,   380156 free,  1667840 used.   897856 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1964 mysql     20   0 1458856 253860   3504 S 123.5 10.5  11:53.73 /usr/sbin+
 97090 nigeria   20   0  400652  15936  10220 R  23.5  0.7   0:00.06 /opt/cpan+
 97103 pactpay   20   0  476724  17480  11728 S   5.9  0.7   0:00.02 /opt/cpan+
 97131 root      20   0  160220   2060   1580 R   5.9  0.1   0:00.01 top -bcn1
     1 root      20   0   44416   3484   1540 S   0.0  0.1   0:43.04 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:03.52 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.58 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:37.78 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.57 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.17 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:19.54 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.66 [kauditd]
   233 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   239 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:02.02 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.37 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.76 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   5948   5696 S   0.0  0.2   0:17.68 /usr/lib/+
   388 root      20   0   45356     88     84 S   0.0  0.0   0:00.33 /usr/lib/+
   412 root      16  -4   55532    512    380 S   0.0  0.0   0:02.99 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   484 polkitd   20   0  612240   1088    696 S   0.0  0.0   0:04.08 /usr/lib/+
   486 root      20   0  152780    140     96 S   0.0  0.0   0:00.01 /usr/sbin+
   487 root      20   0   21540    376    292 S   0.0  0.0   0:00.69 /usr/sbin+
   495 root      20   0   52852    372    272 S   0.0  0.0   0:00.01 /usr/sbin+
   496 dbus      20   0   57040   1352    624 S   0.0  0.1   0:16.04 /usr/bin/+
   501 nscd      20   0  994492   3424    716 S   0.0  0.1   0:14.77 /usr/sbin+
   505 rpc       20   0   69256     56      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   525 root      20   0    4388     40     36 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  224284   6564   1544 S   0.0  0.3   0:00.40 queueproc+
   536 root      20   0   24896   1404    820 S   0.0  0.1   0:07.06 /usr/lib/+
   551 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    896    432 S   0.0  0.0   0:00.86 /usr/sbin+
   587 root      20   0  108296     48     44 S   0.0  0.0   0:00.00 /sbin/age+
   588 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   630 mailnull  20   0   89112   3924    916 S   0.0  0.2   0:00.46 /usr/sbin+
   653 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   663 root       0 -20       0      0      0 S   0.0  0.0   0:03.98 [loop0]
   675 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1112 root      20   0  572372    940    396 S   0.0  0.0   0:02.60 /usr/bin/+
  1114 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1115 telegraf  20   0 5654048  37036   6004 S   0.0  1.5   0:16.55 /usr/loca+
  1118 systuser  20   0   13012     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1122 systuser  20   0  112268     60      0 S   0.0  0.0   0:00.01 /usr/loca+
  1123 root      20   0   51656   1216    824 S   0.0  0.1   0:00.38 /usr/sbin+
  1124 root      20   0  153404    304    220 S   0.0  0.0   0:00.67 pure-ftpd+
  1126 systuser  20   0  114016  13212   2732 S   0.0  0.5   0:06.84 /usr/loca+
  1127 root      20   0  111304    404    304 S   0.0  0.0   0:04.44 /usr/sbin+
  1128 memcach+  20   0  342400     36     36 S   0.0  0.0   0:00.64 /usr/bin/+
  1130 root      20   0  397344   6908   1656 S   0.0  0.3   0:07.79 php-fpm: +
  1134 root      20   0  436392  19060  11556 S   0.0  0.8   0:00.99 php-fpm: +
  1135 root      20   0  314704   6400   5520 S   0.0  0.3   0:09.15 /usr/sbin+
  1138 root      20   0 1763032  75948    620 S   0.0  3.1   0:14.12 /usr/loca+
  1162 root      20   0  385496   5944    908 S   0.0  0.2   0:00.86 php-fpm: +
  1168 named     20   0  858124  42808   1584 S   0.0  1.8   0:17.67 /usr/sbin+
  1170 root      20   0  261820   9468   2580 S   0.0  0.4   0:07.71 cpsrvd (S+
  1179 root      20   0  386112   5520    896 S   0.0  0.2   0:00.84 php-fpm: +
  1191 root      20   0  392856   6332    736 S   0.0  0.3   0:00.82 php-fpm: +
  1192 systuser  20   0  111864     64      0 S   0.0  0.0   0:00.01 /usr/loca+
  1193 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
  1205 cpanelc+  20   0   11388   4148   2328 S   0.0  0.2   0:25.30 /usr/loca+
  1280 dovecot   20   0   10320    340    224 S   0.0  0.0   0:00.09 dovecot/a+
  1350 root      20   0  248084  46212    892 S   0.0  1.9   0:06.40 /usr/loca+
  1362 systuser  20   0  157708   2956    968 S   0.0  0.1   0:00.13 SonarPush+
  1413 wp-tool+  20   0  387556   3704   1808 S   0.0  0.2   0:00.31 /usr/bin/+
  1414 wp-tool+  20   0  410480  15344   1944 S   0.0  0.6   0:24.91 /usr/bin/+
  1430 root      20   0  262224  24428   6572 S   0.0  1.0   0:03.85 cpdavd - +
  1435 root      20   0  209992  10788   2388 S   0.0  0.4   0:03.09 tailwatchd
  1436 root      20   0  167452   4112   2744 S   0.0  0.2   0:00.55 dnsadmin +
  1844 root      20   0  299272    524    364 S   0.0  0.0   0:00.81 php-fpm: +
  1905 root      38  18  130416   1384    704 S   0.0  0.1   0:00.07 cpanellog+
  2132 root      20   0  267108  30884   5348 S   0.0  1.3   0:02.52 /usr/sbin+
  5902 root      20   0  269784  96284   2360 S   0.0  4.0   0:04.89 spamd chi+
  5903 root      20   0  261484  94404    652 S   0.0  3.9   0:00.25 spamd chi+
  8253 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  8272 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.55 [kworker]
 13861 root      20   0  183048   1056    504 S   0.0  0.0   0:00.00 /usr/sbin+
 13918 root      20   0  113284    400    220 S   0.0  0.0   0:00.00 /bin/sh -+
 13954 root      20   0  108056    116     44 S   0.0  0.0   0:00.00 sleep 2h +
 30837 root      20   0   12792   1392   1180 S   0.0  0.1   0:00.75 /usr/loca+
 30838 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.65 /usr/loca+
 30839 root      20   0   12820   1400   1180 S   0.0  0.1   0:00.68 /usr/loca+
 30841 dovenull  20   0   46912   3900   2844 S   0.0  0.2   0:00.10 dovecot/p+
 30842 dovenull  20   0   47600   4740   3152 S   0.0  0.2   0:00.09 dovecot/i+
 30844 root      20   0   10452   1340    968 S   0.0  0.1   0:00.08 dovecot/l+
 30845 dovenull  20   0   46912   4112   3044 S   0.0  0.2   0:00.12 dovecot/p+
 30846 dovenull  20   0   47472   4632   3164 S   0.0  0.2   0:00.05 dovecot/i+
 30847 root      20   0   24556  12052   1164 S   0.0  0.5   0:00.05 dovecot/c+
 30848 dovecot   20   0   13568   1320   1052 S   0.0  0.1   0:00.01 dovecot/s+
 30849 dovecot   20   0   41056   2604   1832 S   0.0  0.1   0:00.14 dovecot/a+
 30851 root      20   0   53252  11768   2408 S   0.0  0.5   0:00.05 /usr/loca+
 56209 root      20   0       0      0      0 S   0.0  0.0   0:00.36 [kworker/+
 57912 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [kworker/+
 62044 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kworker/+
 74197 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 75823 root      20   0  182636  29684   1368 S   0.0  1.2   0:12.74 lfd - sle+
 76159 nobody    20   0  277980  36504   4640 S   0.0  1.5   0:02.58 /usr/sbin+
 81939 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82538 nobody    20   0  277672  36052   4496 S   0.0  1.5   0:01.80 /usr/sbin+
 85854 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86902 nobody    20   0  278004  36164   4304 S   0.0  1.5   0:01.35 /usr/sbin+
 87167 root      20   0 1276100  10744    596 S   0.0  0.4   0:00.06 /usr/bin/+
 87201 root      20   0 1277312  11540    560 S   0.0  0.5   0:00.06 /usr/bin/+
 87606 root      20   0  123364    696    468 S   0.0  0.0   0:00.00 /usr/sbin+
 89981 nobody    20   0  278088  36164   4356 S   0.0  1.5   0:00.98 /usr/sbin+
 90443 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 90543 nobody    20   0  277944  36188   4392 S   0.0  1.5   0:00.95 /usr/sbin+
 91044 nobody    20   0  277652  35808   4276 S   0.0  1.5   0:00.70 /usr/sbin+
 91231 nobody    20   0  277952  35976   4304 S   0.0  1.5   0:00.70 /usr/sbin+
 91667 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 93332 nobody    20   0  277960  35736   3952 S   0.0  1.5   0:00.60 /usr/sbin+
 93408 nobody    20   0  277888  35824   4088 R   0.0  1.5   0:00.41 /usr/sbin+
 93442 nobody    20   0  277652  35520   3996 S   0.0  1.5   0:00.53 /usr/sbin+
 93851 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 94664 nobody    20   0  277956  35476   3804 S   0.0  1.5   0:00.33 /usr/sbin+
 94864 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 95749 nobody    20   0  277652  35324   3792 S   0.0  1.5   0:00.17 /usr/sbin+
 96018 nobody    20   0  277960  35420   3744 S   0.0  1.5   0:00.08 /usr/sbin+
 96062 nobody    20   0  277580  35124   3664 S   0.0  1.5   0:00.09 /usr/sbin+
 96410 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 96536 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96593 nobody    20   0  277604  35192   3716 S   0.0  1.5   0:00.04 /usr/sbin+
 96609 nobody    20   0  277632  35244   3736 S   0.0  1.5   0:00.08 /usr/sbin+
 96672 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 96694 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 96913 healtho+  20   0  457240  70032   4192 S   0.0  2.9   0:02.01 php-fpm: +
 96933 nigeria   20   0  397064   8124   2348 S   0.0  0.3   0:00.01 php-fpm: +
 96948 healtho+  20   0  457240  70028   4188 S   0.0  2.9   0:01.75 php-fpm: +
 97017 healtho+  20   0  428568  41148   4180 S   0.0  1.7   0:00.29 php-fpm: +
 97042 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 97043 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
 97046 root      20   0  111304   4444   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 97047 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 97049 root      20   0  183080   2420   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 97050 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97051 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97052 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97053 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97054 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97055 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97056 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97057 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97058 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97060 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97061 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 97063 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97066 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 97067 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 97069 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 97070 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 97071 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97074 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97075 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 97076 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 97077 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97078 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97079 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 97080 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 97081 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 97084 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 97088 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 97089 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 97096 cloudw    20   0  352096  15752  10252 S   0.0  0.7   0:00.01 /opt/cpan+
 97098 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 97119 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 97123 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 97133 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 97134 cloudsms  20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /usr/loca+
 97135 cloudsms  20   0  207992   5100   3536 R   0.0  0.2   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov07   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov07   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov07   0:37  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov07   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov07   0:19  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kauditd]
root        233  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ata_sff]
root        239  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   Nov07   0:02  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   Nov07   0:02  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    Nov07   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [xprtiod]
root        653  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kvm-irqfd-clean]
root        663  0.0  0.0      0     0 ?        S<   Nov07   0:03  \_ [loop0]
root        675  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root      56209  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/u200:1]
root      57912  0.0  0.0      0     0 ?        S    02:15   0:00  \_ [kworker/0:1]
root      62044  0.0  0.0      0     0 ?        S    02:21   0:00  \_ [kworker/0:2]
root      74197  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/u200:2]
root      81939  0.0  0.0      0     0 ?        S    02:52   0:00  \_ [kworker/1:4]
root      85854  0.0  0.0      0     0 ?        S    02:59   0:00  \_ [kworker/1:1]
root      90443  0.0  0.0      0     0 ?        S    03:06   0:00  \_ [kworker/0:3]
root      91667  0.0  0.0      0     0 ?        S    03:08   0:00  \_ [kworker/1:0]
root      93851  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/0:0]
root      94864  0.0  0.0      0     0 ?        S    03:14   0:00  \_ [kworker/1:2]
root      96536  0.0  0.0      0     0 ?        S    03:17   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44416  3484 ?        Ss   Nov07   0:43 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  5948 ?        Ss   Nov07   0:17 /usr/lib/systemd/systemd-journald
root        388  0.0  0.0  45356    88 ?        Ss   Nov07   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   512 ?        S<sl Nov07   0:02 /sbin/auditd
polkitd     484  0.0  0.0 612240  1088 ?        Ssl  Nov07   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        486  0.0  0.0 152780   140 ?        Ss   Nov07   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.0  21540   376 ?        Ss   Nov07   0:00 /usr/sbin/irqbalance --foreground
root        495  0.0  0.0  52852   372 ?        Ss   Nov07   0:00 /usr/sbin/smartd -n -q never
dbus        496  0.0  0.0  57040  1352 ?        Ss   Nov07   0:16 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        501  0.0  0.1 994492  3424 ?        Ssl  Nov07   0:14 /usr/sbin/nscd
rpc         505  0.0  0.0  69256    56 ?        Ss   Nov07   0:00 /sbin/rpcbind -w
root        525  0.0  0.0   4388    40 ?        Ss   Nov07   0:00 /usr/sbin/acpid
root        530  0.0  0.2 224284  6564 ?        Ss   Nov07   0:00 queueprocd - waiting up to 60s to process a task
root        536  0.0  0.0  24896  1404 ?        Ss   Nov07   0:07 /usr/lib/systemd/systemd-logind
root        551  0.0  0.0 195208     0 ?        Ssl  Nov07   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0  24208    24 ?        Ss   Nov07   0:00 /usr/sbin/atd -f
root        575  0.0  0.0 124512   896 ?        Ss   Nov07   0:00 /usr/sbin/crond -n
root      13861  0.0  0.0 183048  1056 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      13918  0.0  0.0 113284   400 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      13954  0.0  0.0 108056   116 ?        S    01:00   0:00  |       \_ sleep 2h 41m
root      97049  0.0  0.0 183080  2420 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97066  0.0  0.0 113284  1212 ?        Ss   03:18   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      97084  0.0  0.0 108052   356 ?        S    03:18   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      97089  0.0  0.0 113288  1512 ?        S    03:18   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      97136  0.0  0.0 153840  2088 ?        R    03:18   0:00  |               \_ ps auxf
root      97050  0.0  0.1 183080  2424 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97081  0.0  0.0  20164   804 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      97051  0.0  0.1 183080  2424 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97078  0.0  0.0  20164   808 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      97052  0.0  0.1 183080  2424 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97079  0.0  0.0  20164   804 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      97053  0.0  0.1 183080  2424 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97077  0.0  0.0  20164   808 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      97054  0.0  0.1 183080  2424 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97069  0.0  0.0  20164   804 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      97055  0.0  0.0 183080  2420 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97074  0.0  0.0  20164   808 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      97056  0.0  0.0 183080  2420 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97067  0.0  0.0  20164   984 ?        Ss   03:18   0:00  |   \_ jailshell (cloudsms) [97133] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  97133  0.0  0.0  20164   256 ?        S    03:18   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  97134  0.0  0.0 113284  1208 ?        S    03:18   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  97135  0.0  0.6 400652 15672 ?        R    03:18   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue.php
root      97057  0.0  0.0 183080  2420 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97071  0.0  0.0  20164   808 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      97058  0.0  0.0 183080  2416 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97075  0.0  0.0  20164   804 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      97060  0.0  0.0 183080  2416 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97076  0.0  0.0  20164   804 ?        Ss   03:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      97061  0.0  0.0 183080  2420 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97080  0.0  0.0  20164   968 ?        Ss   03:18   0:00  |   \_ jailshell (pactpay) [97098] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   97098  0.0  0.0  20164   264 ?        S    03:18   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   97103  2.0  0.7 476724 17480 ?        S    03:18   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      97063  0.0  0.0 183080  2416 ?        S    03:18   0:00  \_ /usr/sbin/CROND -n
root      97070  0.0  0.0  20164   964 ?        Ss   03:18   0:00      \_ jailshell (nigeria) [97088] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   97088  0.0  0.0  20164   260 ?        S    03:18   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   97090  6.0  0.6 400652 15936 ?        S    03:18   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        587  0.0  0.0 108296    48 tty1     Ss+  Nov07   0:00 /sbin/agetty --noclear tty1 linux
root        588  0.0  0.0 114704    24 ttyS0    Ss+  Nov07   0:00 /bin/bash
mailnull    630  0.0  0.1  89112  3924 ?        Ss   Nov07   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root       1112  0.0  0.0 572372   940 ?        Ssl  Nov07   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1114  0.0  0.0  10132    44 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf   1115  0.0  1.5 5654048 37036 ?       SLsl Nov07   0:16 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser   1118  0.0  0.0  13012    48 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser   1122  0.0  0.0 112268    60 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1123  0.0  0.0  51656  1216 ?        Ss   Nov07   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1280  0.0  0.0  10320   340 ?        S    Nov07   0:00  \_ dovecot/anvil
dovenull  30841  0.0  0.1  46912  3900 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30842  0.0  0.1  47600  4740 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30844  0.0  0.0  10452  1340 ?        S    01:28   0:00  \_ dovecot/log
dovenull  30845  0.0  0.1  46912  4112 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30846  0.0  0.1  47472  4632 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30847  0.0  0.4  24556 12052 ?        S    01:28   0:00  \_ dovecot/config
dovecot   30848  0.0  0.0  13568  1320 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   30849  0.0  0.1  41056  2604 ?        S    01:28   0:00  \_ dovecot/auth
root      96410  0.0  0.1  60820  4512 ?        S    03:16   0:00  \_ dovecot/lmtp
root      97042  0.0  0.1  41052  2728 ?        S    03:18   0:00  \_ dovecot/auth -w
root       1124  0.0  0.0 153404   304 ?        Ss   Nov07   0:00 pure-ftpd (SERVER)
systuser   1126  0.0  0.5 114016 13212 ?        Ssl  Nov07   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root       1127  0.0  0.0 111304   404 ?        Ss   Nov07   0:04 /usr/sbin/sshd -D
root      96672  0.0  0.1 111304  4268 ?        Ss   03:17   0:00  \_ sshd: [accepted]
sshd      96694  0.0  0.1 115644  2632 ?        S    03:17   0:00  |   \_ sshd: [net]
root      97046  0.0  0.1 111304  4444 ?        Ss   03:18   0:00  \_ sshd: [accepted]
sshd      97047  0.0  0.1 115644  2624 ?        S    03:18   0:00  |   \_ sshd: [net]
root      97119  0.0  0.1 111304  4268 ?        Ss   03:18   0:00  \_ sshd: [accepted]
sshd      97123  0.0  0.1 115644  2628 ?        S    03:18   0:00      \_ sshd: [net]
memcach+   1128  0.0  0.0 342400    36 ?        Ssl  Nov07   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1130  0.0  0.2 397344  6908 ?        Ss   Nov07   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  96913 10.5  2.8 457240 70032 ?        S    03:17   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   96933  0.0  0.3 397064  8124 ?        S    03:17   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  96948 11.6  2.8 457240 70028 ?        S    03:17   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  97017  7.2  1.7 428568 41148 ?        S    03:17   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root       1134  0.0  0.7 436392 19060 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.0  0.2 314704  6400 ?        Ssl  Nov07   0:09 /usr/sbin/rsyslogd -n
root       1138  0.0  3.1 1763032 75948 ?       Ssl  Nov07   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1162  0.0  0.2 385496  5944 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named      1168  0.0  1.7 858124 42808 ?        Ssl  Nov07   0:17 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1170  0.0  0.3 261820  9468 ?        Ss   Nov07   0:07 cpsrvd (SSL) - waiting for connections                   
root      97043  0.0  0.0      0     0 ?        Z    03:18   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root       1179  0.0  0.2 386112  5520 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1191  0.0  0.2 392856  6332 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1192  0.0  0.0 111864    64 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1193  0.0  0.0 445028     0 ?        Ss   Nov07   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
cpanelc+   1205  0.0  0.1  11388  4148 ?        Ss   Nov07   0:25 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1350  0.0  1.9 248084 46212 ?        Ss   Nov07   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5902  0.0  3.9 269784 96284 ?        S    Nov07   0:04  \_ spamd child
root       5903  0.0  3.9 261484 94404 ?        S    Nov07   0:00  \_ spamd child
systuser   1362  0.0  0.1 157708  2956 ?        S    Nov07   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1413  0.0  0.1 387556  3704 ?        Ss   Nov07   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1414  0.0  0.6 410480 15344 ?        Ss   Nov07   0:24 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1430  0.0  1.0 262224 24428 ?        Ss   Nov07   0:03 cpdavd - accepting connections on: 2091, 2077, 2078
root       1435  0.0  0.4 209992 10788 ?        Ss   Nov07   0:03 tailwatchd
root       1436  0.0  0.1 167452  4112 ?        Ss   Nov07   0:00 dnsadmin - dormant mode
root       1844  0.0  0.0 299272   524 ?        Ss   Nov07   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1905  0.0  0.0 130416  1384 ?        SN   Nov07   0:00 cpanellogd - sleeping for logs
mysql      1964  2.3 10.4 1458856 253860 ?      Sl   Nov07  11:53 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2132  0.0  1.2 267108 30884 ?        Ss   Nov07   0:02 /usr/sbin/httpd -k start
root      30837  0.0  0.0  12792  1392 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      30838  0.0  0.0  12732  1364 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      30839  0.0  0.0  12820  1400 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      30851  0.0  0.4  53252 11768 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    76159  0.1  1.5 277980 36504 ?        S    02:44   0:02  \_ /usr/sbin/httpd -k start
nobody    82538  0.1  1.4 277672 36052 ?        S    02:53   0:01  \_ /usr/sbin/httpd -k start
nobody    86902  0.1  1.4 278004 36164 ?        S    03:00   0:01  \_ /usr/sbin/httpd -k start
nobody    89981  0.1  1.4 278088 36164 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
nobody    90543  0.1  1.4 277944 36188 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
nobody    91044  0.1  1.4 277652 35808 ?        S    03:06   0:00  \_ /usr/sbin/httpd -k start
nobody    91231  0.1  1.4 277952 35976 ?        S    03:07   0:00  \_ /usr/sbin/httpd -k start
nobody    93332  0.1  1.4 277960 35736 ?        S    03:11   0:00  \_ /usr/sbin/httpd -k start
nobody    93408  0.1  1.4 277888 35824 ?        S    03:11   0:00  \_ /usr/sbin/httpd -k start
nobody    93442  0.1  1.4 277652 35520 ?        S    03:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94664  0.1  1.4 277956 35476 ?        R    03:13   0:00  \_ /usr/sbin/httpd -k start
nobody    95749  0.1  1.4 277652 35324 ?        S    03:15   0:00  \_ /usr/sbin/httpd -k start
nobody    96018  0.0  1.4 277960 35420 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    96062  0.0  1.4 277580 35124 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    96593  0.0  1.4 277604 35192 ?        S    03:17   0:00  \_ /usr/sbin/httpd -k start
nobody    96609  0.1  1.4 277632 35244 ?        S    03:17   0:00  \_ /usr/sbin/httpd -k start
oysipao+   8253  0.0  0.0   3148     8 ?        Ss   Nov07   0:00 [kworker]
oysipao+   8272  0.0  0.0   3152    36 ?        S    Nov07   0:00  \_ [kworker]
root      75823  0.1  1.2 182636 29684 ?        Ss   00:00   0:12 lfd - sleeping
root      87167  0.0  0.4 1276100 10744 ?       Ssl  03:00   0:00 /usr/bin/cspdaemon
root      87201  0.0  0.4 1277312 11540 ?       Ssl  03:00   0:00 /usr/bin/checkstatus
root      87606  0.0  0.0 123364   696 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 30475  Threads: 4  Questions: 5633514  Slow queries: 0  Opens: 9445  Flush tables: 1  Open tables: 2000  Queries per second avg: 184.856
*************************** 1. row ***************************
     Id: 80127
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 80129
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 80136
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 80137
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.155.44 TIME_WAIT
      1 167.114.139.177 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 207.46.13.130 TIME_WAIT
      1 43.135.142.37 TIME_WAIT
      1 66.249.70.37 TIME_WAIT
      1 74.7.227.43 TIME_WAIT
      1 74.7.228.157 TIME_WAIT
      1 74.7.228.179 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 47.128.17.63 TIME_WAIT
      4 144.76.32.237 TIME_WAIT
      5 47.128.46.70 TIME_WAIT
     35 103.253.27.28 TIME_WAIT
     38 103.253.27.139 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 03:18:02 WAT
   Restart Time: Friday, 07-Nov-2025 18:50:11 WAT
   Parent Server Config. Generation: 4
   Parent Server MPM Generation: 3
   Server uptime: 8 hours 27 minutes 50 seconds
   Server load: 0.97 1.34 1.36
   Total accesses: 153070 - Total Traffic: 2.5 GB - Total Duration: 79433313
   CPU Usage: u9.05 s4.85 cu1332.62 cs896.71 - 7.36% CPU load
   5.02 requests/sec - 87.5 kB/second - 17.4 kB/request - 518.935 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KR..KRWKK___WK_KR.K.............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-3  95749 2/38/8229  K 0.62  2     32  4316884 14.7  0.68  148.91 144.76.32.237  http/1.1 cloudsms.com.ng:443        GET /job_list.php HTTP/1.1
   1-3  96018 0/23/8760  R 0.22  36    0   4536634 0.0   0.29  160.79 47.128.17.63   http/1.1
   2-3  -     0/0/8806   . 0.00  10    0   4537916 0.0   0.00  161.11 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   3-3  -     0/0/7897   . 0.00  20    0   4126380 0.0   0.00  134.50 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   4-3  76159 1/558/8841 K 9.55  3     301 4322078 32.7  10.64 136.53 66.249.70.39   http/1.1 wptraining.cloudware.ng:80 GET /odr/order/apiGetCartItems/ HTTP/1.1
   5-3  96062 0/27/7789  R 0.54  1     1   4109679 0.0   0.33  138.19 103.253.27.139 http/1.1
   6-3  94664 0/76/7999  W 4.93  0     0   4303166 0.0   1.20  154.06 103.253.27.28  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   7-3  90543 1/260/7830 K 4.16  4     266 3944556 31.0  3.66  135.45 66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2264968181 HTTP/1.1
   8-3  86902 2/295/7147 K 5.28  0     266 3953588 61.9  5.93  130.89 66.249.70.196  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3129129048 HTTP/1.1
   9-3  93332 0/124/7354 _ 4.81  0     317 3905905 0.0   2.64  123.15 103.253.27.28  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   10-3 89981 0/333/7238 _ 3.86  0     295 3587066 0.0   3.72  134.66 103.253.27.139 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   11-3 91044 0/167/6938 _ 3.53  0     0   3437347 0.0   3.12  106.27 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   12-3 96593 0/17/6281  W 0.12  0     0   3175186 0.0   0.10  95.22  ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   13-3 96609 6/18/5063  K 0.27  1     264 2754722 188.0 0.32  88.24  66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2284836284 HTTP/1.1
   14-3 91231 0/176/4560 _ 5.49  0     332 2420976 0.0   2.69  72.45  66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /?p=760535071 HTTP/1.1
   15-3 93408 2/106/4970 K 1.77  0     329 2569479 61.1  1.52  79.94  66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3771686745 HTTP/1.1
   16-3 93442 0/113/4984 R 2.28  58    6   2567704 0.0   2.20  77.22  47.128.46.70   http/1.1
   17-3 -     0/0/4408   . 0.00  1366  0   2316239 0.0   0.00  70.42  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-3 82538 2/457/3034 K 12.89 2     339 1763627 61.8  6.81  45.65  66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1101240246 HTTP/1.1
   19-3 -     0/0/2872   . 0.00  1045  0   1771010 0.0   0.00  43.50  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-3 -     0/0/2284   . 0.00  1444  0   1290082 0.0   0.00  35.44  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-3 -     0/0/2575   . 0.00  1438  0   1461852 0.0   0.00  39.76  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-3 -     0/0/2033   . 0.00  651   0   1214133 0.0   0.00  38.73  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-3 -     0/0/416    . 0.00  4413  0   199668  0.0   0.00  6.99   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-3 -     0/0/1641   . 0.00  4417  0   883602  0.0   0.00  32.45  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-3 -     0/0/1711   . 0.00  4425  0   733768  0.0   0.00  26.26  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-3 -     0/0/949    . 0.00  4437  0   513824  0.0   0.00  19.58  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-3 -     0/0/348    . 0.00  4436  0   135791  0.0   0.00  3.77   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-3 -     0/0/772    . 0.00  4438  0   288804  0.0   0.00  11.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-3 -     0/0/736    . 0.00  2853  0   449336  0.0   0.00  10.09  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-3 -     0/0/127    . 0.00  4424  0   44598   0.0   0.00  1.93   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-3 -     0/0/615    . 0.00  4435  0   305307  0.0   0.00  14.56  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-3 -     0/0/186    . 0.00  4420  0   86066   0.0   0.00  2.58   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-3 -     0/0/45     . 0.00  4423  0   7032    0.0   0.00  0.21   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-3 -     0/0/280    . 0.00  4253  0   117255  0.0   0.00  4.08   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-3 -     0/0/34     . 0.00  4447  0   4925    0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-3 -     0/0/271    . 0.00  4429  0   138957  0.0   0.00  4.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-3 -     0/0/180    . 0.00  4126  0   80106   0.0   0.00  2.49   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-3 -     0/0/70     . 0.00  4448  0   27450   0.0   0.00  0.64   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-3 -     0/0/55     . 0.00  4422  0   23711   0.0   0.00  0.69   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-3 -     0/0/120    . 0.00  4204  0   47805   0.0   0.00  1.27   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-3 -     0/0/41     . 0.00  4428  0   13053   0.0   0.00  0.37   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-3 -     0/0/343    . 0.00  4408  0   157003  0.0   0.00  4.56   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-3 -     0/0/1852   . 0.00  4432  0   792927  0.0   0.00  30.21  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-3 -     0/0/70     . 0.00  4445  0   19485   0.0   0.00  0.69   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-3 -     0/0/207    . 0.00  4433  0   100344  0.0   0.00  2.84   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-3 -     0/0/17     . 0.00  4434  0   3427    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-3 -     0/0/61     . 0.00  4446  0   23416   0.0   0.00  0.56   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-3 -     0/0/373    . 0.00  4286  0   143685  0.0   0.00  4.45   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-2 -     0/0/16     . 0.00  6721  0   5601    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-2 -     0/0/69     . 0.00  6695  0   32068   0.0   0.00  1.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-2 -     0/0/94     . 0.00  6707  0   46144   0.0   0.00  1.46   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-2 -     0/0/24     . 0.00  6705  0   7231    0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-2 -     0/0/902    . 0.00  6586  356 427396  0.0   0.00  16.37  66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3995667990 HTTP/1.1
   54-2 -     0/0/220    . 0.00  6717  0   104301  0.0   0.00  4.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-2 -     0/0/20     . 0.00  6690  0   5450    0.0   0.00  0.14   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-2 -     0/0/53     . 0.00  6584  352 26129   0.0   0.00  0.72   66.249.70.32   http/1.1 support.cloudware.ng:443   GET /ctg/search/similarImageSearchResultView/?ctgItemCd=285079
   57-1 -     0/0/18     . 0.00  7566  0   7494    0.0   0.00  0.30   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-1 -     0/0/61     . 0.00  7402  0   26486   0.0   0.00  0.85   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-1 -     0/0/67     . 0.00  7625  0   37042   0.0   0.00  1.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-1 -     0/0/14     . 0.00  7583  0   4755    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-1 -     0/0/18     . 0.00  7629  0   8011    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-1 -     0/0/13     . 0.00  7605  0   3968    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-1 -     0/0/234    . 0.00  7590  0   126089  0.0   0.00  4.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-1 -     0/0/570    . 0.00  7584  0   196325  0.0   0.00  9.92   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-1 -     0/0/249    . 0.00  6713  282 111456  0.0   0.00  3.97   102.90.98.148  http/1.1
   66-1 -     0/0/234    . 0.00  7592  0   130247  0.0   0.00  4.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-1 -     0/0/13     . 0.00  7624  0   4952    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-1 -     0/0/13     . 0.00  7578  0   5501    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-1 -     0/0/9      . 0.00  7595  0   4783    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-1 -     0/0/16     . 0.00  7610  0   9834    0.0   0.00  0.45   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-1 -     0/0/10     . 0.00  7604  0   3804    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-1 -     0/0/6      . 0.00  7612  0   1625    0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-1 -     0/0/11     . 0.00  7568  0   3678    0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-1 -     0/0/10     . 0.00  7586  0   5547    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-1 -     0/0/7      . 0.00  7587  0   2381    0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-1 -     0/0/7      . 0.00  7613  0   3573    0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-1 -     0/0/675    . 0.00  7582  0   351530  0.0   0.00  15.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/2      . 0.00  15197 0   641     0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/3      . 0.00  15185 0   1675    0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 409
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 20 seconds, (range: 2...71)
   index usage: 7%, cache usage: 9%
   total entries stored since starting: 11249
   total entries replaced since starting: 0
   total entries expired since starting: 10839
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 38 miss
   total removes since starting: 1 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit