403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-15.21.30.txt
 ## swap threshold exceeded
## server overview
2025-11-15.21.30 load[0] mem[55/69] mysql[3/10] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1221         256          72         885         893
Swap:          1999        1492         507
 21:30:02 up  7:05,  0 users,  load average: 0.16, 0.30, 0.29
## system overview
top - 21:30:02 up  7:05,  0 users,  load average: 0.16, 0.30, 0.29
Tasks: 206 total,   2 running, 203 sleeping,   0 stopped,   1 zombie
%Cpu(s): 81.8 us, 15.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,   264612 free,  1248908 used,   906780 buff/cache
KiB Swap:  2047996 total,   519460 free,  1528536 used.   917396 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1785 mysql     20   0 1458332 263892   4140 S 146.7 10.9   6:23.92 /usr/sbin+
 32074 nigeria   20   0  404052  16140  10384 S  20.0  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44280   3564   1720 S   0.0  0.1   0:35.73 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.70 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.24 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:26.76 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.14 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.99 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:17.91 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.44 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.30 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.77 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   343 root       0 -20       0      0      0 S   0.0  0.0   0:01.91 [kworker/+
   358 root      20   0   40244   2176   1868 S   0.0  0.1   0:12.62 /usr/lib/+
   385 root      20   0   45444    620    552 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    628    500 S   0.0  0.0   0:01.87 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 root      20   0   21540    608    520 S   0.0  0.0   0:00.57 /usr/sbin+
   516 root      20   0  152780    432    388 S   0.0  0.0   0:00.01 /usr/sbin+
   521 root      20   0   24708   1412   1040 S   0.0  0.1   0:05.92 /usr/lib/+
   523 nscd      20   0 1264844   1912    920 S   0.0  0.1   0:21.01 /usr/sbin+
   524 root      20   0   52852    684    572 S   0.0  0.0   0:00.01 /usr/sbin+
   527 polkitd   20   0  612240   1056    672 S   0.0  0.0   0:03.48 /usr/lib/+
   529 root      20   0  224148   6116   1536 S   0.0  0.3   0:00.33 queueproc+
   531 dbus      20   0   58740   1624    900 S   0.0  0.1   0:13.39 /usr/bin/+
   539 rpc       20   0   69256    248    188 S   0.0  0.0   0:00.03 /sbin/rpc+
   541 root      20   0    4388     92     88 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    216    216 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    668    532 S   0.0  0.0   0:00.73 /usr/sbin+
   577 root      20   0   24208    256    228 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296    264    260 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704    276    276 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   89108   4208   1176 S   0.0  0.2   0:00.48 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.51 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  111304    728    628 S   0.0  0.0   0:02.58 /usr/sbin+
   919 root      20   0 1350088   8120    276 S   0.0  0.3   0:19.93 /usr/bin/+
   920 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 telegraf  20   0 5654304  35396   5824 S   0.0  1.5   0:14.16 /usr/loca+
   922 memcach+  20   0  342400    300    300 S   0.0  0.0   0:00.55 /usr/bin/+
   924 root      20   0  153404    600    516 S   0.0  0.0   0:00.53 pure-ftpd+
   926 root      20   0  572372   1152    576 S   0.0  0.0   0:02.24 /usr/bin/+
   927 systuser  20   0  114016  15340   2768 S   0.0  0.6   0:06.10 /usr/loca+
   928 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   930 root      20   0   51508    788    624 S   0.0  0.0   0:00.31 /usr/sbin+
   932 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   933 root      20   0  445028    280    280 S   0.0  0.0   0:00.05 sw-engine+
   935 root      20   0 1277312   8976    296 S   0.0  0.4   0:24.25 /usr/bin/+
   946 root      20   0  396248    932    748 S   0.0  0.0   0:00.67 php-fpm: +
   954 named     20   0 1055796  37128   2252 S   0.0  1.5   0:12.70 /usr/sbin+
   957 root      20   0  290128   2900   1888 S   0.0  0.1   0:06.36 /usr/sbin+
   973 root      20   0  400740   3212   1048 S   0.0  0.1   0:04.02 php-fpm: +
   975 root      20   0  439788   1952   1744 S   0.0  0.1   0:00.79 php-fpm: +
   978 cpanelc+  20   0   10456   3680   2428 S   0.0  0.2   0:20.74 /usr/loca+
   980 root      20   0  388892   1036    820 S   0.0  0.0   0:00.74 php-fpm: +
   991 root      20   0  389508    972    732 S   0.0  0.0   0:00.73 php-fpm: +
   992 root      20   0 1763124 171928    892 S   0.0  7.1   0:14.03 /usr/loca+
   993 root      20   0  261288   7124   2056 S   0.0  0.3   0:05.51 cpsrvd (S+
  1065 dovenull  20   0   47524   3732   2464 S   0.0  0.2   0:00.45 dovecot/p+
  1066 dovenull  20   0   47692   4160   2672 S   0.0  0.2   0:00.29 dovecot/i+
  1067 dovecot   20   0   10320    600    488 S   0.0  0.0   0:00.07 dovecot/a+
  1068 root      20   0   10452    632    456 S   0.0  0.0   0:00.28 dovecot/l+
  1069 dovenull  20   0   47456   3836   2588 S   0.0  0.2   0:00.35 dovecot/p+
  1070 dovenull  20   0   47680   4076   2660 S   0.0  0.2   0:00.24 dovecot/i+
  1077 root      20   0   24528   2772    716 S   0.0  0.1   0:00.16 dovecot/c+
  1078 dovecot   20   0   13568    752    520 S   0.0  0.0   0:00.05 dovecot/s+
  1150 root      20   0  248140 119248   2816 S   0.0  4.9   0:05.84 /usr/loca+
  1151 systuser  20   0  157704   3076   1036 S   0.0  0.1   0:00.12 SonarPush+
  1152 dovecot   20   0   41180   1672   1176 S   0.0  0.1   0:00.62 dovecot/a+
  1153 wp-tool+  20   0  387528   5044   1768 S   0.0  0.2   0:00.27 /usr/bin/+
  1154 wp-tool+  20   0  410452  30812   1840 S   0.0  1.3   0:21.51 /usr/bin/+
  1229 root      20   0  183900   6688   3460 S   0.0  0.3   0:01.65 cpdavd - +
  1231 root      20   0  209616  12636   2664 S   0.0  0.5   0:03.05 tailwatchd
  1232 root      20   0  167452   1592    992 S   0.0  0.1   0:00.39 dnsadmin +
  1638 root      20   0  299272    956    576 S   0.0  0.0   0:00.68 php-fpm: +
  1681 root      38  18  130416   1576    828 S   0.0  0.1   0:00.06 cpanellog+
  1909 root      20   0  266984   8896    832 S   0.0  0.4   0:02.47 /usr/sbin+
  1911 root      20   0   12812    596    452 S   0.0  0.0   0:03.08 /usr/loca+
  1912 root      20   0   12732    572    464 S   0.0  0.0   0:02.69 /usr/loca+
  1913 root      20   0   12844    608    452 S   0.0  0.0   0:02.93 /usr/loca+
  1918 root      20   0   53344    360    360 S   0.0  0.0   0:00.04 /usr/loca+
  2012 root      20   0  183576  12684   1336 S   0.0  0.5   0:24.00 lfd - sle+
  3451 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  8198 root      20   0  262524 128976   2808 S   0.0  5.3   0:02.95 spamd chi+
  8199 root      20   0  249268 118736   1192 S   0.0  4.9   0:00.05 spamd chi+
  8402 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 12336 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 16956 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 17738 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 21990 nobody    20   0  277876  21088   4780 S   0.0  0.9   0:01.17 /usr/sbin+
 22288 nobody    20   0  277684  20952   4856 S   0.0  0.9   0:01.23 /usr/sbin+
 22583 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 23200 nobody    20   0  278060  20676   4536 S   0.0  0.9   0:01.09 /usr/sbin+
 23315 nobody    20   0  277612  20564   4572 S   0.0  0.8   0:00.99 /usr/sbin+
 23393 nobody    20   0  277864  20656   4528 S   0.0  0.9   0:00.99 /usr/sbin+
 23399 nobody    20   0  277952  20616   4544 S   0.0  0.9   0:01.12 /usr/sbin+
 23461 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 23492 nobody    20   0  277624  20568   4704 S   0.0  0.8   0:01.03 /usr/sbin+
 23496 nobody    20   0  277676  20740   4724 S   0.0  0.9   0:00.92 /usr/sbin+
 23509 nobody    20   0  277740  20564   4528 S   0.0  0.8   0:00.87 /usr/sbin+
 23520 nobody    20   0  277932  20712   4644 S   0.0  0.9   0:00.83 /usr/sbin+
 27166 nobody    20   0  277732  20136   4208 S   0.0  0.8   0:00.60 /usr/sbin+
 27886 nobody    20   0  277508  19796   4164 S   0.0  0.8   0:00.52 /usr/sbin+
 28519 nobody    20   0  277508  19736   4084 S   0.0  0.8   0:00.38 /usr/sbin+
 28873 nobody    20   0  277508  19840   4104 S   0.0  0.8   0:00.44 /usr/sbin+
 29113 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 29436 nobody    20   0  277844  19756   4000 S   0.0  0.8   0:00.34 /usr/sbin+
 29875 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 31033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.44 [kworker]
 31272 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 31597 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 31598 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 31629 nobody    20   0  277508  19192   3628 S   0.0  0.8   0:00.03 /usr/sbin+
 31682 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 31831 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 31887 nobody    20   0  277508  18860   3300 S   0.0  0.8   0:00.02 /usr/sbin+
 31897 mailnull  20   0   89428   5832   2548 S   0.0  0.2   0:00.00 /usr/sbin+
 31979 nigeria   20   0  400460   5356   2380 S   0.0  0.2   0:00.00 php-fpm: +
 31986 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
 31990 root      20   0  183052   2152   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 31992 root      20   0  183048   2152   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 31993 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31994 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31995 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31996 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31997 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32000 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32001 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32002 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32003 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32005 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32006 root      20   0  183048   2148   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 32007 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32009 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32021 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 32023 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 32024 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 32025 cloudsms  20   0  404052  15348  10008 S   0.0  0.6   0:00.00 /opt/cpan+
 32026 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32028 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 32029 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 32030 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 32031 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 32032 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32033 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32035 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32037 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32038 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32039 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32041 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32042 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32044 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 32047 root      20   0  188224  11112   5148 S   0.0  0.5   0:00.01 /usr/loca+
 32051 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 32054 root      20   0  114252   2416   1268 S   0.0  0.1   0:00.00 bash /usr+
 32057 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 32063 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 32065 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 32071 pactpay   20   0  480124  17684  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 32091 root      20   0  160224   2348   1632 S   0.0  0.1   0:00.00 top -n 2 +
 32092 cloudw    20   0  366220  16592  10880 S   0.0  0.7   0:00.01 /opt/cpan+
 32156 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 32169 root      20   0  114252   1148      0 R   0.0  0.0   0:00.00 bash /usr+
 94691 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
101430 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
101432 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    14:24   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    14:24   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    14:24   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    14:24   0:26  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    14:24   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    14:24   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    14:24   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   14:24   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   14:24   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   14:24   0:02  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    14:24   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   14:24   0:01  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   14:24   0:02  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ext4-rsv-conver]
root      94691  0.0  0.0      0     0 ?        S    20:40   0:00  \_ [kworker/1:1]
root     101430  0.0  0.0      0     0 ?        S    20:49   0:00  \_ [kworker/0:1]
root     101432  0.0  0.0      0     0 ?        S    20:49   0:00  \_ [kworker/u200:0]
root       3451  0.0  0.0      0     0 ?        S    20:54   0:00  \_ [kworker/0:2]
root       8402  0.0  0.0      0     0 ?        S    21:00   0:00  \_ [kworker/u200:1]
root      12336  0.0  0.0      0     0 ?        S    21:05   0:00  \_ [kworker/0:4]
root      16956  0.0  0.0      0     0 ?        S    21:11   0:00  \_ [kworker/1:3]
root      17738  0.0  0.0      0     0 ?        S    21:12   0:00  \_ [kworker/1:4]
root      22583  0.0  0.0      0     0 ?        S    21:18   0:00  \_ [kworker/1:0]
root      23461  0.0  0.0      0     0 ?        S    21:19   0:00  \_ [kworker/0:3]
root      29113  0.0  0.0      0     0 ?        S    21:26   0:00  \_ [kworker/1:2]
root      29875  0.0  0.0      0     0 ?        S    21:27   0:00  \_ [kworker/0:0]
root      31272  0.0  0.0      0     0 ?        S    21:29   0:00  \_ [kworker/1:5]
root          1  0.1  0.1  44280  3564 ?        Ss   14:24   0:35 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.0  40244  2176 ?        Ss   14:24   0:12 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444   620 ?        Ss   14:24   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   628 ?        S<sl 14:24   0:01 /sbin/auditd
root        512  0.0  0.0  21540   608 ?        Ss   14:24   0:00 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780   432 ?        Ss   14:24   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1412 ?        Ss   14:24   0:05 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1264844 1912 ?        Ssl  14:24   0:21 /usr/sbin/nscd
root        524  0.0  0.0  52852   684 ?        Ss   14:24   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240  1056 ?        Ssl  14:24   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.2 224148  6116 ?        Ss   14:24   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58740  1624 ?        Ss   14:24   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256   248 ?        Ss   14:24   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    92 ?        Ss   14:24   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   216 ?        Ssl  14:24   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   668 ?        Ss   14:24   0:00 /usr/sbin/crond -n
root      31990  0.0  0.0 183052  2152 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      32030  0.0  0.0 113284  1212 ?        Ss   21:30   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      32054  0.0  0.0 114256  2416 ?        S    21:30   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      32172  0.0  0.0 114256  1152 ?        R    21:30   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      31992  0.0  0.0 183048  2152 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      32031  0.0  0.0 113284  1212 ?        Ss   21:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      32051  0.0  0.0 108052   360 ?        S    21:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      32057  0.0  0.0 113288  1516 ?        S    21:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      32170  0.0  0.0 153840  2092 ?        R    21:30   0:00  |               \_ ps auxf
root      31993  0.0  0.0 183048  2156 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      32032  0.0  0.0  20164   804 ?        Rs   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      31994  0.0  0.0 183048  2156 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      32026  0.0  0.0  20164   804 ?        Rs   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      31995  0.0  0.0 183048  2156 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      32039  0.0  0.0  20164   808 ?        Ss   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      31996  0.0  0.0 183048  2156 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      32037  0.0  0.0  20164   808 ?        Ss   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      31997  0.0  0.0 183048  2156 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      32038  0.0  0.0  20164   980 ?        Ss   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      32171  0.0  0.1  38124  4624 ?        R    21:30   0:00  |       \_ /usr/local/cpanel/bin/setupvirtfs 1014
root      32000  0.0  0.0 183048  2156 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      32041  0.0  0.0  20164   808 ?        Ss   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      32001  0.0  0.0 183048  2152 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      32021  0.0  0.0  20164   968 ?        Ss   21:30   0:00  |   \_ jailshell (cloudsms) [32023] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  32023  0.0  0.0  20164   260 ?        S    21:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  32024  0.0  0.0 113284  1212 ?        S    21:30   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  32025  0.0  0.6 404052 15348 ?        S    21:30   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      32002  0.0  0.0 183048  2152 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      32035  0.0  0.0  20164   804 ?        Ss   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      32003  0.0  0.0 183048  2148 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      32042  0.0  0.0  20164   804 ?        Ss   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      32005  0.0  0.0 183048  2148 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      32033  0.0  0.0  20164   804 ?        Rs   21:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      32006  0.0  0.0 183048  2148 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      32029  0.0  0.0 113284  1212 ?        Ss   21:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      32047  1.0  0.4 188224 11112 ?        S    21:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      32091  0.0  0.0 160224  2348 ?        S    21:30   0:00  |           \_ top -n 2 -b -c
root      32007  0.0  0.0 183048  2152 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      32028  0.0  0.0  20164   964 ?        Ss   21:30   0:00  |   \_ jailshell (pactpay) [32063] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   32063  0.0  0.0  20164   260 ?        S    21:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   32071  1.0  0.7 480124 17684 ?        S    21:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      32009  0.0  0.0 183048  2148 ?        S    21:30   0:00  \_ /usr/sbin/CROND -n
root      32044  0.0  0.0  20164   968 ?        Ss   21:30   0:00      \_ jailshell (nigeria) [32065] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   32065  0.0  0.0  20164   264 ?        S    21:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   32074  5.0  0.6 404052 16140 ?        S    21:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208   256 ?        Ss   14:24   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296   264 tty1     Ss+  14:24   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704   276 ttyS0    Ss+  14:24   0:00 /bin/bash
mailnull    622  0.0  0.1  89108  4208 ?        Ss   14:24   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  31897  0.0  0.2  89428  5832 ?        S    21:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   728 ?        Ss   14:24   0:02 /usr/sbin/sshd -D
root      31597  0.0  0.1 111304  4272 ?        Ss   21:29   0:00  \_ sshd: [accepted]
sshd      31598  0.0  0.1 115644  2632 ?        S    21:29   0:00      \_ sshd: [net]
root        919  0.0  0.3 1350088 8120 ?        Ssl  14:24   0:19 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864    72 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  1.4 5654304 35396 ?       SLsl 14:24   0:14 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400   300 ?        Ssl  14:24   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   600 ?        Ss   14:24   0:00 pure-ftpd (SERVER)
root        926  0.0  0.0 572372  1152 ?        Ssl  14:24   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.6 114016 15340 ?        Ssl  14:24   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    56 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132    44 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508   788 ?        Ss   14:24   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.1  47524  3732 ?        S    14:24   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.1  47692  4160 ?        S    14:24   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320   600 ?        S    14:24   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   632 ?        S    14:24   0:00  \_ dovecot/log
dovenull   1069  0.0  0.1  47456  3836 ?        S    14:24   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.1  47680  4076 ?        S    14:24   0:00  \_ dovecot/imap-login
root       1077  0.0  0.1  24528  2772 ?        S    14:24   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568   752 ?        S    14:24   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1672 ?        S    14:24   0:00  \_ dovecot/auth
root      31682  0.0  0.1  60820  4512 ?        S    21:29   0:00  \_ dovecot/lmtp
root      31831  0.0  0.1  41052  2728 ?        S    21:29   0:00  \_ dovecot/auth -w
systuser    932  0.0  0.0 113932    68 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 445028   280 ?        Ss   14:24   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        935  0.0  0.3 1277312 8976 ?        Ssl  14:24   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248   932 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       954  0.0  1.5 1055796 37128 ?       Ssl  14:24   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.1 290128  2900 ?        Ssl  14:24   0:06 /usr/sbin/rsyslogd -n
root        973  0.0  0.1 400740  3212 ?        Ss   14:24   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   31979  0.0  0.2 400460  5356 ?        S    21:29   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 439788  1952 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10456  3680 ?        Rs   14:24   0:20 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892  1036 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   972 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  7.1 1763124 171928 ?      Ssl  14:24   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.2 261288  7124 ?        Ss   14:24   0:05 cpsrvd (SSL) - waiting for connections                   
root      31986  0.0  0.0      0     0 ?        Z    21:30   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root       1150  0.0  4.9 248140 119248 ?       Ss   14:24   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  5.3 262524 128976 ?       S    14:30   0:02  \_ spamd child
root       8199  0.0  4.9 249268 118736 ?       S    14:30   0:00  \_ spamd child
systuser   1151  0.0  0.1 157704  3076 ?        S    14:24   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1153  0.0  0.2 387528  5044 ?        Ss   14:24   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1154  0.0  1.2 410452 30812 ?        Ss   14:24   0:21 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1229  0.0  0.2 183900  6688 ?        Ss   14:24   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1231  0.0  0.5 209616 12636 ?        Ss   14:24   0:03 tailwatchd
root       1232  0.0  0.0 167452  1592 ?        Ss   14:24   0:00 dnsadmin - dormant mode
root       1638  0.0  0.0 299272   956 ?        Ss   14:24   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1681  0.0  0.0 130416  1576 ?        SN   14:24   0:00 cpanellogd - sleeping for logs
mysql      1785  1.5 10.9 1458332 263892 ?      Sl   14:24   6:23 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.3 266984  8896 ?        Ss   14:24   0:02 /usr/sbin/httpd -k start
root       1911  0.0  0.0  12812   596 ?        S    14:24   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1912  0.0  0.0  12732   572 ?        S    14:24   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1913  0.0  0.0  12844   608 ?        S    14:24   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1918  0.0  0.0  53344   360 ?        S    14:24   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    21990  0.1  0.8 277876 21088 ?        S    21:17   0:01  \_ /usr/sbin/httpd -k start
nobody    22288  0.1  0.8 277684 20952 ?        S    21:17   0:01  \_ /usr/sbin/httpd -k start
nobody    23200  0.1  0.8 278060 20676 ?        S    21:18   0:01  \_ /usr/sbin/httpd -k start
nobody    23315  0.1  0.8 277612 20564 ?        S    21:18   0:00  \_ /usr/sbin/httpd -k start
nobody    23393  0.1  0.8 277864 20656 ?        S    21:19   0:00  \_ /usr/sbin/httpd -k start
nobody    23399  0.1  0.8 277952 20616 ?        S    21:19   0:01  \_ /usr/sbin/httpd -k start
nobody    23492  0.1  0.8 277624 20568 ?        S    21:19   0:01  \_ /usr/sbin/httpd -k start
nobody    23496  0.1  0.8 277676 20740 ?        S    21:19   0:00  \_ /usr/sbin/httpd -k start
nobody    23509  0.1  0.8 277740 20564 ?        R    21:19   0:00  \_ /usr/sbin/httpd -k start
cloudw    32092  0.0  0.6 366220 16856 ?        S    21:30   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    23520  0.1  0.8 277932 20712 ?        S    21:19   0:00  \_ /usr/sbin/httpd -k start
nobody    27166  0.1  0.8 277732 20136 ?        S    21:23   0:00  \_ /usr/sbin/httpd -k start
nobody    27886  0.1  0.8 277508 19796 ?        S    21:24   0:00  \_ /usr/sbin/httpd -k start
nobody    28519  0.1  0.8 277508 19736 ?        S    21:25   0:00  \_ /usr/sbin/httpd -k start
nobody    28873  0.1  0.8 277508 19840 ?        S    21:25   0:00  \_ /usr/sbin/httpd -k start
nobody    29436  0.1  0.8 277844 19756 ?        S    21:26   0:00  \_ /usr/sbin/httpd -k start
nobody    31629  0.1  0.7 277508 19192 ?        S    21:29   0:00  \_ /usr/sbin/httpd -k start
nobody    31887  0.1  0.7 277508 18860 ?        S    21:29   0:00  \_ /usr/sbin/httpd -k start
root       2012  0.0  0.5 183576 12684 ?        Ss   14:24   0:24 lfd - sleeping
oysipao+  31033  0.0  0.0   3148   416 ?        Ss   15:00   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152   424 ?        S    15:00   0:00  \_ [kworker]
## mysql stats
Uptime: 25536  Threads: 3  Questions: 2461877  Slow queries: 0  Opens: 7438  Flush tables: 1  Open tables: 2000  Queries per second avg: 96.408
*************************** 1. row ***************************
     Id: 34815
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 34816
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 34822
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.248.90.230 TIME_WAIT
      1 ::1 TIME_WAIT
      1 202.59.80.192 TIME_WAIT
      1 47.82.15.243 TIME_WAIT
      1 66.249.70.6 TIME_WAIT
      1 91.90.142.7 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 21:30:02 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 hours 5 minutes 31 seconds
   Server load: 0.16 0.30 0.29
   Total accesses: 141416 - Total Traffic: 3.1 GB - Total Duration: 78276172
   CPU Usage: u9.1 s5.94 cu1703.45 cs1444.68 - 12.4% CPU load
   5.54 requests/sec - 128.2 kB/second - 23.2 kB/request - 553.517 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

KKKK_W__.K.............._.....W........R.....K........_..._.....
.......K........._..............................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-0  27886 1/167/6828 K 1.93 1     326 3853142 31.0  2.13  153.67 66.249.70.4    http/1.1 test.cloudware.ng:443      GET /3002389258?goodscode=2998455042 HTTP/1.1
   1-0  23200 3/193/6710 K 5.01 4     282 3984175 85.1  4.55  155.00 66.249.70.1    http/1.1 test.cloudware.ng:443      GET /1274116039?goodscode=1272446926 HTTP/1.1
   2-0  27166 1/112/6641 K 2.69 0     343 3720589 31.1  2.62  152.30 66.249.70.3    http/1.1 test.cloudware.ng:443      GET /3023542145?goodscode=3019580206 HTTP/1.1
   3-0  28519 2/72/6449  K 1.71 2     239 3581142 59.8  1.67  148.09 66.249.70.5    http/1.1 test.cloudware.ng:443      GET /1611641018?goodscode=1609529538 HTTP/1.1
   4-0  28873 0/77/6856  _ 2.04 1     273 3964668 0.0   1.94  151.67 66.249.70.5    http/1.1 test.cloudware.ng:443      GET /1293795980?goodscode=1292101074 HTTP/1.1
   5-0  29436 0/62/6643  W 1.58 0     0   3646085 0.0   1.47  145.01 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   6-0  31629 0/6/6613   _ 0.12 0     0   3574826 0.0   0.14  149.50 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   7-0  21990 0/211/6493 _ 5.63 2     273 3565032 0.0   5.11  142.92 66.249.70.1    http/1.1 test.cloudware.ng:443      GET /210956810?goodscode=0210681090 HTTP/1.1
   8-0  -     0/0/6352   . 0.00 6     0   3456047 0.0   0.00  139.27 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-0  31887 3/3/6059   K 0.06 3     353 3316321 83.7  0.08  158.58 66.249.70.8    http/1.1 test.cloudware.ng:443      GET /214298257?goodscode=0214018158 HTTP/1.1
   10-0 -     0/0/5867   . 0.00 601   0   3278914 0.0   0.00  133.22 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-0 -     0/0/6272   . 0.00 615   0   3310522 0.0   0.00  138.70 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-0 -     0/0/5959   . 0.00 645   0   3417836 0.0   0.00  130.43 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 -     0/0/6046   . 0.00 644   0   3327454 0.0   0.00  136.11 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 -     0/0/5383   . 0.00 564   0   2911024 0.0   0.00  122.50 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 -     0/0/5624   . 0.00 567   0   3184179 0.0   0.00  123.44 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 -     0/0/5396   . 0.00 640   0   2756290 0.0   0.00  117.34 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -     0/0/4494   . 0.00 646   0   2433851 0.0   0.00  99.40  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/4383   . 0.00 654   4   2357840 0.0   0.00  101.81 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/4379   . 0.00 634   0   2236359 0.0   0.00  92.71  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/3075   . 0.00 650   0   1752238 0.0   0.00  68.43  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/3174   . 0.00 600   0   1747550 0.0   0.00  72.30  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/3128   . 0.00 604   0   1840465 0.0   0.00  77.67  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/3355   . 0.00 652   0   1815399 0.0   0.00  75.72  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 22288 0/241/1498 _ 5.61 1     432 1097441 0.0   5.83  40.08  66.249.70.3    http/1.1 test.cloudware.ng:443      GET /214534823?goodscode=0214254414 HTTP/1.1
   25-0 -     0/0/1086   . 0.00 648   0   581390  0.0   0.00  24.82  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/481    . 0.00 110   0   265808  0.0   0.00  11.34  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/241    . 0.00 631   0   132096  0.0   0.00  4.63   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/492    . 0.00 636   0   267414  0.0   0.00  11.56  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/216    . 0.00 656   0   111057  0.0   0.00  4.85   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 23315 3/190/377  W 4.29 0     0   202996  84.8  4.90  9.22   66.249.70.6    http/1.1 test.cloudware.ng:443      GET /199899139?goodscode=0199637910 HTTP/1.1
   31-0 -     0/0/353    . 0.00 593   0   138900  0.0   0.00  5.79   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/189    . 0.00 651   0   108761  0.0   0.00  3.95   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/134    . 0.00 628   0   66771   0.0   0.00  2.59   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/578    . 0.00 635   0   338609  0.0   0.00  11.09  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/210    . 0.00 605   0   111087  0.0   0.00  2.39   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/11     . 0.00 612   0   69      0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/10     . 0.00 618   0   697     0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/19     . 0.00 610   0   7280    0.0   0.00  0.31   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 23393 0/186/188  R 4.55 13    247 124805  0.0   4.19  4.20   194.233.93.96  http/1.1 health.oyostate.gov.ng:443
   40-0 -     0/0/10     . 0.00 638   0   984     0.0   0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/25     . 0.00 621   0   7716    0.0   0.00  0.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/114    . 0.00 223   0   69715   0.0   0.00  2.97   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/99     . 0.00 657   0   53564   0.0   0.00  2.39   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/29     . 0.00 642   0   3875    0.0   0.00  0.36   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 23399 3/205/208  K 5.51 3     348 117221  87.9  4.90  4.92   66.249.70.2    http/1.1 test.cloudware.ng:443      GET /1599246196?goodscode=1597150962 HTTP/1.1
   46-0 -     0/0/13     . 0.00 606   0   2042    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/11     . 0.00 626   0   298     0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/12     . 0.00 619   0   996     0.0   0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/19     . 0.00 637   0   14155   0.0   0.00  1.66   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/441    . 0.00 624   0   253162  0.0   0.00  9.85   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/27     . 0.00 598   0   11768   0.0   0.00  0.51   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/10     . 0.00 614   0   110     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/83     . 0.00 620   0   38860   0.0   0.00  1.67   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 23492 0/195/197  _ 4.96 1     8   104707  0.0   4.53  4.56   34.234.200.207 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/blog/2019elections
   55-0 -     0/0/315    . 0.00 608   0   185658  0.0   0.00  11.71  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/28     . 0.00 653   0   15251   0.0   0.00  0.63   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/9      . 0.00 623   0   22      0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 23496 0/171/175  _ 4.18 0     0   126331  0.0   4.01  4.04   127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   59-0 -     0/0/12     . 0.00 630   0   1372    0.0   0.00  0.15   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/136    . 0.00 633   0   67729   0.0   0.00  3.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/13     . 0.00 607   0   104     0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/113    . 0.00 252   0   68672   0.0   0.00  2.82   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/12     . 0.00 609   0   168     0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/4      . 0.00 658   0   71      0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/5      . 0.00 655   0   600     0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/12     . 0.00 602   0   1300    0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/7      . 0.00 643   0   52      0.0   0.00  0.02   164.90.208.56  http/1.1 ekoemail.com:443           GET /info.php HTTP/1.1
   68-0 -     0/0/13     . 0.00 613   0   95      0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/82     . 0.00 639   0   33102   0.0   0.00  1.78   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/55     . 0.00 452   0   49127   0.0   0.00  1.14   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 23509 5/159/258  K 4.13 0     388 152209  141.4 3.96  6.31   66.249.70.7    http/1.1 test.cloudware.ng:443      GET /1611715226?goodscode=1609603650 HTTP/1.1
   72-0 -     0/0/61     . 0.00 632   0   34029   0.0   0.00  1.41   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/127    . 0.00 599   0   69913   0.0   0.00  2.99   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/26     . 0.00 649   0   14793   0.0   0.00  0.60   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/11     . 0.00 625   0   1768    0.0   0.00  0.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/147    . 0.00 111   0   77270   0.0   0.00  3.25   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/12     . 0.00 622   0   1934    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/14     . 0.00 647   0   5099    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/10     . 0.00 629   0   1764    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/19     . 0.00 627   0   6786    0.0   0.00  0.30   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 23520 0/161/165  _ 4.04 2     367 90074   0.0   3.58  3.66   66.249.70.4    http/1.1 test.cloudware.ng:443      GET /2995240725?goodscode=2991315878 HTTP/1.1
   82-0 -     0/0/3      . 0.00 14545 0   23      0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   83-0 -     0/0/3      . 0.00 14519 0   644     0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   84-0 -     0/0/2      . 0.00 14537 0   3       0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   85-0 -     0/0/7      . 0.00 14504 0   3861    0.0   0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 806
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...56)
   index usage: 14%, cache usage: 19%
   total entries stored since starting: 75343
   total entries replaced since starting: 0
   total entries expired since starting: 74504
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 95 miss
   total removes since starting: 33 hit, 16 miss
Youez - 2016 - github.com/yon3zu
LinuXploit