403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-10.03.33.txt
 ## mem threshold exceeded
 ## swap threshold exceeded
## server overview
2025-11-10.03.33 load[0] mem[92/67] mysql[3/26] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        2074          56          28         232          83
Swap:          1999        1449         550
 03:33:02 up  2:39,  0 users,  load average: 0.39, 0.51, 0.57
## system overview
top - 03:33:03 up  2:39,  0 users,  load average: 1.40, 0.71, 0.64
Tasks: 209 total,   9 running, 199 sleeping,   0 stopped,   1 zombie
%Cpu(s): 61.8 us, 35.3 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,    79392 free,  2121424 used,   219484 buff/cache
KiB Swap:  2047996 total,   561148 free,  1486848 used.    98956 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
   949 root      20   0 2637924 937736    436 S  64.7 38.7   0:18.51 /usr/loca+
  1851 mysql     20   0 1466700 300576      0 S  41.2 12.4   2:53.28 /usr/sbin+
    36 root      20   0       0      0      0 S  17.6  0.0   0:13.86 [kswapd0]
 94388 healtho+  20   0  462908  70060   2036 R   5.9  2.9   0:03.91 php-fpm: +
 95121 nigeria   20   0  400652   7748   2032 R   5.9  0.3   0:00.04 /opt/cpan+
 95145 cloudsms  20   0  331984   8792   6212 R   5.9  0.4   0:00.01 /opt/cpan+
 95153 cloudsms  20   0  331984   8808   6224 R   5.9  0.4   0:00.01 /opt/cpan+
     1 root      20   0   44420   3228   1292 S   0.0  0.1   0:13.58 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.81 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.23 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:11.23 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.22 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.45 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   109 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   254 root       0 -20       0      0      0 S   0.0  0.0   0:01.55 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:00.57 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:01.24 [kworker/+
   357 root      20   0   39500   6708   6388 S   0.0  0.3   0:05.20 /usr/lib/+
   385 root      20   0   45352    152     88 S   0.0  0.0   0:00.35 /usr/lib/+
   411 root      16  -4   55532    360    224 S   0.0  0.0   0:00.83 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 polkitd   20   0  612240   1028    628 S   0.0  0.0   0:01.37 /usr/lib/+
   482 dbus      20   0   58584   1336    632 S   0.0  0.1   0:05.29 /usr/bin/+
   494 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   521 root      20   0   52852    124     32 S   0.0  0.0   0:00.01 /usr/sbin+
   523 root      20   0   21540    356    272 S   0.0  0.0   0:00.21 /usr/sbin+
   528 root      20   0  224276   6004    200 S   0.0  0.2   0:00.20 queueproc+
   533 root      20   0  152780    112     68 S   0.0  0.0   0:00.00 /usr/sbin+
   539 root      20   0   24896   1376    740 S   0.0  0.1   0:02.30 /usr/lib/+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     56     52 S   0.0  0.0   0:00.00 /usr/sbin+
   551 nscd      20   0  928956    684      0 S   0.0  0.0   0:04.84 /usr/sbin+
   562 root      20   0   24208     60     36 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    300    132 S   0.0  0.0   0:00.27 /usr/sbin+
   583 root      20   0  108296     56     52 S   0.0  0.0   0:00.00 /sbin/age+
   584 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   598 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   629 mailnull  20   0   90820   3260    228 S   0.0  0.1   0:00.17 /usr/sbin+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.64 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   938 telegraf  20   0 5654048  30976    116 S   0.0  1.3   0:05.40 /usr/loca+
   941 root      20   0   51656    584    196 S   0.0  0.0   0:00.15 /usr/sbin+
   942 root      20   0  153404    240    156 S   0.0  0.0   0:00.20 pure-ftpd+
   943 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 root      20   0  111304    252    148 S   0.0  0.0   0:01.16 /usr/sbin+
   945 systuser  20   0   13012     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   946 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   950 root      20   0  436392    556    352 S   0.0  0.0   0:00.40 php-fpm: +
   952 named     20   0  718804  35664      0 S   0.0  1.5   0:07.31 /usr/sbin+
   960 root      20   0  392856    356    172 S   0.0  0.0   0:00.37 php-fpm: +
   961 root      20   0  240976   6232   5464 S   0.0  0.3   0:02.57 /usr/sbin+
   962 root      20   0  397344   2952    380 S   0.0  0.1   0:01.95 php-fpm: +
   965 root      20   0  261416   5184    220 S   0.0  0.2   0:02.25 cpsrvd (S+
   967 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.21 /usr/bin/+
   970 cpanelc+  20   0   10484   3360   2072 S   0.0  0.1   0:07.72 /usr/loca+
   982 root      20   0  385496    204    104 S   0.0  0.0   0:00.36 php-fpm: +
   985 root      20   0  386112    332    128 S   0.0  0.0   0:00.33 php-fpm: +
   986 systuser  20   0  113272     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 systuser  20   0  114016  10316      0 S   0.0  0.4   0:02.31 /usr/loca+
   993 root      20   0  572372   1000    408 S   0.0  0.0   0:00.91 /usr/bin/+
  1087 dovecot   20   0   10320    220    104 S   0.0  0.0   0:00.03 dovecot/a+
  1168 root      20   0  248160 116648    108 S   0.0  4.8   0:03.92 /usr/loca+
  1181 systuser  20   0  157704   2044      0 S   0.0  0.1   0:00.06 SonarPush+
  1219 wp-tool+  20   0  410452  36168   1072 S   0.0  1.5   0:08.04 /usr/bin/+
  1220 wp-tool+  20   0  387528  11720     96 S   0.0  0.5   0:00.16 /usr/bin/+
  1249 root      20   0  209356   9892    244 S   0.0  0.4   0:00.99 tailwatchd
  1252 root      20   0  183900   3452    220 S   0.0  0.1   0:00.87 cpdavd - +
  1253 root      20   0  167452   1620    248 S   0.0  0.1   0:00.24 dnsadmin +
  1749 root      20   0  299272    548    168 S   0.0  0.0   0:00.25 php-fpm: +
  1799 root      38  18  130416    864    132 S   0.0  0.0   0:00.02 cpanellog+
  1947 root      20   0  267112  25888    444 S   0.0  1.1   0:00.97 /usr/sbin+
  2095 root      20   0  181884   8524    232 S   0.0  0.4   0:08.71 lfd - sle+
  5800 root      20   0  183048    716    180 S   0.0  0.0   0:00.00 /usr/sbin+
  5849 root      20   0  113284    200     20 S   0.0  0.0   0:00.00 /bin/sh -+
  5867 root      20   0  108056     72      0 S   0.0  0.0   0:00.00 sleep 5h +
  5913 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  5923 oysipao+  20   0    3152    488      0 S   0.0  0.0   0:00.20 [kworker]
  6471 root      20   0  265416 129316    248 S   0.0  5.3   0:01.90 spamd chi+
  6472 root      20   0  248160 116504     60 S   0.0  4.8   0:00.00 spamd chi+
 22574 root      20   0   12808    536    244 S   0.0  0.0   0:00.70 /usr/loca+
 22575 root      20   0   12732    256     72 S   0.0  0.0   0:00.60 /usr/loca+
 22576 root      20   0   12828    548    220 S   0.0  0.0   0:00.64 /usr/loca+
 22578 dovenull  20   0   46912   1348    272 S   0.0  0.1   0:00.11 dovecot/p+
 22579 dovenull  20   0   48028   2024    276 S   0.0  0.1   0:00.11 dovecot/i+
 22580 root      20   0   10452    488    116 S   0.0  0.0   0:00.09 dovecot/l+
 22581 dovenull  20   0   46912   1296    240 S   0.0  0.1   0:00.13 dovecot/p+
 22582 dovenull  20   0   47500   1776    276 S   0.0  0.1   0:00.11 dovecot/i+
 22583 root      20   0   24528  10912     32 S   0.0  0.5   0:00.06 dovecot/c+
 22584 dovecot   20   0   13572    516    156 S   0.0  0.0   0:00.01 dovecot/s+
 22588 dovecot   20   0   41056   1040    272 S   0.0  0.0   0:00.18 dovecot/a+
 22589 root      20   0   53252   9604    220 S   0.0  0.4   0:00.04 /usr/loca+
 64444 nobody    20   0  278004  32924   1180 S   0.0  1.4   0:03.43 /usr/sbin+
 73506 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 75077 nobody    20   0  278020  33160   1408 S   0.0  1.4   0:02.05 /usr/sbin+
 76737 nobody    20   0  277736  32804   1280 S   0.0  1.4   0:02.15 /usr/sbin+
 77151 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 77282 root      20   0 1341636  10216    168 S   0.0  0.4   0:00.07 /usr/bin/+
 77322 root      20   0 1277312  11264    168 S   0.0  0.5   0:00.07 /usr/bin/+
 77701 root      20   0  123576    328     96 S   0.0  0.0   0:00.00 /usr/sbin+
 77936 nobody    20   0  277792  32756   1176 S   0.0  1.4   0:02.12 /usr/sbin+
 78152 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 79978 nobody    20   0  277856  32924   1312 S   0.0  1.4   0:01.62 /usr/sbin+
 80610 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 82110 nobody    20   0  277656  32664   1240 S   0.0  1.3   0:01.64 /usr/sbin+
 84180 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 84184 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 84328 nobody    20   0  277700  32612   1140 S   0.0  1.3   0:00.95 /usr/sbin+
 85348 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 87060 nobody    20   0  277800  32496    928 S   0.0  1.3   0:00.89 /usr/sbin+
 87077 nobody    20   0  277708  32488   1004 S   0.0  1.3   0:01.10 /usr/sbin+
 87078 nobody    20   0  278004  32688    984 S   0.0  1.4   0:01.05 /usr/sbin+
 87079 nobody    20   0  277992  32604   1048 S   0.0  1.3   0:00.91 /usr/sbin+
 87318 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 88876 nobody    20   0  277984  32476    828 S   0.0  1.3   0:00.68 /usr/sbin+
 89949 nobody    20   0  277856  32504    904 S   0.0  1.3   0:00.68 /usr/sbin+
 90988 worencom  20   0   38464   1296    260 S   0.0  0.1   0:00.00 dovecot/i+
 91392 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92401 root      30  10  113284    448    236 S   0.0  0.0   0:00.00 /bin/bash+
 92409 root      30  10  132964   3688    152 S   0.0  0.2   0:00.00 ConfigSer+
 92420 root      30  10  108056     76      0 S   0.0  0.0   0:00.00 sleep 8028
 92559 nobody    20   0  277644  31956    540 S   0.0  1.3   0:00.25 /usr/sbin+
 94261 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 94288 root      20   0   41052    908    252 S   0.0  0.0   0:00.00 dovecot/a+
 94310 nobody    20   0  277596  31748    396 S   0.0  1.3   0:00.06 /usr/sbin+
 94394 healtho+  20   0  459424  65856    288 S   0.0  2.7   0:03.74 php-fpm: +
 94440 root      20   0  111304   1296    284 S   0.0  0.1   0:00.00 sshd: [ac+
 94494 nigeria   20   0  397064   4048    648 S   0.0  0.2   0:00.01 php-fpm: +
 94512 root      20   0  111304   1284    264 S   0.0  0.1   0:00.00 sshd: [ac+
 94513 sshd      20   0  115644   1272    204 S   0.0  0.1   0:00.00 sshd: [ne+
 94939 root      30  10  114360   1516    224 S   0.0  0.1   0:00.00 bash /usr+
 95035 root      39  19  120236    676    356 R   0.0  0.0   0:00.41 /bin/find+
 95036 root      30  10  112812    340    196 S   0.0  0.0   0:00.00 grep -E -+
 95042 root      39  19  113284    408    220 S   0.0  0.0   0:00.00 /bin/sh /+
 95043 root      30  10  113644    252    108 S   0.0  0.0   0:00.00 awk -v pr+
 95048 root      39  19  108332    832    348 R   0.0  0.0   0:00.29 /usr/bin/+
 95053 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 95056 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 95064 root      20   0  183044    780    216 S   0.0  0.0   0:00.00 /usr/sbin+
 95065 root      20   0  183044    780    216 S   0.0  0.0   0:00.00 /usr/sbin+
 95066 root      20   0  183044    780    216 S   0.0  0.0   0:00.00 /usr/sbin+
 95068 root      20   0  183044    776    216 S   0.0  0.0   0:00.00 /usr/sbin+
 95070 root      20   0  183044    776    216 S   0.0  0.0   0:00.00 /usr/sbin+
 95071 root      20   0  183044    772    216 S   0.0  0.0   0:00.00 /usr/sbin+
 95072 root      20   0  183044    772    216 S   0.0  0.0   0:00.00 /usr/sbin+
 95073 root      20   0  183044    772    216 S   0.0  0.0   0:00.00 /usr/sbin+
 95074 root      20   0  183044    772    216 S   0.0  0.0   0:00.00 /usr/sbin+
 95076 root      20   0  183044    772    216 S   0.0  0.0   0:00.00 /usr/sbin+
 95078 root      20   0   20164    528    328 S   0.0  0.0   0:00.00 jailshell+
 95080 root      20   0   20164    432    228 S   0.0  0.0   0:00.00 jailshell+
 95081 root      20   0  113284    380    200 S   0.0  0.0   0:00.00 /bin/sh -+
 95082 root      20   0   20164    320    144 S   0.0  0.0   0:00.00 /usr/loca+
 95083 root      20   0   20164    548    344 S   0.0  0.0   0:00.00 jailshell+
 95084 root      20   0   20164    496    296 S   0.0  0.0   0:00.00 jailshell+
 95086 root      20   0   20164    320    144 S   0.0  0.0   0:00.00 /usr/loca+
 95087 root      20   0   20164    432    228 S   0.0  0.0   0:00.00 jailshell+
 95089 root      20   0   20164    316    144 S   0.0  0.0   0:00.00 /usr/loca+
 95090 root      20   0   20164    320    144 S   0.0  0.0   0:00.00 /usr/loca+
 95092 root      20   0  108052     72      0 S   0.0  0.0   0:00.00 /usr/bin/+
 95093 root      20   0  113288   1020    804 S   0.0  0.0   0:00.00 /bin/bash+
 95108 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 95112 pactpay   20   0  476724   9128   3376 S   0.0  0.4   0:00.03 /opt/cpan+
 95120 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 95127 cloudw    20   0  350316   9256   2888 S   0.0  0.4   0:00.05 /opt/cpan+
 95139 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 95140 cloudsms  20   0  113284   1204   1028 S   0.0  0.0   0:00.00 /usr/loca+
 95148 root      20   0  160220   2056   1572 R   0.0  0.1   0:00.00 top -bcn1
 95150 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 95152 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 95154 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 95155 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 95156 cloudsms  20   0  331984   8808   6224 R   0.0  0.4   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    00:54   0:11  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:54   0:13  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        109  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        251  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        280  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [kworker/0:1H]
root        416  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        598  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   00:54   0:02  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      73506  0.0  0.0      0     0 ?        S    02:54   0:00  \_ [kworker/u200:1]
root      77151  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/u200:0]
root      78152  0.0  0.0      0     0 ?        S    03:02   0:00  \_ [kworker/1:3]
root      80610  0.0  0.0      0     0 ?        S    03:06   0:00  \_ [kworker/0:2]
root      84180  0.0  0.0      0     0 ?        S    03:13   0:00  \_ [kworker/0:1]
root      84184  0.0  0.0      0     0 ?        S    03:13   0:00  \_ [kworker/1:2]
root      85348  0.0  0.0      0     0 ?        S    03:15   0:00  \_ [kworker/0:3]
root      87318  0.0  0.0      0     0 ?        S    03:19   0:00  \_ [kworker/1:4]
root      91392  0.0  0.0      0     0 ?        S    03:27   0:00  \_ [kworker/1:1]
root      94261  0.0  0.0      0     0 ?        S    03:32   0:00  \_ [kworker/0:0]
root      95053  0.0  0.0      0     0 ?        S    03:32   0:00  \_ [kworker/u200:2]
root          1  0.1  0.1  44420  3212 ?        Ss   00:54   0:13 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  39500  6708 ?        Ss   00:54   0:05 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45352   152 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   360 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     481  0.0  0.0 612240  1028 ?        Ssl  00:54   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        482  0.0  0.0  58584  1328 ?        Ss   00:54   0:05 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         494  0.0  0.0  69256    60 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        521  0.0  0.0  52852   124 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0  21540   356 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        528  0.0  0.2 224276  6004 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        533  0.0  0.0 152780   112 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        539  0.0  0.0  24896  1376 ?        Ss   00:54   0:02 /usr/lib/systemd/systemd-logind
root        544  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    56 ?        Ss   00:54   0:00 /usr/sbin/acpid
nscd        551  0.0  0.0 928956   684 ?        Ssl  00:54   0:04 /usr/sbin/nscd
root        562  0.0  0.0  24208    60 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   300 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       5800  0.0  0.0 183048   716 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5849  0.0  0.0 113284   200 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       5867  0.0  0.0 108056    72 ?        S    01:00   0:00  |       \_ sleep 5h 14m
root      95064  0.0  0.0 183044   780 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      95081  0.0  0.0 113284   380 ?        Ss   03:33   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      95092  0.0  0.0 108052    72 ?        S    03:33   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      95093  0.0  0.0 113288  1020 ?        S    03:33   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      95157  0.0  0.0 153840  2096 ?        R    03:33   0:00  |               \_ ps auxf
root      95065  0.0  0.0 183044   780 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      95078  0.0  0.0  20164   528 ?        Ss   03:33   0:00  |   \_ jailshell (cloudsms) [95150] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  95150  0.0  0.0  20164   256 ?        S    03:33   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  95152  0.0  0.0 113284  1212 ?        S    03:33   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  95153  2.0  0.5 295572 12592 ?        R    03:33   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php
root      95066  0.0  0.0 183044   780 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      95089  0.0  0.0  20164   316 ?        Ss   03:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      95068  0.0  0.0 183044   776 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      95083  0.0  0.0  20164   548 ?        Ss   03:33   0:00  |   \_ jailshell (cloudsms) [95154] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  95154  0.0  0.0  20164   260 ?        S    03:33   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  95155  0.0  0.0 113284  1212 ?        S    03:33   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  95156  1.0  0.6 400652 15412 ?        S    03:33   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      95070  0.0  0.0 183044   776 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      95082  0.0  0.0  20164   320 ?        Ss   03:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      95071  0.0  0.0 183044   772 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      95090  0.0  0.0  20164   544 ?        Ss   03:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      95158  0.0  0.0  20164   260 ?        R    03:33   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      95072  0.0  0.0 183044   772 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      95086  0.0  0.0  20164   320 ?        Ss   03:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      95073  0.0  0.0 183044   772 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      95084  0.0  0.0  20164   496 ?        Ss   03:33   0:00  |   \_ jailshell (cloudsms) [95139] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  95139  0.0  0.0  20164   260 ?        S    03:33   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  95140  0.0  0.0 113284  1204 ?        S    03:33   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  95145  3.0  0.5 295440 12580 ?        R    03:33   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue1.php
root      95074  0.0  0.0 183044   772 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      95080  0.0  0.0  20164   432 ?        Ss   03:33   0:00  |   \_ jailshell (pactpay) [95108] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   95108  0.0  0.0  20164   264 ?        S    03:33   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   95112  1.5  0.3 476724  9104 ?        S    03:33   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      95076  0.0  0.0 183044   772 ?        S    03:33   0:00  \_ /usr/sbin/CROND -n
root      95087  0.0  0.0  20164   432 ?        Ss   03:33   0:00      \_ jailshell (nigeria) [95120] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   95120  0.0  0.0  20164   264 ?        S    03:33   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   95121  2.0  0.3 400652  7748 ?        S    03:33   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        583  0.0  0.0 108296    56 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
root        584  0.0  0.0 114704    24 ttyS0    Ss+  00:54   0:00 /bin/bash
mailnull    629  0.0  0.1  90820  3260 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
telegraf    938  0.0  1.2 5654048 30860 ?       SLsl 00:54   0:05 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        941  0.0  0.0  51656   584 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1087  0.0  0.0  10320   220 ?        S    00:54   0:00  \_ dovecot/anvil
dovenull  22578  0.0  0.0  46912  1348 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22579  0.0  0.0  48028  2024 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22580  0.0  0.0  10452   488 ?        S    01:28   0:00  \_ dovecot/log
dovenull  22581  0.0  0.0  46912  1296 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22582  0.0  0.0  47500  1776 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22583  0.0  0.4  24528 10912 ?        S    01:28   0:00  \_ dovecot/config
dovecot   22584  0.0  0.0  13572   516 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   22588  0.0  0.0  41056  1040 ?        S    01:28   0:00  \_ dovecot/auth
worencom  90988  0.0  0.0  38464  1296 ?        S    03:26   0:00  \_ dovecot/imap
root      94288  0.0  0.0  41052   908 ?        S    03:32   0:00  \_ dovecot/auth -w
root        942  0.0  0.0 153404   240 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    943  0.0  0.0  10132    44 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        944  0.0  0.0 111304   252 ?        Ss   00:54   0:01 /usr/sbin/sshd -D
root      94440  0.0  0.0 111304  1296 ?        Ss   03:32   0:00  \_ sshd: [accepted]
root      94512  0.0  0.0 111304  1284 ?        Ss   03:32   0:00  \_ sshd: [accepted]
sshd      94513  0.0  0.0 115644  1272 ?        S    03:32   0:00      \_ sshd: [net]
systuser    945  0.0  0.0  13012    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    946  0.0  0.0 113932    72 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        949  0.1 38.7 2637924 937612 ?      Ssl  00:54   0:18 /usr/local/cpanel/3rdparty/bin/clamd -F
root        950  0.0  0.0 436392   556 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       952  0.0  1.4 718804 35664 ?        Ssl  00:54   0:07 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        960  0.0  0.0 392856   356 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        961  0.0  0.2 240976  6232 ?        Ssl  00:54   0:02 /usr/sbin/rsyslogd -n
root        962  0.0  0.1 397344  2952 ?        Ss   00:54   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  94388 10.1  2.8 462908 69928 ?        R    03:32   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  94394  9.8  2.7 459424 65856 ?        S    03:32   0:03  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   94494  0.0  0.1 397064  4048 ?        S    03:32   0:00  \_ php-fpm: pool nigeriadecide_org
root        965  0.0  0.2 261416  5184 ?        Ss   00:54   0:02 cpsrvd (SSL) - waiting for connections                   
root      95056  0.0  0.0      0     0 ?        Z    03:32   0:00  \_ [cpaneld - servi] <defunct>
root        967  0.0  0.0 445028     0 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
memcach+    969  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    970  0.0  0.1  10484  3360 ?        Rs   00:54   0:07 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 385496   204 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.0 386112   332 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    986  0.0  0.0 113272    80 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    992  0.0  0.4 114016 10316 ?        Ssl  00:54   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        993  0.0  0.0 572372  1000 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1168  0.0  4.8 248160 116648 ?       Ss   00:54   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6471  0.0  5.3 265416 129316 ?       S    01:00   0:01  \_ spamd child
root       6472  0.0  4.8 248160 116504 ?       S    01:00   0:00  \_ spamd child
systuser   1181  0.0  0.0 157704  2044 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1219  0.0  1.4 410452 36168 ?        Ss   00:54   0:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1220  0.0  0.4 387528 11720 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1249  0.0  0.4 209356  9892 ?        Ss   00:54   0:00 tailwatchd
root       1252  0.0  0.1 183900  3452 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1253  0.0  0.0 167452  1620 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1749  0.0  0.0 299272   548 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1799  0.0  0.0 130416   864 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1851  1.8 12.4 1466700 300696 ?      Sl   00:54   2:53 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  1.0 267112 25888 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root      22574  0.0  0.0  12808   536 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      22575  0.0  0.0  12732   256 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      22576  0.0  0.0  12828   548 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      22589  0.0  0.3  53252  9604 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    64444  0.1  1.3 278004 32924 ?        S    02:41   0:03  \_ /usr/sbin/httpd -k start
nobody    75077  0.0  1.3 278020 33160 ?        S    02:57   0:02  \_ /usr/sbin/httpd -k start
nobody    76737  0.1  1.3 277928 33268 ?        S    03:00   0:02  \_ /usr/sbin/httpd -k start
cloudw    95127  5.0  0.3 350316  9120 ?        R    03:33   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    77936  0.1  1.3 277792 32756 ?        S    03:01   0:02  \_ /usr/sbin/httpd -k start
nobody    79978  0.0  1.3 277856 32924 ?        S    03:05   0:01  \_ /usr/sbin/httpd -k start
nobody    82110  0.1  1.3 277656 32664 ?        S    03:08   0:01  \_ /usr/sbin/httpd -k start
nobody    84328  0.0  1.3 277700 32612 ?        S    03:13   0:00  \_ /usr/sbin/httpd -k start
nobody    87060  0.1  1.3 277800 32496 ?        S    03:18   0:00  \_ /usr/sbin/httpd -k start
nobody    87077  0.1  1.3 277708 32488 ?        S    03:18   0:01  \_ /usr/sbin/httpd -k start
nobody    87078  0.1  1.3 278004 32688 ?        S    03:18   0:01  \_ /usr/sbin/httpd -k start
nobody    87079  0.1  1.3 277992 32604 ?        S    03:18   0:00  \_ /usr/sbin/httpd -k start
nobody    88876  0.1  1.3 277984 32476 ?        S    03:22   0:00  \_ /usr/sbin/httpd -k start
nobody    89949  0.1  1.3 277856 32504 ?        S    03:24   0:00  \_ /usr/sbin/httpd -k start
nobody    92559  0.1  1.3 277644 31956 ?        S    03:29   0:00  \_ /usr/sbin/httpd -k start
nobody    94310  0.1  1.3 277596 31748 ?        S    03:32   0:00  \_ /usr/sbin/httpd -k start
root       2095  0.0  0.3 181884  8524 ?        Ss   00:54   0:08 lfd - sleeping
oysipao+   5913  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   5923  0.0  0.0   3152   488 ?        S    01:00   0:00  \_ [kworker]
root      77282  0.0  0.4 1341636 10216 ?       Ssl  03:00   0:00 /usr/bin/cspdaemon
root      77322  0.0  0.4 1277312 11264 ?       Ssl  03:00   0:00 /usr/bin/checkstatus
root      77701  0.0  0.0 123576   328 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
root      92401  0.0  0.0 113284   448 ?        SN   03:29   0:00  \_ /bin/bash /bin/run-parts /etc/cron.daily
root      95042  0.0  0.0 113284   408 ?        SN   03:32   0:00      \_ /bin/sh /etc/cron.daily/mlocate
root      95048  5.8  0.0 108624   832 ?        RN   03:32   0:00      |   \_ /usr/bin/updatedb -f sysfs ramfs bdev proc cgroup cpuset tmpfs devtmpfs debugfs securityfs sockfs dax bpf pipefs configfs devpts hugetlbfs autofs pstore mqueue rpc_pipefs
root      95043  0.0  0.0 113644   252 ?        SN   03:32   0:00      \_ awk -v progname=/etc/cron.daily/mlocate progname { ????   print progname ":\n" ????   progname=""; ???       } ???       { print; }
root      92409  0.0  0.1 132964  3688 ?        SN   03:29   0:00 ConfigServer Version Check
root      92420  0.0  0.0 108056    76 ?        SN   03:29   0:00  \_ sleep 8028
root      94939  0.0  0.0 114360  1516 ?        SN   03:32   0:00 bash /usr/local/maldetect/maldet -b -r /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ 1
root      95035  8.2  0.0 120236   676 ?        RN   03:32   0:00  \_ /bin/find /lmd_find/ /home/agradio/public_html/ /home/agvestcapitals/public_html/ /home/cloudsms/public_html/ /home/cloudurl/public_html/ /home/cloudw/public_html/ /home/ebolaprevention/public_html/ /home/ekoemail42/public_html/ /home/ermsstagingclou7/public_html/ /home/foodcong/public_html/ /home/healthoyostate78/public_html/ /home/kaizancom/public_html/ /home/locationforms/public_html/ /home/mediabuycom/public_html/ /home/nescrowcom/public_html/ /home/nigeria/public_html/ /home/oyocovid19/public_html/ /home/oyotechbcovid/public_html/ /home/oyrtmayouthvol78/public_html/ /home/oysipaoygov/public_html/ /home/pactpay/public_html/ /home/robocallscloudsm/public_html/ /home/saboakin/public_html/ /home/salutem/public_html/ /home/stagingcloudware/public_html/ /home/taisolarinlibr43/public_html/ /home/theforgecom/public_html/ /home/w156credit/public_html/ /home/worencom/public_html/ /home/workflowmanageme/public_html/ /home/xtremotors/public_html/ /home/zabymmmd/public_html/ /var/www/ /usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep ( -mtime -1 -o -ctime -1 ) -type f -size +24  -size -6947618  -not -perm 000 -not -uid 0 -not -gid 0
root      95036  0.0  0.0 112812   340 ?        SN   03:32   0:00  \_ grep -E -vf /usr/local/maldetect/ignore_paths
## mysql stats
Uptime: 9529  Threads: 6  Questions: 1121482  Slow queries: 0  Opens: 5500  Flush tables: 1  Open tables: 2000  Queries per second avg: 117.691
*************************** 1. row ***************************
     Id: 17620
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 17624
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: preparing
   Info: SELECT * FROM `osun_official_polling_unit` WHERE `pu_code`='29/18/06/007timeofarrivalofinec=7:15allt
*************************** 3. row ***************************
     Id: 17628
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-10' LIMIT 1
*************************** 4. row ***************************
     Id: 17630
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 5. row ***************************
     Id: 17633
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 17635
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.143 TIME_WAIT
      1 114.119.132.202 TIME_WAIT
      1 114.119.137.160 TIME_WAIT
      1 142.44.233.195 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.169.104.60 TIME_WAIT
      1 5.255.231.204 TIME_WAIT
      1 5.255.231.246 TIME_WAIT
      1 54.39.210.170 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      4 47.128.111.144 TIME_WAIT
      5 104.248.90.230 TIME_WAIT
      5 127.0.0.1 TIME_WAIT
     37 157.20.32.131 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 10-Nov-2025 03:33:03 WAT
   Restart Time: Monday, 10-Nov-2025 00:54:18 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 2 hours 38 minutes 45 seconds
   Server load: 1.40 0.71 0.64
   Total accesses: 39466 - Total Traffic: 761.2 MB - Total Duration: 18408506
   CPU Usage: u14.89 s5.66 cu395.06 cs274.23 - 7.24% CPU load
   4.14 requests/sec - 81.8 kB/second - 19.8 kB/request - 466.44 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

___.K_R_W..WRK.._.KW.K..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req    Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-2  89949 0/138/2404  _ 2.72  0    362  959141  0.0   2.85  38.17 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=1209110980 HTTP/1.1
   1-2  94310 0/14/2339   _ 0.17  0    366  1072129 0.0   0.33  42.20 66.249.70.37   http/1.1 support.cloudware.ng:443   GET /?c=4115209104 HTTP/1.1
   2-2  79978 0/370/2153  _ 6.18  1    180  1052483 0.0   6.29  40.82 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   3-2  -     0/0/2081    . 0.00  66   0    1016929 0.0   0.00  45.40 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   4-2  76737 1/542/2445  K 8.42  0    1338 1030530 35.3  8.36  40.47 66.249.70.33   http/1.1 support.cloudware.ng:443   GET /?c=3629343814 HTTP/1.1
   5-2  64444 0/828/2352  _ 14.00 2    355  1070116 0.0   13.67 41.33 66.249.70.33   http/1.1 support.cloudware.ng:443   GET /?c=1928507064 HTTP/1.1
   6-2  88876 0/148/1877  R 2.97  38   8    939406  0.0   2.80  41.69 47.128.111.144 http/1.1
   7-2  92559 0/62/1729   _ 0.81  1    316  847978  0.0   0.96  33.10 66.249.70.35   http/1.1 support.cloudware.ng:443   GET /?c=572805657 HTTP/1.1
   8-2  77936 0/543/1975  W 7.89  2    0    1174206 0.0   8.27  54.23 157.20.32.131  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   9-2  -     0/0/1838    . 0.00  498  0    910231  0.0   0.00  34.92 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-2 -     0/0/1431    . 0.00  406  0    723823  0.0   0.00  28.13 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-2 87060 1/193/1890  W 3.38  0    0    886508  33.4  3.63  34.00 66.249.70.32   http/1.1 support.cloudware.ng:443   GET /?c=1446325563 HTTP/1.1
   12-2 82110 0/328/1563  R 7.31  38   397  724322  0.0   6.51  28.83 47.128.111.144 http/1.1
   13-2 84328 4/274/1388  K 3.27  1    1111 648973  132.5 3.72  26.11 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /resource/js/json/megadrop_2015new.json HTTP/1.1
   14-2 -     0/0/1461    . 0.00  865  0    670836  0.0   0.00  28.14 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-2 -     0/0/1397    . 0.00  562  0    649071  0.0   0.00  28.03 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-2 75077 0/408/1057  _ 8.42  1    143  541460  0.0   15.13 26.54 3.210.114.189  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/blog/blog/polling_unit_cate
   17-2 -     0/0/448     . 0.00  762  0    161553  0.0   0.00  7.58  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-2 87077 1/231/894   K 4.39  3    361  448064  35.4  4.78  17.29 66.249.70.36   http/1.1 support.cloudware.ng:443   GET /?c=2214532699 HTTP/1.1
   19-2 87078 0/227/1113  W 4.19  0    0    556468  0.0   4.30  21.54 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   20-2 -     0/0/1042    . 0.00  815  0    467224  0.0   0.00  20.13 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-2 87079 19/198/1062 K 3.64  1    274  528721  100.0 10.68 24.64 144.76.19.157  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Borno&lga=Bama&ward=Kasugu
   22-2 -     0/0/888     . 0.00  763  0    388174  0.0   0.00  14.29 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-2 -     0/0/617     . 0.00  2423 0    245349  0.0   0.00  9.35  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-2 -     0/0/100     . 0.00  5173 0    37166   0.0   0.00  1.34  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-2 -     0/0/31      . 0.00  5175 0    5168    0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-2 -     0/0/46      . 0.00  5177 0    6117    0.0   0.00  0.25  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-2 -     0/0/47      . 0.00  5178 0    3811    0.0   0.00  0.17  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-2 -     0/0/163     . 0.00  4659 0    67061   0.0   0.00  2.53  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-2 -     0/0/26      . 0.00  5171 0    3509    0.0   0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-2 -     0/0/301     . 0.00  5170 0    139777  0.0   0.00  6.21  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-2 -     0/0/57      . 0.00  7234 0    25684   0.0   0.00  0.85  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-2 -     0/0/47      . 0.00  7391 0    16198   0.0   0.00  0.55  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-2 -     0/0/39      . 0.00  7389 0    6961    0.0   0.00  0.27  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-2 -     0/0/197     . 0.00  6981 0    47049   0.0   0.00  5.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-2 -     0/0/41      . 0.00  7370 0    15983   0.0   0.00  0.73  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-2 -     0/0/42      . 0.00  7371 0    10575   0.0   0.00  0.39  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-2 -     0/0/316     . 0.00  6549 0    106128  0.0   0.00  8.14  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-2 -     0/0/59      . 0.00  7243 0    27054   0.0   0.00  0.90  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-2 -     0/0/22      . 0.00  7402 0    1654    0.0   0.00  0.09  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-2 -     0/0/149     . 0.00  7074 0    69209   0.0   0.00  2.91  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-2 -     0/0/56      . 0.00  7379 0    11193   0.0   0.00  0.59  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-2 -     0/0/60      . 0.00  7401 0    33165   0.0   0.00  0.80  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-2 -     0/0/26      . 0.00  7382 0    1149    0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-2 -     0/0/36      . 0.00  7400 0    5070    0.0   0.00  0.26  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-2 -     0/0/30      . 0.00  7372 0    3132    0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-2 -     0/0/32      . 0.00  7242 0    20691   0.0   0.00  0.65  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-1 -     0/0/34      . 0.00  7585 0    9383    0.0   0.00  0.28  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-1 -     0/0/8       . 0.00  7659 0    989     0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-1 -     0/0/57      . 0.00  7489 261  20913   0.0   0.00  0.84  66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=3683647426 HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 762
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 12 seconds, (range: 0...52)
   index usage: 13%, cache usage: 18%
   total entries stored since starting: 17788
   total entries replaced since starting: 0
   total entries expired since starting: 17022
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 60 miss
   total removes since starting: 4 hit, 3 miss
Youez - 2016 - github.com/yon3zu
LinuXploit