403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.04.18.txt
 ## swap threshold exceeded
## server overview
2025-11-22.04.18 load[0] mem[60/64] mysql[1/25] httpd[8]
              total        used        free      shared  buff/cache   available
Mem:           2363        1323         147          31         891         829
Swap:          1999        1493         506
 04:18:01 up  3:21,  0 users,  load average: 0.42, 0.53, 0.54
## system overview
top - 04:18:01 up  3:21,  0 users,  load average: 0.42, 0.53, 0.54
Tasks: 210 total,   8 running, 201 sleeping,   0 stopped,   1 zombie
%Cpu(s): 51.5 us, 48.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   109256 free,  1397300 used,   913744 buff/cache
KiB Swap:  2047996 total,   518300 free,  1529696 used.   807344 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1816 mysql     20   0 1464484 238132   4008 S  12.5  9.8   2:27.73 /usr/sbin+
 42080 nigeria   20   0  404052  16136  10380 S  12.5  0.7   0:00.02 /opt/cpan+
   498 dbus      20   0   58748   1356    604 R   6.2  0.1   0:06.61 /usr/bin/+
 35727 nobody    20   0  277584  18632   4432 S   6.2  0.8   0:00.88 /usr/sbin+
 42067 cloudw    20   0  353712  15964  10484 S   6.2  0.7   0:00.01 /opt/cpan+
 42082 pactpay   20   0  412248  16140  10560 R   6.2  0.7   0:00.01 /opt/cpan+
 42083 saboakin  20   0  400672  12708   8580 R   6.2  0.5   0:00.01 /opt/cpan+
 42089 cloudsms  20   0  404052  15876  10216 R   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44396   3228   1464 S   0.0  0.1   0:15.94 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.68 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.52 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:11.64 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.51 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.89 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:25.41 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.24 [kauditd]
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.44 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:02.01 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.67 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   39500   5480   5236 S   0.0  0.2   0:06.43 /usr/lib/+
   380 root      20   0   45352     52     48 S   0.0  0.0   0:00.33 /usr/lib/+
   406 root      16  -4   55532    460    340 S   0.0  0.0   0:01.00 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   483 root      20   0   21540    344    260 S   0.0  0.0   0:00.27 /usr/sbin+
   485 root      20   0   24712   1148    792 S   0.0  0.0   0:02.86 /usr/lib/+
   486 root      20   0  152780    108     68 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0  224148   4324    984 S   0.0  0.2   0:00.20 queueproc+
   488 root      20   0   52852    224    156 S   0.0  0.0   0:00.00 /usr/sbin+
   495 polkitd   20   0  612240    744    376 R   0.0  0.0   0:01.73 /usr/lib/+
   506 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   518 root      20   0    4388     24     20 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   543 nscd      20   0  928956   1228    584 S   0.0  0.1   0:08.96 /usr/sbin+
   554 root      20   0   24208     12      8 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124476    424    292 S   0.0  0.0   0:00.34 /usr/sbin+
   577 root      20   0  108296     36     32 S   0.0  0.0   0:00.00 /sbin/age+
   578 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   595 mailnull  20   0   90824   3688    760 S   0.0  0.2   0:00.34 /usr/sbin+
   628 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:06.22 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  572372    752    284 S   0.0  0.0   0:01.13 /usr/bin/+
   920 root      20   0  249168   5072   4604 S   0.0  0.2   0:03.21 /usr/sbin+
   926 root      20   0 1902000 425852   1064 S   0.0 17.6   0:37.01 /usr/loca+
   927 named     20   0 1054792  29608   2000 S   0.0  1.2   0:06.52 /usr/sbin+
   930 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.27 /usr/bin/+
   931 root      20   0  389508    388    296 S   0.0  0.0   0:00.41 php-fpm: +
   932 root      20   0  445028    604    488 S   0.0  0.0   0:00.56 sw-engine+
   939 root      20   0  439788    384    292 S   0.0  0.0   0:00.43 php-fpm: +
   941 systuser  20   0  113932      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  388892    236    156 S   0.0  0.0   0:00.39 php-fpm: +
   944 cpanelc+  20   0   10608   3536   2308 S   0.0  0.1   0:09.61 /usr/loca+
   946 systuser  20   0  114016  10104   2760 S   0.0  0.4   0:03.08 /usr/loca+
   949 systuser  20   0  113016     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   958 root      20   0  396248    384    300 S   0.0  0.0   0:00.41 php-fpm: +
   959 root      20   0  111304    368    268 S   0.0  0.0   0:01.32 /usr/sbin+
   960 root      20   0   51508    468    304 S   0.0  0.0   0:00.21 /usr/sbin+
   962 root      20   0  261024   6016   1708 S   0.0  0.2   0:01.76 cpsrvd (S+
   965 systuser  20   0   14068     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   972 root      20   0  400740   1488    616 S   0.0  0.1   0:01.42 php-fpm: +
   973 root      20   0  153404    256    176 S   0.0  0.0   0:00.25 pure-ftpd+
   974 root      20   0 1277312   4164     32 S   0.0  0.2   0:28.03 /usr/bin/+
   975 root      20   0 1276356   6472      0 S   0.0  0.3   0:25.54 /usr/bin/+
   977 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 telegraf  20   0 5654304  34808   5872 S   0.0  1.4   0:06.94 /usr/loca+
  1079 dovenull  20   0   47136   2528   1848 S   0.0  0.1   0:00.38 dovecot/p+
  1080 dovenull  20   0   47392   2364   1616 S   0.0  0.1   0:00.20 dovecot/i+
  1081 dovecot   20   0   10320    212    108 S   0.0  0.0   0:00.11 dovecot/a+
  1082 root      20   0   10452    520    368 S   0.0  0.0   0:00.25 dovecot/l+
  1083 dovenull  20   0   47300   2112   1536 S   0.0  0.1   0:00.50 dovecot/p+
  1084 dovenull  20   0   47424   2336   1520 S   0.0  0.1   0:00.21 dovecot/i+
  1090 root      20   0   24564   2052    496 S   0.0  0.1   0:00.09 dovecot/c+
  1091 dovecot   20   0   13568    508    372 S   0.0  0.0   0:00.02 dovecot/s+
  1141 root      20   0  247944   2892    740 S   0.0  0.1   0:04.30 /usr/loca+
  1153 dovecot   20   0   41156   1532   1016 S   0.0  0.1   0:00.69 dovecot/a+
  1158 systuser  20   0  157704   2768    788 S   0.0  0.1   0:00.08 SonarPush+
  1177 wp-tool+  20   0  387528   3180   1276 S   0.0  0.1   0:00.19 /usr/bin/+
  1178 wp-tool+  20   0  412368  23080   1256 S   0.0  1.0   0:04.02 /usr/bin/+
  1261 root      20   0  183900   6696   3460 S   0.0  0.3   0:00.74 cpdavd - +
  1262 root      20   0  209248   9956   2212 S   0.0  0.4   0:01.55 tailwatchd
  1263 root      20   0  167452   1216    668 S   0.0  0.1   0:00.26 dnsadmin +
  1662 root      38  18  130416   1372    704 S   0.0  0.1   0:00.02 cpanellog+
  1690 root      20   0  299272    504    344 S   0.0  0.0   0:00.33 php-fpm: +
  1927 root      20   0  267052   4948    528 S   0.0  0.2   0:01.07 /usr/sbin+
  1929 root      20   0   12744    316    216 S   0.0  0.0   0:01.21 /usr/loca+
  1930 root      20   0   12732    288    212 S   0.0  0.0   0:01.08 /usr/loca+
  1931 root      20   0   12748    324    220 S   0.0  0.0   0:01.12 /usr/loca+
  1939 root      20   0   53268     44     44 S   0.0  0.0   0:00.04 /usr/loca+
  2021 root      20   0  182492   9416   1116 S   0.0  0.4   0:10.39 lfd - sle+
  4410 root      20   0  183048      4      4 S   0.0  0.0   0:00.00 /usr/sbin+
  4453 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
  4476 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
  4531 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4539 oysipao+  20   0    3152     44      8 S   0.0  0.0   0:00.25 [kworker]
  6717 root      20   0  259460  89960   2432 S   0.0  3.7   0:02.56 spamd chi+
  6719 root      20   0  247944   1404    436 S   0.0  0.1   0:00.00 spamd chi+
  7575 root      30  10  132964     32     28 S   0.0  0.0   0:00.00 ConfigSer+
  7587 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 152+
 12060 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 18935 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 23024 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 29048 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 32175 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 32544 nobody    20   0  277596  19308   4720 S   0.0  0.8   0:01.26 /usr/sbin+
 33042 nobody    20   0  277788  19828   4816 S   0.0  0.8   0:01.22 /usr/sbin+
 33169 nobody    20   0  277776  19128   4688 S   0.0  0.8   0:00.90 /usr/sbin+
 34223 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34392 nobody    20   0  277584  19368   4696 S   0.0  0.8   0:01.11 /usr/sbin+
 34393 nobody    20   0  277664  19668   4816 S   0.0  0.8   0:01.13 /usr/sbin+
 35265 nobody    20   0  277584  18772   4592 S   0.0  0.8   0:00.99 /usr/sbin+
 35319 nobody    20   0  277908  18992   4620 S   0.0  0.8   0:00.74 /usr/sbin+
 35576 nobody    20   0  277584  18652   4592 S   0.0  0.8   0:00.99 /usr/sbin+
 35577 nobody    20   0  277584  19100   4548 S   0.0  0.8   0:00.81 /usr/sbin+
 35714 nobody    20   0  277520  18800   4512 S   0.0  0.8   0:00.67 /usr/sbin+
 35726 nobody    20   0  277904  18876   4640 S   0.0  0.8   0:00.80 /usr/sbin+
 36796 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 37541 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 38598 nobody    20   0  277904  18048   4040 S   0.0  0.7   0:00.29 /usr/sbin+
 39207 nobody    20   0  277536  18516   4388 S   0.0  0.8   0:00.39 /usr/sbin+
 39377 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 39874 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 40357 nobody    20   0  277516  18208   4056 S   0.0  0.8   0:00.24 /usr/sbin+
 41444 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 41477 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 41910 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 41983 mailnull  20   0   91208   4496   1320 S   0.0  0.2   0:00.00 /usr/sbin+
 41992 nigeria   20   0  400460   4336   2232 S   0.0  0.2   0:00.00 php-fpm: +
 41999 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 42004 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42006 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42007 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42008 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42009 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42010 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42011 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42012 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42013 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42014 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42015 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42016 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42017 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42018 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 42019 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 42020 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 42021 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 42022 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 42047 root      20   0  160244   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 42052 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 42053 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42054 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42055 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42056 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 42057 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42058 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 42059 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 42060 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 42061 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 42062 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 42063 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 42064 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 42065 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 42071 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 42074 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 42075 robocal+  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 42076 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 42077 saboakin  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 42078 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 42081 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 42086 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 42087 cloudsms  20   0  404052  15876  10224 R   0.0  0.7   0:00.00 /opt/cpan+
 42091 root      20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
 69703 root      20   0       0      0      0 S   0.0  0.0   0:00.25 [kworker/+
 94906 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:56   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        R    00:56   0:11  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:56   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    00:56   0:25  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        R    00:56   0:00  \_ [kauditd]
root        244  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   00:56   0:02  \_ [kworker/1:1H]
root        270  0.0  0.0      0     0 ?        S<   00:56   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [xprtiod]
root        628  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   00:56   0:06  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root      69703  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/u200:0]
root      94906  0.0  0.0      0     0 ?        S    03:09   0:00  \_ [kworker/1:2]
root      12060  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:1]
root      18935  0.0  0.0      0     0 ?        R    03:44   0:00  \_ [kworker/0:3]
root      23024  0.0  0.0      0     0 ?        S    03:50   0:00  \_ [kworker/1:1]
root      29048  0.0  0.0      0     0 ?        S    03:59   0:00  \_ [kworker/1:3]
root      32175  0.0  0.0      0     0 ?        S    04:03   0:00  \_ [kworker/0:1]
root      34223  0.0  0.0      0     0 ?        D    04:06   0:00  \_ [kworker/0:2]
root      36796  0.0  0.0      0     0 ?        S    04:10   0:00  \_ [kworker/1:0]
root      37541  0.0  0.0      0     0 ?        S    04:11   0:00  \_ [kworker/0:0]
root      39377  0.0  0.0      0     0 ?        S    04:14   0:00  \_ [kworker/1:4]
root      41444  0.0  0.0      0     0 ?        S    04:17   0:00  \_ [kworker/0:4]
root      41477  0.0  0.0      0     0 ?        S    04:17   0:00  \_ [kworker/1:5]
root          1  0.1  0.1  44396  3228 ?        Ss   00:56   0:15 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.2  39500  5480 ?        Ss   00:56   0:06 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352    52 ?        Ss   00:56   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   460 ?        S<sl 00:56   0:01 /sbin/auditd
root        483  0.0  0.0  21540   344 ?        Ss   00:56   0:00 /usr/sbin/irqbalance --foreground
root        485  0.0  0.0  24712  1148 ?        Ss   00:56   0:02 /usr/lib/systemd/systemd-logind
root        486  0.0  0.0 152780   108 ?        Ss   00:56   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.1 224148  4324 ?        Ss   00:56   0:00 queueprocd - waiting up to 60s to process a task
root        488  0.0  0.0  52852   224 ?        Ss   00:56   0:00 /usr/sbin/smartd -n -q never
polkitd     495  0.0  0.0 612240   744 ?        Ssl  00:56   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        498  0.0  0.0  58748  1356 ?        Rs   00:56   0:06 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         506  0.0  0.0  69256    60 ?        Ss   00:56   0:00 /sbin/rpcbind -w
root        518  0.0  0.0   4388    24 ?        Ss   00:56   0:00 /usr/sbin/acpid
root        520  0.0  0.0 195208     0 ?        Ssl  00:56   0:00 /usr/sbin/gssproxy -D
nscd        543  0.0  0.0 928956  1228 ?        Ssl  00:56   0:08 /usr/sbin/nscd
root        554  0.0  0.0  24208    12 ?        Ss   00:56   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 124476   424 ?        Ss   00:56   0:00 /usr/sbin/crond -n
root       4410  0.0  0.0 183048     4 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       4453  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       4476  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 19m
root      42004  0.0  0.0 183044  2148 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      42020  0.0  0.0 113284  1212 ?        Ss   04:18   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      42021  0.0  0.0 108052   356 ?        S    04:18   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      42022  0.0  0.0 113288  1516 ?        S    04:18   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      42093  0.0  0.0 153840  2096 ?        R    04:18   0:00  |               \_ ps auxf
root      42006  0.0  0.0 183044  2152 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      42054  0.0  0.0  20164   808 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      42007  0.0  0.0 183044  2152 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      42060  0.0  0.0  20164   804 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      42008  0.0  0.0 183044  2152 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      42061  0.0  0.0  20164   968 ?        Ss   04:18   0:00  |   \_ jailshell (cloudsms) [42071] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  42071  0.0  0.0      0     0 ?        D    04:18   0:00  |       \_ [jailshell]
root      42009  0.0  0.0 183044  2148 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      42053  0.0  0.0  20164   808 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      42010  0.0  0.0 183044  2148 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      42062  0.0  0.0  20164   972 ?        Ss   04:18   0:00  |   \_ jailshell (cloudsms) [42091] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  42091  0.0  0.0  20164   260 ?        S    04:18   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  42094  0.0  0.0 113284  1212 ?        S    04:18   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  42095  0.0  0.1 131872  3316 ?        R    04:18   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/bin/php -q -f /home/cloudsms/public_html/massmailer/cron.php
root      42011  0.0  0.0 183044  2144 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      42055  0.0  0.0  20164   808 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      42012  0.0  0.0 183040  2204 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      42013  0.0  0.0 183044  2144 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      42058  0.0  0.0  20164   804 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      42014  0.0  0.0 183044  2144 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      42059  0.0  0.0  20164   808 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      42015  0.0  0.0 183044  2144 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      42057  0.0  0.0  20164   808 ?        Ss   04:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      42016  0.0  0.0 183044  2140 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      42065  0.0  0.0  20164   968 ?        Ss   04:18   0:00  |   \_ jailshell (pactpay) [42078] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   42078  0.0  0.0  20164   264 ?        S    04:18   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   42082  0.0  0.6 479860 16168 ?        Sl   04:18   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      42018  0.0  0.0 183044  2140 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      42064  0.0  0.0  20164   964 ?        Ss   04:18   0:00  |   \_ jailshell (nigeria) [42074] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   42074  0.0  0.0  20164   260 ?        S    04:18   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   42080  0.0  0.6 404052 16136 ?        S    04:18   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      42019  0.0  0.0 183044  2144 ?        S    04:18   0:00  \_ /usr/sbin/CROND -n
root      42052  0.0  0.0  20164   968 ?        Ss   04:18   0:00      \_ jailshell (saboakin) [42077] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  42077  0.0  0.0  20164   264 ?        S    04:18   0:00          \_ jailshell (saboakin) [init] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  42083  0.0  0.6 404052 15612 ?        S    04:18   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/saboakin/public_html/massmailer/cron.php
root        577  0.0  0.0 108296    36 tty1     Ss+  00:56   0:00 /sbin/agetty --noclear tty1 linux
root        578  0.0  0.0 114704     0 ttyS0    Ss+  00:56   0:00 /bin/bash
mailnull    595  0.0  0.1  90824  3688 ?        Ss   00:56   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  41983  0.0  0.1  91208  4496 ?        S    04:17   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 572372   752 ?        Ssl  00:56   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        920  0.0  0.2 249168  5072 ?        Ssl  00:56   0:03 /usr/sbin/rsyslogd -n
root        926  0.3 17.5 1902000 425852 ?      Ssl  00:56   0:37 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.2 1054792 29608 ?       Ssl  00:56   0:06 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    930  0.0  0.0 342400     0 ?        Ssl  00:56   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        931  0.0  0.0 389508   388 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        932  0.0  0.0 445028   604 ?        Ss   00:56   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  41910  0.0  0.0 445028   324 ?        S    04:17   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        939  0.0  0.0 439788   384 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    941  0.0  0.0 113932     4 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 388892   236 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    944  0.0  0.1  10608  3536 ?        Rs   00:56   0:09 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    946  0.0  0.4 114016 10104 ?        Ssl  00:56   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    949  0.0  0.0 113016    36 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        958  0.0  0.0 396248   384 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        959  0.0  0.0 111304   368 ?        Ss   00:56   0:01 /usr/sbin/sshd -D
root        960  0.0  0.0  51508   468 ?        Ss   00:56   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1079  0.0  0.1  47136  2528 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.0  47392  2364 ?        S    00:56   0:00  \_ dovecot/imap-login
dovecot    1081  0.0  0.0  10320   212 ?        S    00:56   0:00  \_ dovecot/anvil
root       1082  0.0  0.0  10452   520 ?        S    00:56   0:00  \_ dovecot/log
dovenull   1083  0.0  0.0  47300  2112 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.0  47424  2336 ?        S    00:56   0:00  \_ dovecot/imap-login
root       1090  0.0  0.0  24564  2052 ?        S    00:56   0:00  \_ dovecot/config
dovecot    1091  0.0  0.0  13568   508 ?        S    00:56   0:00  \_ dovecot/stats
dovecot    1153  0.0  0.0  41156  1532 ?        S    00:56   0:00  \_ dovecot/auth
root      39874  0.0  0.1  41052  2728 ?        S    04:14   0:00  \_ dovecot/auth -w
root        962  0.0  0.2 261024  6016 ?        Ss   00:56   0:01 cpsrvd (SSL) - waiting for connections                   
root      41999  0.0  0.0      0     0 ?        Z    04:17   0:00  \_ [cpaneld - servi] <defunct>
systuser    965  0.0  0.0  14068    28 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        972  0.0  0.0 400740  1488 ?        Ss   00:56   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   41992  0.0  0.1 400460  4336 ?        S    04:17   0:00  \_ php-fpm: pool nigeriadecide_org
root        973  0.0  0.0 153404   256 ?        Ss   00:56   0:00 pure-ftpd (SERVER)
root        974  0.2  0.1 1277312 4164 ?        Ssl  00:56   0:28 /usr/bin/checkstatus
root        975  0.2  0.2 1276356 6472 ?        Ssl  00:56   0:25 /usr/bin/cspdaemon
systuser    977  0.0  0.0  10132    28 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    992  0.0  1.4 5654304 34808 ?       SLsl 00:56   0:06 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1141  0.0  0.1 247944  2892 ?        Ss   00:56   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6717  0.0  3.7 259460 89960 ?        S    01:02   0:02  \_ spamd child
root       6719  0.0  0.0 247944  1404 ?        S    01:02   0:00  \_ spamd child
systuser   1158  0.0  0.1 157704  2768 ?        S    00:56   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387528  3180 ?        Ss   00:56   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.9 412368 23080 ?        Ss   00:56   0:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1261  0.0  0.2 183900  6696 ?        Ss   00:56   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1262  0.0  0.4 209248  9956 ?        Ss   00:56   0:01 tailwatchd
root       1263  0.0  0.0 167452  1216 ?        Ss   00:56   0:00 dnsadmin - dormant mode
root       1662  0.0  0.0 130416  1372 ?        SN   00:56   0:00 cpanellogd - sleeping for logs
root       1690  0.0  0.0 299272   504 ?        Ss   00:56   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1816  1.2  9.8 1464484 238132 ?      Sl   00:56   2:27 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1927  0.0  0.2 267052  4948 ?        Ss   00:56   0:01 /usr/sbin/httpd -k start
root       1929  0.0  0.0  12744   316 ?        S    00:56   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1930  0.0  0.0  12732   288 ?        S    00:56   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1931  0.0  0.0  12748   324 ?        S    00:56   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53268    44 ?        S    00:56   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    32544  0.1  0.7 277596 19308 ?        S    04:03   0:01  \_ /usr/sbin/httpd -k start
nobody    33042  0.1  0.8 277788 19828 ?        S    04:04   0:01  \_ /usr/sbin/httpd -k start
nobody    33169  0.1  0.7 277776 19128 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
nobody    34392  0.1  0.8 277584 19368 ?        S    04:06   0:01  \_ /usr/sbin/httpd -k start
nobody    34393  0.1  0.8 277664 19668 ?        S    04:06   0:01  \_ /usr/sbin/httpd -k start
nobody    35265  0.1  0.7 277584 18772 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    35319  0.1  0.7 277908 18992 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    35576  0.1  0.7 277584 18652 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    35577  0.1  0.7 277584 19100 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    35714  0.1  0.7 277520 18800 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    35726  0.1  0.7 277904 18876 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    35727  0.1  0.7 277584 18632 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    42067  0.0  0.6 353712 15964 ?        S    04:18   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    38598  0.0  0.7 277904 18048 ?        S    04:12   0:00  \_ /usr/sbin/httpd -k start
nobody    39207  0.1  0.7 277536 18516 ?        S    04:13   0:00  \_ /usr/sbin/httpd -k start
nobody    40357  0.1  0.7 277516 18208 ?        S    04:15   0:00  \_ /usr/sbin/httpd -k start
root       2021  0.0  0.3 182492  9416 ?        Ss   00:56   0:10 lfd - sleeping
oysipao+   4531  0.0  0.0   3148     8 ?        Ss   01:00   0:00 [kworker]
oysipao+   4539  0.0  0.0   3152    44 ?        S    01:00   0:00  \_ [kworker]
root       7575  0.0  0.0 132964    32 ?        SN   03:29   0:00 ConfigServer Version Check
root       7587  0.0  0.0 108056     0 ?        SN   03:29   0:00  \_ sleep 15214
## mysql stats
Uptime: 12070  Threads: 5  Questions: 807904  Slow queries: 0  Opens: 4986  Flush tables: 1  Open tables: 2000  Queries per second avg: 66.934
*************************** 1. row ***************************
     Id: 14597
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 14599
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 14603
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 4. row ***************************
     Id: 14604
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 14606
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.14 TIME_WAIT
      1 114.119.140.4 TIME_WAIT
      1 114.119.145.216 TIME_WAIT
      1 167.114.139.51 TIME_WAIT
      1 192.178.4.101 TIME_WAIT
      1 192.178.4.103 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.90.7.156 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 89.37.63.48 TIME_WAIT
      6 203.75.213.2 TIME_WAIT
    386 44.220.188.80 TIME_WAIT
    405 18.97.26.72 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 04:18:01 WAT
   Restart Time: Saturday, 22-Nov-2025 00:56:55 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 21 minutes 6 seconds
   Server load: 0.42 0.53 0.54
   Total accesses: 53932 - Total Traffic: 1.3 GB - Total Duration: 26980584
   CPU Usage: u9.21 s4.27 cu701.35 cs561.48 - 10.6% CPU load
   4.47 requests/sec - 116.8 kB/second - 26.1 kB/request - 500.27 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

KK__K....W.K_KK......_K_....._W.................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot    Client     Protocol         VHost                                      Request
   0-0  39207 5/63/2701  K 1.60 2    263 1365722 154.0 1.64  67.20 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=1496367431 HTTP/1.1
   1-0  35265 1/168/2725 K 4.15 3    264 1329588 34.7  6.84  74.60 192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=903159005 HTTP/1.1
   2-0  35319 0/126/2676 _ 2.99 1    2   1343424 0.0   3.07  70.95 23.21.179.120 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/images/2019elections/imag
   3-0  38598 0/50/2600  _ 1.25 1    401 1492588 0.0   1.34  68.36 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=628988418 HTTP/1.1
   4-0  40357 2/36/2715  K 0.89 3    309 1382215 66.9  0.91  67.79 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=3851741630 HTTP/1.1
   5-0  -     0/0/2453   . 0.00 20   0   1163062 0.0   0.00  57.75 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   6-0  -     0/0/2721   . 0.00 216  0   1283187 0.0   0.00  66.27 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   7-0  -     0/0/2639   . 0.00 562  0   1240682 0.0   0.00  61.85 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   8-0  -     0/0/2694   . 0.00 452  0   1248375 0.0   0.00  70.02 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   9-0  33169 0/150/2349 W 3.75 0    0   1170924 0.0   4.06  58.62 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   10-0 -     0/0/1930   . 0.00 500  0   961874  0.0   0.00  46.89 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   11-0 35576 4/164/2424 K 4.20 0    267 1286005 126.3 4.29  76.77 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?l=230797183 HTTP/1.1
   12-0 34392 0/177/1813 _ 4.83 0    0   847554  0.0   4.71  43.78 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   13-0 34393 2/191/2523 K 4.95 4    270 1330911 63.9  5.11  63.32 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=3163385333 HTTP/1.1
   14-0 35577 2/133/1947 K 3.34 0    299 1036946 67.0  3.48  50.09 192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=24371989 HTTP/1.1
   15-0 -     0/0/1577   . 0.00 266  0   819193  0.0   0.00  43.01 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 -     0/0/1558   . 0.00 533  0   763870  0.0   0.00  38.56 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 -     0/0/1349   . 0.00 570  0   700836  0.0   0.00  34.05 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 -     0/0/2061   . 0.00 493  0   861456  0.0   0.00  61.40 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 -     0/0/626    . 0.00 488  0   338933  0.0   0.00  15.57 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -     0/0/643    . 0.00 571  0   300281  0.0   0.00  14.95 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 33042 0/211/1275 _ 5.29 1    399 696582  0.0   5.40  33.18 192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=2959940490 HTTP/1.1
   22-0 35714 5/111/1752 K 2.73 1    263 886199  155.8 2.79  42.84 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=293446875 HTTP/1.1
   23-0 32544 0/209/1058 _ 5.32 1    1   698838  0.0   6.35  26.93 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   24-0 -     0/0/415    . 0.00 492  0   231769  0.0   0.00  10.97 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/63     . 0.00 560  0   38846   0.0   0.00  1.91  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/297    . 0.00 567  0   161031  0.0   0.00  10.33 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/180    . 0.00 563  0   70297   0.0   0.00  3.14  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/102    . 0.00 564  0   85988   0.0   0.00  2.47  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 35726 0/136/706  _ 3.42 0    261 405978  0.0   3.62  20.10 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=2181849679 HTTP/1.1
   30-0 35727 0/144/465  W 3.91 0    0   238587  0.0   3.92  10.75 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=1671683175 HTTP/1.1
   31-0 -     0/0/609    . 0.00 3086 0   309233  0.0   0.00  15.78 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/11     . 0.00 3076 0   3774    0.0   0.00  0.17  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/7      . 0.00 3088 0   1828    0.0   0.00  0.13  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/117    . 0.00 2663 0   46396   0.0   0.00  2.24  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/146    . 0.00 3100 0   57340   0.0   0.00  3.26  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/240    . 0.00 3072 0   105059  0.0   0.00  5.69  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/3      . 0.00 3099 0   4588    0.0   0.00  0.02  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/102    . 0.00 2665 0   37924   0.0   0.00  1.98  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/196    . 0.00 2615 3   51541   0.0   0.00  2.11  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/203    . 0.00 2372 0   91622   0.0   0.00  4.31  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/8      . 0.00 3079 0   2066    0.0   0.00  0.13  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/12     . 0.00 3075 0   5210    0.0   0.00  0.28  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/3      . 0.00 3098 0   13      0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/158    . 0.00 2619 0   66237   0.0   0.00  3.12  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/522    . 0.00 2983 0   184884  0.0   0.00  9.85  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/2      . 0.00 9889 0   4       0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/3      . 0.00 9856 0   766     0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00 9883 0   48      0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00 9854 0   10      0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00 9839 0   695     0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00 9832 0   3150    0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00 9835 0   538     0.0   0.00  0.04  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/13     . 0.00 9833 0   8196    0.0   0.00  0.36  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00 9846 0   519     0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/1      . 0.00 9870 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/110    . 0.00 9441 0   48080   0.0   0.00  2.48  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00 9724 0   13507   0.0   0.00  0.78  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/12     . 0.00 9842 0   7269    0.0   0.00  0.33  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/6      . 0.00 9826 0   1848    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/1      . 0.00 9879 0   1       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/48     . 0.00 9717 0   10684   0.0   0.00  0.71  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/2      . 0.00 9851 0   7       0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/1      . 0.00 9877 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/5      . 0.00 9838 0   1750    0.0   0.00  0.10  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00 9875 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/1      . 0.00 9876 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00 9853 0   6       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/5      . 0.00 9827 0   859     0.0   0.00  0.05  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/74     . 0.00 9595 0   36843   0.0   0.00  1.92  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/149    . 0.00 9232 0   74918   0.0   0.00  4.57  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/1      . 0.00 9871 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/1      . 0.00 9874 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/6      . 0.00 9830 0   3305    0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/6      . 0.00 9825 0   2230    0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/1      . 0.00 9873 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/1      . 0.00 9872 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/40     . 0.00 9734 0   15854   0.0   0.00  0.86  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/1      . 0.00 9878 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 9869 0   0       0.0   0.00  0.00  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 872
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 4 seconds, (range: 0...19)
   index usage: 15%, cache usage: 20%
   total entries stored since starting: 40390
   total entries replaced since starting: 0
   total entries expired since starting: 39510
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 113 miss
   total removes since starting: 9 hit, 8 miss
Youez - 2016 - github.com/yon3zu
LinuXploit