403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-10.02.00.txt
 ## swap threshold exceeded
## server overview
2025-11-10.02.00 load[1] mem[71/54] mysql[4/9] httpd[9]
              total        used        free      shared  buff/cache   available
Mem:           2363        1619          68          30         675         554
Swap:          1999        1185         814
 02:00:02 up  1:06,  0 users,  load average: 1.43, 0.94, 0.80
## system overview
top - 02:00:02 up  1:06,  0 users,  load average: 1.43, 0.94, 0.80
Tasks: 223 total,   8 running, 214 sleeping,   0 stopped,   1 zombie
%Cpu(s): 73.5 us, 26.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    95144 free,  1652796 used,   672360 buff/cache
KiB Swap:  2047996 total,   832764 free,  1215232 used.   572888 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1851 mysql     20   0 1461848 215236   3216 S  70.6  8.9   1:07.63 /usr/sbin+
 40247 healtho+  20   0  461848  72156   4216 R  41.2  3.0   0:03.91 php-fpm: +
     1 root      20   0   44420   3424   1500 S   5.9  0.1   0:06.06 /usr/lib/+
   482 dbus      20   0   58712   1404    648 S   5.9  0.1   0:02.13 /usr/bin/+
 40708 root      20   0  114256   2428   1280 S   5.9  0.1   0:00.01 bash /usr+
 40737 nigeria   20   0  400652  15940  10220 S   5.9  0.7   0:00.06 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.34 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:04.88 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:00.61 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:09.40 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   109 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.90 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.79 [kworker/+
   357 root      20   0   39500   5940   5612 S   0.0  0.2   0:02.23 /usr/lib/+
   385 root      20   0   45352    236    116 S   0.0  0.0   0:00.35 /usr/lib/+
   411 root      16  -4   55532    344    216 S   0.0  0.0   0:00.35 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 polkitd   20   0  612240    996    600 S   0.0  0.0   0:00.55 /usr/lib/+
   494 rpc       20   0   69256    156      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   521 root      20   0   52852    444    352 S   0.0  0.0   0:00.01 /usr/sbin+
   523 root      20   0   21540    404    296 S   0.0  0.0   0:00.08 /usr/sbin+
   528 root      20   0  224276   7108   1300 S   0.0  0.3   0:00.15 queueproc+
   533 root      20   0  152780    124     80 S   0.0  0.0   0:00.00 /usr/sbin+
   539 root      20   0   24896   1460    824 S   0.0  0.1   0:00.93 /usr/lib/+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     64     60 S   0.0  0.0   0:00.00 /usr/sbin+
   551 nscd      20   0  928956   1332    628 S   0.0  0.1   0:01.97 /usr/sbin+
   562 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    488    320 S   0.0  0.0   0:00.11 /usr/sbin+
   583 root      20   0  108296     68     64 S   0.0  0.0   0:00.00 /sbin/age+
   584 root      20   0  114704     44     44 S   0.0  0.0   0:00.02 /bin/bash
   598 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   629 mailnull  20   0   90820   3536    508 S   0.0  0.1   0:00.07 /usr/sbin+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:01.91 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   938 telegraf  20   0 5654048  36496   5964 S   0.0  1.5   0:02.40 /usr/loca+
   941 root      20   0   51656   1176    784 S   0.0  0.0   0:00.09 /usr/sbin+
   942 root      20   0  153404    320    236 S   0.0  0.0   0:00.08 pure-ftpd+
   943 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 root      20   0  111304    428    324 S   0.0  0.0   0:00.48 /usr/sbin+
   945 systuser  20   0   13012     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   946 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   949 root      20   0 1763112 399816    764 S   0.0 16.5   0:13.76 /usr/loca+
   950 root      20   0  436392  11328  11124 S   0.0  0.5   0:00.25 php-fpm: +
   952 named     20   0  718804  33296   2444 S   0.0  1.4   0:03.74 /usr/sbin+
   960 root      20   0  392856    776    592 S   0.0  0.0   0:00.21 php-fpm: +
   961 root      20   0  224592   5236   4636 S   0.0  0.2   0:01.09 /usr/sbin+
   962 root      20   0  397344   3224    652 S   0.0  0.1   0:00.97 php-fpm: +
   965 root      20   0  261284   6556   1764 S   0.0  0.3   0:01.46 cpsrvd (S+
   967 root      20   0  445028   2604   2604 S   0.0  0.1   0:00.05 sw-engine+
   969 memcach+  20   0  342400    120    120 S   0.0  0.0   0:00.09 /usr/bin/+
   970 cpanelc+  20   0   10088   3248   2360 S   0.0  0.1   0:03.26 /usr/loca+
   982 root      20   0  385496    576    476 S   0.0  0.0   0:00.19 php-fpm: +
   985 root      20   0  386112    608    404 S   0.0  0.0   0:00.18 php-fpm: +
   986 systuser  20   0  113272     80      0 S   0.0  0.0   0:00.00 /usr/loca+
   992 systuser  20   0  114016  12700   2708 S   0.0  0.5   0:01.02 /usr/loca+
   993 root      20   0  572372    808    216 S   0.0  0.0   0:00.43 /usr/bin/+
  1087 dovecot   20   0   10320    252    140 S   0.0  0.0   0:00.01 dovecot/a+
  1168 root      20   0  248160 118008   1264 S   0.0  4.9   0:03.27 /usr/loca+
  1181 systuser  20   0  157704   3052    992 S   0.0  0.1   0:00.04 SonarPush+
  1219 wp-tool+  20   0  410452  36392   1296 S   0.0  1.5   0:03.45 /usr/bin/+
  1220 wp-tool+  20   0  387528  12948   1324 S   0.0  0.5   0:00.12 /usr/bin/+
  1249 root      20   0  209172  10684   2016 S   0.0  0.4   0:00.52 tailwatchd
  1252 root      20   0  262224  22724   4868 S   0.0  0.9   0:00.45 cpdavd - +
  1253 root      20   0  167452   3348   1976 S   0.0  0.1   0:00.16 dnsadmin +
  1749 root      20   0  299272    840    460 S   0.0  0.0   0:00.10 php-fpm: +
  1799 root      38  18  130416   1420    704 S   0.0  0.1   0:00.00 cpanellog+
  1947 root      20   0  267112  31084   5496 S   0.0  1.3   0:00.65 /usr/sbin+
  2095 root      20   0  181272   9984   1196 S   0.0  0.4   0:03.62 lfd - sle+
  5800 root      20   0  183048   1008    448 S   0.0  0.0   0:00.00 /usr/sbin+
  5849 root      20   0  113284    380    200 S   0.0  0.0   0:00.00 /bin/sh -+
  5867 root      20   0  108056     92     20 S   0.0  0.0   0:00.00 sleep 5h +
  5913 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  5923 oysipao+  20   0    3152    488      0 S   0.0  0.0   0:00.08 [kworker]
  6333 root      20   0 1349832  10736    340 S   0.0  0.4   0:00.09 /usr/bin/+
  6376 root      20   0 1277056  11604    336 S   0.0  0.5   0:00.08 /usr/bin/+
  6471 root      20   0  261620 127128   1888 S   0.0  5.3   0:00.51 spamd chi+
  6472 root      20   0  248160 117224    516 S   0.0  4.8   0:00.00 spamd chi+
 10342 root      20   0       0      0      0 D   0.0  0.0   0:00.11 [kworker/+
 20242 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 21983 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 22574 root      20   0   12840   1384   1180 S   0.0  0.1   0:00.16 /usr/loca+
 22575 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.13 /usr/loca+
 22576 root      20   0   12892   1400   1180 S   0.0  0.1   0:00.16 /usr/loca+
 22578 dovenull  20   0   46912   4428   3400 S   0.0  0.2   0:00.03 dovecot/p+
 22579 dovenull  20   0   47428   4696   3464 S   0.0  0.2   0:00.03 dovecot/i+
 22580 root      20   0   10452   1416   1044 S   0.0  0.1   0:00.02 dovecot/l+
 22581 dovenull  20   0   46912   4408   3384 S   0.0  0.2   0:00.03 dovecot/p+
 22582 dovenull  20   0   47372   4604   3396 S   0.0  0.2   0:00.05 dovecot/i+
 22583 root      20   0   24396  12124   1292 S   0.0  0.5   0:00.03 dovecot/c+
 22584 dovecot   20   0   13572   1404   1136 S   0.0  0.1   0:00.00 dovecot/s+
 22588 dovecot   20   0   41056   2588   1848 S   0.0  0.1   0:00.05 dovecot/a+
 22589 root      20   0   53252  10972   1588 S   0.0  0.5   0:00.04 /usr/loca+
 22980 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 23157 nobody    20   0  277768  36580   4896 S   0.0  1.5   0:02.35 /usr/sbin+
 24164 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 24887 nobody    20   0  277776  36424   4740 S   0.0  1.5   0:01.89 /usr/sbin+
 24894 nobody    20   0  277800  36660   4956 S   0.0  1.5   0:02.00 /usr/sbin+
 25016 nobody    20   0  277796  36492   4796 S   0.0  1.5   0:01.98 /usr/sbin+
 25365 nobody    20   0  277992  36488   4636 S   0.0  1.5   0:01.92 /usr/sbin+
 26176 nobody    20   0  278028  36672   4768 S   0.0  1.5   0:01.82 /usr/sbin+
 26195 nobody    20   0  277920  36600   4764 S   0.0  1.5   0:01.71 /usr/sbin+
 27193 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 33236 nobody    20   0  277684  36120   4536 S   0.0  1.5   0:00.86 /usr/sbin+
 33741 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34226 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34784 nobody    20   0  277796  36140   4440 S   0.0  1.5   0:00.73 /usr/sbin+
 34793 nobody    20   0  277744  35748   4104 S   0.0  1.5   0:00.72 /usr/sbin+
 36403 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 36792 nobody    20   0  277684  35712   4132 S   0.0  1.5   0:00.50 /usr/sbin+
 38136 nobody    20   0  277580  35548   4072 S   0.0  1.5   0:00.30 /usr/sbin+
 38549 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 39200 nobody    20   0  277692  35548   3956 S   0.0  1.5   0:00.16 /usr/sbin+
 39530 nobody    20   0  277996  35536   3840 S   0.0  1.5   0:00.13 /usr/sbin+
 39579 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 39608 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 39953 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 40111 nobody    20   0  277984  35368   3684 S   0.0  1.5   0:00.06 /usr/sbin+
 40235 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 40315 nigeria   20   0  397064   5768   2400 S   0.0  0.2   0:00.01 php-fpm: +
 40380 healtho+  20   0  466464  77772   4308 S   0.0  3.2   0:01.43 php-fpm: +
 40383 root      20   0  111304   4444   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 40384 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 40616 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 40621 root      20   0  157100   5076   3784 S   0.0  0.2   0:00.00 sshd: unk+
 40622 sshd      20   0  115644   2628   1556 S   0.0  0.1   0:00.00 sshd: unk+
 40631 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 40632 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 40633 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 40634 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 40636 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 40639 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 40641 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 40642 root      20   0  183044   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 40643 root      20   0  183044   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 40645 root      20   0  183044   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 40646 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 40648 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 40649 root      20   0  183044   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 40650 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 40651 root      20   0  183044   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 40653 root      20   0  183044   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 40655 root      20   0  183044   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 40657 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40660 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 40667 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 40669 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 40671 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 40674 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 40675 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 40677 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 40680 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 40681 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 40682 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 40683 root      20   0 1277356  12032    596 S   0.0  0.5   0:00.06 /usr/bin/+
 40685 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40686 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 40687 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40688 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40689 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 40690 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40691 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40697 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40698 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
 40700 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40701 root      35  15  113288   1428   1240 S   0.0  0.1   0:00.00 /bin/bash+
 40703 root      20   0 1342492  15408    600 S   0.0  0.6   0:00.06 /usr/bin/+
 40710 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 40711 root      20   0  188208  11084   5148 S   0.0  0.5   0:00.02 /usr/loca+
 40712 root      20   0 1276956  15608    596 S   0.0  0.6   0:00.06 /usr/bin/+
 40720 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 40724 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 40731 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 40733 pactpay   20   0  476724  17488  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 40819 root      20   0  160224   2384   1636 S   0.0  0.1   0:00.00 top -n 2 +
 40842 root      35  15  113284   1356   1176 S   0.0  0.1   0:00.00 /bin/bash+
 40846 cloudw    20   0  350316  16884  10452 S   0.0  0.7   0:00.01 /opt/cpan+
 40878 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 40889 root      20   0  233312  29904   1344 R   0.0  1.2   0:00.00 /usr/loca+
 40890 root      20   0  114256   1148      0 R   0.0  0.0   0:00.00 bash /usr+
 40891 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 40892 root      20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
 40893 root      35  15  113284    180      0 R   0.0  0.0   0:00.00 /bin/bash+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    00:54   0:04  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    00:54   0:09  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        109  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        251  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        280  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:1H]
root        416  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        598  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      10342  0.0  0.0      0     0 ?        D    01:07   0:00  \_ [kworker/u200:1]
root      20242  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:0]
root      21983  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/u200:2]
root      22980  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/0:4]
root      24164  0.0  0.0      0     0 ?        S    01:31   0:00  \_ [kworker/1:3]
root      27193  0.0  0.0      0     0 ?        S    01:35   0:00  \_ [kworker/0:1]
root      33741  0.0  0.0      0     0 ?        S    01:47   0:00  \_ [kworker/1:0]
root      34226  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/0:3]
root      36403  0.0  0.0      0     0 ?        S    01:52   0:00  \_ [kworker/1:1]
root      38549  0.0  0.0      0     0 ?        S    01:56   0:00  \_ [kworker/0:2]
root      39579  0.0  0.0      0     0 ?        D    01:58   0:00  \_ [kworker/1:2]
root      39608  0.0  0.0      0     0 ?        S    01:58   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44420  3424 ?        Ss   00:54   0:06 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  39500  5940 ?        Ss   00:54   0:02 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45352   236 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   344 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     481  0.0  0.0 612240   996 ?        Ssl  00:54   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        482  0.0  0.0  58712  1404 ?        Ss   00:54   0:02 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         494  0.0  0.0  69256   156 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        521  0.0  0.0  52852   444 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0  21540   404 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        528  0.0  0.2 224276  7108 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        533  0.0  0.0 152780   124 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        539  0.0  0.0  24896  1460 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-logind
root        544  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    64 ?        Ss   00:54   0:00 /usr/sbin/acpid
nscd        551  0.0  0.0 928956  1332 ?        Ssl  00:54   0:01 /usr/sbin/nscd
root        562  0.0  0.0  24208     0 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   488 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       5800  0.0  0.0 183048  1008 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5849  0.0  0.0 113284   380 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       5867  0.0  0.0 108056    92 ?        S    01:00   0:00  |       \_ sleep 5h 14m
root      40631  0.0  0.0 183048  2140 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      40677  0.0  0.0 113284  1208 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      40703  3.0  0.6 1342492 15408 ?       Sl   02:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      40632  0.0  0.0 183048  2140 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      40667  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      40683  3.0  0.4 1277356 12032 ?       Sl   02:00   0:00  |       \_ /usr/bin/update_imunify
root      40633  0.0  0.0 183048  2140 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      40675  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      40712  3.0  0.6 1276956 15608 ?       Sl   02:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      40634  0.0  0.0 183048  2140 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      40680  0.0  0.0 113284  1208 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      40701  0.0  0.0 113288  1428 ?        SN   02:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      40842  0.0  0.0 113284  1356 ?        SN   02:00   0:00  |           \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      40893  0.0  0.0 113284   180 ?        RN   02:00   0:00  |               \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      40639  0.0  0.0 183048  2140 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      40671  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      40710  0.0  0.0 108052   356 ?        S    02:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      40720  0.0  0.0 113288  1512 ?        S    02:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      40894  0.0  0.0 153840  2092 ?        R    02:00   0:00  |               \_ ps auxf
root      40641  0.0  0.0 183048  2140 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      40690  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      40642  0.0  0.0 183044  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      40686  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      40643  0.0  0.0 183044  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      40688  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      40645  0.0  0.0 183044  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      40689  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      40646  0.0  0.0 183044  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      40698  0.0  0.0  20164   984 ?        Ss   02:00   0:00  |   \_ jailshell (cloudsms) [40896] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      40648  0.0  0.0 183044  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      40697  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      40649  0.0  0.0 183044  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      40691  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      40650  0.0  0.0 183044  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      40700  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      40651  0.0  0.0 183044  2140 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      40687  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      40653  0.0  0.0 183044  2140 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      40685  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root      40655  0.0  0.0 183044  2140 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      40669  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      40711  1.0  0.4 188208 11084 ?        S    02:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      40819  0.0  0.0 160224  2384 ?        S    02:00   0:00  |           \_ top -n 2 -b -c
root      40657  0.0  0.0 183044  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      40682  0.0  0.0  20164   968 ?        Ss   02:00   0:00  |   \_ jailshell (pactpay) [40724] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   40724  0.0  0.0  20164   264 ?        S    02:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   40733  2.0  0.7 476724 17488 ?        S    02:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      40660  0.0  0.0 183044  2140 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      40681  0.0  0.0  20164   964 ?        Ss   02:00   0:00      \_ jailshell (nigeria) [40731] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   40731  0.0  0.0  20164   260 ?        S    02:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   40737  7.0  0.6 400652 15940 ?        S    02:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        583  0.0  0.0 108296    68 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
root        584  0.0  0.0 114704    44 ttyS0    Ss+  00:54   0:00 /bin/bash
mailnull    629  0.0  0.1  90820  3536 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
telegraf    938  0.0  1.5 5654048 36496 ?       SLsl 00:54   0:02 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        941  0.0  0.0  51656  1176 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1087  0.0  0.0  10320   252 ?        S    00:54   0:00  \_ dovecot/anvil
dovenull  22578  0.0  0.1  46912  4428 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22579  0.0  0.1  47428  4696 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22580  0.0  0.0  10452  1416 ?        S    01:28   0:00  \_ dovecot/log
dovenull  22581  0.0  0.1  46912  4408 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22582  0.0  0.1  47372  4604 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22583  0.0  0.5  24396 12124 ?        S    01:28   0:00  \_ dovecot/config
dovecot   22584  0.0  0.0  13572  1404 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   22588  0.0  0.1  41056  2588 ?        S    01:28   0:00  \_ dovecot/auth
root      39953  0.0  0.1  41052  2728 ?        S    01:58   0:00  \_ dovecot/auth -w
root        942  0.0  0.0 153404   320 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    943  0.0  0.0  10132    44 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        944  0.0  0.0 111304   428 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
root      40235  0.0  0.1 111304  4272 ?        Ss   01:59   0:00  \_ sshd: [accepted]
root      40383  0.0  0.1 111304  4444 ?        Ss   01:59   0:00  \_ sshd: [accepted]
sshd      40384  0.0  0.1 115644  2632 ?        S    01:59   0:00  |   \_ sshd: [net]
root      40621  0.0  0.2 157100  5076 ?        Ss   02:00   0:00  \_ sshd: unknown [priv]
sshd      40622  0.0  0.1 115644  2628 ?        S    02:00   0:00      \_ sshd: unknown [net]
systuser    945  0.0  0.0  13012    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    946  0.0  0.0 113932    72 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        949  0.3 16.5 1763112 399816 ?      Ssl  00:54   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        950  0.0  0.4 436392 11328 ?        Rs   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       952  0.0  1.3 718804 33296 ?        Ssl  00:54   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        960  0.0  0.0 392856   776 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        961  0.0  0.2 224592  5236 ?        Ssl  00:54   0:01 /usr/sbin/rsyslogd -n
root        962  0.0  0.1 397344  3224 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  40247 11.2  2.9 461848 72156 ?        R    01:59   0:03  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   40315  0.0  0.2 397064  5768 ?        S    01:59   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  40380 11.0  3.2 466464 77772 ?        S    01:59   0:01  \_ php-fpm: pool health_oyostate_gov_ng
root        965  0.0  0.2 261284  6556 ?        Ss   00:54   0:01 cpsrvd (SSL) - waiting for connections                   
root      40616  0.0  0.0      0     0 ?        Z    01:59   0:00  \_ [cpaneld - servi] <defunct>
root        967  0.0  0.1 445028  2604 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
memcach+    969  0.0  0.0 342400   120 ?        Rsl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    970  0.0  0.1  10088  3248 ?        Ss   00:54   0:03 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 385496   576 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.0 386112   608 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    986  0.0  0.0 113272    80 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    992  0.0  0.5 114016 12700 ?        Ssl  00:54   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        993  0.0  0.0 572372   808 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1168  0.0  4.8 248160 118008 ?       Ss   00:54   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6471  0.0  5.2 261620 127128 ?       S    01:00   0:00  \_ spamd child
root       6472  0.0  4.8 248160 117224 ?       S    01:00   0:00  \_ spamd child
systuser   1181  0.0  0.1 157704  3052 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1219  0.0  1.5 410452 36392 ?        Ss   00:54   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1220  0.0  0.5 387528 12948 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1249  0.0  0.4 209172 10684 ?        Ss   00:54   0:00 tailwatchd
root       1252  0.0  0.9 262224 22724 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1253  0.0  0.1 167452  3348 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1749  0.0  0.0 299272   840 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1799  0.0  0.0 130416  1420 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1851  1.7  8.8 1461848 215236 ?      Sl   00:54   1:07 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  1.2 267112 31084 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root      22574  0.0  0.0  12840  1384 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      22575  0.0  0.0  12732  1364 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      22576  0.0  0.0  12892  1400 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      22589  0.0  0.4  53252 10972 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    23157  0.1  1.5 277768 36580 ?        S    01:29   0:02  \_ /usr/sbin/httpd -k start
nobody    24887  0.1  1.5 277776 36424 ?        S    01:32   0:01  \_ /usr/sbin/httpd -k start
nobody    24894  0.1  1.5 277800 36660 ?        S    01:32   0:02  \_ /usr/sbin/httpd -k start
nobody    25016  0.1  1.5 277796 36492 ?        S    01:32   0:01  \_ /usr/sbin/httpd -k start
nobody    25365  0.1  1.5 277992 36488 ?        S    01:33   0:01  \_ /usr/sbin/httpd -k start
nobody    26176  0.1  1.5 278028 36672 ?        S    01:34   0:01  \_ /usr/sbin/httpd -k start
nobody    26195  0.1  1.5 277920 36600 ?        S    01:34   0:01  \_ /usr/sbin/httpd -k start
nobody    33236  0.1  1.4 277684 36120 ?        S    01:46   0:00  \_ /usr/sbin/httpd -k start
nobody    34784  0.1  1.4 277796 36140 ?        S    01:49   0:00  \_ /usr/sbin/httpd -k start
nobody    34793  0.1  1.4 277744 35748 ?        S    01:49   0:00  \_ /usr/sbin/httpd -k start
nobody    36792  0.1  1.4 277684 35712 ?        S    01:52   0:00  \_ /usr/sbin/httpd -k start
nobody    38136  0.1  1.4 277580 35548 ?        S    01:55   0:00  \_ /usr/sbin/httpd -k start
nobody    39200  0.0  1.4 277692 35548 ?        S    01:57   0:00  \_ /usr/sbin/httpd -k start
nobody    39530  0.1  1.4 277996 35536 ?        S    01:58   0:00  \_ /usr/sbin/httpd -k start
nobody    40111  0.1  1.4 277984 35368 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
root       2095  0.0  0.4 181272  9984 ?        Ss   00:54   0:03 lfd - sleeping
oysipao+   5913  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   5923  0.0  0.0   3152   488 ?        S    01:00   0:00  \_ [kworker]
root       6333  0.0  0.4 1349832 10736 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root       6376  0.0  0.4 1277056 11604 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
root      40889  1.0  1.2 234240 30788 ?        R    02:00   0:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/backup
## mysql stats
Uptime: 3949  Threads: 4  Questions: 445078  Slow queries: 0  Opens: 2600  Flush tables: 1  Open tables: 1963  Queries per second avg: 112.706
*************************** 1. row ***************************
     Id: 6321
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 6324
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 6334
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.137.143 TIME_WAIT
      1 114.119.157.111 TIME_WAIT
      1 142.44.228.54 TIME_WAIT
      1 142.44.233.22 TIME_WAIT
      1 144.76.19.157 TIME_WAIT
      1 198.145.140.219 TIME_WAIT
      1 ::1 TIME_WAIT
      1 204.9.37.246 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 66.249.70.37 TIME_WAIT
      1 74.7.230.62 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     39 157.20.32.131 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 10-Nov-2025 02:00:03 WAT
   Restart Time: Monday, 10-Nov-2025 00:54:18 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 1 hour 5 minutes 44 seconds
   Server load: 1.43 0.94 0.80
   Total accesses: 16608 - Total Traffic: 312.7 MB - Total Duration: 7456310
   CPU Usage: u13 s4.78 cu150.71 cs108.61 - 7.03% CPU load
   4.21 requests/sec - 81.2 kB/second - 19.3 kB/request - 448.959 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

__W._KCKW_KKK__K................................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req  Dur   Conn  Child  Slot    Client     Protocol           VHost                                        Request
   0-2  24887 0/440/1249 _ 7.39  0    0   435450 0.0   8.56  18.36 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   1-2  24894 0/505/1062 _ 7.78  1    337 458847 0.0   9.03  17.96 157.20.32.131 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   2-2  25016 0/391/866  W 8.00  0    0   446686 0.0   10.95 18.99 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   3-2  -     0/0/895    . 0.00  53   0   392046 0.0   0.00  17.05 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   4-2  25365 0/472/1150 _ 7.70  1    357 470519 0.0   8.40  18.30 66.249.70.32  http/1.1 support.cloudware.ng:443   GET /?c=2123651625 HTTP/1.1
   5-2  33236 1/181/902  K 3.53  3    270 447582 34.0  4.66  17.07 66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=1416948080 HTTP/1.1
   6-2  39530 1/27/766   C 0.47  0    873 445007 5.7   0.53  22.03 157.20.32.131 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   7-2  34784 2/156/715  K 2.69  1    276 339433 64.2  2.98  12.45 66.249.70.34  http/1.1 support.cloudware.ng:443   GET /?c=1687791582 HTTP/1.1
   8-2  23157 12/463/740 W 10.31 0    0   394051 374.1 11.72 19.28 66.249.70.39  http/1.1 support.cloudware.ng:443   GET /?c=1047752884 HTTP/1.1
   9-2  26176 0/394/818  _ 7.59  1    11  406080 0.0   7.79  16.30 144.76.19.157 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Lagos&lga=Epe&ward=Poka HT
   10-2 36792 4/96/551   K 1.98  0    363 290359 127.5 2.15  10.93 66.249.70.35  http/1.1 support.cloudware.ng:443   GET /?c=841204802 HTTP/1.1
   11-2 26195 1/450/905  K 6.33  0    940 408967 100.8 9.33  18.17 139.99.23.122 http/1.1 health.oyostate.gov.ng:80  GET /wp-content/uploads/2017-------/09/wp-console.php HTTP/1.1
   12-2 39200 1/36/618   K 0.55  1    10  254176 7.4   0.62  11.95 144.76.19.157 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Lagos&lga=Ojo&ward=Sabo HT
   13-2 38136 0/62/534   _ 1.16  1    4   272451 0.0   1.22  11.25 23.21.175.228 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/blog/assets/js/blog/blog/im
   14-2 34793 0/160/384  _ 2.74  1    0   201544 0.0   3.03  7.02  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   15-2 40111 4/15/346   K 0.15  1    262 176060 128.1 0.24  8.56  66.249.70.33  http/1.1 support.cloudware.ng:443   GET /?c=3607767352 HTTP/1.1
   16-2 -     0/0/96     . 0.00  1786 0   43976  0.0   0.00  1.30  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-2 -     0/0/181    . 0.00  1803 0   49793  0.0   0.00  2.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-2 -     0/0/157    . 0.00  1772 0   78343  0.0   0.00  2.52  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-2 -     0/0/457    . 0.00  326  0   239244 0.0   0.00  8.78  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-2 -     0/0/361    . 0.00  1598 0   194445 0.0   0.00  6.78  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-2 -     0/0/325    . 0.00  1806 0   128160 0.0   0.00  4.59  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-2 -     0/0/263    . 0.00  1805 0   118966 0.0   0.00  4.06  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-2 -     0/0/372    . 0.00  1809 0   129741 0.0   0.00  5.12  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-2 -     0/0/98     . 0.00  1799 0   37078  0.0   0.00  1.33  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-2 -     0/0/30     . 0.00  1800 0   5167   0.0   0.00  0.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-2 -     0/0/45     . 0.00  1802 0   6116   0.0   0.00  0.25  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-2 -     0/0/46     . 0.00  1811 0   3810   0.0   0.00  0.17  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-2 -     0/0/45     . 0.00  1776 0   8071   0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-2 -     0/0/24     . 0.00  1807 0   2841   0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-2 -     0/0/299    . 0.00  691  0   139097 0.0   0.00  6.21  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-2 -     0/0/57     . 0.00  1654 0   25684  0.0   0.00  0.85  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-2 -     0/0/47     . 0.00  1810 0   16198  0.0   0.00  0.55  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-2 -     0/0/39     . 0.00  1808 0   6961   0.0   0.00  0.27  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-2 -     0/0/197    . 0.00  1401 0   47049  0.0   0.00  5.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-2 -     0/0/41     . 0.00  1789 0   15983  0.0   0.00  0.73  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-2 -     0/0/42     . 0.00  1790 0   10575  0.0   0.00  0.39  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-2 -     0/0/316    . 0.00  968  0   106128 0.0   0.00  8.14  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-2 -     0/0/59     . 0.00  1662 0   27054  0.0   0.00  0.90  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-2 -     0/0/22     . 0.00  1821 0   1654   0.0   0.00  0.09  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-2 -     0/0/149    . 0.00  1494 0   69209  0.0   0.00  2.91  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-2 -     0/0/56     . 0.00  1798 0   11193  0.0   0.00  0.59  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-2 -     0/0/60     . 0.00  1820 0   33165  0.0   0.00  0.80  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-2 -     0/0/26     . 0.00  1801 0   1149   0.0   0.00  0.07  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-2 -     0/0/36     . 0.00  1819 0   5070   0.0   0.00  0.26  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-2 -     0/0/30     . 0.00  1791 0   3132   0.0   0.00  0.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-2 -     0/0/32     . 0.00  1661 0   20691  0.0   0.00  0.65  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-1 -     0/0/34     . 0.00  2004 0   9383   0.0   0.00  0.28  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-1 -     0/0/8      . 0.00  2078 0   989    0.0   0.00  0.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-1 -     0/0/57     . 0.00  1908 261 20913  0.0   0.00  0.84  66.249.70.39  http/1.1 support.cloudware.ng:443   GET /?c=3683647426 HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 622
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 12 seconds, (range: 1...73)
   index usage: 10%, cache usage: 15%
   total entries stored since starting: 4362
   total entries replaced since starting: 0
   total entries expired since starting: 3738
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 11 miss
   total removes since starting: 2 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit