403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-12.01.03.txt
 ## mem threshold exceeded
 ## swap threshold exceeded
## server overview
2025-11-12.01.03 load[1] mem[90/37] mysql[2/7] httpd[38]
              total        used        free      shared  buff/cache   available
Mem:           2363        2083          64          18         215         108
Swap:          1999         825        1174
 01:03:02 up 7 min,  0 users,  load average: 1.30, 0.89, 0.51
## system overview
top - 01:03:02 up 7 min,  0 users,  load average: 1.30, 0.89, 0.51
Tasks: 235 total,   4 running, 230 sleeping,   0 stopped,   1 zombie
%Cpu(s): 71.9 us, 25.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  3.1 si,  0.0 st
KiB Mem :  2420300 total,    77828 free,  2120792 used,   221680 buff/cache
KiB Swap:  2047996 total,  1194492 free,   853504 used.   124048 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1763 mysql     20   0 1458872 186388   2624 S 106.2  7.7   0:06.76 /usr/sbin+
 10707 nigeria   20   0  400652  15928  10212 R  12.5  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44404   3436   1456 S   6.2  0.1   0:02.05 /usr/lib/+
    36 root      20   0       0      0      0 S   6.2  0.0   0:04.47 [kswapd0]
  1217 root      20   0  209328  10384   1516 S   6.2  0.4   0:00.36 tailwatchd
  4982 nobody    20   0  277800  31468   3632 S   6.2  1.3   0:00.35 /usr/sbin+
  5053 nobody    20   0  277800  31204   3372 S   6.2  1.3   0:00.41 /usr/sbin+
 10738 root      20   0  160220   2320   1592 R   6.2  0.1   0:00.01 top -bcn1
 10743 cloudw    20   0  350316  16620  10324 S   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:00.60 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [ksoftirq+
    15 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    30 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.43 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:00.27 [kworker/+
   268 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   39496   4232   3928 S   0.0  0.2   0:00.45 /usr/lib/+
   391 root      20   0   45352    320    172 S   0.0  0.0   0:00.34 /usr/lib/+
   413 root      16  -4   55532    200     88 S   0.0  0.0   0:00.06 /sbin/aud+
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   419 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   522 root      20   0  152780    128    120 S   0.0  0.0   0:00.00 /usr/sbin+
   526 rpc       20   0   69256    108      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   527 polkitd   20   0  612240   3204    732 S   0.0  0.1   0:00.08 /usr/lib/+
   528 root      20   0   24896   1456    836 S   0.0  0.1   0:00.15 /usr/lib/+
   529 root      20   0   52852    180    176 S   0.0  0.0   0:00.01 /usr/sbin+
   531 root      20   0  224148   5808    808 S   0.0  0.2   0:00.08 queueproc+
   535 root      20   0   21540    396    288 S   0.0  0.0   0:00.01 /usr/sbin+
   536 dbus      20   0   58728   1412    660 S   0.0  0.1   0:00.35 /usr/bin/+
   538 nscd      20   0  926904   1188    648 S   0.0  0.0   0:00.44 /usr/sbin+
   545 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   546 root      20   0    4388     88     84 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   576 root      20   0  124476    504    336 S   0.0  0.0   0:00.01 /usr/sbin+
   577 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   595 root      20   0  114704    100    100 S   0.0  0.0   0:00.02 /bin/bash
   629 mailnull  20   0   89068   3688    728 S   0.0  0.2   0:00.04 /usr/sbin+
   683 root       0 -20       0      0      0 S   0.0  0.0   0:00.11 [loop0]
   734 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   735 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   929 root      20   0  445028   2620   2620 S   0.0  0.1   0:00.05 sw-engine+
   930 systuser  20   0  113932   2096      0 S   0.0  0.1   0:00.00 /usr/loca+
   933 root      20   0  392856    424    340 S   0.0  0.0   0:00.09 php-fpm: +
   936 root      20   0 1763048 768992    552 S   0.0 31.8   0:13.23 /usr/loca+
   938 named     20   0 1186868  21828    784 S   0.0  0.9   0:00.65 /usr/sbin+
   940 systuser  20   0   10388     52      0 S   0.0  0.0   0:00.00 /usr/loca+
   945 systuser  20   0   13012     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   948 root      20   0  216400   3652   3104 S   0.0  0.2   0:00.21 /usr/sbin+
   950 root      20   0  572372    768    304 S   0.0  0.0   0:00.15 /usr/bin/+
   951 root      20   0  153404    296    212 S   0.0  0.0   0:00.01 pure-ftpd+
   952 systuser  20   0  114016  10352    880 S   0.0  0.4   0:00.17 /usr/loca+
   953 root      20   0   51508    444    284 S   0.0  0.0   0:00.04 /usr/sbin+
   956 root      20   0  261028   3016    776 S   0.0  0.1   0:00.22 cpsrvd (S+
   957 memcach+  20   0  342400     24     24 S   0.0  0.0   0:00.00 /usr/bin/+
   959 cpanelc+  20   0    9700   2468   2144 S   0.0  0.1   0:00.39 /usr/loca+
   962 root      20   0  385496    396    308 S   0.0  0.0   0:00.07 php-fpm: +
   986 root      20   0  397344   3032    600 S   0.0  0.1   0:00.18 php-fpm: +
   991 root      20   0  436392  11268  11064 S   0.0  0.5   0:00.12 php-fpm: +
   997 root      20   0  386112    384    296 S   0.0  0.0   0:00.07 php-fpm: +
   998 telegraf  20   0 5654048  32780     44 S   0.0  1.4   0:00.39 /usr/loca+
   999 root      20   0  111304    464    364 S   0.0  0.0   0:00.08 /usr/sbin+
  1006 systuser  20   0  111864   1560      0 S   0.0  0.1   0:00.00 /usr/loca+
  1094 dovenull  20   0   46772    640    396 S   0.0  0.0   0:00.01 dovecot/p+
  1095 dovenull  20   0   46924   1756   1148 S   0.0  0.1   0:00.01 dovecot/i+
  1096 dovecot   20   0   10320    244    132 S   0.0  0.0   0:00.00 dovecot/a+
  1097 root      20   0   10452    448    280 S   0.0  0.0   0:00.00 dovecot/l+
  1098 dovenull  20   0   46772    764    480 S   0.0  0.0   0:00.00 dovecot/p+
  1099 dovenull  20   0   47056   1944   1204 S   0.0  0.1   0:00.01 dovecot/i+
  1103 root      20   0   24528   1964    392 S   0.0  0.1   0:00.01 dovecot/c+
  1108 dovecot   20   0   13568    496    284 S   0.0  0.0   0:00.00 dovecot/s+
  1113 root      20   0  108296     96     92 S   0.0  0.0   0:00.00 /sbin/age+
  1137 wp-tool+  20   0  387528  12872   1288 S   0.0  0.5   0:00.09 /usr/bin/+
  1138 wp-tool+  20   0  410452  35416   1560 S   0.0  1.5   0:00.60 /usr/bin/+
  1142 root      20   0  248024 119448   2828 S   0.0  4.9   0:02.91 /usr/loca+
  1168 systuser  20   0  157704   2072     56 S   0.0  0.1   0:00.00 SonarPush+
  1175 dovecot   20   0   41056    816    516 S   0.0  0.0   0:00.01 dovecot/a+
  1213 root      20   0  183900    140    140 S   0.0  0.0   0:00.08 cpdavd - +
  1214 root      20   0  167452   1232    632 S   0.0  0.1   0:00.06 dnsadmin +
  1635 root      20   0  299272    836    460 S   0.0  0.0   0:00.01 php-fpm: +
  1666 root      38  18  130416    768    104 S   0.0  0.0   0:00.00 cpanellog+
  1981 root      20   0  267016  22216    780 S   0.0  0.9   0:00.19 /usr/sbin+
  1982 root      20   0   12796    428    192 S   0.0  0.0   0:00.05 /usr/loca+
  1983 root      20   0   12732    184      0 S   0.0  0.0   0:00.04 /usr/loca+
  1984 root      20   0   12820    444    196 S   0.0  0.0   0:00.05 /usr/loca+
  1990 root      20   0   53256   9528    152 S   0.0  0.4   0:00.05 /usr/loca+
  1991 nobody    20   0  277884  31320   3584 S   0.0  1.3   0:00.70 /usr/sbin+
  2043 root      20   0  181060  27968   1184 S   0.0  1.2   0:00.55 lfd - sle+
  2216 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  2218 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  2224 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  4572 nobody    20   0  277516  31060   3480 S   0.0  1.3   0:00.45 /usr/sbin+
  4573 nobody    20   0  277932  31168   3356 S   0.0  1.3   0:00.55 /usr/sbin+
  5018 nobody    20   0  277800  31152   3304 S   0.0  1.3   0:00.55 /usr/sbin+
  5051 nobody    20   0  277800  31568   3720 S   0.0  1.3   0:00.44 /usr/sbin+
  5754 nobody    20   0  277800  31548   3712 S   0.0  1.3   0:00.33 /usr/sbin+
  5775 nobody    20   0  277544  31024   3420 S   0.0  1.3   0:00.32 /usr/sbin+
  5803 nobody    20   0  277800  31148   3320 S   0.0  1.3   0:00.33 /usr/sbin+
  5805 nobody    20   0  277800  31292   3456 S   0.0  1.3   0:00.29 /usr/sbin+
  6254 root      20   0  183048   1584   1024 S   0.0  0.1   0:00.00 /usr/sbin+
  6286 root      20   0  113284    696    520 S   0.0  0.0   0:00.00 /bin/sh -+
  6322 root      20   0  108056    280    204 S   0.0  0.0   0:00.00 sleep 3h +
  6378 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  6384 oysipao+  20   0    3152    488      0 S   0.0  0.0   0:00.00 [kworker]
  6919 root      20   0 1276100  10528    592 S   0.0  0.4   0:00.04 /usr/bin/+
  6959 root      20   0 1277312  15188    592 S   0.0  0.6   0:00.06 /usr/bin/+
  7503 nobody    20   0  277800  31040   3208 S   0.0  1.3   0:00.23 /usr/sbin+
  7516 nobody    20   0  277800  31436   3604 S   0.0  1.3   0:00.21 /usr/sbin+
  7525 nobody    20   0  277812  31336   3488 S   0.0  1.3   0:00.20 /usr/sbin+
  7617 nobody    20   0  277800  31316   3488 S   0.0  1.3   0:00.26 /usr/sbin+
  7618 nobody    20   0  277812  31200   3340 S   0.0  1.3   0:00.30 /usr/sbin+
  8723 nobody    20   0  277800  31308   3476 S   0.0  1.3   0:00.15 /usr/sbin+
  8735 nobody    20   0  277800  31268   3436 S   0.0  1.3   0:00.16 /usr/sbin+
  8736 nobody    20   0  277800  31492   3652 S   0.0  1.3   0:00.12 /usr/sbin+
  8767 root      20   0   41052   1908   1244 S   0.0  0.1   0:00.00 dovecot/a+
  8775 nobody    20   0  277800  31116   3284 S   0.0  1.3   0:00.15 /usr/sbin+
  8776 nobody    20   0  277516  30908   3336 S   0.0  1.3   0:00.12 /usr/sbin+
  8825 root      20   0  260980 127400   2692 S   0.0  5.3   0:00.25 spamd chi+
  8827 root      20   0  248024 116884    300 S   0.0  4.8   0:00.00 spamd chi+
  8862 cloudsms  20   0   61784   3908   2120 S   0.0  0.2   0:00.01 dovecot/l+
  8927 nobody    20   0  277932  31264   3460 S   0.0  1.3   0:00.10 /usr/sbin+
  8960 nobody    20   0  277800  31160   3328 S   0.0  1.3   0:00.14 /usr/sbin+
  9084 nobody    20   0  277800  31160   3332 S   0.0  1.3   0:00.11 /usr/sbin+
  9295 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9665 nobody    20   0  277808  31024   3184 S   0.0  1.3   0:00.08 /usr/sbin+
  9701 nigeria   20   0  397064   5584   2320 S   0.0  0.2   0:00.04 php-fpm: +
  9868 root      20   0  162436   5828   4340 S   0.0  0.2   0:00.01 sshd: roo+
  9869 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: roo+
  9935 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  9996 healtho+  20   0  456100  67100   3544 S   0.0  2.8   0:04.33 php-fpm: +
 10103 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 10286 nobody    20   0  277800  31112   3284 S   0.0  1.3   0:00.03 /usr/sbin+
 10295 nobody    20   0  277800  31040   3216 S   0.0  1.3   0:00.02 /usr/sbin+
 10296 nobody    20   0  277800  31048   3224 S   0.0  1.3   0:00.03 /usr/sbin+
 10346 nobody    20   0  277800  31116   3284 S   0.0  1.3   0:00.01 /usr/sbin+
 10350 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 10351 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 10367 nobody    20   0  277800  31036   3212 S   0.0  1.3   0:00.02 /usr/sbin+
 10368 nobody    20   0  277800  31152   3328 S   0.0  1.3   0:00.03 /usr/sbin+
 10407 nobody    20   0  277800  30940   3116 S   0.0  1.3   0:00.03 /usr/sbin+
 10417 healtho+  20   0  453276  64148   3508 S   0.0  2.7   0:01.66 php-fpm: +
 10422 nobody    20   0  277800  30984   3164 S   0.0  1.3   0:00.01 /usr/sbin+
 10423 nobody    20   0  277932  31104   3312 S   0.0  1.3   0:00.01 /usr/sbin+
 10448 nobody    20   0  277800  30956   3136 S   0.0  1.3   0:00.01 /usr/sbin+
 10449 nobody    20   0  277800  30960   3136 S   0.0  1.3   0:00.01 /usr/sbin+
 10450 nobody    20   0  277796  31016   3192 S   0.0  1.3   0:00.02 /usr/sbin+
 10451 nobody    20   0  277800  30960   3136 S   0.0  1.3   0:00.01 /usr/sbin+
 10531 mailnull  20   0   89480   5108   1952 S   0.0  0.2   0:00.00 /usr/sbin+
 10547 nobody    20   0  277656  30696   3100 S   0.0  1.3   0:00.00 /usr/sbin+
 10554 root      20   0  162436   5704   4204 S   0.0  0.2   0:00.01 sshd: roo+
 10563 nobody    20   0  277656  30696   3100 S   0.0  1.3   0:00.00 /usr/sbin+
 10564 nobody    20   0  277656  30696   3100 S   0.0  1.3   0:00.00 /usr/sbin+
 10565 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: roo+
 10582 nobody    20   0  277656  30700   3104 S   0.0  1.3   0:00.00 /usr/sbin+
 10583 nobody    20   0  277656  30700   3104 S   0.0  1.3   0:00.00 /usr/sbin+
 10584 nobody    20   0  277800  30924   3104 S   0.0  1.3   0:00.01 /usr/sbin+
 10585 nobody    20   0  277656  30692   3096 S   0.0  1.3   0:00.00 /usr/sbin+
 10600 root      20   0  157100   5068   3784 S   0.0  0.2   0:00.00 sshd: unk+
 10602 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: unk+
 10638 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 10639 root      20   0  157100   5080   3792 S   0.0  0.2   0:00.00 sshd: unk+
 10640 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 10657 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10658 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10660 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10661 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10662 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10663 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10664 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10666 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10667 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 10669 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10673 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 10674 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 10676 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 10677 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 10678 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 10679 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 10680 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 10681 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 10683 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 10684 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 10689 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 10691 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 10700 pactpay   20   0   20164    276      0 S   0.0  0.0   0:00.00 jailshell+
 10702 nigeria   20   0   20164    280      0 S   0.0  0.0   0:00.00 jailshell+
 10706 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 10720 cloudw    20   0  350316  16620  10324 R   0.0  0.7   0:00.02 /opt/cpan+
 10732 cloudw    20   0  350316  16620  10332 S   0.0  0.7   0:00.01 /opt/cpan+
 10749 cloudsms  20   0   20164    280      0 S   0.0  0.0   0:00.00 jailshell+
 10751 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 10752 cloudsms  20   0  129728   3104   2200 R   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:55   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:55   0:00  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [ksoftirqd/1]
root         15  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kworker/1:0]
root         16  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [watchdogd]
root         30  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kworker/0:1]
root         36  0.9  0.0      0     0 ?        S    00:55   0:04  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:55   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:55   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [scsi_tmf_1]
root        251  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kworker/u200:3]
root        252  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [ttm_swap]
root        253  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kworker/0:1H]
root        268  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kworker/1:2]
root        278  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [ext4-rsv-conver]
root        418  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [rpciod]
root        419  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [xprtiod]
root        569  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [kvm-irqfd-clean]
root        683  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [loop0]
root        734  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [jbd2/loop0-8]
root        735  0.0  0.0      0     0 ?        S<   00:55   0:00  \_ [ext4-rsv-conver]
root       2216  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kworker/0:3]
root       2218  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kworker/1:3]
root       2224  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kworker/1:5]
root       9295  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/0:2]
root          1  0.4  0.1  44404  3436 ?        Ss   00:55   0:02 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  39496  4232 ?        Ss   00:55   0:00 /usr/lib/systemd/systemd-journald
root        391  0.0  0.0  45352   320 ?        Ss   00:55   0:00 /usr/lib/systemd/systemd-udevd
root        413  0.0  0.0  55532   200 ?        S<sl 00:55   0:00 /sbin/auditd
root        522  0.0  0.0 152780   128 ?        Ss   00:55   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
rpc         526  0.0  0.0  69256   108 ?        Ss   00:55   0:00 /sbin/rpcbind -w
polkitd     527  0.0  0.1 612240  3204 ?        Ssl  00:55   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        528  0.0  0.0  24896  1456 ?        Ss   00:55   0:00 /usr/lib/systemd/systemd-logind
root        529  0.0  0.0  52852   180 ?        Ss   00:55   0:00 /usr/sbin/smartd -n -q never
root        531  0.0  0.2 224148  5808 ?        Ss   00:55   0:00 queueprocd - waiting up to 60s to process a task
root        535  0.0  0.0  21540   396 ?        Ss   00:55   0:00 /usr/sbin/irqbalance --foreground
dbus        536  0.0  0.0  58728  1412 ?        Ss   00:55   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        538  0.0  0.0 926904  1188 ?        Ssl  00:55   0:00 /usr/sbin/nscd
root        545  0.0  0.0 195208     0 ?        Ssl  00:55   0:00 /usr/sbin/gssproxy -D
root        546  0.0  0.0   4388    88 ?        Ss   00:55   0:00 /usr/sbin/acpid
root        576  0.0  0.0 124476   504 ?        Ss   00:55   0:00 /usr/sbin/crond -n
root       6254  0.0  0.0 183048  1584 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6286  0.0  0.0 113284   696 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       6322  0.0  0.0 108056   280 ?        S    01:00   0:00  |       \_ sleep 3h 5m
root      10657  0.0  0.0 183044  2148 ?        S    01:03   0:00  \_ /usr/sbin/CROND -n
root      10681  0.0  0.0 113284  1212 ?        Ss   01:03   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      10689  0.0  0.0 108052   360 ?        S    01:03   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      10691  0.0  0.0 113288  1520 ?        S    01:03   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      10753  0.0  0.0 153840  2096 ?        R    01:03   0:00  |               \_ ps auxf
root      10658  0.0  0.0 183044  2148 ?        S    01:03   0:00  \_ /usr/sbin/CROND -n
root      10680  0.0  0.0  20164   808 ?        Ss   01:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      10660  0.0  0.0 183044  2144 ?        S    01:03   0:00  \_ /usr/sbin/CROND -n
root      10676  0.0  0.0  20164   808 ?        Ss   01:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      10661  0.0  0.0 183044  2144 ?        S    01:03   0:00  \_ /usr/sbin/CROND -n
root      10679  0.0  0.0  20164   992 ?        Ss   01:03   0:00  |   \_ jailshell (cloudsms) [10749] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  10749  0.0  0.0  20164   280 ?        S    01:03   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  10751  0.0  0.0 113284  1212 ?        S    01:03   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  10752  0.0  0.1 131852  3324 ?        R    01:03   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/bin/php -q -f /home/cloudsms/public_html/massmailer/cron.php
root      10662  0.0  0.0 183044  2144 ?        S    01:03   0:00  \_ /usr/sbin/CROND -n
root      10678  0.0  0.0  20164   808 ?        Ss   01:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      10663  0.0  0.0 183044  2140 ?        S    01:03   0:00  \_ /usr/sbin/CROND -n
root      10674  0.0  0.0  20164   804 ?        Ss   01:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      10664  0.0  0.0 183044  2140 ?        S    01:03   0:00  \_ /usr/sbin/CROND -n
root      10677  0.0  0.0  20164   808 ?        Ss   01:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      10666  0.0  0.0 183044  2140 ?        S    01:03   0:00  \_ /usr/sbin/CROND -n
root      10673  0.0  0.0  20164   808 ?        Ss   01:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      10667  0.0  0.0 183044  2144 ?        S    01:03   0:00  \_ /usr/sbin/CROND -n
root      10684  0.0  0.0  20164   968 ?        Ss   01:03   0:00  |   \_ jailshell (pactpay) [10700] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   10700  0.0  0.0  20164   276 ?        S    01:03   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   10706  2.0  0.7 476724 17484 ?        S    01:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      10669  0.0  0.0 183044  2140 ?        S    01:03   0:00  \_ /usr/sbin/CROND -n
root      10683  0.0  0.0  20164   972 ?        Ss   01:03   0:00      \_ jailshell (nigeria) [10702] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   10702  0.0  0.0  20164   280 ?        S    01:03   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   10707  5.0  0.6 400652 15928 ?        S    01:03   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     0 ?        Ss   00:55   0:00 /usr/sbin/atd -f
root        595  0.0  0.0 114704   100 ttyS0    Ss+  00:55   0:00 /bin/bash
mailnull    629  0.0  0.1  89068  3688 ?        Ss   00:55   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  10531  0.0  0.2  89480  5108 ?        S    01:02   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        929  0.0  0.1 445028  2620 ?        Ss   00:55   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    930  0.0  0.0 113932  2096 ?        Ssl  00:55   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 392856   424 ?        Ss   00:55   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        936  2.9 31.7 1763048 768992 ?      Ssl  00:55   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       938  0.1  0.9 1186868 21828 ?       Ssl  00:55   0:00 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    940  0.0  0.0  10388    52 ?        Ssl  00:55   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    945  0.0  0.0  13012    36 ?        Ssl  00:55   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        948  0.0  0.1 216400  3652 ?        Ssl  00:55   0:00 /usr/sbin/rsyslogd -n
root        950  0.0  0.0 572372   768 ?        Ssl  00:55   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        951  0.0  0.0 153404   296 ?        Ss   00:55   0:00 pure-ftpd (SERVER)
systuser    952  0.0  0.4 114016 10352 ?        Ssl  00:55   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        953  0.0  0.0  51508   444 ?        Ss   00:55   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1094  0.0  0.0  46772   640 ?        S    00:55   0:00  \_ dovecot/pop3-login
dovenull   1095  0.0  0.0  46924  1756 ?        S    00:55   0:00  \_ dovecot/imap-login
dovecot    1096  0.0  0.0  10320   244 ?        S    00:55   0:00  \_ dovecot/anvil
root       1097  0.0  0.0  10452   448 ?        S    00:55   0:00  \_ dovecot/log
dovenull   1098  0.0  0.0  46772   764 ?        S    00:55   0:00  \_ dovecot/pop3-login
dovenull   1099  0.0  0.0  47056  1944 ?        S    00:55   0:00  \_ dovecot/imap-login
root       1103  0.0  0.0  24528  1964 ?        S    00:55   0:00  \_ dovecot/config
dovecot    1108  0.0  0.0  13568   496 ?        S    00:55   0:00  \_ dovecot/stats
dovecot    1175  0.0  0.0  41056   816 ?        S    00:55   0:00  \_ dovecot/auth
root       8767  0.0  0.0  41052  1908 ?        S    01:01   0:00  \_ dovecot/auth -w
cloudsms   8862  0.0  0.1  61784  3908 ?        S    01:01   0:00  \_ dovecot/lmtp
root        956  0.0  0.1 261028  3016 ?        Ss   00:55   0:00 cpsrvd (SSL) - waiting for connections                   
root      10638  0.0  0.0      0     0 ?        Z    01:02   0:00  \_ [cpaneld - servi] <defunct>
memcach+    957  0.0  0.0 342400    24 ?        Ssl  00:55   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    959  0.0  0.1   9700  2468 ?        Ss   00:55   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        962  0.0  0.0 385496   396 ?        Ss   00:55   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.0  0.1 397344  3032 ?        Ss   00:55   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    9701  0.0  0.2 397064  5584 ?        S    01:02   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+   9996 15.4  2.7 456100 67100 ?        S    01:02   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  10417 13.8  2.6 453276 64148 ?        S    01:02   0:01  \_ php-fpm: pool health_oyostate_gov_ng
root        991  0.0  0.4 436392 11268 ?        Ss   00:55   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        997  0.0  0.0 386112   384 ?        Ss   00:55   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
telegraf    998  0.0  1.3 5654048 32780 ?       SLsl 00:55   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        999  0.0  0.0 111304   464 ?        Ss   00:55   0:00 /usr/sbin/sshd -D
root       9868  0.0  0.2 162436  5828 ?        Ss   01:02   0:00  \_ sshd: root [priv]
sshd       9869  0.0  0.1 115644  2628 ?        S    01:02   0:00  |   \_ sshd: root [net]
root       9935  0.0  0.1 111304  4264 ?        Ss   01:02   0:00  \_ sshd: [accepted]
root      10103  0.0  0.1 111304  4268 ?        Ss   01:02   0:00  \_ sshd: [accepted]
root      10350  0.0  0.1 111304  4260 ?        Ss   01:02   0:00  \_ sshd: [accepted]
sshd      10351  0.0  0.1 115644  2628 ?        S    01:02   0:00  |   \_ sshd: [net]
root      10554  0.1  0.2 162436  5704 ?        Ss   01:02   0:00  \_ sshd: root [priv]
sshd      10565  0.0  0.1 115644  2632 ?        S    01:02   0:00  |   \_ sshd: root [net]
root      10600  0.0  0.2 157100  5068 ?        Ss   01:02   0:00  \_ sshd: unknown [priv]
sshd      10602  0.0  0.1 115644  2624 ?        S    01:02   0:00  |   \_ sshd: unknown [net]
root      10639  0.0  0.2 157100  5080 ?        Ss   01:02   0:00  \_ sshd: unknown [priv]
sshd      10640  0.0  0.1 115644  2628 ?        S    01:02   0:00      \_ sshd: unknown [net]
systuser   1006  0.0  0.0 111864  1560 ?        Ssl  00:55   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1113  0.0  0.0 108296    96 tty1     Ss+  00:55   0:00 /sbin/agetty --noclear tty1 linux
wp-tool+   1137  0.0  0.5 387528 12872 ?        Ss   00:55   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1138  0.1  1.4 410452 35416 ?        Ss   00:55   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1142  0.6  4.9 248024 119448 ?       Ss   00:55   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8825  0.3  5.2 260980 127400 ?       S    01:01   0:00  \_ spamd child
root       8827  0.0  4.8 248024 116884 ?       S    01:01   0:00  \_ spamd child
systuser   1168  0.0  0.0 157704  2072 ?        S    00:55   0:00 SonarPush 0.6.12 [sleeping]
root       1213  0.0  0.0 183900   140 ?        Ss   00:55   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1214  0.0  0.0 167452  1232 ?        Ss   00:55   0:00 dnsadmin - dormant mode
root       1217  0.0  0.4 209328 10384 ?        Ss   00:55   0:00 tailwatchd
root       1635  0.0  0.0 299272   836 ?        Ss   00:55   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1666  0.0  0.0 130416   768 ?        SN   00:55   0:00 cpanellogd - sleeping for logs
mysql      1763  1.5  7.7 1458872 186388 ?      Sl   00:55   0:06 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1981  0.0  0.9 267016 22216 ?        Ss   00:55   0:00 /usr/sbin/httpd -k start
root       1982  0.0  0.0  12796   428 ?        S    00:55   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1983  0.0  0.0  12732   184 ?        S    00:55   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1984  0.0  0.0  12820   444 ?        S    00:55   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1990  0.0  0.3  53256  9528 ?        S    00:55   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     1991  0.1  1.2 277884 31320 ?        S    00:55   0:00  \_ /usr/sbin/httpd -k start
cloudw    10732  0.0  0.6 350316 16620 ?        S    01:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     4572  0.1  1.2 277516 31060 ?        S    00:58   0:00  \_ /usr/sbin/httpd -k start
nobody     4573  0.2  1.2 277932 31168 ?        S    00:58   0:00  \_ /usr/sbin/httpd -k start
nobody     4982  0.1  1.3 277800 31468 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
nobody     5018  0.2  1.2 277800 31152 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
nobody     5051  0.1  1.3 277800 31568 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
nobody     5053  0.1  1.2 277800 31204 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
cloudw    10743  0.0  0.6 350316 16620 ?        S    01:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     5754  0.1  1.3 277800 31548 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
nobody     5775  0.1  1.2 277544 31024 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
nobody     5803  0.1  1.2 277800 31148 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
nobody     5805  0.1  1.2 277800 31292 ?        S    00:59   0:00  \_ /usr/sbin/httpd -k start
nobody     7503  0.1  1.2 277800 31040 ?        S    01:00   0:00  \_ /usr/sbin/httpd -k start
nobody     7516  0.1  1.2 277800 31436 ?        S    01:00   0:00  \_ /usr/sbin/httpd -k start
nobody     7525  0.1  1.2 277812 31336 ?        S    01:00   0:00  \_ /usr/sbin/httpd -k start
nobody     7617  0.1  1.2 277800 31316 ?        S    01:00   0:00  \_ /usr/sbin/httpd -k start
nobody     7618  0.2  1.2 277812 31200 ?        S    01:00   0:00  \_ /usr/sbin/httpd -k start
nobody     8723  0.1  1.2 277800 31308 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody     8735  0.2  1.2 277800 31268 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody     8736  0.1  1.3 277800 31492 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody     8775  0.1  1.2 277800 31116 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
cloudw    10720  2.0  0.6 350316 16620 ?        S    01:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     8776  0.1  1.2 277516 30908 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody     8927  0.1  1.2 277932 31264 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody     8960  0.1  1.2 277800 31160 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody     9084  0.1  1.2 277800 31160 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody     9665  0.1  1.2 277808 31024 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10286  0.1  1.2 277800 31112 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10295  0.1  1.2 277800 31040 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10296  0.1  1.2 277800 31048 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10346  0.0  1.2 277800 31116 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10367  0.1  1.2 277800 31036 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10368  0.2  1.2 277800 31152 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10407  0.2  1.2 277800 30940 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10422  0.0  1.2 277800 30984 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10423  0.0  1.2 277932 31104 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10448  0.0  1.2 277800 30956 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10449  0.0  1.2 277800 30960 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10450  0.1  1.2 277796 31016 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10451  0.0  1.2 277800 30960 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10547  0.0  1.2 277656 30696 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10563  0.0  1.2 277656 30696 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10564  0.0  1.2 277656 30696 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10582  0.0  1.2 277656 30700 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10583  0.0  1.2 277656 30700 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10584  0.2  1.2 277800 30924 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody    10585  0.0  1.2 277656 30692 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
root       2043  0.1  1.1 181060 27968 ?        Ss   00:55   0:00 lfd - sleeping
oysipao+   6378  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   6384  0.0  0.0   3152   488 ?        S    01:00   0:00  \_ [kworker]
root       6919  0.0  0.4 1276100 10528 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root       6959  0.0  0.6 1277312 15188 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 446  Threads: 5  Questions: 43215  Slow queries: 0  Opens: 694  Flush tables: 1  Open tables: 676  Queries per second avg: 96.894
*************************** 1. row ***************************
     Id: 529
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 531
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 535
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 4. row ***************************
     Id: 536
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 538
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.35 TIME_WAIT
      1 15.235.96.191 TIME_WAIT
      1 ::1 TIME_WAIT
      1 203.128.6.226 TIME_WAIT
      1 34.7.85.239 TIME_WAIT
      1 47.79.98.30 TIME_WAIT
      1 66.249.64.110 TIME_WAIT
      1 66.249.64.14 TIME_WAIT
      1 66.249.64.166 TIME_WAIT
      1 66.249.64.225 TIME_WAIT
      1 66.249.64.68 TIME_WAIT
      1 66.249.70.102 TIME_WAIT
      1 66.249.70.68 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.172 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Wednesday, 12-Nov-2025 01:03:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 00:55:41 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 minutes 20 seconds
   Server load: 1.30 0.89 0.51
   Total accesses: 2546 - Total Traffic: 71.8 MB - Total Duration: 1523621
   CPU Usage: u5.26 s2.21 cu32.14 cs25.87 - 14.9% CPU load
   5.79 requests/sec - 167.2 kB/second - 28.9 kB/request - 598.437 ms/request
   35 requests currently being processed, 0 workers gracefully restarting, 10 idle workers

KK_KKKKKKKK_KKKKKKKK_KKK__W_KKWK__KK_WKK_KKKK...................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU  SS Req  Dur   Conn  Child Slot     Client     Protocol           VHost                                        Request
   0-0  1991  1/115/115 K 2.88 0  418 63549  34.2  2.94  2.94 66.249.64.100  http/1.1 support.cloudware.ng:443   GET /?c=1695816362 HTTP/1.1
   1-0  7503  80/97/178 K 0.59 0  520 103701 359.3 0.85  2.72 178.128.119.42 http/1.1 health.oyostate.gov.ng:443 POST //wp-login.php HTTP/1.1
   2-0  7516  0/32/92   _ 0.91 0  7   63335  0.0   0.99  2.35 187.110.209.54 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Tsafe&state=Zamfara&ward=Yan
   3-0  8723  1/23/93   K 0.66 3  299 67710  35.6  0.71  2.71 66.249.70.193  http/1.1 support.cloudware.ng:443   GET /?c=2967281543 HTTP/1.1
   4-0  5754  1/46/67   K 1.31 0  294 39200  35.8  1.42  1.93 66.249.70.32   http/1.1 support.cloudware.ng:443   GET /?c=1238567724 HTTP/1.1
   5-0  8735  1/24/79   K 0.68 1  284 42968  33.4  0.74  2.09 66.249.64.173  http/1.1 support.cloudware.ng:443   GET /?c=2788970536 HTTP/1.1
   6-0  8736  1/20/81   K 0.45 0  376 46288  34.9  0.53  4.51 66.249.70.163  http/1.1 support.cloudware.ng:443   GET /?c=1468116299 HTTP/1.1
   7-0  7525  1/31/80   K 0.78 4  376 42159  35.1  0.87  3.30 66.249.70.109  http/1.1 support.cloudware.ng:443   GET /?c=3349665147 HTTP/1.1
   8-0  10286 1/5/86    K 0.09 0  356 46813  34.1  0.14  2.28 66.249.70.199  http/1.1 support.cloudware.ng:443   GET /?c=2557593964 HTTP/1.1
   9-0  10295 1/4/60    K 0.08 1  415 33258  35.8  0.14  1.66 66.249.64.34   http/1.1 support.cloudware.ng:443   GET /?c=1467696428 HTTP/1.1
   10-0 10296 1/4/72    K 0.09 1  302 43816  34.9  0.14  2.10 66.249.70.140  http/1.1 support.cloudware.ng:443   GET /?c=2796273998 HTTP/1.1
   11-0 10346 0/4/44    _ 0.07 0  4   23224  0.0   0.12  1.20 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   12-0 5775  1/44/58   K 1.25 4  296 36183  34.5  1.35  1.74 66.249.64.74   http/1.1 support.cloudware.ng:443   GET /?c=584406585 HTTP/1.1
   13-0 8775  1/22/58   K 0.63 0  611 34228  34.5  0.68  1.62 66.249.64.72   http/1.1 support.cloudware.ng:443   GET /?c=3747693245 HTTP/1.1
   14-0 4572  1/64/64   K 1.87 1  260 43335  33.8  1.93  1.93 66.249.70.167  http/1.1 support.cloudware.ng:443   GET /?c=3312167629 HTTP/1.1
   15-0 4573  1/83/83   K 2.45 1  310 51830  35.4  2.52  2.52 66.249.64.128  http/1.1 support.cloudware.ng:443   GET /?c=3991213987 HTTP/1.1
   16-0 10367 1/3/65    K 0.06 3  295 39529  34.6  0.10  1.95 66.249.64.66   http/1.1 support.cloudware.ng:443   GET /?c=2799539628 HTTP/1.1
   17-0 10368 1/4/49    K 0.06 2  278 29808  35.3  0.11  1.41 66.249.64.8    http/1.1 support.cloudware.ng:443   GET /?c=3942137720 HTTP/1.1
   18-0 5803  1/45/48   K 1.39 2  288 31167  34.9  1.47  1.54 192.178.4.100  http/1.1 support.cloudware.ng:443   GET /?c=3494917725 HTTP/1.1
   19-0 4982  1/49/49   K 1.42 0  444 29094  36.8  1.50  1.50 66.249.64.130  http/1.1 support.cloudware.ng:443   GET /?c=142353955 HTTP/1.1
   20-0 8776  0/16/43   _ 0.45 0  417 24730  0.0   0.51  1.25 66.249.70.2    http/1.1 support.cloudware.ng:443   GET /?c=2259543163 HTTP/1.1
   21-0 10407 1/4/60    K 0.09 2  297 34893  37.1  0.13  1.75 66.249.70.3    http/1.1 support.cloudware.ng:443   GET /?c=1509131369 HTTP/1.1
   22-0 5018  1/82/82   K 2.50 2  312 54303  35.7  2.73  2.73 66.249.64.172  http/1.1 support.cloudware.ng:443   GET /?c=440839650 HTTP/1.1
   23-0 8927  2/15/43   K 0.36 2  283 22412  65.0  0.40  1.16 66.249.70.35   http/1.1 support.cloudware.ng:443   GET /?c=1533170553 HTTP/1.1
   24-0 10422 0/2/60    _ 0.03 0  357 35110  0.0   0.07  1.74 66.249.64.104  http/1.1 support.cloudware.ng:443   GET /?c=1027870348 HTTP/1.1
   25-0 7617  0/38/58   _ 1.12 0  404 37554  0.0   1.22  1.80 66.249.64.232  http/1.1 support.cloudware.ng:443   GET /?c=2211446530 HTTP/1.1
   26-0 10423 0/3/52    W 0.02 0  0   31984  0.0   0.08  1.51 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   27-0 10448 0/2/33    _ 0.03 0  358 20891  0.0   0.07  0.85 66.249.70.5    http/1.1 support.cloudware.ng:443   GET /?c=4035894784 HTTP/1.1
   28-0 5051  1/69/69   K 2.20 3  339 42718  36.0  1.99  1.99 66.249.64.33   http/1.1 support.cloudware.ng:443   GET /?c=1524397950 HTTP/1.1
   29-0 7618  1/125/150 K 1.11 2  356 92281  36.5  1.17  1.86 66.249.70.33   http/1.1 support.cloudware.ng:443   GET /?c=2607284831 HTTP/1.1
   30-0 5053  0/62/62   W 1.73 0  0   37190  0.0   1.79  1.79 66.249.64.73   http/1.1 support.cloudware.ng:443   GET /?c=1901991640 HTTP/1.1
   31-0 8960  2/19/54   K 0.58 2  265 30366  64.3  0.61  1.55 66.249.64.107  http/1.1 support.cloudware.ng:443   GET /?c=3113660949 HTTP/1.1
   32-0 5805  0/42/44   _ 1.22 0  335 26333  0.0   1.30  1.33 66.249.64.132  http/1.1 support.cloudware.ng:443   GET /?c=4102584007 HTTP/1.1
   33-0 10449 0/2/30    _ 0.03 1  344 16693  0.0   0.07  1.28 192.178.4.105  http/1.1 support.cloudware.ng:443   GET /?c=1538566965 HTTP/1.1
   34-0 9084  1/14/36   K 0.42 1  315 19930  36.3  0.47  1.04 66.249.64.46   http/1.1 support.cloudware.ng:443   GET /?c=2188977099 HTTP/1.1
   35-0 10450 1/4/46    K 0.04 4  262 26130  35.2  0.07  1.26 66.249.64.40   http/1.1 support.cloudware.ng:443   GET /?c=2861836523 HTTP/1.1
   36-0 10451 0/2/27    _ 0.02 0  405 14010  0.0   0.07  0.68 192.178.4.99   http/1.1 support.cloudware.ng:443   GET /?c=2917909940 HTTP/1.1
   37-0 10547 0/1/40    W 0.00 0  0   23750  0.0   0.04  1.19 66.249.70.8    http/1.1 support.cloudware.ng:443   GET /?c=1089275905 HTTP/1.1
   38-0 9665  1/12/19   K 0.34 1  256 11053  33.8  0.39  0.56 66.249.64.4    http/1.1 support.cloudware.ng:443   GET /?c=2974962931 HTTP/1.1
   39-0 10563 1/1/11    K 0.00 4  268 6744   35.4  0.03  0.32 66.249.70.173  http/1.1 support.cloudware.ng:443   GET /?c=219132234 HTTP/1.1
   40-0 10564 0/1/1     _ 0.00 0  253 506    0.0   0.03  0.03 66.249.70.8    http/1.1 support.cloudware.ng:443   GET /?c=1410502714 HTTP/1.1
   41-0 10582 1/1/1     K 0.00 3  357 714    34.0  0.03  0.03 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=3695363821 HTTP/1.1
   42-0 10583 1/1/1     K 0.00 3  261 523    34.9  0.03  0.03 66.249.70.164  http/1.1 support.cloudware.ng:443   GET /?c=1212745663 HTTP/1.1
   43-0 10584 2/2/2     K 0.03 2  251 1060   63.6  0.06  0.06 66.249.70.138  http/1.1 support.cloudware.ng:443   GET /?c=3629687660 HTTP/1.1
   44-0 10585 1/1/1     K 0.00 3  262 524    34.6  0.03  0.03 66.249.64.226  http/1.1 support.cloudware.ng:443   GET /?c=3725676651 HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 2252
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 0...59)
   index usage: 39%, cache usage: 54%
   total entries stored since starting: 2372
   total entries replaced since starting: 0
   total entries expired since starting: 120
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 0 miss
   total removes since starting: 0 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit