403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.02.03.txt
 ## swap threshold exceeded
## server overview
2025-11-13.02.03 load[0] mem[64/70] mysql[1/8] httpd[29]
              total        used        free      shared  buff/cache   available
Mem:           2363        1454          87          24         821         722
Swap:          1999        1657         342
 02:03:02 up  6:00,  0 users,  load average: 0.33, 0.47, 0.82
## system overview
top - 02:03:02 up  6:00,  0 users,  load average: 0.33, 0.47, 0.82
Tasks: 216 total,   3 running, 212 sleeping,   0 stopped,   1 zombie
%Cpu(s): 53.1 us, 15.6 sy,  0.0 ni, 28.1 id,  0.0 wa,  0.0 hi,  3.1 si,  0.0 st
KiB Mem :  2420300 total,    96676 free,  1482104 used,   841520 buff/cache
KiB Swap:  2047996 total,   350272 free,  1697724 used.   746536 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 214536   3932 S  80.0  8.9   5:11.53 /usr/sbin+
 85772 nigeria   20   0  400652  15932  10220 S  20.0  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44428   3616   1692 S   6.7  0.1   0:30.46 /usr/lib/+
   514 dbus      20   0   58596   1308    612 S   6.7  0.1   0:11.16 /usr/bin/+
 85768 pactpay   20   0  476724  17488  11728 S   6.7  0.7   0:00.02 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.53 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.05 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:22.47 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.98 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.25 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:25.68 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.47 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.56 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.38 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.06 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39500   4776   4536 S   0.0  0.2   0:12.51 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    108      0 S   0.0  0.0   0:01.99 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:04.92 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.47 /usr/sbin+
   501 polkitd   20   0  612240    848    464 S   0.0  0.0   0:02.92 /usr/lib/+
   503 root      20   0  152780     72     28 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3060    800 S   0.0  0.1   0:00.29 queueproc+
   507 root      20   0   52852    244    156 S   0.0  0.0   0:00.01 /usr/sbin+
   519 nscd      20   0 1062080   1352    612 S   0.0  0.1   0:18.31 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    852    416 S   0.0  0.0   0:00.60 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3840    904 S   0.0  0.2   0:00.84 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.24 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13728   2692 S   0.0  0.6   0:05.28 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.45 pure-ftpd+
   931 root      20   0   51508    464    300 S   0.0  0.0   0:00.30 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:01.92 /usr/bin/+
   933 telegraf  20   0 5654048  34848   6104 S   0.0  1.4   0:12.08 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.48 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:02.82 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    380    288 S   0.0  0.0   0:00.64 php-fpm: +
   961 named     20   0  636988  32096   1940 S   0.0  1.3   0:12.38 /usr/sbin+
   964 root      20   0  281936   4700   4188 S   0.0  0.2   0:05.86 /usr/sbin+
   981 root      20   0  436392    372    284 S   0.0  0.0   0:00.75 php-fpm: +
   984 root      20   0  385496    468    372 S   0.0  0.0   0:00.62 php-fpm: +
   985 root      20   0  261288   6212   1648 S   0.0  0.3   0:03.53 cpsrvd (S+
   989 root      20   0  392856    312    228 S   0.0  0.0   0:00.62 php-fpm: +
   992 root      20   0 1901916 232900    980 S   0.0  9.6   0:32.37 /usr/loca+
  1000 root      20   0  397344   1880    604 S   0.0  0.1   0:03.06 php-fpm: +
  1006 cpanelc+  20   0   10656   3696   2304 R   0.0  0.2   0:17.87 /usr/loca+
  1075 dovenull  20   0   47264   1992   1204 S   0.0  0.1   0:00.44 dovecot/p+
  1076 dovenull  20   0   48460   2852   1660 S   0.0  0.1   0:00.36 dovecot/i+
  1077 dovecot   20   0   10320    280    172 S   0.0  0.0   0:00.12 dovecot/a+
  1078 root      20   0   10452    568    376 S   0.0  0.0   0:00.26 dovecot/l+
  1079 dovenull  20   0   47112   2304   1556 S   0.0  0.1   0:00.34 dovecot/p+
  1080 dovenull  20   0   48000   2588   1548 S   0.0  0.1   0:00.26 dovecot/i+
  1084 root      20   0   24572   2276    504 S   0.0  0.1   0:00.15 dovecot/c+
  1088 dovecot   20   0   13568    596    392 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2932    928 S   0.0  0.1   0:00.11 SonarPush+
  1166 dovecot   20   0   41260   1560   1020 S   0.0  0.1   0:00.83 dovecot/a+
  1172 root      20   0  248152   5980   1220 S   0.0  0.2   0:05.43 /usr/loca+
  1173 wp-tool+  20   0  387556   3476   1608 S   0.0  0.1   0:00.24 /usr/bin/+
  1174 wp-tool+  20   0  410616  17824   1268 S   0.0  0.7   0:17.93 /usr/bin/+
  1232 root      20   0  209372  10236   2444 S   0.0  0.4   0:02.87 tailwatchd
  1234 root      20   0  167452   4168   2796 S   0.0  0.2   0:00.42 dnsadmin +
  1237 root      20   0  183900   6696   3460 S   0.0  0.3   0:01.15 cpdavd - +
  1642 root      20   0  299272    504    340 S   0.0  0.0   0:00.59 php-fpm: +
  1702 root      38  18  130416   1364    692 S   0.0  0.1   0:00.05 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:02.47 /usr/sbin+
  2063 root      20   0   12812    380    212 S   0.0  0.0   0:02.66 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.26 /usr/loca+
  2065 root      20   0   12856    392    216 S   0.0  0.0   0:02.49 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  294720 106800   2576 S   0.0  4.4   0:04.78 spamd chi+
  7886 root      20   0  261428  93272   2544 S   0.0  3.9   0:00.32 spamd chi+
 23292 root      20   0  183048   1416    860 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284    620    440 S   0.0  0.0   0:00.00 /bin/sh -+
 23372 root      20   0  108056    276    204 S   0.0  0.0   0:00.00 sleep 2h +
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.34 [kworker]
 51088 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 51986 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 58816 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 65618 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 66521 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70517 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 71416 nobody    20   0  277784  18416   3996 S   0.0  0.8   0:01.64 /usr/sbin+
 72516 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 74479 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76167 root      20   0  182216   8800   1104 S   0.0  0.4   0:07.09 lfd - sle+
 78808 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 79633 nobody    20   0  277784  18288   3984 S   0.0  0.8   0:00.57 /usr/sbin+
 81118 nobody    20   0  277824  17812   3656 S   0.0  0.7   0:00.32 /usr/sbin+
 81239 nobody    20   0  277784  17420   3616 S   0.0  0.7   0:00.49 /usr/sbin+
 81445 nobody    20   0  277784  17572   3596 S   0.0  0.7   0:00.39 /usr/sbin+
 81468 nobody    20   0  277920  18104   3848 S   0.0  0.7   0:00.37 /usr/sbin+
 81968 nobody    20   0  277824  17444   3552 S   0.0  0.7   0:00.17 /usr/sbin+
 82510 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82518 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82525 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 82830 root      20   0 1276100  10500    600 S   0.0  0.4   0:00.05 /usr/bin/+
 82872 root      20   0 1277312  15252    600 S   0.0  0.6   0:00.05 /usr/bin/+
 83230 nobody    20   0  277924  17352   3568 S   0.0  0.7   0:00.24 /usr/sbin+
 83245 nobody    20   0  277920  17244   3564 S   0.0  0.7   0:00.25 /usr/sbin+
 83246 nobody    20   0  277932  18424   3684 S   0.0  0.8   0:00.19 /usr/sbin+
 83651 nobody    20   0  277784  17280   3344 S   0.0  0.7   0:00.19 /usr/sbin+
 83762 root      20   0  123364    756    532 S   0.0  0.0   0:00.00 /usr/sbin+
 83774 nobody    20   0  277784  17368   3584 S   0.0  0.7   0:00.19 /usr/sbin+
 83775 nobody    20   0  277784  17504   3640 S   0.0  0.7   0:00.22 /usr/sbin+
 84436 oysipao+  20   0   29148   2732   2236 S   0.0  0.1   0:00.00 dovecot/q+
 84437 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 84509 nobody    20   0  277920  17340   3384 S   0.0  0.7   0:00.20 /usr/sbin+
 84652 nobody    20   0  277924  17288   3568 S   0.0  0.7   0:00.12 /usr/sbin+
 84656 nobody    20   0  277784  17536   3584 S   0.0  0.7   0:00.07 /usr/sbin+
 84671 nobody    20   0  277784  17088   3384 S   0.0  0.7   0:00.06 /usr/sbin+
 84672 nobody    20   0  277916  17224   3356 S   0.0  0.7   0:00.15 /usr/sbin+
 84750 nobody    20   0  277784  17080   3376 S   0.0  0.7   0:00.15 /usr/sbin+
 85169 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 85419 nigeria   20   0  397064   4472   2348 S   0.0  0.2   0:00.00 php-fpm: +
 85428 root      20   0   84404   6392   3580 S   0.0  0.3   0:00.01 /usr/sbin+
 85513 root      20   0   88348  10376   3592 S   0.0  0.4   0:00.02 /usr/sbin+
 85525 mailnull  20   0   88560   8012   1200 S   0.0  0.3   0:00.00 /usr/sbin+
 85575 nobody    20   0  277920  16956   3284 S   0.0  0.7   0:00.02 /usr/sbin+
 85587 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 85588 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 85593 wp-tool+  20   0  499420  61672  17956 S   0.0  2.5   0:00.31 /usr/bin/+
 85614 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 85616 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 85617 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 85618 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 85638 root      20   0  261288   7368   1388 S   0.0  0.3   0:00.00 webmaild +
 85649 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 85650 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 85651 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 85652 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 85653 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 85654 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 85655 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 85656 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 85701 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 85708 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85710 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85711 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85712 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85713 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85714 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85715 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85716 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85717 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85718 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85720 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85724 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 85725 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 85726 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 85727 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 85728 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 85729 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 85730 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 85732 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 85733 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 85734 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 85735 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 85736 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 85740 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 85764 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 85767 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 85777 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 85783 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 85784 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 85785 cloudsms  20   0  131852   3316   2384 R   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:22  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:25  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      78808  0.0  0.0      0     0 ?        S    00:03   0:00  \_ [kworker/0:3]
root      51088  0.0  0.0      0     0 ?        S    01:28   0:00  \_ [kworker/0:1]
root      51986  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:3]
root      58816  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/u200:0]
root      65618  0.0  0.0      0     0 ?        S    01:43   0:00  \_ [kworker/1:1]
root      66521  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/u200:1]
root      70517  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/1:0]
root      72516  0.0  0.0      0     0 ?        S    01:50   0:00  \_ [kworker/0:0]
root      74479  0.0  0.0      0     0 ?        S    01:52   0:00  \_ [kworker/0:4]
root      82510  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/0:2]
root      82518  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/1:2]
root      82525  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44428  3616 ?        Ss   Nov12   0:30 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  39500  4776 ?        Ss   Nov12   0:12 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   108 ?        S<sl Nov12   0:01 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:04 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   848 ?        Ssl  Nov12   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    72 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3060 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   244 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58596  1308 ?        Ss   Nov12   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1352 ?        Ssl  Nov12   0:18 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   852 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  1416 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284   620 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   276 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      85708  0.0  0.1 183080  2432 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      85726  0.0  0.0 113284  1212 ?        Ss   02:03   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      85736  0.0  0.0 108052   360 ?        S    02:03   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      85740  0.0  0.0 113288  1516 ?        S    02:03   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      85787  0.0  0.0 153840  2092 ?        R    02:03   0:00  |               \_ ps auxf
root      85710  0.0  0.1 183080  2432 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      85735  0.0  0.0  20164   808 ?        Ss   02:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      85711  0.0  0.1 183080  2432 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      85729  0.0  0.0  20164   808 ?        Ss   02:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      85712  0.0  0.1 183080  2432 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      85730  0.0  0.0  20164   808 ?        Ss   02:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      85713  0.0  0.1 183080  2428 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      85725  0.0  0.0  20164   804 ?        Ss   02:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      85714  0.0  0.1 183080  2428 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      85732  0.0  0.0  20164   808 ?        Ss   02:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      85715  0.0  0.1 183080  2428 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      85724  0.0  0.0  20164   984 ?        Ss   02:03   0:00  |   \_ jailshell (cloudsms) [85783] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  85783  0.0  0.0  20164   260 ?        S    02:03   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  85784  0.0  0.0 113284  1212 ?        S    02:03   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  85785  0.0  0.6 400652 15676 ?        R    02:03   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue4.php
root      85716  0.0  0.1 183080  2424 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      85733  0.0  0.0  20164   808 ?        Ss   02:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      85717  0.0  0.1 183080  2424 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      85727  0.0  0.0  20164   808 ?        Ss   02:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      85718  0.0  0.1 183080  2424 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      85734  0.0  0.0  20164   964 ?        Ss   02:03   0:00  |   \_ jailshell (pactpay) [85764] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   85764  0.0  0.0  20164   260 ?        S    02:03   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   85768  0.0  0.7 476724 17488 ?        S    02:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      85720  0.0  0.1 183080  2424 ?        S    02:03   0:00  \_ /usr/sbin/CROND -n
root      85728  0.0  0.0  20164   968 ?        Ss   02:03   0:00      \_ jailshell (nigeria) [85767] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   85767  0.0  0.0  20164   260 ?        S    02:03   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   85772  0.0  0.6 400652 15932 ?        S    02:03   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3840 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root      85428  0.0  0.2  84404  6392 ?        S    02:02   0:00  \_ /usr/sbin/exim -q
root      85513  0.1  0.4  88348 10376 ?        S    02:02   0:00      \_ /usr/sbin/exim -q
mailnull  85525  0.0  0.3  88560  8012 ?        S    02:02   0:00          \_ /usr/sbin/exim -q
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13728 ?        Ssl  Nov12   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   464 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  1992 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48460  2852 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   280 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   568 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  2304 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2588 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24572  2276 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   596 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1560 ?        S    Nov12   0:00  \_ dovecot/auth
oysipao+  84436  0.0  0.1  29148  2732 ?        S    02:01   0:00  \_ dovecot/quota-status -p postfix
root      84437  0.0  0.1  41052  2728 ?        S    02:01   0:00  \_ dovecot/auth -w
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.4 5654048 34848 ?       SLsl Nov12   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root      85169  0.0  0.1 111304  4268 ?        Ss   02:02   0:00  \_ sshd: [accepted]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   380 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.3 636988 32096 ?        Ssl  Nov12   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.1 281936  4700 ?        Ssl  Nov12   0:05 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   372 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   468 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6212 ?        Ss   Nov12   0:03 cpsrvd (SSL) - waiting for connections                   
root      85638  0.0  0.3 261288  7368 ?        S    02:02   0:00  \_ webmaild - serving 162.142.125.120
root      85701  0.0  0.0      0     0 ?        Z    02:03   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   312 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1  9.6 1901916 232900 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1880 ?        Ss   Nov12   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   85419  0.0  0.1 397064  4472 ?        S    02:02   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10656  3696 ?        Ss   Nov12   0:17 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2932 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.2 248152  5980 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  4.4 294720 106800 ?       S    Nov12   0:04  \_ spamd child
root       7886  0.0  3.8 261428 93272 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3476 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+  85593  5.1  2.5 499420 61672 ?        S    02:02   0:00  \_ /usr/bin/sw-engine -d auto_prepend_file=/usr/local/cpanel/3rdparty/wp-toolkit/scripts/scheduled-task-prepend-file.php /usr/local/cpanel/3rdparty/wp-toolkit/plib/scripts/maintenance.php
wp-tool+   1174  0.0  0.7 410616 17824 ?        Ss   Nov12   0:17 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.4 209372 10236 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.1 167452  4168 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.2 183900  6696 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1642  0.0  0.0 299272   504 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1364 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4  8.8 1457796 214536 ?      Sl   Nov12   5:11 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:02 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12812   380 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12856   392 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    71416  0.1  0.7 277784 18416 ?        S    01:48   0:01  \_ /usr/sbin/httpd -k start
nobody    79633  0.1  0.7 277784 18288 ?        S    01:57   0:00  \_ /usr/sbin/httpd -k start
nobody    81118  0.1  0.7 277824 17812 ?        S    01:58   0:00  \_ /usr/sbin/httpd -k start
nobody    81239  0.2  0.7 277784 17420 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
nobody    81445  0.1  0.7 277784 17572 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
nobody    81468  0.1  0.7 277920 18104 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
nobody    81968  0.0  0.7 277824 17444 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
nobody    83230  0.1  0.7 277924 17352 ?        S    02:00   0:00  \_ /usr/sbin/httpd -k start
nobody    83245  0.1  0.7 277920 17244 ?        S    02:00   0:00  \_ /usr/sbin/httpd -k start
nobody    83246  0.1  0.7 277932 18424 ?        S    02:00   0:00  \_ /usr/sbin/httpd -k start
nobody    83651  0.1  0.7 277784 17280 ?        S    02:00   0:00  \_ /usr/sbin/httpd -k start
nobody    83774  0.1  0.7 277784 17368 ?        S    02:01   0:00  \_ /usr/sbin/httpd -k start
cloudw    85786  0.0  0.1  71636  3464 ?        R    02:03   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    83775  0.1  0.7 277784 17504 ?        S    02:01   0:00  \_ /usr/sbin/httpd -k start
nobody    84509  0.2  0.7 277920 17340 ?        S    02:01   0:00  \_ /usr/sbin/httpd -k start
nobody    84652  0.1  0.7 277924 17288 ?        S    02:01   0:00  \_ /usr/sbin/httpd -k start
nobody    84656  0.1  0.7 277784 17536 ?        S    02:01   0:00  \_ /usr/sbin/httpd -k start
nobody    84671  0.0  0.7 277784 17088 ?        S    02:01   0:00  \_ /usr/sbin/httpd -k start
nobody    84672  0.2  0.7 277916 17224 ?        S    02:01   0:00  \_ /usr/sbin/httpd -k start
nobody    84750  0.2  0.7 277784 17080 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    85575  0.2  0.7 277920 16956 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    85587  0.0  0.6 277640 15520 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    85588  0.0  0.6 277640 15520 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    85614  0.0  0.6 277640 15520 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    85616  0.0  0.6 277640 15520 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    85617  0.0  0.6 277640 15520 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    85618  0.0  0.6 277640 15520 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    85649  0.0  0.6 277640 15520 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    85650  0.0  0.6 277640 15520 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    85651  0.0  0.6 277640 15520 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    85652  0.0  0.6 277640 15520 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    85653  0.0  0.6 277640 15520 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    85654  0.0  0.6 277640 15520 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    85655  0.0  0.6 277640 15524 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
nobody    85656  0.0  0.6 277640 15520 ?        S    02:02   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 182216  8800 ?        Ss   00:00   0:07 lfd - sleeping
root      82830  0.0  0.4 1276100 10500 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      82872  0.0  0.6 1277312 15252 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
root      83762  0.0  0.0 123364   756 ?        Ss   02:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 21603  Threads: 3  Questions: 1902799  Slow queries: 0  Opens: 6974  Flush tables: 1  Open tables: 2000  Queries per second avg: 88.080
*************************** 1. row ***************************
     Id: 27041
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 27043
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 27048
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.28.235.60 TIME_WAIT
      1 114.119.155.44 TIME_WAIT
      1 142.44.228.157 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.90.7.158 TIME_WAIT
      1 52.167.144.162 TIME_WAIT
      1 54.39.89.232 TIME_WAIT
      1 66.249.64.132 TIME_WAIT
      1 66.249.64.37 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 43.156.156.96 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 02:03:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 5 hours 59 minutes 58 seconds
   Server load: 1.19 0.64 0.88
   Total accesses: 118757 - Total Traffic: 3.1 GB - Total Duration: 60503177
   CPU Usage: u4.45 s4.02 cu1513.57 cs1220.21 - 12.7% CPU load
   5.5 requests/sec - 151.6 kB/second - 27.6 kB/request - 509.47 ms/request
   27 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

KKKK_KKKKKW_K_KKK_K_K_KKK_KKKKKK.WK.............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn Child  Slot      Client     Protocol           VHost                                        Request
   0-0  81445 2/63/5427  K 2.02 3    254 2741369 60.1 1.78  137.48 66.249.64.105  http/1.1 schoolplus.cloudware.ng:80 GET /?p=579279689 HTTP/1.1
   1-0  84509 1/33/5494  K 0.85 0    330 2598364 38.2 0.89  136.76 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=465845528 HTTP/1.1
   2-0  79633 2/98/5350  K 2.68 4    347 2825433 60.0 2.49  154.63 66.249.70.68   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3785547384 HTTP/1.1
   3-0  81118 1/53/5440  K 1.36 1    295 2886174 30.9 1.41  156.81 66.249.64.227  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1774487481 HTTP/1.1
   4-0  84652 0/22/5192  _ 0.57 0    392 2586628 0.0  0.59  135.38 66.249.64.14   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1241443373 HTTP/1.1
   5-0  81968 1/28/5310  K 0.78 2    295 2744795 30.5 0.82  164.24 66.249.64.15   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1650996607 HTTP/1.1
   6-0  83230 3/40/5161  K 1.09 3    388 2587456 92.7 1.10  135.55 66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2369400503 HTTP/1.1
   7-0  85575 2/3/5867   K 0.03 3    269 2825816 60.7 0.07  157.15 66.249.70.199  http/1.1 schoolplus.cloudware.ng:80 GET /?p=426884246 HTTP/1.1
   8-0  81468 1/63/4590  K 1.66 2    267 2353143 29.6 1.71  118.69 66.249.64.162  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3277984796 HTTP/1.1
   9-0  83245 1/42/4811  K 1.10 1    282 2470824 30.1 1.14  127.56 66.249.64.99   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2024030978 HTTP/1.1
   10-0 83246 0/34/4898  W 0.81 0    0   2439002 0.0  0.87  134.64 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   11-0 85587 0/1/5140   _ 0.00 0    400 2640734 0.0  0.03  165.64 66.249.70.170  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3885901417 HTTP/1.1
   12-0 84656 1/13/4796  K 0.28 4    334 2362566 30.3 0.36  118.07 66.249.64.65   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1674695585 HTTP/1.1
   13-0 85588 0/1/4080   _ 0.00 1    357 1902976 0.0  0.03  95.40  66.249.70.70   http/1.1 schoolplus.cloudware.ng:80 GET /?p=4270413506 HTTP/1.1
   14-0 85614 1/1/4132   K 0.00 4    355 2154856 29.5 0.03  124.92 66.249.70.2    http/1.1 schoolplus.cloudware.ng:80 GET /?p=3566956379 HTTP/1.1
   15-0 85616 1/1/3540   K 0.00 4    402 1826596 31.5 0.03  93.09  192.178.4.99   http/1.1 schoolplus.cloudware.ng:80 GET /?p=4072872064 HTTP/1.1
   16-0 71416 2/355/5149 K 7.15 3    271 2473822 59.4 7.11  132.98 66.249.64.129  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1363725379 HTTP/1.1
   17-0 85617 0/1/5347   _ 0.00 0    363 2775966 0.0  0.03  154.51 66.249.64.72   http/1.1 schoolplus.cloudware.ng:80 GET /?p=973924319 HTTP/1.1
   18-0 84671 1/10/2788  K 0.24 2    349 1541130 30.8 0.28  75.16  66.249.70.67   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1313826573 HTTP/1.1
   19-0 84672 0/25/3400  _ 0.66 0    5   1841658 0.0  0.68  90.71  52.204.253.129 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/images/blog/blog/polling_
   20-0 84750 2/25/2244  K 0.69 2    318 1142196 62.0 0.73  54.95  66.249.64.39   http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2226049
   21-0 85618 0/1/2266   _ 0.00 0    356 1205900 0.0  0.03  61.97  66.249.70.3    http/1.1 schoolplus.cloudware.ng:80 GET /?p=3809353873 HTTP/1.1
   22-0 81239 1/79/2252  K 2.24 0    256 1224863 29.5 2.22  68.19  66.249.64.69   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1851520900 HTTP/1.1
   23-0 85649 1/1/1687   K 0.00 3    415 900916  30.0 0.03  38.71  66.249.64.172  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2147434301 HTTP/1.1
   24-0 85650 1/1/2470   K 0.00 3    353 1069484 28.7 0.03  56.09  66.249.64.103  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3210762594 HTTP/1.1
   25-0 83651 0/32/1618  _ 0.87 0    0   869186  0.0  3.37  46.00  ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   26-0 85651 1/1/864    K 0.00 2    261 467405  29.8 0.03  22.32  66.249.64.130  http/1.1 schoolplus.cloudware.ng:80 GET /?p=120573362 HTTP/1.1
   27-0 85652 1/1/952    K 0.00 3    352 514631  31.0 0.03  25.26  66.249.64.128  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1446698861 HTTP/1.1
   28-0 85653 1/1/1949   K 0.00 3    289 884986  30.8 0.03  47.75  66.249.64.64   http/1.1 schoolplus.cloudware.ng:80 GET /?p=45590636 HTTP/1.1
   29-0 85654 1/1/601    K 0.00 2    261 334421  30.4 0.03  15.62  66.249.70.37   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2698181929 HTTP/1.1
   30-0 85655 1/1/1058   K 0.00 2    296 566164  31.3 0.03  25.12  66.249.64.2    http/1.1 schoolplus.cloudware.ng:80 GET /?p=1635766384 HTTP/1.1
   31-0 85656 1/1/693    K 0.00 2    301 396848  31.0 0.03  18.53  192.178.4.104  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3039132267 HTTP/1.1
   32-0 -     0/0/507    . 0.00 113  0   317361  0.0  0.00  12.11  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 83774 0/35/620   W 0.88 0    0   362554  0.0  0.90  15.69  66.249.70.172  http/1.1 schoolplus.cloudware.ng:80 GET /?p=849578111 HTTP/1.1
   34-0 83775 1/36/487   K 1.00 1    358 292498  30.1 1.02  12.42  192.178.4.96   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3572224224 HTTP/1.1
   35-0 -     0/0/316    . 0.00 77   0   115360  0.0  0.00  6.25   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/104    . 0.00 109  0   54049   0.0  0.00  2.60   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/223    . 0.00 822  0   130665  0.0  0.00  5.61   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/106    . 0.00 1192 0   62326   0.0  0.00  2.38   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/71     . 0.00 1361 0   33332   0.0  0.00  1.45   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1120   . 0.00 2220 0   651566  0.0  0.00  32.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/11     . 0.00 2233 0   1258    0.0  0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/13     . 0.00 2226 0   4689    0.0  0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/56     . 0.00 2194 0   30775   0.0  0.00  1.38   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/65     . 0.00 2159 0   29051   0.0  0.00  1.64   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/4      . 0.00 2222 0   2240    0.0  0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 2238 0   2519    0.0  0.00  0.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/272    . 0.00 1431 0   144675  0.0  0.00  6.70   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00 2251 0   3773    0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/4      . 0.00 2245 0   2208    0.0  0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/55     . 0.00 2088 0   30413   0.0  0.00  3.67   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 2246 0   3961    0.0  0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/7      . 0.00 2241 0   2145    0.0  0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/31     . 0.00 2156 0   17077   0.0  0.00  0.64   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/54     . 0.00 2075 0   24170   0.0  0.00  1.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/7      . 0.00 2239 0   1791    0.0  0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/9      . 0.00 2228 0   2519    0.0  0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/37     . 0.00 2160 0   23864   0.0  0.00  0.92   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 283
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 31 seconds, (range: 3...108)
   index usage: 4%, cache usage: 6%
   total entries stored since starting: 31503
   total entries replaced since starting: 0
   total entries expired since starting: 31203
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 173 miss
   total removes since starting: 17 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit