403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.04.06.txt
 ## mem threshold exceeded
 ## swap threshold exceeded
## server overview
2025-11-21.04.06 load[1] mem[81/43] mysql[6/6] httpd[26]
              total        used        free      shared  buff/cache   available
Mem:           2363        1858          71          54         433         288
Swap:          1999         987        1012
 04:06:02 up 31 min,  0 users,  load average: 1.18, 0.67, 0.44
## system overview
top - 04:06:02 up 31 min,  0 users,  load average: 1.18, 0.67, 0.44
Tasks: 216 total,   7 running, 208 sleeping,   0 stopped,   1 zombie
%Cpu(s): 57.6 us, 39.4 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,    84696 free,  1902348 used,   433256 buff/cache
KiB Swap:  2047996 total,  1035772 free,  1012224 used.   297160 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1764 mysql     20   0 1457284 204028   3548 S  81.2  8.4   0:23.59 /usr/sbin+
    36 root      20   0       0      0      0 S  12.5  0.0   0:06.76 [kswapd0]
 28439 cloudw    20   0  353712  15972  10484 S  12.5  0.7   0:00.02 /opt/cpan+
   474 dbus      20   0   58748   1336    628 S   6.2  0.1   0:01.03 /usr/bin/+
 26755 nobody    20   0  277908  19428   4112 S   6.2  0.8   0:00.21 /usr/sbin+
 28282 cloudw    20   0  573920 109300   6892 R   6.2  4.5   0:00.52 php-fpm: +
 28403 nigeria   20   0  404052  16136  10384 S   6.2  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44276   3272   1452 S   0.0  0.1   0:03.22 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 R   0.0  0.0   0:00.12 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:01.86 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:00.34 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   131 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:00.52 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:00.62 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40244   2076   1764 S   0.0  0.1   0:01.51 /usr/lib/+
   385 root      20   0   45356    240    104 S   0.0  0.0   0:00.37 /usr/lib/+
   410 root      16  -4   55532    128     16 S   0.0  0.0   0:00.25 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    140     96 S   0.0  0.0   0:00.00 /usr/sbin+
   473 root      20   0  224144   5728    696 S   0.0  0.2   0:00.10 queueproc+
   478 nscd      20   0  861368   1292    664 S   0.0  0.1   0:01.55 /usr/sbin+
   483 rpc       20   0   69256    188     80 S   0.0  0.0   0:00.01 /sbin/rpc+
   504 root      20   0       0      0      0 D   0.0  0.0   0:00.03 [kworker/+
   505 polkitd   20   0  610540    900    452 S   0.0  0.0   0:00.28 /usr/lib/+
   507 root      20   0   24696   1156    812 R   0.0  0.0   0:00.47 /usr/lib/+
   509 root      20   0   21540    396    288 S   0.0  0.0   0:00.04 /usr/sbin+
   514 root      20   0   52852    244    184 S   0.0  0.0   0:00.00 /usr/sbin+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   528 root      20   0    4388     48     44 S   0.0  0.0   0:00.00 /usr/sbin+
   562 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    444    312 S   0.0  0.0   0:00.05 /usr/sbin+
   580 root      20   0  108296     68     64 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   612 mailnull  20   0   89112   3808    852 S   0.0  0.2   0:00.06 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:01.67 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   939 root      20   0 1763340 656028    300 S   0.0 27.1   0:14.58 /usr/loca+
   942 named     20   0  990260  28628   1076 S   0.0  1.2   0:01.51 /usr/sbin+
   949 systuser  20   0  111608   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   952 systuser  20   0   11540     56      0 S   0.0  0.0   0:00.00 /usr/loca+
   953 root      20   0   51508    480    320 S   0.0  0.0   0:00.05 /usr/sbin+
   954 root      20   0 1277056  10084     72 S   0.0  0.4   0:21.85 /usr/bin/+
   955 telegraf  20   0 5654048  32824    384 S   0.0  1.4   0:01.23 /usr/loca+
   956 root      20   0  445028   3232   3124 S   0.0  0.1   0:00.06 sw-engine+
   960 root      20   0  396248    540    364 S   0.0  0.0   0:00.11 php-fpm: +
   963 systuser  20   0  114016  12148   2144 S   0.0  0.5   0:00.55 /usr/loca+
   964 root      20   0  153404    308    228 S   0.0  0.0   0:00.03 pure-ftpd+
   965 cpanelc+  20   0    9948   2872   2316 S   0.0  0.1   0:01.51 /usr/loca+
   966 root      20   0  111304    416    312 S   0.0  0.0   0:00.38 /usr/sbin+
   967 root      20   0 1276356   9392     44 S   0.0  0.4   0:30.53 /usr/bin/+
   970 systuser  20   0   11348     40      0 S   0.0  0.0   0:00.00 /usr/loca+
   978 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.04 /usr/bin/+
   979 root      20   0  261028   4696   1000 S   0.0  0.2   0:00.40 cpsrvd (S+
   980 root      20   0  572372    704    236 S   0.0  0.0   0:00.25 /usr/bin/+
   984 root      20   0  389508    264    176 S   0.0  0.0   0:00.10 php-fpm: +
   998 root      20   0  388892    576    480 S   0.0  0.0   0:00.13 php-fpm: +
  1001 root      20   0  400740   3076    640 S   0.0  0.1   0:00.36 php-fpm: +
  1002 systuser  20   0  112524   2064      0 S   0.0  0.1   0:00.00 /usr/loca+
  1003 root      20   0  224592   2632   1184 S   0.0  0.1   0:00.68 /usr/sbin+
  1010 root      20   0  439788  11356  11056 S   0.0  0.5   0:00.15 php-fpm: +
  1097 dovenull  20   0   46912   1764   1044 S   0.0  0.1   0:00.03 dovecot/p+
  1098 dovenull  20   0   47056   2600   1748 S   0.0  0.1   0:00.02 dovecot/i+
  1099 dovecot   20   0   10320    396    280 S   0.0  0.0   0:00.00 dovecot/a+
  1100 root      20   0   10452    624    452 S   0.0  0.0   0:00.02 dovecot/l+
  1101 dovenull  20   0   47064   2356   1660 S   0.0  0.1   0:00.07 dovecot/p+
  1102 dovenull  20   0   47056   2772   1932 S   0.0  0.1   0:00.02 dovecot/i+
  1106 root      20   0   24396   2036    492 S   0.0  0.1   0:00.03 dovecot/c+
  1107 dovecot   20   0   13568    620    404 S   0.0  0.0   0:00.00 dovecot/s+
  1135 root      20   0  247868 117568   1092 S   0.0  4.9   0:03.05 /usr/loca+
  1157 dovecot   20   0   41056   1332    924 S   0.0  0.1   0:00.05 dovecot/a+
  1197 systuser  20   0  157700   2204    160 S   0.0  0.1   0:00.01 SonarPush+
  1199 wp-tool+  20   0  387528  12848   1260 S   0.0  0.5   0:00.11 /usr/bin/+
  1200 wp-tool+  20   0  412368  32332   1548 S   0.0  1.3   0:00.84 /usr/bin/+
  1281 root      20   0  262228  22048   4184 S   0.0  0.9   0:00.17 cpdavd - +
  1283 root      20   0  167452   1336    736 S   0.0  0.1   0:00.07 dnsadmin +
  1285 root      20   0  209216  11408   1916 S   0.0  0.5   0:00.38 tailwatchd
  1709 root      20   0  299272    648    268 S   0.0  0.0   0:00.04 php-fpm: +
  1717 root      38  18  130416   1432    708 S   0.0  0.1   0:00.00 cpanellog+
  1930 root      20   0  267052   8100    716 S   0.0  0.3   0:00.30 /usr/sbin+
  1931 root      20   0   12824    384    268 S   0.0  0.0   0:00.20 /usr/loca+
  1932 root      20   0   12732    296    220 S   0.0  0.0   0:00.16 /usr/loca+
  1933 root      20   0   12844    352    228 D   0.0  0.0   0:00.19 /usr/loca+
  1934 root      20   0   53340    100    100 S   0.0  0.0   0:00.05 /usr/loca+
  2045 root      20   0  181260   9760   1176 S   0.0  0.4   0:01.93 lfd - sle+
  2355 root      20   0       0      0      0 R   0.0  0.0   0:00.07 [kworker/+
  7259 root      20   0  249128 118812   1168 S   0.0  4.9   0:00.13 spamd chi+
  7260 root      20   0  247868 116808    368 S   0.0  4.8   0:00.00 spamd chi+
  9147 nobody    20   0  277904  20388   4552 S   0.0  0.8   0:01.75 /usr/sbin+
 10126 nobody    20   0  277908  20636   4668 S   0.0  0.9   0:01.91 /usr/sbin+
 10177 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10955 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12564 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 14224 nobody    20   0  277928  20596   4724 S   0.0  0.9   0:01.50 /usr/sbin+
 15852 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21281 nobody    20   0  277584  19640   4416 S   0.0  0.8   0:00.82 /usr/sbin+
 21298 nobody    20   0  277672  19952   4492 S   0.0  0.8   0:00.63 /usr/sbin+
 21299 nobody    20   0  278004  20164   4440 S   0.0  0.8   0:00.58 /usr/sbin+
 22186 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 23203 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 23216 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.00 [kworker]
 24071 root      20   0  123364    640    412 S   0.0  0.0   0:00.00 /usr/sbin+
 24579 nobody    20   0  277600  19348   4208 S   0.0  0.8   0:00.45 /usr/sbin+
 24727 nobody    20   0  277556  19492   4272 S   0.0  0.8   0:00.30 /usr/sbin+
 25674 nobody    20   0  277644  19372   4252 S   0.0  0.8   0:00.28 /usr/sbin+
 25689 nobody    20   0  277536  19292   4132 S   0.0  0.8   0:00.34 /usr/sbin+
 25690 nobody    20   0  277720  19664   4288 S   0.0  0.8   0:00.33 /usr/sbin+
 25701 nobody    20   0  277520  18712   3756 S   0.0  0.8   0:00.19 /usr/sbin+
 25703 nobody    20   0  277784  19456   4140 S   0.0  0.8   0:00.28 /usr/sbin+
 25912 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26660 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26756 nobody    20   0  277520  18964   3924 S   0.0  0.8   0:00.23 /usr/sbin+
 27471 nobody    20   0  277520  18372   3364 S   0.0  0.8   0:00.07 /usr/sbin+
 27619 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 27809 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 27884 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 27928 root      20   0   41052   2688   2048 S   0.0  0.1   0:00.00 dovecot/a+
 27945 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 28027 nobody    20   0  277900  18656   3516 S   0.0  0.8   0:00.03 /usr/sbin+
 28037 nobody    20   0  277520  18324   3360 S   0.0  0.8   0:00.02 /usr/sbin+
 28038 nobody    20   0  277520  18080   3176 S   0.0  0.7   0:00.05 /usr/sbin+
 28050 nobody    20   0  277580  18876   3812 S   0.0  0.8   0:00.05 /usr/sbin+
 28051 nobody    20   0  277908  18768   3608 S   0.0  0.8   0:00.05 /usr/sbin+
 28052 nobody    20   0  277584  18312   3336 S   0.0  0.8   0:00.03 /usr/sbin+
 28053 nobody    20   0  277520  18552   3560 S   0.0  0.8   0:00.05 /usr/sbin+
 28200 nobody    20   0  277908  18776   3652 S   0.0  0.8   0:00.03 /usr/sbin+
 28242 wp-tool+  20   0  445028    316    192 S   0.0  0.0   0:00.00 sw-engine+
 28247 root      20   0  111304   4448   3416 S   0.0  0.2   0:00.00 sshd: [ac+
 28248 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 28262 mailnull  20   0   89492   5608   2452 S   0.0  0.2   0:00.00 /usr/sbin+
 28271 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 28272 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 28296 healtho+  20   0  443236  50192   4100 S   0.0  2.1   0:00.40 php-fpm: +
 28317 nobody    20   0  277764  18660   3632 S   0.0  0.8   0:00.01 /usr/sbin+
 28319 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 28320 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 28323 nigeria   20   0  400460   5376   2160 S   0.0  0.2   0:00.00 php-fpm: +
 28324 oyotech+  20   0  389236   6188   2780 S   0.0  0.3   0:00.00 php-fpm: +
 28325 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 28335 root      20   0  162436   5832   4340 S   0.0  0.2   0:00.01 sshd: roo+
 28336 cloudw    20   0  446108  52316   4228 S   0.0  2.2   0:00.41 php-fpm: +
 28337 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 28346 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 28347 root      20   0  183040   2212   1636 R   0.0  0.1   0:00.00 /usr/sbin+
 28348 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28350 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28351 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28352 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28353 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28354 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28356 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28357 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28358 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28360 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 28362 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 28364 nobody    20   0  277236  17396   2860 S   0.0  0.7   0:00.00 /usr/sbin+
 28366 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 28367 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 28368 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 28369 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 28372 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 28373 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 28374 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 28375 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 28376 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 28378 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 28379 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 28385 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 28386 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 28387 cloudw    20   0  353712  15972  10484 S   0.0  0.7   0:00.01 /opt/cpan+
 28390 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 28392 pactpay   20   0  480124  17676  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 28397 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 28398 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 28435 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:34   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    03:34   0:01  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [watchdogd]
root         36  0.3  0.0      0     0 ?        S    03:34   0:06  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [deferwq]
root        131  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [xprtiod]
root        504  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/0:3]
root        627  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   03:34   0:01  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root       2355  0.0  0.0      0     0 ?        S    03:35   0:00  \_ [kworker/1:3]
root      10177  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/u200:0]
root      10955  0.0  0.0      0     0 ?        S    03:45   0:00  \_ [kworker/0:1]
root      12564  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [kworker/1:1]
root      15852  0.0  0.0      0     0 ?        S    03:51   0:00  \_ [kworker/0:2]
root      22186  0.0  0.0      0     0 ?        S    03:59   0:00  \_ [kworker/1:0]
root      25912  0.0  0.0      0     0 ?        S    04:03   0:00  \_ [kworker/0:0]
root      26660  0.0  0.0      0     0 ?        S    04:04   0:00  \_ [kworker/0:4]
root      27619  0.0  0.0      0     0 ?        S    04:05   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44276  3272 ?        Ss   03:34   0:03 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.0  40244  2076 ?        Ss   03:34   0:01 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45356   240 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   128 ?        S<sl 03:34   0:00 /sbin/auditd
root        470  0.0  0.0 152780   140 ?        Ss   03:34   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        473  0.0  0.2 224144  5728 ?        Ss   03:34   0:00 queueprocd - waiting up to 60s to process a task
dbus        474  0.0  0.0  58748  1336 ?        Ss   03:34   0:01 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        478  0.0  0.0 861368  1292 ?        Ssl  03:34   0:01 /usr/sbin/nscd
rpc         483  0.0  0.0  69256   188 ?        Ss   03:34   0:00 /sbin/rpcbind -w
polkitd     505  0.0  0.0 610540   900 ?        Ssl  03:34   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        507  0.0  0.0  24696  1156 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-logind
root        509  0.0  0.0  21540   396 ?        Ss   03:34   0:00 /usr/sbin/irqbalance --foreground
root        514  0.0  0.0  52852   244 ?        Ss   03:34   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0 195208     0 ?        Ssl  03:34   0:00 /usr/sbin/gssproxy -D
root        528  0.0  0.0   4388    48 ?        Ss   03:34   0:00 /usr/sbin/acpid
root        562  0.0  0.0  24208     0 ?        Ss   03:34   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   444 ?        Ss   03:34   0:00 /usr/sbin/crond -n
root      28346  0.0  0.0 183044  2148 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root      28367  0.0  0.0 113284  1212 ?        Ss   04:06   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      28386  0.0  0.0 108052   356 ?        S    04:06   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      28397  0.0  0.0 113288  1520 ?        S    04:06   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      28447  0.0  0.0 153840  2096 ?        R    04:06   0:00  |               \_ ps auxf
root      28348  0.0  0.0 183044  2152 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root      28373  0.0  0.0  20164   808 ?        Ss   04:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      28350  0.0  0.0 183044  2152 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root      28378  0.0  0.0  20164   804 ?        Ss   04:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      28351  0.0  0.0 183044  2148 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root      28366  0.0  0.0  20164   808 ?        Ss   04:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      28352  0.0  0.0 183044  2148 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root      28375  0.0  0.0  20164   984 ?        Ss   04:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      28353  0.0  0.0 183044  2148 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root      28368  0.0  0.0  20164   804 ?        Ss   04:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      28354  0.0  0.0 183044  2148 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root      28374  0.0  0.0  20164   804 ?        Ss   04:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      28356  0.0  0.0 183044  2144 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root      28372  0.0  0.0  20164   808 ?        Ss   04:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      28357  0.0  0.0 183044  2144 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root      28369  0.0  0.0  20164   988 ?        Ss   04:06   0:00  |   \_ jailshell (cloudsms) [28449] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  28449  0.0  0.0  20164   260 ?        S    04:06   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      28358  0.0  0.0 183044  2144 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root      28379  0.0  0.0  20164   968 ?        Ss   04:06   0:00  |   \_ jailshell (pactpay) [28390] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   28390  0.0  0.0  20164   256 ?        S    04:06   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   28392  0.0  0.7 480124 17676 ?        S    04:06   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      28360  0.0  0.0 183044  2144 ?        S    04:06   0:00  \_ /usr/sbin/CROND -n
root      28376  0.0  0.0  20164   968 ?        Ss   04:06   0:00      \_ jailshell (nigeria) [28398] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   28398  0.0  0.0  20164   256 ?        S    04:06   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   28403  0.0  0.6 404052 16136 ?        S    04:06   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        580  0.0  0.0 108296    68 tty1     Ss+  03:34   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704    24 ttyS0    Ss+  03:34   0:00 /bin/bash
mailnull    612  0.0  0.1  89112  3808 ?        Ss   03:34   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  28262  0.0  0.2  89492  5608 ?        S    04:05   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        939  0.7 27.1 1763340 656028 ?      Ssl  03:34   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
named       942  0.0  1.1 990260 28628 ?        Ssl  03:34   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    949  0.0  0.0 111608  1600 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    952  0.0  0.0  11540    56 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        953  0.0  0.0  51508   480 ?        Ss   03:34   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.0  46912  1764 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47056  2600 ?        S    03:34   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   396 ?        S    03:34   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   624 ?        S    03:34   0:00  \_ dovecot/log
dovenull   1101  0.0  0.0  47064  2356 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.1  47056  2772 ?        S    03:34   0:00  \_ dovecot/imap-login
root       1106  0.0  0.0  24396  2036 ?        S    03:34   0:00  \_ dovecot/config
dovecot    1107  0.0  0.0  13568   620 ?        S    03:34   0:00  \_ dovecot/stats
dovecot    1157  0.0  0.0  41056  1332 ?        S    03:34   0:00  \_ dovecot/auth
root      27928  0.0  0.1  41052  2688 ?        S    04:05   0:00  \_ dovecot/auth -w
root        954  1.1  0.4 1277056 10084 ?       Ssl  03:34   0:21 /usr/bin/checkstatus
telegraf    955  0.0  1.3 5654048 32824 ?       SLsl 03:34   0:01 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        956  0.0  0.1 445028  3232 ?        Ss   03:34   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  28242  0.0  0.0 445028   316 ?        S    04:05   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        960  0.0  0.0 396248   540 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser    963  0.0  0.5 114016 12148 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        964  0.0  0.0 153404   308 ?        Ss   03:34   0:00 pure-ftpd (SERVER)
cpanelc+    965  0.0  0.1   9948  2872 ?        Rs   03:34   0:01 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        966  0.0  0.0 111304   416 ?        Ss   03:34   0:00 /usr/sbin/sshd -D
root      27809  0.0  0.1 111304  4264 ?        Ss   04:05   0:00  \_ sshd: [accepted]
root      27884  0.0  0.1 111304  4268 ?        Ss   04:05   0:00  \_ sshd: [accepted]
root      27945  0.0  0.1 111304  4272 ?        Ss   04:05   0:00  \_ sshd: [accepted]
root      28247  0.0  0.1 111304  4448 ?        Ss   04:05   0:00  \_ sshd: [accepted]
sshd      28248  0.0  0.1 115644  2628 ?        S    04:05   0:00  |   \_ sshd: [net]
root      28271  0.0  0.1 111304  4272 ?        Ss   04:05   0:00  \_ sshd: [accepted]
root      28272  0.0  0.1 111304  4268 ?        Ss   04:05   0:00  \_ sshd: [accepted]
root      28319  0.0  0.2 157100  5076 ?        Ss   04:05   0:00  \_ sshd: unknown [priv]
sshd      28320  0.0  0.1 115644  2628 ?        S    04:05   0:00  |   \_ sshd: unknown [net]
root      28335  1.0  0.2 162436  5832 ?        Ss   04:06   0:00  \_ sshd: root [priv]
sshd      28337  0.0  0.1 115644  2628 ?        S    04:06   0:00  |   \_ sshd: root [net]
root      28362  0.0  0.1 111304  4272 ?        Ss   04:06   0:00  \_ sshd: [accepted]
sshd      28385  0.0  0.1 115644  2632 ?        S    04:06   0:00      \_ sshd: [net]
root        967  1.5  0.3 1276356 9392 ?        Ssl  03:34   0:30 /usr/bin/cspdaemon
systuser    970  0.0  0.0  11348    40 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
memcach+    978  0.0  0.0 342400     0 ?        Ssl  03:34   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        979  0.0  0.1 261028  4696 ?        Ss   03:34   0:00 cpsrvd (SSL) - waiting for connections                   
root      28325  0.0  0.0      0     0 ?        Z    04:05   0:00  \_ [cpaneld - servi] <defunct>
root        980  0.0  0.0 572372   704 ?        Ssl  03:34   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        984  0.0  0.0 389508   264 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        998  0.0  0.0 388892   576 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
oyotech+  28324  0.0  0.2 389236  6188 ?        S    04:05   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
root       1001  0.0  0.1 400740  3076 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    28282 10.6  2.5 525792 62624 ?        S    04:05   0:00  \_ php-fpm: pool cloudware_ng
healtho+  28296 10.0  2.0 443236 50192 ?        S    04:05   0:00  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   28323  0.0  0.2 400460  5376 ?        S    04:05   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    28336 41.0  2.1 446108 52316 ?        S    04:06   0:00  \_ php-fpm: pool cloudware_ng
systuser   1002  0.0  0.0 112524  2064 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1003  0.0  0.1 224592  2632 ?        Ssl  03:34   0:00 /usr/sbin/rsyslogd -n
root       1010  0.0  0.4 439788 11356 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.1  4.8 247868 117568 ?       Ss   03:34   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7259  0.0  4.9 249128 118812 ?       S    03:40   0:00  \_ spamd child
root       7260  0.0  4.8 247868 116808 ?       S    03:40   0:00  \_ spamd child
systuser   1197  0.0  0.0 157700  2204 ?        S    03:34   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1199  0.0  0.5 387528 12848 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1200  0.0  1.3 412368 32332 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1281  0.0  0.9 262228 22048 ?        Ss   03:34   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1283  0.0  0.0 167452  1336 ?        Ss   03:34   0:00 dnsadmin - dormant mode
root       1285  0.0  0.4 209216 11408 ?        Ss   03:34   0:00 tailwatchd
root       1709  0.0  0.0 299272   648 ?        Ss   03:34   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1432 ?        SN   03:34   0:00 cpanellogd - sleeping for logs
mysql      1764  1.2  8.4 1457284 204028 ?      Sl   03:34   0:23 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1930  0.0  0.3 267052  8100 ?        Ss   03:34   0:00 /usr/sbin/httpd -k start
root       1931  0.0  0.0  12824   384 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1932  0.0  0.0  12732   296 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1933  0.0  0.0  12848   352 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1934  0.0  0.0  53340   100 ?        S    03:34   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     9147  0.1  0.8 277904 20388 ?        S    03:42   0:01  \_ /usr/sbin/httpd -k start
nobody    10126  0.1  0.8 277908 20636 ?        S    03:44   0:01  \_ /usr/sbin/httpd -k start
nobody    14224  0.1  0.8 277928 20596 ?        S    03:49   0:01  \_ /usr/sbin/httpd -k start
nobody    21281  0.1  0.8 277584 19640 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    21298  0.1  0.8 277672 19952 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    21299  0.1  0.8 278004 20164 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    24579  0.1  0.7 277600 19348 ?        S    04:01   0:00  \_ /usr/sbin/httpd -k start
nobody    24727  0.1  0.8 277556 19492 ?        S    04:01   0:00  \_ /usr/sbin/httpd -k start
nobody    25674  0.1  0.8 277644 19372 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    25689  0.1  0.7 277536 19292 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    25690  0.1  0.8 277720 19664 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    25701  0.1  0.7 277520 18712 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    25703  0.1  0.8 277784 19456 ?        S    04:02   0:00  \_ /usr/sbin/httpd -k start
nobody    26755  0.1  0.8 277908 19428 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
nobody    26756  0.1  0.7 277520 18964 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
nobody    27471  0.1  0.7 277520 18372 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
nobody    28027  0.1  0.7 277900 18656 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    28037  0.0  0.7 277520 18324 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    28038  0.2  0.7 277520 18080 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    28050  0.2  0.7 277580 18876 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    28051  0.2  0.7 277908 18768 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    28052  0.1  0.7 277584 18312 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    28053  0.2  0.7 277520 18552 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
cloudw    28439  0.0  0.6 353712 15972 ?        S    04:06   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    28200  0.2  0.7 277908 18776 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    28317  0.5  0.7 277764 18660 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    28364  0.0  0.7 277504 17936 ?        S    04:06   0:00  \_ /usr/sbin/httpd -k start
root       2045  0.1  0.4 181260  9760 ?        Ss   03:34   0:01 lfd - sleeping
oysipao+  23203  0.0  0.0   3148   416 ?        Ss   04:00   0:00 [kworker]
oysipao+  23216  0.0  0.0   3152   424 ?        S    04:00   0:00  \_ [kworker]
root      24071  0.0  0.0 123364   640 ?        Ss   04:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 1906  Threads: 3  Questions: 121105  Slow queries: 0  Opens: 1594  Flush tables: 1  Open tables: 1498  Queries per second avg: 63.538
*************************** 1. row ***************************
     Id: 2004
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 2006
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: closing tables
   Info: SELECT * FROM `14` WHERE `phone`='2348054324826' LIMIT 1
*************************** 3. row ***************************
     Id: 2014
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.134.212 TIME_WAIT
      1 137.135.191.39 TIME_WAIT
      1 137.135.191.40 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 193.70.34.35 TIME_WAIT
      1 198.46.170.46 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.39.0.0 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 137.135.191.44 TIME_WAIT
      5 198.54.120.17 TIME_WAIT
      8 209.250.242.219 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 04:06:02 WAT
   Restart Time: Friday, 21-Nov-2025 03:34:21 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 31 minutes 41 seconds
   Server load: 1.18 0.67 0.44
   Total accesses: 8797 - Total Traffic: 250.6 MB - Total Duration: 4631373
   CPU Usage: u7.58 s2.91 cu111.66 cs91.7 - 11.2% CPU load
   4.63 requests/sec - 135.0 kB/second - 29.2 kB/request - 526.472 ms/request
   26 requests currently being processed, 0 workers gracefully restarting, 0 idle workers

KWKKKRWRKRKKKKKWKRKKRKKKK.........................K.............
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU   SS  Req   Dur   Conn  Child  Slot     Client      Protocol           VHost                                        Request
   0-0  28027 1/6/296   K 0.11 2    455  129706 226.6 0.33  7.05  192.178.4.98    http/1.1 team.cloudware.ng:443      GET /vendor/symfony/options-resolver/ HTTP/1.1
   1-0  28037 1/5/502   W 0.08 0    0    232294 35.3  0.11  11.41 192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=2990263129 HTTP/1.1
   2-0  24579 6/79/425  K 1.88 4    302  222224 192.5 2.08  11.03 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=3078273679 HTTP/1.1
   3-0  26755 1/36/416  K 0.86 0    110  198134 10.8  0.91  13.16 193.70.34.35    http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   4-0  26756 1/40/353  K 1.09 3    273  185026 34.0  1.00  12.46 66.249.70.38    http/1.1 support.cloudware.ng:443   GET /?c=116273729 HTTP/1.1
   5-0  25674 0/49/283  R 1.20 16   7    123861 0.0   1.82  8.87  137.135.191.41  http/1.1
   6-0  28038 8/8/342   W 0.20 0    0    173200 253.8 0.25  8.42  192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=3517196923 HTTP/1.1
   7-0  14224 0/253/379 R 6.34 8    394  210707 0.0   6.99  10.46 102.88.115.109  http/1.1
   8-0  24727 1/61/363  K 1.25 0    1447 202106 25.3  1.52  10.94 66.249.64.232   http/1.1 cloudware.ng:80            GET /ads.txt HTTP/1.1
   9-0  27471 0/13/313  R 0.29 8    176  178468 0.0   0.33  9.60  102.88.115.109  http/1.1
   10-0 21281 1/140/408 K 3.69 0    356  214373 34.6  3.63  11.68 192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=710074566 HTTP/1.1
   11-0 28200 1/6/410   K 0.09 0    419  209911 35.7  0.14  10.56 192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=3987844938 HTTP/1.1
   12-0 25689 4/59/310  K 1.47 3    28   177593 8.3   1.49  8.03  66.249.70.7     http/1.1 test.cloudware.ng:443      GET /190316984?goodscode=0190068314 HTTP/1.1
   13-0 25690 3/58/264  K 1.36 1    299  151806 645.6 2.82  8.41  192.178.4.98    http/1.1 team.cloudware.ng:443      GET /vendor/doctrine/persistence/lib/Doctrine/ HTTP/1.1
   14-0 28050 1/10/202  K 0.20 0    0    199149 5.3   0.25  8.38  104.210.140.129 http/1.1 voice.cloudsms.com.ng:443  GET /robots.txt HTTP/1.1
   15-0 28051 0/9/189   W 0.20 0    0    98653  0.0   0.24  4.97  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   16-0 21298 1/109/286 K 2.54 3    294  113019 35.0  3.19  6.35  192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=2713952197 HTTP/1.1
   17-0 21299 0/101/227 R 2.28 16   262  101690 0.0   2.78  5.88  137.135.191.47  http/1.1
   18-0 28052 1/4/166   K 0.09 4    261  84147  34.5  0.31  4.95  192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=3886625302 HTTP/1.1
   19-0 9147  1/308/343 K 7.42 4    266  173111 34.0  8.18  9.04  192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=2959786294 HTTP/1.1
   20-0 25701 0/31/46   R 0.84 98   2    23589  0.0   0.88  1.13  54.204.12.115   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/2019elections/images/imag
   21-0 28053 5/8/143   K 0.15 0    522  73447  159.7 0.30  5.45  192.178.4.98    http/1.1 team.cloudware.ng:443      GET /?l=1826469501 HTTP/1.1
   22-0 25703 3/47/127  K 1.16 1    403  72473  668.9 2.33  5.15  192.178.4.98    http/1.1 team.cloudware.ng:443      GET /var/cache/prod/pools/VV6jqwmg-R/S/ HTTP/1.1
   23-0 28317 1/5/89    K 0.01 1    261  59450  36.0  0.05  2.55  192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=3863330375 HTTP/1.1
   24-0 28364 1/1/199   K 0.00 0    458  108182 34.8  0.03  5.32  192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=1568873873 HTTP/1.1
   25-0 -     0/0/27    . 0.00 1191 0    9251   0.0   0.00  0.49  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/3     . 0.00 1306 0    67     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/6     . 0.00 1264 0    3360   0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/184   . 0.00 558  0    93070  0.0   0.00  4.64  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/2     . 0.00 1308 0    9      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/2     . 0.00 1307 0    13     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/4     . 0.00 1287 0    2022   0.0   0.00  0.09  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/5     . 0.00 1263 0    1566   0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/5     . 0.00 1278 0    1895   0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/3     . 0.00 1289 0    57     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/22    . 0.00 1229 0    11094  0.0   0.00  0.65  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/4     . 0.00 1266 0    823    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/80    . 0.00 921  0    38300  0.0   0.00  1.90  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/14    . 0.00 1224 0    6642   0.0   0.00  0.35  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/2     . 0.00 1283 0    40     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/2     . 0.00 1286 4    40     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/2     . 0.00 1304 0    34     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/8     . 0.00 1257 0    4106   0.0   0.00  0.19  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/6     . 0.00 1258 0    2657   0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/9     . 0.00 1259 0    3864   0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/10    . 0.00 1237 0    3619   0.0   0.00  0.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/2     . 0.00 1305 0    113    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/3     . 0.00 1268 0    38     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/2     . 0.00 1284 0    18     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/19    . 0.00 1227 0    9315   0.0   0.00  0.49  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 10126 2/333/333 K 9.01 3    303  176342 60.8  9.64  9.64  66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2206243531 HTTP/1.1
   51-0 -     0/0/2     . 0.00 1303 0    23     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/2     . 0.00 1302 0    19     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/28    . 0.00 1154 0    31192  0.0   0.00  3.71  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/2     . 0.00 1298 0    52     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/3     . 0.00 1281 0    73     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/2     . 0.00 1299 0    54     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/2     . 0.00 1297 0    40     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/86    . 0.00 923  0    43953  0.0   0.00  2.25  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/9     . 0.00 1228 0    3369   0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/2     . 0.00 1301 0    51     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/2     . 0.00 1290 0    36     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/5     . 0.00 1261 0    1263   0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/2     . 0.00 1294 0    35     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/14    . 0.00 1255 0    8103   0.0   0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/2     . 0.00 1300 0    46     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/3     . 0.00 1274 0    53     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/2     . 0.00 1291 0    145    0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/4     . 0.00 1260 0    753    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/224   . 0.00 381  0    141502 0.0   0.00  5.80  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/2     . 0.00 1293 0    52     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/17    . 0.00 1225 0    9108   0.0   0.00  0.43  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/138   . 0.00 747  0    86335  0.0   0.00  5.84  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/28    . 0.00 1157 0    14353  0.0   0.00  0.77  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/41    . 0.00 1096 0    23982  0.0   0.00  1.17  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/264   . 0.00 235  0    150949 0.0   0.00  7.38  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/2     . 0.00 1296 0    44     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/3     . 0.00 1288 0    58     0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/5     . 0.00 1267 0    1963   0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/2     . 0.00 1292 0    34     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/48    . 0.00 1095 0    25894  0.0   0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -     0/0/3     . 0.00 1269 0    672    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-0 -     0/0/8     . 0.00 1252 0    2458   0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1216
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...33)
   index usage: 21%, cache usage: 29%
   total entries stored since starting: 6179
   total entries replaced since starting: 0
   total entries expired since starting: 4959
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 20 miss
   total removes since starting: 5 hit, 2 miss
Youez - 2016 - github.com/yon3zu
LinuXploit