403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-23.02.09.txt
 ## swap threshold exceeded
## server overview
2025-11-23.02.09 load[0] mem[60/75] mysql[1/12] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1385          76          43         901         771
Swap:          1999        1654         345
 02:09:01 up 15:06,  0 users,  load average: 0.80, 0.64, 0.55
## system overview
top - 02:09:01 up 15:06,  0 users,  load average: 0.80, 0.64, 0.55
Tasks: 208 total,   5 running, 200 sleeping,   0 stopped,   3 zombie
%Cpu(s): 83.8 us, 16.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    77900 free,  1421880 used,   920520 buff/cache
KiB Swap:  2047996 total,   353712 free,  1694284 used.   786676 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 27321 healtho+  20   0  476716  83736   4280 R  72.2  3.5   0:03.94 php-fpm: +
  1916 mysql     20   0 1478544 226084   3784 S  38.9  9.3  12:14.95 /usr/sbin+
 27694 root      20   0  169872  16852   2880 S  22.2  0.7   0:00.09 /usr/loca+
 27737 cloudsms  20   0       0      0      0 Z  11.1  0.0   0:00.02 [php-cgi]+
 18283 nobody    20   0  277536  19820   4592 S   5.6  0.8   0:01.14 /usr/sbin+
 27708 nigeria   20   0  404052  16140  10384 S   5.6  0.7   0:00.04 /opt/cpan+
 27709 pactpay   20   0  480124  17668  11880 S   5.6  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44508   3284   1464 S   0.0  0.1   1:13.79 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:03.02 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.14 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:53.20 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.15 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.11 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:08.33 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 R   0.0  0.0   0:32.32 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:01.23 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.26 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:03.86 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:02.82 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40240   4392   4148 S   0.0  0.2   0:31.20 /usr/lib/+
   384 root      20   0   45352      8      4 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    112      0 S   0.0  0.0   0:05.07 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    348    260 S   0.0  0.0   0:01.24 /usr/sbin+
   501 root      20   0   24704   1168    808 S   0.0  0.0   0:12.34 /usr/lib/+
   502 dbus      20   0   58720   1356    612 S   0.0  0.1   0:28.26 /usr/bin/+
   504 rpc       20   0   69256     44      0 S   0.0  0.0   0:00.05 /sbin/rpc+
   514 root      20   0  224148   3016    788 S   0.0  0.1   0:00.58 queueproc+
   515 polkitd   20   0  610540    840    464 S   0.0  0.0   0:07.16 /usr/lib/+
   521 root      20   0  152780     80     36 S   0.0  0.0   0:00.03 /usr/sbin+
   523 root      20   0   52852    224    136 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0 1336536   1836    644 S   0.0  0.1   0:38.16 /usr/sbin+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     12      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124508    844    416 S   0.0  0.0   0:01.50 /usr/sbin+
   591 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   3820    892 S   0.0  0.2   0:01.05 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.59 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     28     28 S   0.0  0.0   0:01.17 /usr/bin/+
   912 root      20   0 1277312   5772      4 S   0.0  0.2   0:24.75 /usr/bin/+
   913 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   914 root      20   0  572372    644    176 S   0.0  0.0   0:04.65 /usr/bin/+
   915 root      20   0   51508    460    292 S   0.0  0.0   0:00.81 /usr/sbin+
   916 telegraf  20   0 5654304  36832   5604 S   0.0  1.5   0:28.92 /usr/loca+
   917 systuser  20   0   12756      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   925 systuser  20   0  114016  12396   2472 S   0.0  0.5   0:12.65 /usr/loca+
   926 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   927 root      20   0  111304    356    256 S   0.0  0.0   0:07.65 /usr/sbin+
   928 root      20   0 1276100   7716      0 S   0.0  0.3   0:25.69 /usr/bin/+
   930 root      20   0  445028    592    480 S   0.0  0.0   0:02.12 sw-engine+
   931 root      20   0  153404    220    136 S   0.0  0.0   0:01.18 pure-ftpd+
   932 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   934 root      20   0  439788    404    312 S   0.0  0.0   0:01.43 php-fpm: +
   938 root      20   0  388892    536    436 S   0.0  0.0   0:01.33 php-fpm: +
   939 root      20   0 1828368 335604    640 S   0.0 13.9   0:30.06 /usr/loca+
   940 root      20   0  331088   4808   4220 S   0.0  0.2   0:15.52 /usr/sbin+
   949 named     20   0 1054796  34072   2040 S   0.0  1.4   0:24.46 /usr/sbin+
   958 root      20   0  400740   2444    604 S   0.0  0.1   0:06.81 php-fpm: +
   962 root      20   0  261692   6336   1680 S   0.0  0.3   0:08.55 cpsrvd (S+
   969 cpanelc+  20   0   10564   3456   2292 S   0.0  0.1   0:43.22 /usr/loca+
   979 root      20   0  396248    296    216 S   0.0  0.0   0:01.36 php-fpm: +
   985 root      20   0  389508    516    420 S   0.0  0.0   0:01.43 php-fpm: +
  1083 dovenull  20   0   47116   2012   1392 S   0.0  0.1   0:01.70 dovecot/p+
  1084 dovenull  20   0   48232   2508   1508 S   0.0  0.1   0:00.61 dovecot/i+
  1085 dovecot   20   0   10320    428    312 S   0.0  0.0   0:00.40 dovecot/a+
  1086 root      20   0   10452    536    348 S   0.0  0.0   0:01.04 dovecot/l+
  1087 dovenull  20   0   47264   2060   1432 S   0.0  0.1   0:01.96 dovecot/p+
  1088 dovenull  20   0   48324   2556   1600 S   0.0  0.1   0:00.58 dovecot/i+
  1093 root      20   0   24528   1844    436 S   0.0  0.1   0:00.35 dovecot/c+
  1101 dovecot   20   0   13568    532    316 S   0.0  0.0   0:00.14 dovecot/s+
  1142 root      20   0  247932  16364    720 S   0.0  0.7   0:09.28 /usr/loca+
  1161 dovecot   20   0   41320   1520   1012 S   0.0  0.1   0:02.62 dovecot/a+
  1175 systuser  20   0  157708   2856    808 S   0.0  0.1   0:00.24 SonarPush+
  1177 wp-tool+  20   0  387556   3588   1656 S   0.0  0.1   0:00.47 /usr/bin/+
  1178 wp-tool+  20   0  412396   9732   1668 S   0.0  0.4   0:17.13 /usr/bin/+
  1260 root      20   0  183900   6696   3460 S   0.0  0.3   0:05.68 cpdavd - +
  1263 root      20   0  167452   4160   2792 S   0.0  0.2   0:00.87 dnsadmin +
  1264 root      20   0  209648   9648   1904 S   0.0  0.4   0:06.36 tailwatchd
  1800 root      20   0  299272    492    332 S   0.0  0.0   0:01.43 php-fpm: +
  1834 root      38  18  130416   1372    692 S   0.0  0.1   0:00.14 cpanellog+
  2048 root      20   0  267052   7672    476 S   0.0  0.3   0:03.78 /usr/sbin+
  2050 root      20   0   12800    332    212 S   0.0  0.0   0:05.68 /usr/loca+
  2051 root      20   0   12732    284    208 S   0.0  0.0   0:05.01 /usr/loca+
  2052 root      20   0   12824    344    216 S   0.0  0.0   0:05.33 /usr/loca+
  2059 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  5633 root      20   0  271996  88924   2416 S   0.0  3.7   0:06.50 spamd chi+
  5634 root      20   0  247932  14780    264 S   0.0  0.6   0:00.03 spamd chi+
  6423 root      20   0       0      0      0 S   0.0  0.0   0:00.74 [kworker/+
  9092 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 13081 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 15840 nobody    20   0  277612  19928   4584 S   0.0  0.8   0:01.42 /usr/sbin+
 18278 nobody    20   0  277560  19900   4628 S   0.0  0.8   0:00.94 /usr/sbin+
 18284 nobody    20   0  277912  19784   4368 S   0.0  0.8   0:01.06 /usr/sbin+
 19301 nobody    20   0  277704  20148   4712 S   0.0  0.8   0:01.12 /usr/sbin+
 20734 nobody    20   0  277700  20144   4520 S   0.0  0.8   0:00.86 /usr/sbin+
 21598 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21651 nobody    20   0  277552  19668   4512 S   0.0  0.8   0:00.94 /usr/sbin+
 22000 nobody    20   0  277668  19636   4360 S   0.0  0.8   0:00.83 /usr/sbin+
 22224 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 22801 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 23684 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 23995 nobody    20   0  277784  19628   4176 S   0.0  0.8   0:00.58 /usr/sbin+
 24033 nobody    20   0  277520  19496   4276 S   0.0  0.8   0:00.41 /usr/sbin+
 24034 nobody    20   0  277552  19240   4108 S   0.0  0.8   0:00.46 /usr/sbin+
 25558 nobody    20   0  277704  19580   4244 S   0.0  0.8   0:00.30 /usr/sbin+
 26127 nobody    20   0  277552  19108   3980 S   0.0  0.8   0:00.19 /usr/sbin+
 26140 nobody    20   0  277588  19276   4100 S   0.0  0.8   0:00.19 /usr/sbin+
 26141 nobody    20   0  277584  19128   3924 S   0.0  0.8   0:00.19 /usr/sbin+
 26673 nobody    20   0  277780  19176   3852 S   0.0  0.8   0:00.17 /usr/sbin+
 26954 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26981 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 27019 nobody    20   0  277520  18776   3764 S   0.0  0.8   0:00.07 /usr/sbin+
 27154 oyotech+  20   0  389236   6352   2936 S   0.0  0.3   0:00.11 php-fpm: +
 27276 nigeria   20   0  400460   5032   2396 S   0.0  0.2   0:00.01 php-fpm: +
 27330 healtho+  20   0  467844  75904   4280 S   0.0  3.1   0:03.86 php-fpm: +
 27435 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 27462 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
 27465 oyotech+  20   0  389236   6332   2940 S   0.0  0.3   0:00.02 php-fpm: +
 27521 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 27551 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [dnsadmin+
 27568 cpanelp+  20   0  298280   2336   1492 S   0.0  0.1   0:00.00 php-fpm: +
 27630 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 27633 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 27634 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: unk+
 27643 oyocovi+  20   0  400460   3248   1176 S   0.0  0.1   0:00.00 php-fpm: +
 27647 root      20   0  183076   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27648 root      20   0  183076   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27649 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 27651 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 27652 root      20   0  183076   2412   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27653 root      20   0  183076   2412   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27654 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27655 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27656 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27657 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27658 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 27660 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 27663 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 27664 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 27665 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 27676 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 27677 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 27679 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 27680 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 27681 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 27682 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 27683 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 27684 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 27685 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 27686 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 27689 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 27699 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 27701 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 27729 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 27732 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 27735 cloudsms  20   0  113284   1212   1036 R   0.0  0.1   0:00.00 /usr/loca+
 27736 root      20   0  113496   1424   1236 S   0.0  0.1   0:00.00 bash /usr+
 27738 root      20   0   18868   3156   1592 R   0.0  0.1   0:00.00 /usr/bin/+
 44973 root      20   0  181772   8560   1100 S   0.0  0.4   0:06.75 lfd - sle+
 47566 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152     80     40 S   0.0  0.0   0:00.98 [kworker]
 81298 worencom  20   0   38488   2572   1604 S   0.0  0.1   0:00.02 dovecot/i+
 83419 root      20   0  183044   1664   1108 S   0.0  0.1   0:00.00 /usr/sbin+
 83465 root      20   0       0      0      0 S   0.0  0.0   0:00.30 [kworker/+
 83479 root      20   0  113284    736    556 S   0.0  0.0   0:00.00 /bin/sh -+
 83501 root      20   0  108056    336    264 S   0.0  0.0   0:00.00 sleep 2h +
 98122 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
100846 nobody    20   0  277812  20844   4864 S   0.0  0.9   0:03.71 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov22   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov22   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov22   0:53  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov22   0:08  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov22   0:32  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov22   0:02  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root       6423  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kworker/u200:1]
root      83465  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/0:1]
root      98122  0.0  0.0      0     0 ?        S    01:23   0:00  \_ [kworker/1:1]
root       9092  0.0  0.0      0     0 ?        S    01:42   0:00  \_ [kworker/1:4]
root      13081  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/0:4]
root      21598  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/u200:2]
root      22224  0.0  0.0      0     0 ?        S    02:01   0:00  \_ [kworker/1:2]
root      22801  0.0  0.0      0     0 ?        S    02:02   0:00  \_ [kworker/1:3]
root      23684  0.0  0.0      0     0 ?        S    02:03   0:00  \_ [kworker/0:3]
root      26954  0.0  0.0      0     0 ?        S    02:08   0:00  \_ [kworker/1:0]
root      26981  0.0  0.0      0     0 ?        S    02:08   0:00  \_ [kworker/1:5]
root          1  0.1  0.1  44508  3284 ?        Ss   Nov22   1:13 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  40240  4392 ?        Ss   Nov22   0:31 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352     8 ?        Ss   Nov22   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   112 ?        S<sl Nov22   0:05 /sbin/auditd
root        499  0.0  0.0  21540   348 ?        Ss   Nov22   0:01 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1168 ?        Ss   Nov22   0:12 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58720  1356 ?        Ss   Nov22   0:28 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256    44 ?        Ss   Nov22   0:00 /sbin/rpcbind -w
root        514  0.0  0.1 224148  3016 ?        Ss   Nov22   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.0 610540   840 ?        Ssl  Nov22   0:07 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780    80 ?        Ss   Nov22   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   224 ?        Ss   Nov22   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 1336536 1836 ?        Ssl  Nov22   0:38 /usr/sbin/nscd
root        544  0.0  0.0 195208     0 ?        Ssl  Nov22   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388     4 ?        Ss   Nov22   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    12 ?        Ss   Nov22   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124508   844 ?        Ss   Nov22   0:01 /usr/sbin/crond -n
root      83419  0.0  0.0 183044  1664 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      83479  0.0  0.0 113284   736 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      83501  0.0  0.0 108056   336 ?        S    01:00   0:00  |       \_ sleep 2h 15m
root      27647  0.0  0.0 183076  2416 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      27663  0.0  0.0 113284  1208 ?        Ss   02:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      27664  0.0  0.0 108052   356 ?        S    02:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      27665  0.0  0.0 113288  1516 ?        S    02:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      27739  0.0  0.0 153840  2096 ?        R    02:09   0:00  |               \_ ps auxf
root      27648  0.0  0.0 183076  2416 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      27681  0.0  0.0  20164   804 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      27649  0.0  0.0 183076  2420 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      27685  0.0  0.0  20164   808 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      27651  0.0  0.0 183076  2416 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      27684  0.0  0.0  20164   808 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      27652  0.0  0.0 183076  2412 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      27680  0.0  0.0  20164   804 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      27653  0.0  0.0 183076  2412 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      27689  0.0  0.0  20164   808 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      27654  0.0  0.0 183076  2408 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      27679  0.0  0.0  20164   992 ?        Ss   02:09   0:00  |   \_ jailshell (cloudsms) [27732] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  27732  0.0  0.0      0     0 ?        D    02:09   0:00  |       \_ [jailshell]
root      27655  0.0  0.0 183076  2408 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      27682  0.0  0.0  20164   804 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      27656  0.0  0.0 183076  2408 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      27677  0.0  0.0  20164   808 ?        Ss   02:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      27657  0.0  0.0 183076  2408 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      27686  0.0  0.0 113284  1212 ?        Ss   02:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      27694  0.0  0.6 169872 16852 ?        S    02:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      27736  0.0  0.0 113496  1424 ?        S    02:09   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      27738  0.0  0.1  19124  3568 ?        R    02:09   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      27658  0.0  0.0 183076  2412 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      27683  0.0  0.0  20164   972 ?        Ss   02:09   0:00  |   \_ jailshell (pactpay) [27701] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   27701  0.0  0.0  20164   264 ?        S    02:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   27709  0.0  0.7 480124 17668 ?        S    02:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      27660  0.0  0.0 183076  2408 ?        S    02:09   0:00  \_ /usr/sbin/CROND -n
root      27676  0.0  0.0  20164   968 ?        Ss   02:09   0:00      \_ jailshell (nigeria) [27699] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   27699  0.0  0.0  20164   260 ?        S    02:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   27708  0.0  0.6 404052 16140 ?        S    02:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        591  0.0  0.0 108296     4 tty1     Ss+  Nov22   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov22   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  3820 ?        Ss   Nov22   0:01 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    28 ?        Ssl  Nov22   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.2 1277312 5772 ?        Ssl  Nov22   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    76 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372   644 ?        Ssl  Nov22   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   460 ?        Ss   Nov22   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.0  47116  2012 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  48232  2508 ?        S    Nov22   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   428 ?        S    Nov22   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   536 ?        S    Nov22   0:01  \_ dovecot/log
dovenull   1087  0.0  0.0  47264  2060 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1088  0.0  0.1  48324  2556 ?        S    Nov22   0:00  \_ dovecot/imap-login
root       1093  0.0  0.0  24528  1844 ?        S    Nov22   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   532 ?        S    Nov22   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1520 ?        S    Nov22   0:02  \_ dovecot/auth
worencom  81298  0.0  0.1  38488  2572 ?        S    00:56   0:00  \_ dovecot/imap
root      27435  0.0  0.1  41052  2724 ?        S    02:08   0:00  \_ dovecot/auth -w
root      27521  0.0  0.1  60820  4508 ?        S    02:08   0:00  \_ dovecot/lmtp
telegraf    916  0.0  1.5 5654304 36832 ?       SLsl Nov22   0:28 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756     0 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.5 114016 12396 ?        Ssl  Nov22   0:12 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    68 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   356 ?        Ss   Nov22   0:07 /usr/sbin/sshd -D
root      27633  0.0  0.2 157100  5076 ?        Ss   02:08   0:00  \_ sshd: unknown [priv]
sshd      27634  0.0  0.1 115644  2624 ?        S    02:08   0:00      \_ sshd: unknown [net]
root        928  0.0  0.3 1276100 7716 ?        Ssl  Nov22   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028   592 ?        Ss   Nov22   0:02 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  27462  0.0  0.0 445028   324 ?        S    02:08   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   220 ?        Ss   Nov22   0:01 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132     0 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.0 439788   404 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   536 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
oyotech+  27154  0.2  0.2 389236  6352 ?        S    02:08   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
oyotech+  27465  0.1  0.2 389236  6332 ?        S    02:08   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
root        939  0.0 13.8 1828368 335604 ?      Ssl  Nov22   0:30 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.1 331088  4808 ?        Ssl  Nov22   0:15 /usr/sbin/rsyslogd -n
named       949  0.0  1.4 1054796 34072 ?       Ssl  Nov22   0:24 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  2444 ?        Ss   Nov22   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   27276  0.0  0.2 400460  5032 ?        S    02:08   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  27321 13.7  3.4 476716 83736 ?        R    02:08   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  27330 13.7  3.1 467844 75904 ?        S    02:08   0:03  \_ php-fpm: pool health_oyostate_gov_ng
oyocovi+  27643  0.0  0.1 400460  3248 ?        S    02:09   0:00  \_ php-fpm: pool covid19_oyostate_gov_ng
root        962  0.0  0.2 261692  6336 ?        Ss   Nov22   0:08 cpsrvd (SSL) - waiting for connections                   
root      27630  0.0  0.0      0     0 ?        Z    02:08   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10564  3456 ?        Ss   Nov22   0:43 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   296 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   516 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  0.6 247932 16364 ?        Ss   Nov22   0:09 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5633  0.0  3.6 271996 88924 ?        S    Nov22   0:06  \_ spamd child
root       5634  0.0  0.6 247932 14780 ?        S    Nov22   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  2856 ?        S    Nov22   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387556  3588 ?        Ss   Nov22   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.4 412396  9732 ?        Ss   Nov22   0:17 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  0.2 183900  6696 ?        Ss   Nov22   0:05 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1263  0.0  0.1 167452  4160 ?        Ss   Nov22   0:00 dnsadmin - dormant mode
root      27551  0.0  0.0      0     0 ?        Z    02:08   0:00  \_ [dnsadmin - dorm] <defunct>
root       1264  0.0  0.3 209648  9648 ?        Ss   Nov22   0:06 tailwatchd
root       1800  0.0  0.0 299272   492 ?        Ss   Nov22   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
cpanelp+  27568  0.0  0.0 298280  2336 ?        S    02:08   0:00  \_ php-fpm: pool cpanelphpmyadmin
root       1834  0.0  0.0 130416  1372 ?        SN   Nov22   0:00 cpanellogd - sleeping for logs
mysql      1916  1.3  9.3 1478544 226084 ?      Sl   Nov22  12:14 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  7672 ?        Ss   Nov22   0:03 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12800   332 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   284 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12824   344 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340     4 ?        S    Nov22   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody   100846  0.1  0.8 277812 20844 ?        S    01:26   0:03  \_ /usr/sbin/httpd -k start
nobody    15840  0.1  0.8 277612 19928 ?        S    01:52   0:01  \_ /usr/sbin/httpd -k start
nobody    18278  0.1  0.8 277560 19900 ?        S    01:55   0:00  \_ /usr/sbin/httpd -k start
nobody    18283  0.1  0.8 277536 19820 ?        S    01:55   0:01  \_ /usr/sbin/httpd -k start
nobody    18284  0.1  0.8 277912 19784 ?        S    01:55   0:01  \_ /usr/sbin/httpd -k start
nobody    19301  0.1  0.8 277704 20148 ?        S    01:57   0:01  \_ /usr/sbin/httpd -k start
nobody    20734  0.1  0.8 277700 20144 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
nobody    21651  0.1  0.8 277552 19668 ?        S    02:00   0:00  \_ /usr/sbin/httpd -k start
nobody    22000  0.1  0.8 277668 19636 ?        S    02:00   0:00  \_ /usr/sbin/httpd -k start
nobody    23995  0.1  0.8 277784 19628 ?        S    02:03   0:00  \_ /usr/sbin/httpd -k start
nobody    24033  0.1  0.8 277520 19496 ?        S    02:03   0:00  \_ /usr/sbin/httpd -k start
nobody    24034  0.1  0.7 277552 19240 ?        S    02:03   0:00  \_ /usr/sbin/httpd -k start
nobody    25558  0.1  0.8 277704 19580 ?        S    02:05   0:00  \_ /usr/sbin/httpd -k start
nobody    26127  0.1  0.7 277552 19108 ?        S    02:06   0:00  \_ /usr/sbin/httpd -k start
nobody    26140  0.1  0.7 277588 19276 ?        S    02:06   0:00  \_ /usr/sbin/httpd -k start
nobody    26141  0.1  0.7 277584 19128 ?        S    02:06   0:00  \_ /usr/sbin/httpd -k start
nobody    26673  0.1  0.7 277780 19176 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    27019  0.1  0.7 277520 18776 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47566  0.0  0.0   3148     8 ?        Ss   Nov22   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152    80 ?        S    Nov22   0:00  \_ [kworker]
root      44973  0.0  0.3 181772  8560 ?        Ss   00:00   0:06 lfd - sleeping
## mysql stats
Uptime: 54355  Threads: 4  Questions: 4735358  Slow queries: 0  Opens: 10820  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.119
*************************** 1. row ***************************
     Id: 73830
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 73832
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-23' LIMIT 1
*************************** 3. row ***************************
     Id: 73835
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 73839
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.157.111 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.161.37.60 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 48.210.12.181 TIME_WAIT
     32 85.204.70.100 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 02:09:02 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 15 hours 5 minutes 51 seconds
   Server load: 0.80 0.64 0.55
   Total accesses: 252118 - Total Traffic: 5.9 GB - Total Duration: 135522625
   CPU Usage: u10.92 s7.43 cu3080.17 cs2408.54 - 10.1% CPU load
   4.64 requests/sec - 114.3 kB/second - 24.6 kB/request - 537.536 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

KK_WK._W_._KWRKK.W.K_K..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc      M CPU    SS    Req    Dur    Conn  Child  Slot     Client     Protocol            VHost                                      Request
   0-0  100846 9/725/13516  K 15.49 1     303   6961675 283.2  16.00 321.46 192.178.4.104 http/1.1 team.cloudware.ng:443       GET /?l=1925068887 HTTP/1.1
   1-0  27019  3/20/13174   K 0.20  1     271   7202305 92.9   0.26  324.69 192.178.4.105 http/1.1 team.cloudware.ng:443       GET /?l=2205876609 HTTP/1.1
   2-0  25558  0/109/12984  _ 0.96  0     295   7071363 0.0    1.25  308.21 85.204.70.100 http/1.1 health.oyostate.gov.ng:443  POST //xmlrpc.php HTTP/1.1
   3-0  20734  0/187/12472  W 3.42  0     0     6552875 0.0    3.75  307.16 192.178.4.102 http/1.1 team.cloudware.ng:443       GET /?l=1920780792 HTTP/1.1
   4-0  22000  4/170/12742  K 3.12  2     268   6551584 126.4  4.08  309.21 192.178.4.101 http/1.1 team.cloudware.ng:443       GET /?l=4272400310 HTTP/1.1
   5-0  -      0/0/13097    . 0.00  26    0     6803540 0.0    0.00  339.75 ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   6-0  26127  0/43/12070   _ 0.71  0     389   6075747 0.0    0.73  299.31 192.178.4.102 http/1.1 team.cloudware.ng:443       GET /?l=702325926 HTTP/1.1
   7-0  19301  0/337/12494  W 4.12  0     0     6423606 0.0    3.88  300.17 ::1           http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   8-0  26673  0/32/12014   _ 0.66  1     354   6113420 0.0    0.70  286.75 192.178.4.101 http/1.1 team.cloudware.ng:443       GET /?l=1424894708 HTTP/1.1
   9-0  -      0/0/11038    . 0.00  113   0     5856205 0.0    0.00  272.49 ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   10-0 26140  0/44/11139   _ 0.73  0     0     5829426 0.0    0.98  262.13 ::1           http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   11-0 15840  1/450/11340  K 4.59  2     400   5883078 35.3   15.94 278.97 192.178.4.98  http/1.1 team.cloudware.ng:443       GET /?l=1776939437 HTTP/1.1
   12-0 18278  26/247/11043 W 2.94  0     0     5786715 2650.1 6.39  277.54 154.90.49.92  http/1.1 health.oyostate.gov.ng:443  GET /wp-includes/SimplePie/library/SimplePie/Cache/ HTTP/1.1
   13-0 21651  0/187/10663  R 3.56  2     1     5499351 0.0    4.04  252.49 85.204.70.100 http/1.1
   14-0 23995  5/207/9634   K 1.89  1     302   4944288 156.1  1.94  226.98 192.178.4.100 http/1.1 team.cloudware.ng:443       GET /?l=803757436 HTTP/1.1
   15-0 18283  2/258/7897   K 4.10  0     309   4059691 66.2   4.46  198.00 192.178.4.97  http/1.1 team.cloudware.ng:443       GET /?l=648045052 HTTP/1.1
   16-0 -      0/0/8126     . 0.00  119   0     4164542 0.0    0.00  188.43 ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   17-0 26141  0/44/7201    W 0.65  0     0     3782598 0.0    0.85  177.59 192.178.4.99  http/1.1 team.cloudware.ng:443       GET /?l=817710623 HTTP/1.1
   18-0 -      0/0/6301     . 0.00  209   0     3445576 0.0    0.00  150.66 ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   19-0 18284  1/331/7034   K 3.31  4     346   3555898 33.9   13.21 172.34 192.178.4.99  http/1.1 team.cloudware.ng:443       GET /?l=3496727293 HTTP/1.1
   20-0 24033  0/97/5466    _ 1.34  0     2     3024542 0.0    1.50  126.58 58.97.220.33  http/1.1 covid19.oyostate.gov.ng:443 GET /kindex.php HTTP/1.1
   21-0 24034  1/99/4160    K 1.67  0     264   2490467 33.6   1.80  97.39  192.178.4.97  http/1.1 team.cloudware.ng:443       GET /?l=1735365682 HTTP/1.1
   22-0 -      0/0/3214     . 0.00  115   0     1902704 0.0    0.00  84.89  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   23-0 -      0/0/2854     . 0.00  1186  0     1555805 0.0    0.00  58.97  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   24-0 -      0/0/1636     . 0.00  795   0     1282876 0.0    0.00  39.63  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   25-0 -      0/0/2570     . 0.00  1290  0     1163271 0.0    0.00  57.91  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   26-0 -      0/0/1903     . 0.00  804   0     1185213 0.0    0.00  47.42  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   27-0 -      0/0/1301     . 0.00  1253  0     843370  0.0    0.00  38.82  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   28-0 -      0/0/1528     . 0.00  1246  0     741140  0.0    0.00  34.17  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   29-0 -      0/0/1651     . 0.00  787   0     952853  0.0    0.00  34.23  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-0 -      0/0/1294     . 0.00  2555  0     796559  0.0    0.00  30.37  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   31-0 -      0/0/535      . 0.00  2548  0     418251  0.0    0.00  9.62   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   32-0 -      0/0/521      . 0.00  2561  0     501649  0.0    0.00  10.47  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   33-0 -      0/0/226      . 0.00  2515  0     242996  0.0    0.00  4.32   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   34-0 -      0/0/723      . 0.00  1967  0     452012  0.0    0.00  11.57  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   35-0 -      0/0/645      . 0.00  2565  0     507090  0.0    0.00  14.62  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   36-0 -      0/0/89       . 0.00  2529  0     137985  0.0    0.00  0.74   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 -      0/0/222      . 0.00  2434  0     187355  0.0    0.00  4.82   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   38-0 -      0/0/661      . 0.00  2554  0     330279  0.0    0.00  12.67  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   39-0 -      0/0/582      . 0.00  2395  0     506531  0.0    0.00  13.50  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   40-0 -      0/0/227      . 0.00  2557  0     280411  0.0    0.00  4.37   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -      0/0/416      . 0.00  2551  0     308037  0.0    0.00  9.50   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -      0/0/144      . 0.00  2528  0     280413  0.0    0.00  1.55   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -      0/0/290      . 0.00  1715  0     344154  0.0    0.00  5.96   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -      0/0/292      . 0.00  2564  0     301816  0.0    0.00  6.10   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -      0/0/198      . 0.00  2527  0     141072  0.0    0.00  1.57   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   46-0 -      0/0/60       . 0.00  11279 0     180509  0.0    0.00  0.80   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   47-0 -      0/0/67       . 0.00  11301 0     226531  0.0    0.00  1.33   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   48-0 -      0/0/203      . 0.00  11292 0     142085  0.0    0.00  4.09   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   49-0 -      0/0/284      . 0.00  10943 0     181603  0.0    0.00  4.73   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   50-0 -      0/0/82       . 0.00  11305 0     44788   0.0    0.00  1.22   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   51-0 -      0/0/8        . 0.00  11265 0     43835   0.0    0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   52-0 -      0/0/9        . 0.00  11274 0     45747   0.0    0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   53-0 -      0/0/29       . 0.00  11272 0     44492   0.0    0.00  0.32   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   54-0 -      0/0/536      . 0.00  9388  0     268842  0.0    0.00  11.18  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   55-0 -      0/0/4        . 0.00  11309 0     23627   0.0    0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   56-0 -      0/0/9        . 0.00  11268 0     47344   0.0    0.00  0.17   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   57-0 -      0/0/7        . 0.00  11270 0     44159   0.0    0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   58-0 -      0/0/43       . 0.00  11311 11655 23366   0.0    0.00  0.07   45.94.58.4    http/1.1 cloudware.ng:80             GET /requirements.txt HTTP/1.1
   59-0 -      0/0/141      . 0.00  10672 0     113874  0.0    0.00  3.52   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   60-0 -      0/0/132      . 0.00  11302 0     76946   0.0    0.00  2.87   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   61-0 -      0/0/6        . 0.00  11300 0     3701    0.0    0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   62-0 -      0/0/204      . 0.00  10859 0     97395   0.0    0.00  2.67   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   63-0 -      0/0/66       . 0.00  11284 0     27806   0.0    0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   64-0 -      0/0/11       . 0.00  11277 0     25454   0.0    0.00  0.16   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   65-0 -      0/0/9        . 0.00  11297 0     28822   0.0    0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   66-0 -      0/0/27       . 0.00  12823 0     28      0.0    0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   67-0 -      0/0/42       . 0.00  12828 0     46      0.0    0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   68-0 -      0/0/3        . 0.00  12866 0     1240    0.0    0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   69-0 -      0/0/2        . 0.00  12865 0     703     0.0    0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   70-0 -      0/0/5        . 0.00  12858 0     1790    0.0    0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   71-0 -      0/0/47       . 0.00  12806 0     737     0.0    0.00  0.08   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   72-0 -      0/0/1        . 0.00  12877 0     0       0.0    0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   73-0 -      0/0/458      . 0.00  11412 0     263682  0.0    0.00  8.36   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   74-0 -      0/0/9        . 0.00  12854 0     4803    0.0    0.00  0.22   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   75-0 -      0/0/1        . 0.00  12876 0     0       0.0    0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   76-0 -      0/0/23       . 0.00  12818 0     2942    0.0    0.00  0.21   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   77-0 -      0/0/200      . 0.00  12174 0     87870   0.0    0.00  4.44   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   78-0 -      0/0/63       . 0.00  12678 0     25484   0.0    0.00  1.24   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1049
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...42)
   index usage: 18%, cache usage: 25%
   total entries stored since starting: 180003
   total entries replaced since starting: 0
   total entries expired since starting: 178884
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 479 miss
   total removes since starting: 70 hit, 189 miss
Youez - 2016 - github.com/yon3zu
LinuXploit