403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-23.01.54.txt
 ## swap threshold exceeded
## server overview
2025-11-23.01.54 load[0] mem[60/74] mysql[2/12] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1389         125          43         848         766
Swap:          1999        1654         345
 01:54:01 up 14:51,  0 users,  load average: 0.52, 0.48, 0.40
## system overview
top - 01:54:01 up 14:51,  0 users,  load average: 0.52, 0.48, 0.40
Tasks: 205 total,   6 running, 198 sleeping,   0 stopped,   1 zombie
%Cpu(s): 69.4 us, 30.6 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   123036 free,  1425836 used,   871428 buff/cache
KiB Swap:  2047996 total,   354060 free,  1693936 used.   782776 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 16784 healtho+  20   0  468348  75472   4276 R  55.6  3.1   0:03.76 php-fpm: +
  1916 mysql     20   0 1478544 225844   4060 S  50.0  9.3  11:57.40 /usr/sbin+
     1 root      20   0   44508   3264   1464 S   5.6  0.1   1:12.61 /usr/lib/+
   501 root      20   0   24704   1164    808 S   5.6  0.0   0:12.12 /usr/lib/+
   502 dbus      20   0   58720   1356    612 S   5.6  0.1   0:27.74 /usr/bin/+
 17126 pactpay   20   0  480124  17308  11572 R   5.6  0.7   0:00.01 /opt/cpan+
 17135 cloudw    20   0  353712  15968  10484 S   5.6  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.94 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.11 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:52.05 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.09 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:08.17 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:32.02 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:01.21 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.19 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:03.80 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:02.77 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40240   1908   1664 S   0.0  0.1   0:30.71 /usr/lib/+
   384 root      20   0   45352      8      4 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    112      0 S   0.0  0.0   0:04.99 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    348    260 S   0.0  0.0   0:01.21 /usr/sbin+
   504 rpc       20   0   69256     44      0 S   0.0  0.0   0:00.05 /sbin/rpc+
   514 root      20   0  224148   3016    788 S   0.0  0.1   0:00.57 queueproc+
   515 polkitd   20   0  610540    840    464 S   0.0  0.0   0:07.03 /usr/lib/+
   521 root      20   0  152780     80     36 S   0.0  0.0   0:00.03 /usr/sbin+
   523 root      20   0   52852    224    136 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0 1336536   1804    624 S   0.0  0.1   0:37.52 /usr/sbin+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     12      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124508    844    416 S   0.0  0.0   0:01.48 /usr/sbin+
   591 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   3572    644 S   0.0  0.1   0:01.03 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.59 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     28     28 S   0.0  0.0   0:01.15 /usr/bin/+
   912 root      20   0 1277312   5772      4 S   0.0  0.2   0:24.75 /usr/bin/+
   913 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   914 root      20   0  572372    644    176 S   0.0  0.0   0:04.57 /usr/bin/+
   915 root      20   0   51508    460    292 S   0.0  0.0   0:00.79 /usr/sbin+
   916 telegraf  20   0 5654304  36064   5728 S   0.0  1.5   0:28.44 /usr/loca+
   917 systuser  20   0   12756      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   925 systuser  20   0  114016  12628   2704 S   0.0  0.5   0:12.46 /usr/loca+
   926 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   927 root      20   0  111304    356    256 S   0.0  0.0   0:07.54 /usr/sbin+
   928 root      20   0 1276100   7716      0 S   0.0  0.3   0:25.68 /usr/bin/+
   930 root      20   0  445028    592    480 S   0.0  0.0   0:02.08 sw-engine+
   931 root      20   0  153404    220    136 S   0.0  0.0   0:01.16 pure-ftpd+
   932 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   934 root      20   0  439788    404    312 S   0.0  0.0   0:01.41 php-fpm: +
   938 root      20   0  388892    256    172 S   0.0  0.0   0:01.27 php-fpm: +
   939 root      20   0 1828368 337620    964 S   0.0 13.9   0:30.06 /usr/loca+
   940 root      20   0  331088   2616   2060 S   0.0  0.1   0:15.27 /usr/sbin+
   949 named     20   0 1054796  33608   2204 S   0.0  1.4   0:23.98 /usr/sbin+
   958 root      20   0  400740   2444    604 S   0.0  0.1   0:06.57 php-fpm: +
   962 root      20   0  261692   6356   1700 S   0.0  0.3   0:08.44 cpsrvd (S+
   969 cpanelc+  20   0   10564   3460   2296 S   0.0  0.1   0:42.46 /usr/loca+
   979 root      20   0  396248    296    216 S   0.0  0.0   0:01.34 php-fpm: +
   985 root      20   0  389508    348    256 S   0.0  0.0   0:01.40 php-fpm: +
  1083 dovenull  20   0   47116   2012   1392 S   0.0  0.1   0:01.68 dovecot/p+
  1084 dovenull  20   0   48232   2528   1528 S   0.0  0.1   0:00.61 dovecot/i+
  1085 dovecot   20   0   10320    428    312 S   0.0  0.0   0:00.40 dovecot/a+
  1086 root      20   0   10452    536    348 S   0.0  0.0   0:01.02 dovecot/l+
  1087 dovenull  20   0   47264   2072   1444 S   0.0  0.1   0:01.92 dovecot/p+
  1088 dovenull  20   0   48324   2564   1608 S   0.0  0.1   0:00.58 dovecot/i+
  1093 root      20   0   24528   1844    436 S   0.0  0.1   0:00.35 dovecot/c+
  1101 dovecot   20   0   13568    532    316 S   0.0  0.0   0:00.14 dovecot/s+
  1142 root      20   0  247932  16364    720 S   0.0  0.7   0:09.17 /usr/loca+
  1161 dovecot   20   0   41320   1520   1012 S   0.0  0.1   0:02.57 dovecot/a+
  1175 systuser  20   0  157708   2856    808 S   0.0  0.1   0:00.24 SonarPush+
  1177 wp-tool+  20   0  387556   3312   1380 S   0.0  0.1   0:00.46 /usr/bin/+
  1178 wp-tool+  20   0  412396   9292   1232 S   0.0  0.4   0:16.84 /usr/bin/+
  1260 root      20   0  183900   6448   3220 S   0.0  0.3   0:05.56 cpdavd - +
  1263 root      20   0  167452   4164   2796 S   0.0  0.2   0:00.86 dnsadmin +
  1264 root      20   0  209648   9596   1912 S   0.0  0.4   0:06.25 tailwatchd
  1800 root      20   0  299272    492    332 S   0.0  0.0   0:01.42 php-fpm: +
  1834 root      38  18  130416   1364    688 S   0.0  0.1   0:00.13 cpanellog+
  2035 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
  2048 root      20   0  267052   7672    476 S   0.0  0.3   0:03.71 /usr/sbin+
  2050 root      20   0   12796    332    212 S   0.0  0.0   0:05.54 /usr/loca+
  2051 root      20   0   12732    284    208 S   0.0  0.0   0:04.90 /usr/loca+
  2052 root      20   0   12832    344    216 S   0.0  0.0   0:05.21 /usr/loca+
  2059 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  4594 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  5633 root      20   0  271996  89088   2580 S   0.0  3.7   0:06.42 spamd chi+
  5634 root      20   0  247932  14780    264 S   0.0  0.6   0:00.03 spamd chi+
  6423 root      20   0       0      0      0 S   0.0  0.0   0:00.71 [kworker/+
  7846 nobody    20   0  277584  20288   4848 S   0.0  0.8   0:01.23 /usr/sbin+
  7873 nobody    20   0  277600  19964   4624 S   0.0  0.8   0:01.13 /usr/sbin+
  8368 nobody    20   0  277552  19932   4648 S   0.0  0.8   0:01.13 /usr/sbin+
  9092 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12355 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 12538 nobody    20   0  277928  19968   4576 S   0.0  0.8   0:00.52 /usr/sbin+
 12565 nobody    20   0  277520  19340   4232 S   0.0  0.8   0:00.58 /usr/sbin+
 12567 nobody    20   0  277924  19680   4352 S   0.0  0.8   0:00.56 /usr/sbin+
 12570 nobody    20   0  277584  19516   4320 S   0.0  0.8   0:00.50 /usr/sbin+
 13061 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 13081 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 13263 nobody    20   0  277788  19348   4100 S   0.0  0.8   0:00.45 /usr/sbin+
 13289 nobody    20   0  277908  19452   4172 S   0.0  0.8   0:00.50 /usr/sbin+
 13925 nobody    20   0  277520  19280   4212 S   0.0  0.8   0:00.43 /usr/sbin+
 15079 nobody    20   0  277920  19300   4024 S   0.0  0.8   0:00.26 /usr/sbin+
 15629 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 15831 nobody    20   0  277920  19272   3976 S   0.0  0.8   0:00.12 /usr/sbin+
 15840 nobody    20   0  277588  18760   3692 S   0.0  0.8   0:00.09 /usr/sbin+
 15853 nobody    20   0  277520  19060   3948 S   0.0  0.8   0:00.10 /usr/sbin+
 15854 nobody    20   0  277908  18976   3800 S   0.0  0.8   0:00.08 /usr/sbin+
 15855 nobody    20   0  277520  18712   3716 S   0.0  0.8   0:00.16 /usr/sbin+
 16682 healtho+  20   0  468076  75612   4280 S   0.0  3.1   0:05.00 php-fpm: +
 16885 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 16900 wp-tool+  20   0  445028    552    376 S   0.0  0.0   0:00.00 sw-engine+
 16933 cpanelp+  20   0  298280   2336   1492 S   0.0  0.1   0:00.00 php-fpm: +
 17005 nigeria   20   0  409376  15880   3912 S   0.0  0.7   0:00.19 php-fpm: +
 17013 root      20   0  157100   5072   3788 S   0.0  0.2   0:00.00 sshd: unk+
 17021 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: unk+
 17038 root      20   0  157100   5080   3788 S   0.0  0.2   0:00.00 sshd: unk+
 17039 sshd      20   0  115644   2628   1556 S   0.0  0.1   0:00.00 sshd: unk+
 17042 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 17055 root      20   0  157312   4868   3588 S   0.0  0.2   0:00.00 sshd: roo+
 17056 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 17057 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17059 root      20   0  183076   2424   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 17060 root      20   0  183076   2424   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 17061 root      20   0  183076   2424   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 17062 root      20   0  183076   2420   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 17064 root      20   0  183076   2416   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 17065 root      20   0  183076   2420   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 17066 root      20   0  183076   2420   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 17067 root      20   0  183076   2416   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 17068 root      20   0  183076   2416   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 17069 root      20   0  183076   2416   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 17071 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17073 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 17074 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 17075 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 17092 root      20   0   20164    984    788 S   0.0  0.0   0:00.00 jailshell+
 17093 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17094 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17095 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17096 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17098 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17099 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 17100 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 17102 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17103 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17105 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 /usr/loca+
 17120 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 17122 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 17123 nigeria   20   0  404052  16136  10380 S   0.0  0.7   0:00.01 /opt/cpan+
 17132 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 17143 root      20   0   20164    256      0 R   0.0  0.0   0:00.00 /usr/loca+
 17144 root      20   0   20164    256      0 R   0.0  0.0   0:00.00 /usr/loca+
 44973 root      20   0  181668   8292   1100 S   0.0  0.3   0:05.93 lfd - sle+
 47566 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152     80     40 S   0.0  0.0   0:00.95 [kworker]
 76551 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 81298 worencom  20   0   38488   2612   1644 S   0.0  0.1   0:00.02 dovecot/i+
 83419 root      20   0  183044   1664   1108 S   0.0  0.1   0:00.00 /usr/sbin+
 83465 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [kworker/+
 83479 root      20   0  113284    736    556 S   0.0  0.0   0:00.00 /bin/sh -+
 83501 root      20   0  108056    336    264 S   0.0  0.0   0:00.00 sleep 2h +
 97027 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 98122 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
100846 nobody    20   0  277804  20548   4860 S   0.0  0.8   0:02.23 /usr/sbin+
101967 nobody    20   0  277844  20976   5032 S   0.0  0.9   0:02.25 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov22   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov22   0:52  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov22   0:08  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov22   0:32  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov22   0:02  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root       6423  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kworker/u200:1]
root      76551  0.0  0.0      0     0 ?        S    00:49   0:00  \_ [kworker/u200:2]
root      83465  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/0:1]
root      97027  0.0  0.0      0     0 ?        S    01:21   0:00  \_ [kworker/0:2]
root      98122  0.0  0.0      0     0 ?        S    01:23   0:00  \_ [kworker/1:1]
root       2035  0.0  0.0      0     0 ?        S    01:31   0:00  \_ [kworker/0:3]
root       4594  0.0  0.0      0     0 ?        S    01:35   0:00  \_ [kworker/1:3]
root       9092  0.0  0.0      0     0 ?        S    01:42   0:00  \_ [kworker/1:4]
root      12355  0.0  0.0      0     0 ?        S    01:47   0:00  \_ [kworker/0:0]
root      13061  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/1:0]
root      13081  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/0:4]
root      15629  0.0  0.0      0     0 ?        S    01:52   0:00  \_ [kworker/0:5]
root          1  0.1  0.1  44508  3264 ?        Ss   Nov22   1:12 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.0  40240  1908 ?        Ss   Nov22   0:30 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352     8 ?        Ss   Nov22   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   112 ?        S<sl Nov22   0:04 /sbin/auditd
root        499  0.0  0.0  21540   348 ?        Ss   Nov22   0:01 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1164 ?        Ss   Nov22   0:12 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58720  1356 ?        Ss   Nov22   0:27 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256    44 ?        Ss   Nov22   0:00 /sbin/rpcbind -w
root        514  0.0  0.1 224148  3016 ?        Ss   Nov22   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.0 610540   840 ?        Ssl  Nov22   0:07 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780    80 ?        Ss   Nov22   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   224 ?        Ss   Nov22   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 1336536 1804 ?        Ssl  Nov22   0:37 /usr/sbin/nscd
root        544  0.0  0.0 195208     0 ?        Ssl  Nov22   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388     4 ?        Ss   Nov22   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    12 ?        Ss   Nov22   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124508   844 ?        Ss   Nov22   0:01 /usr/sbin/crond -n
root      83419  0.0  0.0 183044  1664 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      83479  0.0  0.0 113284   736 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      83501  0.0  0.0 108056   336 ?        S    01:00   0:00  |       \_ sleep 2h 15m
root      17057  0.0  0.0 183076  2420 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      17073  0.0  0.0 113284  1212 ?        Ss   01:54   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      17074  0.0  0.0 108052   356 ?        S    01:54   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      17075  0.0  0.0 113288  1520 ?        S    01:54   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      17145  0.0  0.0 153840  2096 ?        R    01:54   0:00  |               \_ ps auxf
root      17059  0.0  0.1 183076  2424 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      17092  0.0  0.0  20164   984 ?        Ss   01:54   0:00  |   \_ jailshell (cloudsms) [17143] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  17143  0.0  0.0  20164   256 ?        S    01:54   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  17146  0.0  0.0 113284  1212 ?        S    01:54   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      17060  0.0  0.1 183076  2424 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      17093  0.0  0.0  20164   808 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      17061  0.0  0.1 183076  2424 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      17105  0.0  0.0  20164   988 ?        Ss   01:54   0:00  |   \_ jailshell (cloudsms) [17147] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      17147  0.0  0.0  20164   256 ?        R    01:54   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      17062  0.0  0.0 183076  2420 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      17103  0.0  0.0  20164   804 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      17064  0.0  0.0 183076  2416 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      17094  0.0  0.0  20164   808 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      17065  0.0  0.0 183076  2420 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      17098  0.0  0.0  20164   808 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      17066  0.0  0.0 183076  2420 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      17095  0.0  0.0  20164   808 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      17067  0.0  0.0 183076  2416 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      17102  0.0  0.0  20164   804 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      17068  0.0  0.0 183076  2416 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      17096  0.0  0.0  20164   808 ?        Ss   01:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      17069  0.0  0.0 183076  2416 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      17100  0.0  0.0  20164   964 ?        Ss   01:54   0:00  |   \_ jailshell (pactpay) [17122] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   17122  0.0  0.0  20164   260 ?        S    01:54   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   17126  0.0  0.7 480124 17672 ?        S    01:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      17071  0.0  0.0 183076  2412 ?        S    01:54   0:00  \_ /usr/sbin/CROND -n
root      17099  0.0  0.0  20164   968 ?        Ss   01:54   0:00      \_ jailshell (nigeria) [17120] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   17120  0.0  0.0  20164   260 ?        S    01:54   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   17123  0.0  0.6 404052 16136 ?        S    01:54   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        591  0.0  0.0 108296     4 tty1     Ss+  Nov22   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov22   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  3572 ?        Ss   Nov22   0:01 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    28 ?        Ssl  Nov22   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.2 1277312 5772 ?        Ssl  Nov22   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    76 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372   644 ?        Ssl  Nov22   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   460 ?        Ss   Nov22   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.0  47116  2012 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  48232  2528 ?        S    Nov22   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   428 ?        S    Nov22   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   536 ?        S    Nov22   0:01  \_ dovecot/log
dovenull   1087  0.0  0.0  47264  2072 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1088  0.0  0.1  48324  2564 ?        S    Nov22   0:00  \_ dovecot/imap-login
root       1093  0.0  0.0  24528  1844 ?        S    Nov22   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   532 ?        S    Nov22   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1520 ?        S    Nov22   0:02  \_ dovecot/auth
worencom  81298  0.0  0.1  38488  2612 ?        S    00:56   0:00  \_ dovecot/imap
root      16885  0.0  0.1  60820  4512 ?        S    01:53   0:00  \_ dovecot/lmtp
telegraf    916  0.0  1.4 5654304 36064 ?       SLsl Nov22   0:28 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756     0 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.5 114016 12628 ?        Ssl  Nov22   0:12 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    68 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   356 ?        Ss   Nov22   0:07 /usr/sbin/sshd -D
root      17013  0.0  0.2 157100  5072 ?        Ss   01:53   0:00  \_ sshd: unknown [priv]
sshd      17021  0.0  0.1 115644  2624 ?        S    01:53   0:00  |   \_ sshd: unknown [net]
root      17038  0.0  0.2 157100  5080 ?        Ss   01:53   0:00  \_ sshd: unknown [priv]
sshd      17039  0.0  0.1 115644  2628 ?        S    01:53   0:00  |   \_ sshd: unknown [net]
root      17055  0.0  0.2 157312  4868 ?        Ss   01:53   0:00  \_ sshd: root [priv]
sshd      17056  0.0  0.1 115644  2628 ?        S    01:53   0:00      \_ sshd: root [net]
root        928  0.0  0.3 1276100 7716 ?        Ssl  Nov22   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028   592 ?        Ss   Nov22   0:02 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  16900  0.0  0.0 445028   552 ?        S    01:53   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   220 ?        Ss   Nov22   0:01 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132     0 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.0 439788   404 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   256 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        939  0.0 13.9 1828368 337620 ?      Ssl  Nov22   0:30 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.1 331088  2616 ?        Ssl  Nov22   0:15 /usr/sbin/rsyslogd -n
named       949  0.0  1.3 1054796 33608 ?       Ssl  Nov22   0:23 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  2444 ?        Ss   Nov22   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  16682 15.6  3.1 468076 75612 ?        S    01:53   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  16784 17.1  3.1 468348 75736 ?        R    01:53   0:03  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   17005  2.7  0.6 409376 15880 ?        S    01:53   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.2 261692  6356 ?        Ss   Nov22   0:08 cpsrvd (SSL) - waiting for connections                   
root      17042  0.0  0.0      0     0 ?        Z    01:53   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10564  3460 ?        Ss   Nov22   0:42 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   296 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   348 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  0.6 247932 16364 ?        Ss   Nov22   0:09 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5633  0.0  3.6 271996 89088 ?        S    Nov22   0:06  \_ spamd child
root       5634  0.0  0.6 247932 14780 ?        S    Nov22   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  2856 ?        S    Nov22   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387556  3312 ?        Ss   Nov22   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.3 412396  9292 ?        Ss   Nov22   0:16 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  0.2 183900  6448 ?        Ss   Nov22   0:05 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1263  0.0  0.1 167452  4164 ?        Ss   Nov22   0:00 dnsadmin - dormant mode
root       1264  0.0  0.3 209648  9596 ?        Ss   Nov22   0:06 tailwatchd
root       1800  0.0  0.0 299272   492 ?        Ss   Nov22   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
cpanelp+  16933  0.0  0.0 298280  2336 ?        S    01:53   0:00  \_ php-fpm: pool cpanelphpmyadmin
root       1834  0.0  0.0 130416  1364 ?        SN   Nov22   0:00 cpanellogd - sleeping for logs
mysql      1916  1.3  9.3 1478544 225844 ?      Sl   Nov22  11:57 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  7672 ?        Ss   Nov22   0:03 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12796   332 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   284 ?        S    Nov22   0:04  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12832   344 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340     4 ?        S    Nov22   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody   100846  0.1  0.8 277804 20548 ?        S    01:26   0:02  \_ /usr/sbin/httpd -k start
nobody   101967  0.1  0.8 277844 20976 ?        S    01:28   0:02  \_ /usr/sbin/httpd -k start
nobody     7846  0.1  0.8 277584 20288 ?        S    01:40   0:01  \_ /usr/sbin/httpd -k start
nobody     7873  0.1  0.8 277600 19964 ?        S    01:40   0:01  \_ /usr/sbin/httpd -k start
nobody     8368  0.1  0.8 277552 19932 ?        S    01:41   0:01  \_ /usr/sbin/httpd -k start
nobody    12538  0.1  0.8 277928 19968 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    12565  0.1  0.7 277520 19340 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
cloudw    17135  0.0  0.6 353712 15968 ?        S    01:54   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    12567  0.1  0.8 277924 19680 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    12570  0.1  0.8 277584 19516 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    13263  0.1  0.7 277788 19348 ?        S    01:48   0:00  \_ /usr/sbin/httpd -k start
nobody    13289  0.1  0.8 277908 19452 ?        S    01:48   0:00  \_ /usr/sbin/httpd -k start
nobody    13925  0.1  0.7 277520 19280 ?        S    01:49   0:00  \_ /usr/sbin/httpd -k start
nobody    15079  0.1  0.7 277920 19300 ?        S    01:51   0:00  \_ /usr/sbin/httpd -k start
nobody    15831  0.1  0.7 277920 19272 ?        S    01:52   0:00  \_ /usr/sbin/httpd -k start
nobody    15840  0.0  0.7 277588 18760 ?        S    01:52   0:00  \_ /usr/sbin/httpd -k start
nobody    15853  0.1  0.7 277520 19060 ?        S    01:52   0:00  \_ /usr/sbin/httpd -k start
nobody    15854  0.0  0.7 277908 18976 ?        S    01:52   0:00  \_ /usr/sbin/httpd -k start
nobody    15855  0.1  0.7 277520 18712 ?        S    01:52   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47566  0.0  0.0   3148     8 ?        Ss   Nov22   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152    80 ?        S    Nov22   0:00  \_ [kworker]
root      44973  0.0  0.3 181668  8292 ?        Ss   00:00   0:05 lfd - sleeping
## mysql stats
Uptime: 53455  Threads: 4  Questions: 4602575  Slow queries: 0  Opens: 10718  Flush tables: 1  Open tables: 2000  Queries per second avg: 86.101
*************************** 1. row ***************************
     Id: 72068
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 72076
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-23' LIMIT 1
*************************** 3. row ***************************
     Id: 72077
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 72080
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 128.14.236.224 TIME_WAIT
      1 142.44.225.48 TIME_WAIT
      1 15.235.96.224 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 ::1 TIME_WAIT
      1 213.180.203.125 TIME_WAIT
      1 52.167.144.219 TIME_WAIT
      1 93.159.230.84 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 48.210.12.181 TIME_WAIT
     29 85.204.70.100 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 01:54:01 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 14 hours 50 minutes 50 seconds
   Server load: 0.52 0.48 0.40
   Total accesses: 246241 - Total Traffic: 5.8 GB - Total Duration: 133183540
   CPU Usage: u9.19 s6.84 cu3027.85 cs2369.22 - 10.1% CPU load
   4.61 requests/sec - 113.8 kB/second - 24.7 kB/request - 540.867 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

RKKKWK_.KK.K._K_.__.....W._.._..................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc     M CPU   SS    Req    Dur    Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-0  100846 0/381/13172 R 9.55 2     5     6830387 0.0    10.16 315.61 85.204.70.100  http/1.1 health.oyostate.gov.ng:443
   1-0  13925  1/76/12894  K 1.81 2     342   7058852 34.3   1.88  315.53 192.178.4.104  http/1.1 team.cloudware.ng:443      GET /?l=2257768114 HTTP/1.1
   2-0  13263  1/81/12703  K 1.80 2     344   6963593 34.4   1.96  303.99 192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=888131862 HTTP/1.1
   3-0  12538  1/98/12201  K 2.10 4     341   6448126 34.1   2.69  302.02 192.178.4.103  http/1.1 team.cloudware.ng:443      GET /?l=724708295 HTTP/1.1
   4-0  8368   0/272/12450 W 4.22 0     0     6425444 0.0    4.57  302.81 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   5-0  101967 2/439/12786 K 9.38 3     296   6709517 65.2   11.54 334.33 192.178.4.102  http/1.1 team.cloudware.ng:443      GET /?l=648491322 HTTP/1.1
   6-0  15831  0/24/11842  _ 0.52 0     0     5978661 0.0    0.58  294.88 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   7-0  -      0/0/12149   . 0.00 88    0     6338265 0.0    0.00  296.25 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-0  15079  8/45/11786  K 0.99 0     349   6021406 249.7  1.10  282.56 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /?l=2582957339 HTTP/1.1
   9-0  13289  3/89/10800  K 1.95 3     267   5747583 97.3   2.27  267.94 192.178.4.100  http/1.1 team.cloudware.ng:443      GET /?l=3323109698 HTTP/1.1
   10-0 -      0/0/10947   . 0.00 82    0     5747085 0.0    0.00  258.22 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-0 15840  28/36/10926 K 0.22 0     656   5713323 1700.4 1.85  264.88 154.90.49.92   http/1.1 health.oyostate.gov.ng:443 GET /mandate/cmd.php HTTP/1.1
   12-0 -      0/0/10794   . 0.00 29    0     5694795 0.0    0.00  271.15 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 7846   0/243/10367 _ 4.76 0     284   5369580 0.0    4.99  246.14 85.204.70.100  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   14-0 7873   2/212/9325  K 4.46 2     352   4856558 65.9   4.82  222.88 192.178.4.105  http/1.1 team.cloudware.ng:443      GET /?l=167536255 HTTP/1.1
   15-0 15853  0/20/7621   _ 0.35 0     4     3954750 0.0    0.36  193.16 93.159.230.84  http/1.1 pactpay.com:443            GET / HTTP/1.1
   16-0 -      0/0/7916    . 0.00 90    0     4080311 0.0    0.00  183.96 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 15854  0/18/7042   _ 0.26 2     278   3709848 0.0    0.32  174.18 85.204.70.100  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   18-0 15855  0/25/6218   _ 0.67 1     32    3408243 0.0    0.71  149.09 52.167.144.219 http/1.1 cloudsms.com.ng:443        GET /bulksms_voucher_dealers_nigeria.php/recharge/SendToAll/bul
   19-0 -      0/0/6703    . 0.00 87    0     3403217 0.0    0.00  159.13 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -      0/0/5293    . 0.00 369   0     2954416 0.0    0.00  123.43 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -      0/0/3945    . 0.00 89    0     2413536 0.0    0.00  94.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -      0/0/3152    . 0.00 386   0     1874332 0.0    0.00  83.54  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -      0/0/2854    . 0.00 286   0     1555805 0.0    0.00  58.97  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 12565  2/111/1609  W 2.16 0     0     1260222 64.3   5.19  39.12  192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=1086085837 HTTP/1.1
   25-0 -      0/0/2570    . 0.00 390   0     1163271 0.0    0.00  57.91  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 12567  0/132/1874  _ 2.06 2     1     1161086 0.0    5.43  46.69  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   27-0 -      0/0/1301    . 0.00 353   0     843370  0.0    0.00  38.82  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -      0/0/1528    . 0.00 346   0     741140  0.0    0.00  34.17  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 12570  0/144/1617  _ 2.08 2     1     939919  0.0    1.91  33.56  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   30-0 -      0/0/1294    . 0.00 1654  0     796559  0.0    0.00  30.37  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -      0/0/535     . 0.00 1647  0     418251  0.0    0.00  9.62   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -      0/0/521     . 0.00 1660  0     501649  0.0    0.00  10.47  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -      0/0/226     . 0.00 1614  0     242996  0.0    0.00  4.32   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -      0/0/723     . 0.00 1067  0     452012  0.0    0.00  11.57  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -      0/0/645     . 0.00 1664  0     507090  0.0    0.00  14.62  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -      0/0/89      . 0.00 1628  0     137985  0.0    0.00  0.74   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -      0/0/222     . 0.00 1533  0     187355  0.0    0.00  4.82   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -      0/0/661     . 0.00 1653  0     330279  0.0    0.00  12.67  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -      0/0/582     . 0.00 1494  0     506531  0.0    0.00  13.50  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -      0/0/227     . 0.00 1656  0     280411  0.0    0.00  4.37   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -      0/0/416     . 0.00 1650  0     308037  0.0    0.00  9.50   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -      0/0/144     . 0.00 1627  0     280413  0.0    0.00  1.55   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -      0/0/290     . 0.00 814   0     344154  0.0    0.00  5.96   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -      0/0/292     . 0.00 1663  0     301816  0.0    0.00  6.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -      0/0/198     . 0.00 1626  0     141072  0.0    0.00  1.57   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -      0/0/60      . 0.00 10378 0     180509  0.0    0.00  0.80   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -      0/0/67      . 0.00 10400 0     226531  0.0    0.00  1.33   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -      0/0/203     . 0.00 10391 0     142085  0.0    0.00  4.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -      0/0/284     . 0.00 10043 0     181603  0.0    0.00  4.73   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -      0/0/82      . 0.00 10404 0     44788   0.0    0.00  1.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -      0/0/8       . 0.00 10364 0     43835   0.0    0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -      0/0/9       . 0.00 10373 0     45747   0.0    0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -      0/0/29      . 0.00 10371 0     44492   0.0    0.00  0.32   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -      0/0/536     . 0.00 8488  0     268842  0.0    0.00  11.18  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -      0/0/4       . 0.00 10408 0     23627   0.0    0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -      0/0/9       . 0.00 10367 0     47344   0.0    0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -      0/0/7       . 0.00 10369 0     44159   0.0    0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -      0/0/43      . 0.00 10410 11655 23366   0.0    0.00  0.07   45.94.58.4     http/1.1 cloudware.ng:80            GET /requirements.txt HTTP/1.1
   59-0 -      0/0/141     . 0.00 9771  0     113874  0.0    0.00  3.52   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -      0/0/132     . 0.00 10401 0     76946   0.0    0.00  2.87   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -      0/0/6       . 0.00 10399 0     3701    0.0    0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -      0/0/204     . 0.00 9959  0     97395   0.0    0.00  2.67   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -      0/0/66      . 0.00 10383 0     27806   0.0    0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -      0/0/11      . 0.00 10376 0     25454   0.0    0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -      0/0/9       . 0.00 10396 0     28822   0.0    0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -      0/0/27      . 0.00 11922 0     28      0.0    0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -      0/0/42      . 0.00 11927 0     46      0.0    0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -      0/0/3       . 0.00 11966 0     1240    0.0    0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -      0/0/2       . 0.00 11965 0     703     0.0    0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -      0/0/5       . 0.00 11958 0     1790    0.0    0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -      0/0/47      . 0.00 11905 0     737     0.0    0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -      0/0/1       . 0.00 11977 0     0       0.0    0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -      0/0/458     . 0.00 10512 0     263682  0.0    0.00  8.36   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -      0/0/9       . 0.00 11954 0     4803    0.0    0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -      0/0/1       . 0.00 11976 0     0       0.0    0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -      0/0/23      . 0.00 11917 0     2942    0.0    0.00  0.21   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -      0/0/200     . 0.00 11274 0     87870   0.0    0.00  4.44   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -      0/0/63      . 0.00 11777 0     25484   0.0    0.00  1.24   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 856
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 1...32)
   index usage: 15%, cache usage: 20%
   total entries stored since starting: 176945
   total entries replaced since starting: 0
   total entries expired since starting: 176019
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 479 miss
   total removes since starting: 70 hit, 189 miss
Youez - 2016 - github.com/yon3zu
LinuXploit