403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.19.00.txt
 ## swap threshold exceeded
## server overview
2025-11-16.19.00 load[0] mem[70/59] mysql[6/11] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        1616          74          85         672         501
Swap:          1999        1286         713
 19:00:01 up  1:57,  0 users,  load average: 0.83, 0.70, 0.66
## system overview
top - 19:00:02 up  1:57,  0 users,  load average: 0.83, 0.70, 0.66
Tasks: 225 total,   5 running, 219 sleeping,   0 stopped,   1 zombie
%Cpu(s): 74.2 us, 25.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   114320 free,  1606324 used,   699656 buff/cache
KiB Swap:  2047996 total,   731132 free,  1316864 used.   563276 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1750 mysql     20   0 1458592 253820   3644 S 125.0 10.5   1:42.73 /usr/sbin+
  8643 nigeria   20   0  404052  16140  10380 S  12.5  0.7   0:00.04 /opt/cpan+
  8749 cloudw    20   0  353712  15976  10492 S  12.5  0.7   0:00.02 /opt/cpan+
  8558 root      20   0 1276700  15200    600 S   6.2  0.6   0:00.06 /usr/bin/+
     1 root      20   0   44280   3408   1580 R   0.0  0.1   0:10.14 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.47 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.42 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:07.40 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.43 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.46 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:10.67 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.02 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:00.86 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.39 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   39500   1608   1296 S   0.0  0.1   0:04.25 /usr/lib/+
   389 root      20   0   45352    516    368 S   0.0  0.0   0:00.36 /usr/lib/+
   411 root      16  -4   55532    420    288 S   0.0  0.0   0:00.66 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   468 nobody    20   0  277608  19988   4568 S   0.0  0.8   0:00.72 /usr/sbin+
   489 dbus      20   0   58728   1496    776 S   0.0  0.1   0:03.77 /usr/bin/+
   493 rpc       20   0   69256    252    152 S   0.0  0.0   0:00.01 /sbin/rpc+
   524 root      20   0   24704   1276    904 S   0.0  0.1   0:01.66 /usr/lib/+
   525 root      20   0  152780    340    296 S   0.0  0.0   0:00.00 /usr/sbin+
   529 root      20   0   21540    520    408 S   0.0  0.0   0:00.16 /usr/sbin+
   530 polkitd   20   0  612240    996    544 S   0.0  0.0   0:00.99 /usr/lib/+
   531 root      20   0  224144   5724    976 S   0.0  0.2   0:00.15 queueproc+
   538 root      20   0   52852    536    440 S   0.0  0.0   0:00.01 /usr/sbin+
   542 root      20   0  195208    128    128 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0    4388    148    144 S   0.0  0.0   0:00.00 /usr/sbin+
   550 nscd      20   0 1131720   1720    792 S   0.0  0.1   0:07.37 /usr/sbin+
   578 root      20   0   24208     60     60 S   0.0  0.0   0:00.00 /usr/sbin+
   579 root      20   0  124480    592    460 S   0.0  0.0   0:00.20 /usr/sbin+
   585 root      20   0  114704    236    236 S   0.0  0.0   0:00.02 /bin/bash
   586 root      20   0  108296    236    232 S   0.0  0.0   0:00.00 /sbin/age+
   588 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   626 mailnull  20   0   88988   3960    944 S   0.0  0.2   0:00.11 /usr/sbin+
   685 root       0 -20       0      0      0 S   0.0  0.0   0:02.11 [loop0]
   743 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   744 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   933 root      20   0  306512   1720   1032 S   0.0  0.1   0:02.07 /usr/sbin+
   935 root      20   0  388892   1856    524 S   0.0  0.1   0:00.27 php-fpm: +
   937 named     20   0  924724  32112   1748 S   0.0  1.3   0:03.62 /usr/sbin+
   939 root      20   0 1763124 340908    908 S   0.0 14.1   0:13.37 /usr/loca+
   941 systuser  20   0  112268     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   942 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.00 /usr/loca+
   943 systuser  20   0  111864     80      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 cpanelc+  20   0   10332   3188   2368 S   0.0  0.1   0:05.85 /usr/loca+
   945 root      20   0  572372   1108    532 S   0.0  0.0   0:00.70 /usr/bin/+
   946 root      20   0  261296   6668   1828 S   0.0  0.3   0:01.63 cpsrvd (S+
   947 root      20   0  400740   3500    828 S   0.0  0.1   0:01.24 php-fpm: +
   952 root      20   0  396248    760    584 S   0.0  0.0   0:00.25 php-fpm: +
   953 root      20   0  445028   4772   3284 S   0.0  0.2   0:00.51 sw-engine+
   954 root      20   0 1277312  12128    244 S   0.0  0.5   0:26.51 /usr/bin/+
   955 root      20   0   51508    708    544 S   0.0  0.0   0:00.12 /usr/sbin+
   957 root      20   0 1341892   7780    244 S   0.0  0.3   0:25.34 /usr/bin/+
   959 systuser  20   0   12756     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   960 root      20   0  111304    616    516 S   0.0  0.0   0:00.93 /usr/sbin+
   962 root      20   0  153404    512    432 S   0.0  0.0   0:00.15 pure-ftpd+
   980 systuser  20   0  114016  12732   2164 S   0.0  0.5   0:01.76 /usr/loca+
   981 memcach+  20   0  342400    308    308 S   0.0  0.0   0:00.14 /usr/bin/+
   987 root      20   0  389508    852    640 S   0.0  0.0   0:00.24 php-fpm: +
   989 telegraf  20   0 5654048  36268   5652 S   0.0  1.5   0:04.11 /usr/loca+
   992 root      20   0  439788  11360  11268 S   0.0  0.5   0:00.35 php-fpm: +
  1097 dovenull  20   0   47544   3024   1936 S   0.0  0.1   0:00.11 dovecot/p+
  1098 dovenull  20   0   47324   2932   1928 S   0.0  0.1   0:00.06 dovecot/i+
  1099 dovecot   20   0   10320    472    360 S   0.0  0.0   0:00.01 dovecot/a+
  1100 root      20   0   10452    740    552 S   0.0  0.0   0:00.07 dovecot/l+
  1101 dovenull  20   0   47452   2848   1688 S   0.0  0.1   0:00.15 dovecot/p+
  1102 dovenull  20   0   47056   2612   1784 S   0.0  0.1   0:00.02 dovecot/i+
  1110 root      20   0   24528   2688    592 S   0.0  0.1   0:00.06 dovecot/c+
  1117 dovecot   20   0   13568    824    540 S   0.0  0.0   0:00.01 dovecot/s+
  1136 systuser  20   0  157708   3012   1024 S   0.0  0.1   0:00.04 SonarPush+
  1142 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  1147 root      20   0  248052 118096   1452 S   0.0  4.9   0:03.64 /usr/loca+
  1176 wp-tool+  20   0  412368  24724   1568 S   0.0  1.0   0:02.41 /usr/bin/+
  1177 wp-tool+  20   0  387528  12460   1592 S   0.0  0.5   0:00.13 /usr/bin/+
  1181 dovecot   20   0   41188   1568   1092 S   0.0  0.1   0:00.17 dovecot/a+
  1229 root      20   0  167452   1480    880 S   0.0  0.1   0:00.14 dnsadmin +
  1231 root      20   0  262224  24492   6572 S   0.0  1.0   0:00.47 cpdavd - +
  1233 root      20   0  209860  13180   2552 S   0.0  0.5   0:01.13 tailwatchd
  1607 root      20   0  299272    856    476 S   0.0  0.0   0:00.19 php-fpm: +
  1637 root      38  18  130416   1548    812 S   0.0  0.1   0:00.02 cpanellog+
  1985 root      20   0  266984   8396    820 S   0.0  0.3   0:01.29 /usr/sbin+
  1988 root      20   0   12744    488    380 S   0.0  0.0   0:00.98 /usr/loca+
  1989 root      20   0   12732    436    364 S   0.0  0.0   0:00.86 /usr/loca+
  1992 root      20   0   12748    488    368 S   0.0  0.0   0:00.95 /usr/loca+
  1995 root      20   0   53340    276    276 S   0.0  0.0   0:00.04 /usr/loca+
  2053 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  2081 root      20   0  181976  11264   1244 S   0.0  0.5   0:07.61 lfd - sle+
  2692 nobody    20   0  277744  19796   4392 S   0.0  0.8   0:00.64 /usr/sbin+
  2923 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  3117 nobody    20   0  277568  19552   4336 S   0.0  0.8   0:00.54 /usr/sbin+
  3124 nobody    20   0  277744  19876   4400 S   0.0  0.8   0:00.52 /usr/sbin+
  3137 nobody    20   0  277744  19736   4308 S   0.0  0.8   0:00.63 /usr/sbin+
  3140 nobody    20   0  277876  19736   4376 S   0.0  0.8   0:00.34 /usr/sbin+
  4514 nobody    20   0  277552  19528   4216 S   0.0  0.8   0:00.40 /usr/sbin+
  4552 nobody    20   0  277496  19476   4316 S   0.0  0.8   0:00.43 /usr/sbin+
  4553 nobody    20   0  277744  19688   4260 S   0.0  0.8   0:00.24 /usr/sbin+
  4554 nobody    20   0  277744  19896   4440 S   0.0  0.8   0:00.33 /usr/sbin+
  4558 nobody    20   0  277868  19480   4144 S   0.0  0.8   0:00.46 /usr/sbin+
  5182 nobody    20   0  277744  19700   4348 S   0.0  0.8   0:00.30 /usr/sbin+
  5195 nobody    20   0  277744  19672   4284 S   0.0  0.8   0:00.40 /usr/sbin+
  5196 nobody    20   0  277744  19428   4020 S   0.0  0.8   0:00.21 /usr/sbin+
  6072 nobody    20   0  277744  19252   3912 S   0.0  0.8   0:00.28 /usr/sbin+
  6096 nobody    20   0  277884  19276   3956 S   0.0  0.8   0:00.27 /usr/sbin+
  6097 nobody    20   0  277744  19332   3984 S   0.0  0.8   0:00.26 /usr/sbin+
  8021 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  8068 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  8082 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
  8090 nobody    20   0  277464  18844   3764 S   0.0  0.8   0:00.04 /usr/sbin+
  8190 root      20   0  261296   7840   1572 S   0.0  0.3   0:00.00 webmaild +
  8194 healtho+  20   0  462688  69892   4188 S   0.0  2.9   0:02.56 php-fpm: +
  8203 root      20   0  261372 127740   2668 S   0.0  5.3   0:00.76 spamd chi+
  8204 root      20   0  248052 117144    540 S   0.0  4.8   0:00.00 spamd chi+
  8208 wp-tool+  20   0  445028   1696    192 S   0.0  0.1   0:00.00 sw-engine+
  8213 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
  8230 wp-tool+  20   0  445028   1700    196 S   0.0  0.1   0:00.00 sw-engine+
  8254 nigeria   20   0  400460   5868   2404 S   0.0  0.2   0:00.00 php-fpm: +
  8263 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
  8268 nobody    20   0  277440  18464   3492 S   0.0  0.8   0:00.01 /usr/sbin+
  8295 cloudw    20   0  544256  80556   6996 S   0.0  3.3   0:00.83 php-fpm: +
  8305 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  8508 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  8516 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8517 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8518 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8519 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8523 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8524 root      20   0  183052   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8526 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8527 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8528 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8529 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8530 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8531 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8532 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8533 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8534 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8535 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8537 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8538 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8539 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8542 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8550 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  8551 root      20   0 1416224  15144    604 S   0.0  0.6   0:00.06 /usr/bin/+
  8556 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  8566 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
  8567 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  8569 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
  8570 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  8571 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8572 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8573 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  8574 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8575 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
  8576 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  8577 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
  8578 root      20   0  188228  11112   5148 S   0.0  0.5   0:00.02 /usr/loca+
  8579 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8580 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8581 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8582 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8583 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8585 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8588 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8590 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  8592 root      20   0 1277356  12012    600 S   0.0  0.5   0:00.06 /usr/bin/+
  8600 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  8601 root      35  15  113288   1428   1240 S   0.0  0.1   0:00.00 /bin/bash+
  8612 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
  8618 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  8644 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  8662 pactpay   20   0  480124  17692  11892 S   0.0  0.7   0:00.02 /opt/cpan+
  8672 root      20   0  160224   2376   1636 S   0.0  0.1   0:00.01 top -n 2 +
  8720 root      35  15  128048   3024   2320 R   0.0  0.1   0:00.00 /usr/loca+
  8746 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
  8747 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
  8758 root      20   0   38648   6512   3044 R   0.0  0.3   0:00.00 /usr/loca+
  8759 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 58384 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
 58386 oysipao+  20   0    3152    420      0 S   0.0  0.0   0:00.06 [kworker]
 65385 root      20   0       0      0      0 D   0.0  0.0   0:00.04 [kworker/+
 79618 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 84128 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
 92497 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 94184 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 96212 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
100300 nobody    20   0  277616  20180   4792 S   0.0  0.8   0:00.92 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    17:02   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    17:02   0:07  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    17:02   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    17:02   0:10  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   17:02   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   17:02   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   17:02   0:01  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/0:1H]
root        278  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [xprtiod]
root        588  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kvm-irqfd-clean]
root        685  0.0  0.0      0     0 ?        S<   17:02   0:02  \_ [loop0]
root        743  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [jbd2/loop0-8]
root        744  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ext4-rsv-conver]
root      65385  0.0  0.0      0     0 ?        S    18:09   0:00  \_ [kworker/u200:1]
root      79618  0.0  0.0      0     0 ?        S    18:25   0:00  \_ [kworker/u200:2]
root      84128  0.0  0.0      0     0 ?        S    18:30   0:00  \_ [kworker/0:4]
root      92497  0.0  0.0      0     0 ?        S    18:39   0:00  \_ [kworker/1:3]
root      94184  0.0  0.0      0     0 ?        D    18:41   0:00  \_ [kworker/0:2]
root      96212  0.0  0.0      0     0 ?        S    18:44   0:00  \_ [kworker/1:0]
root       1142  0.0  0.0      0     0 ?        S    18:52   0:00  \_ [kworker/1:2]
root       2053  0.0  0.0      0     0 ?        S    18:53   0:00  \_ [kworker/1:4]
root       2923  0.0  0.0      0     0 ?        S    18:54   0:00  \_ [kworker/0:0]
root       8577  0.0  0.0      0     0 ?        R    19:00   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44280  3408 ?        Ss   17:02   0:10 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.0  39500  1608 ?        Ss   17:02   0:04 /usr/lib/systemd/systemd-journald
root        389  0.0  0.0  45352   516 ?        Ss   17:02   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   420 ?        S<sl 17:02   0:00 /sbin/auditd
dbus        489  0.0  0.0  58728  1496 ?        Rs   17:02   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         493  0.0  0.0  69256   252 ?        Ss   17:02   0:00 /sbin/rpcbind -w
root        524  0.0  0.0  24704  1276 ?        Ss   17:02   0:01 /usr/lib/systemd/systemd-logind
root        525  0.0  0.0 152780   340 ?        Ss   17:02   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        529  0.0  0.0  21540   520 ?        Ss   17:02   0:00 /usr/sbin/irqbalance --foreground
polkitd     530  0.0  0.0 612240   996 ?        Ssl  17:02   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        531  0.0  0.2 224144  5724 ?        Ss   17:02   0:00 queueprocd - waiting up to 60s to process a task
root        538  0.0  0.0  52852   536 ?        Ss   17:02   0:00 /usr/sbin/smartd -n -q never
root        542  0.0  0.0 195208   128 ?        Ssl  17:02   0:00 /usr/sbin/gssproxy -D
root        545  0.0  0.0   4388   148 ?        Ss   17:02   0:00 /usr/sbin/acpid
nscd        550  0.1  0.0 1131720 1720 ?        Ssl  17:02   0:07 /usr/sbin/nscd
root        578  0.0  0.0  24208    60 ?        Ss   17:02   0:00 /usr/sbin/atd -f
root        579  0.0  0.0 124480   592 ?        Ss   17:02   0:00 /usr/sbin/crond -n
root       8516  0.0  0.0 183052  2148 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root       8550  0.0  0.0 113284  1212 ?        Ss   19:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root       8551  6.0  0.6 1416224 15144 ?       Sl   19:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root       8517  0.0  0.0 183052  2148 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root       8567  0.0  0.0 113284  1212 ?        Ss   19:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root       8592  6.0  0.4 1277356 12012 ?       Sl   19:00   0:00  |       \_ /usr/bin/update_imunify
root       8518  0.0  0.0 183052  2148 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root       8556  0.0  0.0 113284  1212 ?        Ss   19:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root       8558  6.0  0.6 1276700 15276 ?       Sl   19:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root       8519  0.0  0.0 183052  2148 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root       8573  0.0  0.0 113284  1212 ?        Ss   19:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root       8601  0.0  0.0 113288  1428 ?        SN   19:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root       8720  0.0  0.1 128048  3024 ?        RN   19:00   0:00  |           \_ /usr/local/lp/sonarperl/bin/perl /usr/local/lp/apps/sonarpush-helpers/hourly.d/eximData.pl
root       8523  0.0  0.0 183052  2148 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root       8570  0.0  0.0 113284  1212 ?        Ss   19:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       8600  0.0  0.0 108052   360 ?        S    19:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       8612  0.0  0.0 113288  1520 ?        S    19:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       8760  0.0  0.0 153840  2092 ?        R    19:00   0:00  |               \_ ps auxf
root       8524  0.0  0.0 183052  2152 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root       8588  0.0  0.0  20164   808 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       8526  0.0  0.0 183048  2152 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root       8585  0.0  0.0  20164   804 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root       8527  0.0  0.0 183048  2152 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root       8571  0.0  0.0  20164   808 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       8528  0.0  0.0 183048  2152 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root       8581  0.0  0.0  20164   808 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       8529  0.0  0.0 183048  2152 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root       8575  0.0  0.0  20164   984 ?        Ss   19:00   0:00  |   \_ jailshell (cloudsms) [8761] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root       8761  0.0  0.0  20164   260 ?        R    19:00   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root       8530  0.0  0.0 183044  2212 ?        R    19:00   0:00  \_ /usr/sbin/CROND -n
root       8531  0.0  0.0 183048  2152 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root       8583  0.0  0.0  20164   808 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       8532  0.0  0.0 183048  2152 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root       8572  0.0  0.0  20164   808 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root       8533  0.0  0.0 183048  2148 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root       8580  0.0  0.0  20164   804 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       8534  0.0  0.0 183048  2148 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root       8574  0.0  0.0  20164   984 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       8762  0.0  0.0      0     0 ?        R    19:00   0:00  |       \_ [setupvirtfs]
root       8535  0.0  0.0 183048  2148 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root       8582  0.0  0.0  20164   804 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       8537  0.0  0.0 183048  2144 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root       8579  0.0  0.0  20164   808 ?        Ss   19:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root       8538  0.0  0.0 183048  2148 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root       8569  0.0  0.0 113284  1208 ?        Ss   19:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root       8578  2.0  0.4 188228 11112 ?        S    19:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root       8672  1.0  0.0 160224  2376 ?        S    19:00   0:00  |           \_ top -n 2 -b -c
root       8539  0.0  0.0 183048  2140 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root       8590  0.0  0.0  20164   968 ?        Ss   19:00   0:00  |   \_ jailshell (pactpay) [8644] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    8644  0.0  0.0  20164   264 ?        S    19:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    8662  2.0  0.7 480124 17692 ?        S    19:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       8542  0.0  0.0 183048  2144 ?        S    19:00   0:00  \_ /usr/sbin/CROND -n
root       8576  0.0  0.0  20164   968 ?        Ss   19:00   0:00      \_ jailshell (nigeria) [8618] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    8618  0.0  0.0  20164   264 ?        S    19:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    8643  5.0  0.6 404052 16140 ?        S    19:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        585  0.0  0.0 114704   236 ttyS0    Ss+  17:02   0:00 /bin/bash
root        586  0.0  0.0 108296   236 tty1     Ss+  17:02   0:00 /sbin/agetty --noclear tty1 linux
mailnull    626  0.0  0.1  88988  3960 ?        Ss   17:02   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        933  0.0  0.0 306512  1720 ?        Ssl  17:02   0:02 /usr/sbin/rsyslogd -n
root        935  0.0  0.0 388892  1856 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named       937  0.0  1.3 924724 32112 ?        Ssl  17:02   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        939  0.1 14.0 1763124 340908 ?      Ssl  17:02   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    941  0.0  0.0 112268    72 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    942  0.0  0.0  10132    28 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    943  0.0  0.0 111864    80 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
cpanelc+    944  0.0  0.1  10332  3188 ?        Rs   17:02   0:05 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        945  0.0  0.0 572372  1108 ?        Ssl  17:02   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        946  0.0  0.2 261296  6668 ?        Ss   17:02   0:01 cpsrvd (SSL) - waiting for connections                   
root       8190  0.0  0.3 261296  7840 ?        S    18:59   0:00  \_ webmaild - serving 148.113.210.254
root       8508  0.0  0.0      0     0 ?        Z    18:59   0:00  \_ [cpaneld - servi] <defunct>
root        947  0.0  0.1 400740  3500 ?        Ss   17:02   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+   8194 19.6  2.8 462688 69892 ?        S    18:59   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria    8254  0.0  0.2 400460  5868 ?        S    18:59   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw     8295 13.8  3.3 544256 80556 ?        S    18:59   0:00  \_ php-fpm: pool cloudware_ng
root        952  0.0  0.0 396248   760 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        953  0.0  0.1 445028  4772 ?        Ss   17:02   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+   8208  0.0  0.0 445028  1696 ?        S    18:59   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+   8230  0.0  0.0 445028  1700 ?        S    18:59   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        954  0.3  0.5 1277312 12128 ?       Ssl  17:02   0:26 /usr/bin/checkstatus
root        955  0.0  0.0  51508   708 ?        Ss   17:02   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.1  47544  3024 ?        S    17:02   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47324  2932 ?        S    17:02   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   472 ?        S    17:02   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   740 ?        S    17:02   0:00  \_ dovecot/log
dovenull   1101  0.0  0.1  47452  2848 ?        S    17:02   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.1  47056  2612 ?        S    17:02   0:00  \_ dovecot/imap-login
root       1110  0.0  0.1  24528  2688 ?        S    17:02   0:00  \_ dovecot/config
dovecot    1117  0.0  0.0  13568   824 ?        S    17:02   0:00  \_ dovecot/stats
dovecot    1181  0.0  0.0  41188  1568 ?        S    17:02   0:00  \_ dovecot/auth
root        957  0.3  0.3 1341892 7780 ?        Ssl  17:02   0:25 /usr/bin/cspdaemon
systuser    959  0.0  0.0  12756    60 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        960  0.0  0.0 111304   616 ?        Ss   17:02   0:00 /usr/sbin/sshd -D
root       8021  0.0  0.1 111304  4272 ?        Ss   18:59   0:00  \_ sshd: [accepted]
root       8068  0.0  0.1 111304  4268 ?        Ss   18:59   0:00  \_ sshd: [accepted]
sshd       8082  0.0  0.1 115644  2628 ?        S    18:59   0:00  |   \_ sshd: [net]
root       8213  0.0  0.1 111304  4448 ?        Ss   18:59   0:00  \_ sshd: [accepted]
sshd       8263  0.0  0.1 115644  2624 ?        S    18:59   0:00  |   \_ sshd: [net]
root       8305  0.0  0.1 111304  4268 ?        Ss   18:59   0:00  \_ sshd: [accepted]
root        962  0.0  0.0 153404   512 ?        Ss   17:02   0:00 pure-ftpd (SERVER)
systuser    980  0.0  0.5 114016 12732 ?        Ssl  17:02   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+    981  0.0  0.0 342400   308 ?        Ssl  17:02   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        987  0.0  0.0 389508   852 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
telegraf    989  0.0  1.4 5654048 36268 ?       SLsl 17:02   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        992  0.0  0.4 439788 11360 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser   1136  0.0  0.1 157708  3012 ?        S    17:02   0:00 SonarPush 0.6.12 [sleeping]
root       1147  0.0  4.8 248052 118096 ?       Ss   17:02   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8203  0.0  5.2 261372 127740 ?       S    17:08   0:00  \_ spamd child
root       8204  0.0  4.8 248052 117144 ?       S    17:08   0:00  \_ spamd child
wp-tool+   1176  0.0  1.0 412368 24724 ?        Ss   17:02   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1177  0.0  0.5 387528 12460 ?        Ss   17:02   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1229  0.0  0.0 167452  1480 ?        Ss   17:02   0:00 dnsadmin - dormant mode
root       1231  0.0  1.0 262224 24492 ?        Ss   17:02   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1233  0.0  0.5 209860 13180 ?        Ss   17:02   0:01 tailwatchd
root       1607  0.0  0.0 299272   856 ?        Ss   17:02   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1637  0.0  0.0 130416  1548 ?        SN   17:02   0:00 cpanellogd - sleeping for logs
mysql      1750  1.4 10.4 1458592 253820 ?      Sl   17:02   1:42 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1985  0.0  0.3 266984  8396 ?        Ss   17:02   0:01 /usr/sbin/httpd -k start
root       1988  0.0  0.0  12744   488 ?        S    17:02   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1989  0.0  0.0  12732   436 ?        S    17:02   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1992  0.0  0.0  12748   488 ?        S    17:02   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1995  0.0  0.0  53340   276 ?        S    17:02   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody   100300  0.1  0.8 277616 20180 ?        S    18:49   0:00  \_ /usr/sbin/httpd -k start
nobody      468  0.1  0.8 277608 19988 ?        S    18:51   0:00  \_ /usr/sbin/httpd -k start
nobody     2692  0.1  0.8 277744 19796 ?        S    18:53   0:00  \_ /usr/sbin/httpd -k start
nobody     3117  0.1  0.8 277568 19552 ?        S    18:54   0:00  \_ /usr/sbin/httpd -k start
nobody     3124  0.1  0.8 277744 19876 ?        S    18:54   0:00  \_ /usr/sbin/httpd -k start
nobody     3137  0.1  0.8 277744 19736 ?        S    18:54   0:00  \_ /usr/sbin/httpd -k start
nobody     3140  0.0  0.8 277876 19736 ?        S    18:54   0:00  \_ /usr/sbin/httpd -k start
nobody     4514  0.1  0.8 277552 19528 ?        S    18:55   0:00  \_ /usr/sbin/httpd -k start
nobody     4552  0.1  0.8 277496 19476 ?        S    18:55   0:00  \_ /usr/sbin/httpd -k start
cloudw     8749  2.0  0.6 353712 15976 ?        S    19:00   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     4553  0.0  0.8 277744 19688 ?        S    18:55   0:00  \_ /usr/sbin/httpd -k start
nobody     4554  0.1  0.8 277744 19896 ?        S    18:55   0:00  \_ /usr/sbin/httpd -k start
nobody     4558  0.1  0.8 277868 19480 ?        S    18:55   0:00  \_ /usr/sbin/httpd -k start
nobody     5182  0.1  0.8 277744 19700 ?        S    18:56   0:00  \_ /usr/sbin/httpd -k start
nobody     5195  0.1  0.8 277744 19672 ?        S    18:56   0:00  \_ /usr/sbin/httpd -k start
nobody     5196  0.0  0.8 277744 19428 ?        S    18:56   0:00  \_ /usr/sbin/httpd -k start
nobody     6072  0.1  0.7 277744 19252 ?        S    18:57   0:00  \_ /usr/sbin/httpd -k start
nobody     6096  0.1  0.7 277884 19276 ?        S    18:57   0:00  \_ /usr/sbin/httpd -k start
nobody     6097  0.1  0.7 277744 19332 ?        S    18:57   0:00  \_ /usr/sbin/httpd -k start
nobody     8090  0.1  0.7 277464 18844 ?        S    18:59   0:00  \_ /usr/sbin/httpd -k start
nobody     8268  0.1  0.7 277440 18464 ?        S    18:59   0:00  \_ /usr/sbin/httpd -k start
root       2081  0.1  0.4 181976 11264 ?        Ss   17:02   0:07 lfd - sleeping
oysipao+  58384  0.0  0.0   3148   412 ?        Ss   18:00   0:00 [kworker]
oysipao+  58386  0.0  0.0   3152   420 ?        S    18:00   0:00  \_ [kworker]
## mysql stats
Uptime: 7056  Threads: 3  Questions: 574398  Slow queries: 0  Opens: 3612  Flush tables: 1  Open tables: 2000  Queries per second avg: 81.405
*************************** 1. row ***************************
     Id: 9450
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 9451
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `oyo_official_polling_unit` WHERE `pu_code`='30/02/05/002accreditationhasendedvotingab
*************************** 3. row ***************************
     Id: 9459
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.35 TIME_WAIT
      1 114.119.133.34 TIME_WAIT
      1 114.119.134.51 TIME_WAIT
      1 122.117.102.125 TIME_WAIT
      1 142.44.225.42 TIME_WAIT
      1 142.44.233.240 TIME_WAIT
      1 148.113.130.0 TIME_WAIT
      1 148.113.130.215 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.105 TIME_WAIT
      1 ::1 TIME_WAIT
      1 200.80.10.159 TIME_WAIT
      1 34.4.29.25 TIME_WAIT
      1 37.139.53.80 TIME_WAIT
      1 54.235.137.122 TIME_WAIT
      1 54.39.203.45 TIME_WAIT
      1 80.241.214.201 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 161.97.170.156 TIME_WAIT
      2 185.11.166.192 TIME_WAIT
      2 45.82.78.114 TIME_WAIT
      2 78.157.49.100 TIME_WAIT
      3 173.199.190.174 TIME_WAIT
     43 124.248.184.195 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 19:00:02 WAT
   Restart Time: Sunday, 16-Nov-2025 17:02:33 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 57 minutes 28 seconds
   Server load: 0.83 0.70 0.66
   Total accesses: 46781 - Total Traffic: 1.0 GB - Total Duration: 21907144
   CPU Usage: u5.82 s3.41 cu602.88 cs498.77 - 15.8% CPU load
   6.64 requests/sec - 155.5 kB/second - 23.4 kB/request - 468.291 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

K_K__KR._.K..K_KK.KK_K...KK.......W.............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU  SS  Req  Dur   Conn  Child  Slot     Client      Protocol           VHost                              Request
   0-0  5182   1/58/1897  K 1.20 0   533 811608 35.7  1.41  39.41 192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=1018494522 HTTP/1.1
   1-0  100300 0/180/2196 _ 3.99 0   348 987518 0.0   3.85  44.30 192.178.4.102   http/1.1 team.cloudware.ng:443      GET /?l=3983316027 HTTP/1.1
   2-0  5195   4/70/2011  K 1.66 2   261 901710 126.6 3.00  44.59 192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=2711890967 HTTP/1.1
   3-0  8090   0/8/1771   _ 0.15 0   720 892638 0.0   0.18  40.40 124.248.184.195 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   4-0  5196   0/38/1736  _ 0.92 1   277 800326 0.0   0.90  41.23 122.117.102.125 http/1.1
   5-0  8268   4/5/1677   K 0.06 0   60  836171 7.9   0.02  44.29 66.249.70.7     http/1.1 test.cloudware.ng:443      GET /179863066?goodscode=0179628098 HTTP/1.1
   6-0  2692   0/118/1957 R 2.65 1   1   975117 0.0   2.81  47.46 66.240.236.13   http/1.1
   7-0  -      0/0/2031   . 0.00 36  0   831358 0.0   0.00  39.82 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-0  4514   0/85/1543  _ 1.58 1   360 744293 0.0   3.50  37.78 192.178.4.97    http/1.1 team.cloudware.ng:443      GET /?l=2447104278 HTTP/1.1
   9-0  -      0/0/1743   . 0.00 145 0   728742 0.0   0.00  37.01 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 3117   2/93/1813  K 2.30 0   415 807743 65.0  2.41  37.95 192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=114208700 HTTP/1.1
   11-0 -      0/0/1671   . 0.00 108 0   815806 0.0   0.00  37.86 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-0 -      0/0/1624   . 0.00 13  0   788153 0.0   0.00  43.25 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 6072   2/55/1722  K 1.08 3   319 814033 65.3  1.33  40.60 192.178.4.98    http/1.1 team.cloudware.ng:443      GET /?l=1802526835 HTTP/1.1
   14-0 3124   0/106/1565 _ 2.56 0   0   774662 0.0   1.95  34.22 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   15-0 6096   2/52/1502  K 1.03 2   263 657056 63.3  1.19  32.11 192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=1412287151 HTTP/1.1
   16-0 6097   3/46/1629  K 1.35 0   558 773054 98.1  1.18  39.37 192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=2851199714 HTTP/1.1
   17-0 -      0/0/1322   . 0.00 228 0   594519 0.0   0.00  29.57 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 4552   2/74/1524  K 1.85 0   436 720831 64.9  1.92  34.22 192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=668376712 HTTP/1.1
   19-0 4553   1/44/1470  K 0.90 1   294 757821 35.2  0.94  33.49 192.178.4.102   http/1.1 team.cloudware.ng:443      GET /?l=2602339451 HTTP/1.1
   20-0 3137   0/106/1786 _ 3.09 0   0   780561 0.0   2.82  39.95 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   21-0 4554   1/64/962   K 1.30 1   262 468016 35.5  1.47  22.20 192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=1524281752 HTTP/1.1
   22-0 -      0/0/1075   . 0.00 232 0   478753 0.0   0.00  22.89 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -      0/0/887    . 0.00 229 0   438625 0.0   0.00  22.06 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -      0/0/768    . 0.00 96  0   453945 0.0   0.00  23.02 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 3140   1/69/616   K 1.35 1   316 275016 36.0  1.37  13.20 192.178.4.102   http/1.1 team.cloudware.ng:443      GET /?l=1589075032 HTTP/1.1
   26-0 4558   6/79/691   K 2.03 1   264 373729 185.2 2.10  18.15 192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=911371061 HTTP/1.1
   27-0 -      0/0/820    . 0.00 109 0   378215 0.0   0.00  20.63 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -      0/0/481    . 0.00 207 0   258771 0.0   0.00  11.99 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -      0/0/513    . 0.00 469 0   244618 0.0   0.00  10.86 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -      0/0/393    . 0.00 344 0   200624 0.0   0.00  9.28  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -      0/0/690    . 0.00 503 0   340234 0.0   0.00  15.88 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -      0/0/261    . 0.00 482 0   135603 0.0   0.00  6.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -      0/0/321    . 0.00 502 0   147880 0.0   0.00  6.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 468    0/130/287  W 3.14 0   0   152013 0.0   3.77  7.49  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   35-0 -      0/0/206    . 0.00 500 0   87118  0.0   0.00  4.40  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -      0/0/249    . 0.00 238 0   125311 0.0   0.00  8.48  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -      0/0/281    . 0.00 265 0   104922 0.0   0.00  5.75  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -      0/0/138    . 0.00 230 0   37965  0.0   0.00  2.20  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -      0/0/129    . 0.00 501 0   57212  0.0   0.00  2.90  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -      0/0/165    . 0.00 318 0   65065  0.0   0.00  3.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -      0/0/64     . 0.00 317 0   21758  0.0   0.00  1.16  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -      0/0/146    . 0.00 14  0   76144  0.0   0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -      0/0/8      . 0.00 490 0   1778   0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -      0/0/15     . 0.00 498 0   7320   0.0   0.00  0.37  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -      0/0/7      . 0.00 506 0   2146   0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -      0/0/31     . 0.00 504 0   16393  0.0   0.00  0.78  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -      0/0/48     . 0.00 496 0   31675  0.0   0.00  1.35  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -      0/0/19     . 0.00 448 0   10797  0.0   0.00  0.54  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -      0/0/149    . 0.00 485 0   51163  0.0   0.00  2.61  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -      0/0/9      . 0.00 476 0   1467   0.0   0.00  0.15  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -      0/0/85     . 0.00 206 0   28360  0.0   0.00  1.44  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -      0/0/16     . 0.00 435 0   7274   0.0   0.00  0.38  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -      0/0/3      . 0.00 493 0   1042   0.0   0.00  0.06  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -      0/0/46     . 0.00 334 0   27516  0.0   0.00  1.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -      0/0/11     . 0.00 456 0   4925   0.0   0.00  0.24  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -      0/0/1      . 0.00 508 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1283
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...22)
   index usage: 22%, cache usage: 30%
   total entries stored since starting: 32954
   total entries replaced since starting: 0
   total entries expired since starting: 31665
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 5 hit, 31 miss
   total removes since starting: 6 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit