403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-11.03.30.txt
 ## swap threshold exceeded
## server overview
2025-11-11.03.30 load[0] mem[57/72] mysql[3/25] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1302         141           4         919         898
Swap:          1999        1610         389
 03:30:01 up  3:33,  0 users,  load average: 0.48, 0.63, 0.54
## system overview
top - 03:30:01 up  3:33,  0 users,  load average: 0.48, 0.63, 0.54
Tasks: 207 total,   4 running, 202 sleeping,   0 stopped,   1 zombie
%Cpu(s): 58.1 us, 22.6 sy,  0.0 ni, 16.1 id,  3.2 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   139576 free,  1338560 used,   942164 buff/cache
KiB Swap:  2047996 total,   398780 free,  1649216 used.   915196 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1757 mysql     20   0 1462284 209608   4336 S  75.0  8.7   3:25.30 /usr/sbin+
 52904 nigeria   20   0  400652  15936  10220 R  18.8  0.7   0:00.04 /opt/cpan+
 52997 cloudsms  20   0  400652  15144   9844 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44408   3320   1492 S   0.0  0.1   0:18.27 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.15 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.51 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:15.78 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.50 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.57 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:31.27 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [kauditd]
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:03.13 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:02.87 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.79 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39496   3388   3224 S   0.0  0.1   0:05.74 /usr/lib/+
   378 root      20   0   45376      8      4 S   0.0  0.0   0:00.38 /usr/lib/+
   406 root      16  -4   55532    112      0 S   0.0  0.0   0:00.89 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   505 root      20   0   52852    348    252 S   0.0  0.0   0:00.01 /usr/sbin+
   509 root      20   0   24992   1156    792 S   0.0  0.0   0:03.08 /usr/lib/+
   512 root      20   0   21540    344    260 S   0.0  0.0   0:00.29 /usr/sbin+
   517 root      20   0  224148   3192    948 S   0.0  0.1   0:00.21 queueproc+
   518 root      20   0  152780      4      0 S   0.0  0.0   0:00.01 /usr/sbin+
   519 dbus      20   0   57028   1388    656 S   0.0  0.1   0:07.02 /usr/bin/+
   521 rpc       20   0   69256      8      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   522 nscd      20   0 1062080   1352    684 S   0.0  0.1   0:09.62 /usr/sbin+
   535 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 polkitd   20   0  610540    928    568 S   0.0  0.0   0:01.85 /usr/lib/+
   556 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   576 root      20   0  124480    420    288 S   0.0  0.0   0:00.36 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   626 mailnull  20   0   89116    544    296 S   0.0  0.0   0:00.21 /usr/sbin+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:03.56 [loop0]
   711 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   915 systuser  20   0  114016   8652   2744 S   0.0  0.4   0:03.15 /usr/loca+
   916 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 systuser  20   0  112524     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   922 root      20   0  153404    220    136 S   0.0  0.0   0:00.27 pure-ftpd+
   923 root      20   0  111304    356    256 S   0.0  0.0   0:01.23 /usr/sbin+
   924 root      20   0   51508    460    296 S   0.0  0.0   0:00.18 /usr/sbin+
   925 root      20   0  572372    700    252 S   0.0  0.0   0:01.21 /usr/bin/+
   926 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   927 telegraf  20   0 5654048  34424   5948 S   0.0  1.4   0:07.45 /usr/loca+
   928 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.29 /usr/bin/+
   930 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   939 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   945 root      20   0  249168   1812   1484 S   0.0  0.1   0:03.01 /usr/sbin+
   946 root      20   0  261824   5956   1728 S   0.0  0.2   0:03.10 cpsrvd (S+
   954 named     20   0  784392  21016   1464 S   0.0  0.9   0:08.20 /usr/sbin+
   965 root      20   0  385496    184     96 S   0.0  0.0   0:00.52 php-fpm: +
   972 cpanelc+  20   0   10564   3496   2308 S   0.0  0.1   0:11.31 /usr/loca+
   973 root      20   0  397344   1864    584 S   0.0  0.1   0:02.14 php-fpm: +
   975 root      20   0  392856    332    252 S   0.0  0.0   0:00.46 php-fpm: +
   979 root      20   0  436392    296    216 S   0.0  0.0   0:00.57 php-fpm: +
   980 root      20   0 1901588 450332    168 S   0.0 18.6   0:50.75 /usr/loca+
   991 root      20   0  386112    168     84 S   0.0  0.0   0:00.45 php-fpm: +
  1070 dovenull  20   0   46912   2204   1644 S   0.0  0.1   0:00.23 dovecot/p+
  1071 dovenull  20   0   47648   2276   1632 S   0.0  0.1   0:00.21 dovecot/i+
  1072 dovecot   20   0   10320    380    276 S   0.0  0.0   0:00.04 dovecot/a+
  1073 root      20   0   10452    508    356 S   0.0  0.0   0:00.14 dovecot/l+
  1074 dovenull  20   0   46912   1964   1460 S   0.0  0.1   0:00.19 dovecot/p+
  1075 dovenull  20   0   47668   2172   1548 S   0.0  0.1   0:00.20 dovecot/i+
  1078 root      20   0   24528   1848    492 S   0.0  0.1   0:00.11 dovecot/c+
  1084 dovecot   20   0   13568    656    452 S   0.0  0.0   0:00.03 dovecot/s+
  1112 systuser  20   0  157704   2932    948 S   0.0  0.1   0:00.08 SonarPush+
  1127 root      20   0  248312   2704    712 S   0.0  0.1   0:04.37 /usr/loca+
  1152 dovecot   20   0   41180   1444   1004 S   0.0  0.1   0:00.30 dovecot/a+
  1157 wp-tool+  20   0  387556   2500   1228 S   0.0  0.1   0:00.19 /usr/bin/+
  1159 wp-tool+  20   0  410452   9380   1084 R   0.0  0.4   0:10.77 /usr/bin/+
  1210 root      20   0  209268   6420   1576 S   0.0  0.3   0:01.20 tailwatchd
  1211 root      20   0  183900     16     16 S   0.0  0.0   0:01.39 cpdavd - +
  1213 root      20   0  167452   1192    652 S   0.0  0.0   0:00.31 dnsadmin +
  1667 root      20   0  299272    328    184 S   0.0  0.0   0:00.36 php-fpm: +
  1700 root      38  18  130416   1348    684 S   0.0  0.1   0:00.03 cpanellog+
  1945 root      20   0  267016   4768    516 S   0.0  0.2   0:01.04 /usr/sbin+
  1949 root      20   0   12824    332    180 S   0.0  0.0   0:01.48 /usr/loca+
  1950 root      20   0   12732    108     40 S   0.0  0.0   0:01.25 /usr/loca+
  1951 root      20   0   12860    252     96 S   0.0  0.0   0:01.36 /usr/loca+
  1975 root      20   0   53252      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4853 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4873 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.26 [kworker]
  5071 root      20   0  181800   6668   1088 S   0.0  0.3   0:10.58 lfd - sle+
  7555 root      20   0  269756  43940   1196 S   0.0  1.8   0:03.52 spamd chi+
  7556 root      20   0  248312   1216    340 S   0.0  0.1   0:00.00 spamd chi+
 18725 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 28672 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 31614 root      20   0 1275844    436     24 S   0.0  0.0   0:00.07 /usr/bin/+
 31652 root      20   0 1277312   2256     24 S   0.0  0.1   0:00.06 /usr/bin/+
 32947 nobody    20   0  277960  12036   3904 S   0.0  0.5   0:02.36 /usr/sbin+
 33932 nobody    20   0  277800  11528   3720 S   0.0  0.5   0:02.46 /usr/sbin+
 38791 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 39472 root      30  10  132964      4      0 S   0.0  0.0   0:00.00 ConfigSer+
 39483 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 129+
 40431 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 43062 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 44563 nobody    20   0  277800  11340   3720 S   0.0  0.5   0:01.12 /usr/sbin+
 45387 nobody    20   0  277600  11456   3844 S   0.0  0.5   0:01.02 /usr/sbin+
 45400 nobody    20   0  277932  11528   3768 S   0.0  0.5   0:01.03 /usr/sbin+
 45402 nobody    20   0  277612  11332   4024 S   0.0  0.5   0:00.91 /usr/sbin+
 46358 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47029 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 48267 root      20   0  183052      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
 48316 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 48334 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
 49197 nobody    20   0  277800  17732   3652 S   0.0  0.7   0:00.49 /usr/sbin+
 49202 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 49250 nobody    20   0  277932  18064   3880 S   0.0  0.7   0:00.53 /usr/sbin+
 49311 nobody    20   0  277800  17772   3724 S   0.0  0.7   0:00.37 /usr/sbin+
 49575 nobody    20   0  277800  18124   3828 S   0.0  0.7   0:00.50 /usr/sbin+
 50391 nobody    20   0  277928  17992   3884 S   0.0  0.7   0:00.42 /usr/sbin+
 50398 nobody    20   0  277800  18136   3932 S   0.0  0.7   0:00.32 /usr/sbin+
 50411 nobody    20   0  277544  18216   4008 S   0.0  0.8   0:00.34 /usr/sbin+
 50412 nobody    20   0  277808  18124   3932 S   0.0  0.7   0:00.25 /usr/sbin+
 50413 nobody    20   0  277804  18036   3872 S   0.0  0.7   0:00.31 /usr/sbin+
 50414 nobody    20   0  277520  18028   3960 S   0.0  0.7   0:00.27 /usr/sbin+
 50869 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51585 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 52110 nobody    20   0  277800  17324   3356 S   0.0  0.7   0:00.10 /usr/sbin+
 52128 nobody    20   0  277996  18132   3828 S   0.0  0.7   0:00.09 /usr/sbin+
 52158 worencom  20   0   38688   3936   3008 S   0.0  0.2   0:00.00 dovecot/i+
 52250 worencom  20   0   38444   3792   2984 S   0.0  0.2   0:00.00 dovecot/i+
 52271 worencom  20   0   38168   3156   2556 S   0.0  0.1   0:00.00 dovecot/i+
 52532 nigeria   20   0  471968  12116   6192 S   0.0  0.5   0:00.23 php-fpm: +
 52659 mailnull  20   0   89496   2732   1744 S   0.0  0.1   0:00.00 /usr/sbin+
 52720 nigeria   20   0  397784   8856   3904 S   0.0  0.4   0:00.19 php-fpm: +
 52783 cloudw    20   0  520628  59760   6560 S   0.0  2.5   0:00.45 php-fpm: +
 52811 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 52828 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52830 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52831 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52832 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52834 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52835 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 52836 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52837 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52839 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52840 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52841 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52842 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52843 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52845 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52854 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 52857 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 52858 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 52860 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52861 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52863 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52865 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52867 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52871 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 52872 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52873 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52874 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 52875 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52876 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 52879 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 52882 root      20   0  188212  11092   5148 S   0.0  0.5   0:00.01 /usr/loca+
 52890 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 52892 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 52900 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 52901 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 52915 cloudw    20   0  350316  16616  10324 R   0.0  0.7   0:00.01 /opt/cpan+
 52941 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 52957 root      20   0  160224   2344   1636 S   0.0  0.1   0:00.00 top -n 2 +
 52986 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 52994 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 52995 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov10   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov10   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov10   0:15  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov10   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    Nov10   0:31  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kauditd]
root        231  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   Nov10   0:03  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov10   0:02  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov10   0:03  \_ [loop0]
root        711  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root      18725  0.0  0.0      0     0 ?        S    02:45   0:00  \_ [kworker/0:3]
root      28672  0.0  0.0      0     0 ?        S    02:57   0:00  \_ [kworker/1:3]
root      38791  0.0  0.0      0     0 ?        S    03:10   0:00  \_ [kworker/1:1]
root      40431  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/0:4]
root      43062  0.0  0.0      0     0 ?        S    03:15   0:00  \_ [kworker/u200:2]
root      46358  0.0  0.0      0     0 ?        S    03:20   0:00  \_ [kworker/1:4]
root      47029  0.0  0.0      0     0 ?        S    03:21   0:00  \_ [kworker/0:0]
root      49202  0.0  0.0      0     0 ?        S    03:24   0:00  \_ [kworker/u200:1]
root      50869  0.0  0.0      0     0 ?        S    03:27   0:00  \_ [kworker/0:1]
root      51585  0.0  0.0      0     0 ?        S    03:28   0:00  \_ [kworker/0:2]
root      52941  0.0  0.0      0     0 ?        S    03:30   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44408  3320 ?        Ss   Nov10   0:18 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.1  39496  3388 ?        Ss   Nov10   0:05 /usr/lib/systemd/systemd-journald
root        378  0.0  0.0  45376     8 ?        Ss   Nov10   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   112 ?        S<sl Nov10   0:00 /sbin/auditd
root        505  0.0  0.0  52852   348 ?        Ss   Nov10   0:00 /usr/sbin/smartd -n -q never
root        509  0.0  0.0  24992  1156 ?        Ss   Nov10   0:03 /usr/lib/systemd/systemd-logind
root        512  0.0  0.0  21540   344 ?        Ss   Nov10   0:00 /usr/sbin/irqbalance --foreground
root        517  0.0  0.1 224148  3192 ?        Ss   Nov10   0:00 queueprocd - waiting up to 60s to process a task
root        518  0.0  0.0 152780     4 ?        Ss   Nov10   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        519  0.0  0.0  57028  1388 ?        Ss   Nov10   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         521  0.0  0.0  69256     8 ?        Ss   Nov10   0:00 /sbin/rpcbind -w
nscd        522  0.0  0.0 1062080 1352 ?        Ssl  Nov10   0:09 /usr/sbin/nscd
root        535  0.0  0.0   4388     4 ?        Ss   Nov10   0:00 /usr/sbin/acpid
polkitd     541  0.0  0.0 610540   928 ?        Ssl  Nov10   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        556  0.0  0.0 195208     0 ?        Ssl  Nov10   0:00 /usr/sbin/gssproxy -D
root        576  0.0  0.0 124480   420 ?        Ss   Nov10   0:00 /usr/sbin/crond -n
root      48267  0.0  0.0 183052     0 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48316  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      48334  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 14m
root      52828  0.0  0.0 183048  2152 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      52858  0.0  0.0 113284  1212 ?        Ss   03:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      52879  0.0  0.0 108052   356 ?        S    03:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      52892  0.0  0.0 113288  1512 ?        S    03:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      53009  0.0  0.0 153840  2096 ?        R    03:30   0:00  |               \_ ps auxf
root      52830  0.0  0.0 183048  2148 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      52860  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      52831  0.0  0.0 183048  2148 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      52873  0.0  0.0  20164   808 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      52832  0.0  0.0 183048  2148 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      52857  0.0  0.0  20164   812 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      52834  0.0  0.0 183048  2148 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      52861  0.0  0.0  20164   808 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      52835  0.0  0.0 183048  2144 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      52863  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      52836  0.0  0.0 183048  2144 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      52875  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      52837  0.0  0.0 183048  2144 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      52854  0.0  0.0  20164   992 ?        Ss   03:30   0:00  |   \_ jailshell (cloudsms) [52994] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  52994  0.0  0.0  20164   264 ?        S    03:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  52995  0.0  0.0 113284  1212 ?        S    03:30   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  52997  0.0  0.6 400652 15144 ?        S    03:30   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      52839  0.0  0.0 183048  2140 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      52865  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      52840  0.0  0.0 183048  2140 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      52867  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      52841  0.0  0.0 183048  2140 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      52872  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      52842  0.0  0.0 183048  2144 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      52871  0.0  0.0 113284  1212 ?        Ss   03:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      52882  0.0  0.4 188212 11092 ?        S    03:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      52957  0.0  0.0 160224  2344 ?        S    03:30   0:00  |           \_ top -n 2 -b -c
root      52843  0.0  0.0 183048  2144 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      52876  0.0  0.0  20164   964 ?        Ss   03:30   0:00  |   \_ jailshell (pactpay) [52890] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   52890  0.0  0.0  20164   260 ?        S    03:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   52901  0.0  0.7 476724 17480 ?        S    03:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      52845  0.0  0.0 183048  2140 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root      52874  0.0  0.0  20164   964 ?        Ss   03:30   0:00      \_ jailshell (nigeria) [52900] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   52900  0.0  0.0  20164   260 ?        S    03:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   52904  0.0  0.6 400652 15936 ?        S    03:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov10   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296     4 tty1     Ss+  Nov10   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov10   0:00 /bin/bash
mailnull    626  0.0  0.0  89116   544 ?        Ss   Nov10   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  52659  0.0  0.1  89496  2732 ?        S    03:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    915  0.0  0.3 114016  8652 ?        Ssl  Nov10   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    916  0.0  0.0  14068     0 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    921  0.0  0.0 112524    40 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        922  0.0  0.0 153404   220 ?        Ss   Nov10   0:00 pure-ftpd (SERVER)
root        923  0.0  0.0 111304   356 ?        Ss   Nov10   0:01 /usr/sbin/sshd -D
root        924  0.0  0.0  51508   460 ?        Ss   Nov10   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1070  0.0  0.0  46912  2204 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1071  0.0  0.0  47648  2276 ?        S    Nov10   0:00  \_ dovecot/imap-login
dovecot    1072  0.0  0.0  10320   380 ?        S    Nov10   0:00  \_ dovecot/anvil
root       1073  0.0  0.0  10452   508 ?        S    Nov10   0:00  \_ dovecot/log
dovenull   1074  0.0  0.0  46912  1964 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1075  0.0  0.0  47668  2172 ?        S    Nov10   0:00  \_ dovecot/imap-login
root       1078  0.0  0.0  24528  1848 ?        S    Nov10   0:00  \_ dovecot/config
dovecot    1084  0.0  0.0  13568   656 ?        S    Nov10   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1444 ?        S    Nov10   0:00  \_ dovecot/auth
worencom  52158  0.0  0.1  38688  3936 ?        S    03:29   0:00  \_ dovecot/imap
worencom  52250  0.0  0.1  38444  3792 ?        S    03:29   0:00  \_ dovecot/imap
worencom  52271  0.0  0.1  38168  3156 ?        S    03:29   0:00  \_ dovecot/imap
root        925  0.0  0.0 572372   700 ?        Ssl  Nov10   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        926  0.0  0.0 445028     0 ?        Ss   Nov10   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
telegraf    927  0.0  1.4 5654048 34424 ?       SLsl Nov10   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    928  0.0  0.0 342400     0 ?        Ssl  Nov10   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    930  0.0  0.0 111608    60 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    939  0.0  0.0  10132     0 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        945  0.0  0.0 249168  1812 ?        Ssl  Nov10   0:03 /usr/sbin/rsyslogd -n
root        946  0.0  0.2 261824  5956 ?        Ss   Nov10   0:03 cpsrvd (SSL) - waiting for connections                   
root      52811  0.0  0.0      0     0 ?        Z    03:29   0:00  \_ [cpaneld - servi] <defunct>
named       954  0.0  0.8 784392 21016 ?        Ssl  Nov10   0:08 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.0 385496   184 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    972  0.0  0.1  10564  3496 ?        Ss   Nov10   0:11 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        973  0.0  0.0 397344  1864 ?        Ss   Nov10   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   52532  0.7  0.5 471968 12116 ?        S    03:29   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   52720  1.9  0.3 397784  8856 ?        S    03:29   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    52783 15.0  2.4 520628 59760 ?        S    03:29   0:00  \_ php-fpm: pool cloudware_ng
root        975  0.0  0.0 392856   332 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        979  0.0  0.0 436392   296 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        980  0.3 18.6 1901588 450332 ?      Ssl  Nov10   0:50 /usr/local/cpanel/3rdparty/bin/clamd -F
root        991  0.0  0.0 386112   168 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1112  0.0  0.1 157704  2932 ?        S    Nov10   0:00 SonarPush 0.6.12 [sleeping]
root       1127  0.0  0.1 248312  2704 ?        Ss   Nov10   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7555  0.0  1.8 269756 43940 ?        S    00:03   0:03  \_ spamd child
root       7556  0.0  0.0 248312  1216 ?        S    00:03   0:00  \_ spamd child
wp-tool+   1157  0.0  0.1 387556  2500 ?        Ss   Nov10   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1159  0.0  0.3 410452  9380 ?        Ss   Nov10   0:10 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1210  0.0  0.2 209268  6420 ?        Ss   Nov10   0:01 tailwatchd
root       1211  0.0  0.0 183900    16 ?        Ss   Nov10   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1213  0.0  0.0 167452  1192 ?        Ss   Nov10   0:00 dnsadmin - dormant mode
root       1667  0.0  0.0 299272   328 ?        Ss   Nov10   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1700  0.0  0.0 130416  1348 ?        SN   Nov10   0:00 cpanellogd - sleeping for logs
mysql      1757  1.6  8.6 1462284 209608 ?      Sl   Nov10   3:25 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1945  0.0  0.1 267016  4768 ?        Ss   Nov10   0:01 /usr/sbin/httpd -k start
root       1949  0.0  0.0  12824   332 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1950  0.0  0.0  12732   108 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1951  0.0  0.0  12860   252 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1975  0.0  0.0  53252     4 ?        S    Nov10   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    32947  0.1  0.4 277960 12036 ?        S    03:02   0:02  \_ /usr/sbin/httpd -k start
nobody    33932  0.1  0.4 277800 11528 ?        S    03:03   0:02  \_ /usr/sbin/httpd -k start
nobody    44563  0.1  0.4 277800 11340 ?        S    03:17   0:01  \_ /usr/sbin/httpd -k start
nobody    45387  0.1  0.4 277600 11456 ?        S    03:18   0:01  \_ /usr/sbin/httpd -k start
nobody    45400  0.1  0.4 277932 11528 ?        S    03:18   0:01  \_ /usr/sbin/httpd -k start
nobody    45402  0.1  0.4 277612 11332 ?        S    03:18   0:00  \_ /usr/sbin/httpd -k start
nobody    49197  0.1  0.7 277800 17732 ?        S    03:24   0:00  \_ /usr/sbin/httpd -k start
cloudw    52915  0.0  0.6 350316 16616 ?        S    03:30   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    49250  0.1  0.7 277932 18064 ?        S    03:24   0:00  \_ /usr/sbin/httpd -k start
nobody    49311  0.1  0.7 277800 17772 ?        S    03:24   0:00  \_ /usr/sbin/httpd -k start
nobody    49575  0.1  0.7 277800 18124 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
nobody    50391  0.1  0.7 277928 17992 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody    50398  0.1  0.7 277800 18136 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody    50411  0.1  0.7 277544 18216 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody    50412  0.1  0.7 277808 18124 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody    50413  0.1  0.7 277804 18036 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody    50414  0.1  0.7 277520 18028 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody    52110  0.1  0.7 277800 17324 ?        S    03:28   0:00  \_ /usr/sbin/httpd -k start
nobody    52128  0.1  0.7 277996 18132 ?        S    03:28   0:00  \_ /usr/sbin/httpd -k start
oysipao+   4853  0.0  0.0   3148     8 ?        Ss   00:00   0:00 [kworker]
oysipao+   4873  0.0  0.0   3152    36 ?        S    00:00   0:00  \_ [kworker]
root       5071  0.0  0.2 181800  6668 ?        Ss   00:00   0:10 lfd - sleeping
root      31614  0.0  0.0 1275844  436 ?        Ssl  03:00   0:00 /usr/bin/cspdaemon
root      31652  0.0  0.0 1277312 2256 ?        Ssl  03:00   0:00 /usr/bin/checkstatus
root      39472  0.0  0.0 132964     4 ?        SN   03:11   0:00 ConfigServer Version Check
root      39483  0.0  0.0 108056     0 ?        SN   03:11   0:00  \_ sleep 12937
## mysql stats
Uptime: 12785  Threads: 3  Questions: 1349229  Slow queries: 0  Opens: 6324  Flush tables: 1  Open tables: 2000  Queries per second avg: 105.532
*************************** 1. row ***************************
     Id: 17262
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 17264
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 17270
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.145.187 TIME_WAIT
      1 144.76.19.157 TIME_WAIT
      1 159.148.158.189 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 207.46.13.107 TIME_WAIT
      1 208.84.101.230 TIME_WAIT
      1 217.113.194.227 TIME_WAIT
      1 23.226.211.156 TIME_WAIT
      1 23.239.168.179 TIME_WAIT
      1 43.135.134.127 TIME_WAIT
      1 45.138.251.156 TIME_WAIT
      1 51.222.95.84 TIME_WAIT
      1 54.39.6.148 TIME_WAIT
      1 66.249.70.33 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.172 TIME_WAIT
      2 51.222.204.143 TIME_WAIT
      2 74.7.227.140 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 11-Nov-2025 03:30:01 WAT
   Restart Time: Monday, 10-Nov-2025 23:57:01 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 33 minutes
   Server load: 0.48 0.63 0.54
   Total accesses: 62016 - Total Traffic: 1.6 GB - Total Duration: 32903766
   CPU Usage: u9.29 s4.64 cu841.47 cs643.21 - 11.7% CPU load
   4.85 requests/sec - 135.0 kB/second - 27.8 kB/request - 530.569 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

KKW_KK__K..KK.CK__KK.W..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req   Dur   Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-0  49197 8/90/3285  K 2.11  0    412 1629787 246.1 1.94  82.04  66.249.70.38    http/1.1 support.cloudware.ng:443   GET /?c=56585539 HTTP/1.1
   1-0  44563 1/188/3222 K 5.56  2    552 1647705 8.2   5.06  85.72  103.216.118.237 http/1.1 cloudware.ng:443           GET /wp-login.php HTTP/1.1
   2-0  49250 0/89/3349  W 2.36  0    0   1614552 0.0   2.29  76.00  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   3-0  52110 0/16/3088  _ 0.47  0    255 1576307 0.0   0.66  72.16  66.249.70.32    http/1.1 support.cloudware.ng:443   GET /?c=4237750296 HTTP/1.1
   4-0  50391 7/70/3256  K 1.94  1    346 2474421 215.3 3.26  111.57 66.249.70.37    http/1.1 support.cloudware.ng:443   GET /?c=797184406 HTTP/1.1
   5-0  52128 1/18/3210  K 0.89  1    349 1688449 35.3  0.45  78.07  66.249.70.35    http/1.1 support.cloudware.ng:443   GET /?c=4191950138 HTTP/1.1
   6-0  45387 0/187/3045 _ 4.48  0    0   1668093 0.0   4.91  91.29  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   7-0  32947 0/458/3326 _ 10.57 0    4   1547202 0.0   9.91  86.15  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   8-0  50398 7/57/3009  K 1.49  0    6   1571456 37.6  1.48  90.28  144.76.19.157   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Delta&lga=Ughelli%20south&
   9-0  -     0/0/2890   . 0.00  54   0   1518869 0.0   0.00  71.19  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 -     0/0/2995   . 0.00  210  0   1476926 0.0   0.00  84.98  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-0 49311 3/71/2993  K 1.55  1    342 1555286 95.6  1.52  90.01  66.249.70.39    http/1.1 support.cloudware.ng:443   GET /?c=1136285804 HTTP/1.1
   12-0 49575 1/93/2409  K 2.35  4    267 1327671 33.6  2.39  62.27  66.249.70.32    http/1.1 support.cloudware.ng:443   GET /?c=1405583634 HTTP/1.1
   13-0 -     0/0/2037   . 0.00  193  0   1012983 0.0   0.00  55.96  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 50411 1/67/2308  C 1.69  0    88  1294644 9.1   1.52  56.76  52.204.253.129  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/blog/assets/css/blog/blog
   15-0 45400 3/171/1716 K 4.88  4    297 871869  97.1  4.40  40.44  66.249.70.33    http/1.1 support.cloudware.ng:443   GET /?c=795364490 HTTP/1.1
   16-0 50412 0/57/2650  _ 0.95  1    272 1405512 0.0   0.99  64.68  66.249.70.39    http/1.1 support.cloudware.ng:443   GET /?c=3201649929 HTTP/1.1
   17-0 50413 0/56/2489  _ 1.42  0    397 1301753 0.0   1.47  66.71  45.138.251.156  http/1.1 health.oyostate.gov.ng:443 GET /wp-json/wp/v2/pages/287 HTTP/1.1
   18-0 50414 9/46/1810  K 1.16  3    305 899961  284.9 2.54  46.78  66.249.70.34    http/1.1 support.cloudware.ng:443   GET /?c=3148864104 HTTP/1.1
   19-0 45402 4/148/1544 K 4.34  0    358 762732  128.0 11.75 44.41  66.249.70.36    http/1.1 support.cloudware.ng:443   GET /?c=1466389090 HTTP/1.1
   20-0 -     0/0/1047   . 0.00  164  0   525007  0.0   0.00  24.62  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 33932 0/421/1224 W 11.13 0    0   697976  0.0   10.59 29.70  66.249.70.38    http/1.1 support.cloudware.ng:443   GET /?c=524005092 HTTP/1.1
   22-0 -     0/0/394    . 0.00  2030 0   194426  0.0   0.00  10.27  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/427    . 0.00  2909 0   218307  0.0   0.00  10.92  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/493    . 0.00  6468 0   234804  0.0   0.00  11.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/201    . 0.00  6547 0   83585   0.0   0.00  3.46   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/132    . 0.00  6541 0   63977   0.0   0.00  3.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/725    . 0.00  4767 0   427451  0.0   0.00  20.36  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/117    . 0.00  6330 0   78945   0.0   0.00  4.86   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/496    . 0.00  5173 0   299300  0.0   0.00  13.92  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/67     . 0.00  6331 0   36690   0.0   0.00  1.77   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/239    . 0.00  6508 0   99496   0.0   0.00  4.64   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/4      . 0.00  6544 0   178     0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/2      . 0.00  6545 0   3       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/3      . 0.00  6546 0   4       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/3      . 0.00  6540 0   6       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/13     . 0.00  6501 0   5697    0.0   0.00  0.29   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/3      . 0.00  6539 0   236     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/281    . 0.00  5760 0   158846  0.0   0.00  19.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/4      . 0.00  6542 0   264     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/725    . 0.00  4127 0   450086  0.0   0.00  35.37  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/4      . 0.00  6532 0   1003    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/63     . 0.00  6310 0   33019   0.0   0.00  1.62   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/159    . 0.00  5939 0   93527   0.0   0.00  19.16  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/9      . 0.00  6527 0   4423    0.0   0.00  0.20   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/18     . 0.00  6471 0   7447    0.0   0.00  0.41   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/13     . 0.00  6497 0   5454    0.0   0.00  0.65   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/513    . 0.00  5093 0   335229  0.0   0.00  11.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/6      . 0.00  6534 0   2176    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 758
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 1...69)
   index usage: 13%, cache usage: 18%
   total entries stored since starting: 34240
   total entries replaced since starting: 0
   total entries expired since starting: 33456
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 150 miss
   total removes since starting: 27 hit, 6 miss
Youez - 2016 - github.com/yon3zu
LinuXploit