403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-23.12.00.txt
 ## swap threshold exceeded
## server overview
2025-11-23.12.00 load[0] mem[72/59] mysql[3/7] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1623          67          58         673         512
Swap:          1999        1284         715
 12:00:02 up  1:59,  0 users,  load average: 0.59, 0.77, 0.68
## system overview
top - 12:00:02 up  1:59,  0 users,  load average: 0.59, 0.77, 0.68
Tasks: 215 total,   1 running, 213 sleeping,   0 stopped,   1 zombie
%Cpu(s): 55.9 us, 35.3 sy,  5.9 ni,  0.0 id,  0.0 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,    93400 free,  1651760 used,   675140 buff/cache
KiB Swap:  2047996 total,   731644 free,  1316352 used.   535792 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1838 mysql     20   0 1463560 229420   3260 S  35.3  9.5   1:47.38 /usr/sbin+
     1 root      20   0   44412   3556   1516 S   5.9  0.1   0:12.59 /usr/lib/+
     9 root      20   0       0      0      0 S   5.9  0.0   0:07.07 [rcu_sche+
 74259 nobody    20   0  277792  20628   4840 S   5.9  0.9   0:01.90 /usr/sbin+
 85622 nobody    20   0  277916  19456   4128 S   5.9  0.8   0:00.38 /usr/sbin+
 89837 root      20   0 1277356  12024    600 S   5.9  0.5   0:00.06 /usr/bin/+
 89874 nigeria   20   0  404052  16144  10384 S   5.9  0.7   0:00.04 /opt/cpan+
 89977 root      35  15  140888   5832   2852 S   5.9  0.2   0:00.01 /usr/loca+
 89986 root      20   0  160220   2060   1584 R   5.9  0.1   0:00.01 top -bcn1
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.90 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.52 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.26 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.25 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.23 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:11.57 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.23 [kworker/+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   266 root       0 -20       0      0      0 S   0.0  0.0   0:01.20 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.42 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   39500   2144   1832 S   0.0  0.1   0:04.33 /usr/lib/+
   384 root      20   0   45352    244    104 S   0.0  0.0   0:00.37 /usr/lib/+
   409 root      16  -4   55532    488    356 S   0.0  0.0   0:00.67 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 polkitd   20   0  612240   2864    364 S   0.0  0.1   0:01.06 /usr/lib/+
   489 root      20   0   21540    380    268 S   0.0  0.0   0:00.15 /usr/sbin+
   493 nscd      20   0  994492   1284    576 S   0.0  0.1   0:04.95 /usr/sbin+
   494 root      20   0  152780    104     64 S   0.0  0.0   0:00.00 /usr/sbin+
   496 root      20   0   24704   1156    792 S   0.0  0.0   0:01.76 /usr/lib/+
   513 rpc       20   0   69256    156     52 S   0.0  0.0   0:00.01 /sbin/rpc+
   516 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   531 root      20   0   52852    356    260 S   0.0  0.0   0:00.01 /usr/sbin+
   535 dbus      20   0   57020   1332    620 S   0.0  0.1   0:03.93 /usr/bin/+
   552 root      20   0  224144   6360   1348 S   0.0  0.3   0:00.21 queueproc+
   553 root      20   0    4388     24     20 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124480    424    292 S   0.0  0.0   0:00.21 /usr/sbin+
   566 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   578 root      20   0  108296     32     28 S   0.0  0.0   0:00.00 /sbin/age+
   579 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   608 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   630 mailnull  20   0   89124   4444    816 S   0.0  0.2   0:00.23 /usr/sbin+
   658 root       0 -20       0      0      0 S   0.0  0.0   0:02.40 [loop0]
   673 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   932 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   934 root      20   0  445028   3200   3088 S   0.0  0.1   0:00.34 sw-engine+
   936 systuser  20   0  113676     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   937 systuser  20   0  114016  12808   2584 S   0.0  0.5   0:01.80 /usr/loca+
   939 root      20   0  111304    364    264 S   0.0  0.0   0:00.95 /usr/sbin+
   940 systuser  20   0   12660     64      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 root      20   0 1763224 371676    584 S   0.0 15.4   0:13.91 /usr/loca+
   949 named     20   0  990264  32764   1960 S   0.0  1.4   0:03.66 /usr/sbin+
   951 root      20   0  400740   2972    612 S   0.0  0.1   0:01.14 php-fpm: +
   955 root      20   0  389508    640    424 S   0.0  0.0   0:00.25 php-fpm: +
   957 root      20   0   51508    644    456 S   0.0  0.0   0:00.13 /usr/sbin+
   958 root      20   0  153404    252    168 S   0.0  0.0   0:00.16 pure-ftpd+
   959 systuser  20   0  113272     76      0 S   0.0  0.0   0:00.00 /usr/loca+
   968 root      20   0  396248    512    332 S   0.0  0.0   0:00.24 php-fpm: +
   970 cpanelc+  20   0   11400   4776   2496 S   0.0  0.2   0:05.75 /usr/loca+
   972 root      20   0  240976   2744   1548 S   0.0  0.1   0:02.09 /usr/sbin+
   973 root      20   0 1350088   9588      0 S   0.0  0.4   0:25.96 /usr/bin/+
   974 root      20   0  261156   7188   2176 S   0.0  0.3   0:03.28 cpsrvd (S+
   975 telegraf  20   0 5654048  34288   3948 S   0.0  1.4   0:04.24 /usr/loca+
   976 root      20   0  572372    748    164 S   0.0  0.0   0:00.68 /usr/bin/+
   997 root      20   0  439788  11280  11076 S   0.0  0.5   0:00.27 php-fpm: +
   998 root      20   0 1277312  10388     28 S   0.0  0.4   0:21.06 /usr/bin/+
  1002 root      20   0  388892    452    360 S   0.0  0.0   0:00.22 php-fpm: +
  1006 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.15 /usr/bin/+
  1099 dovenull  20   0   47252   3548   2476 S   0.0  0.1   0:00.23 dovecot/p+
  1100 dovenull  20   0   47484   3844   2552 S   0.0  0.2   0:00.10 dovecot/i+
  1101 dovecot   20   0   10320    236    116 S   0.0  0.0   0:00.05 dovecot/a+
  1102 root      20   0   10452    472    280 S   0.0  0.0   0:00.13 dovecot/l+
  1103 dovenull  20   0   47316   3692   2584 S   0.0  0.2   0:00.29 dovecot/p+
  1104 dovenull  20   0   47440   3952   2732 S   0.0  0.2   0:00.10 dovecot/i+
  1109 root      20   0   24564   2368    500 S   0.0  0.1   0:00.06 dovecot/c+
  1110 dovecot   20   0   13568    536    328 S   0.0  0.0   0:00.01 dovecot/s+
  1135 systuser  20   0  157704   2976    948 S   0.0  0.1   0:00.04 SonarPush+
  1146 wp-tool+  20   0  387528  13020   1392 S   0.0  0.5   0:00.14 /usr/bin/+
  1147 wp-tool+  20   0  412368  32000   1312 S   0.0  1.3   0:02.47 /usr/bin/+
  1197 dovecot   20   0   41156   1488   1020 S   0.0  0.1   0:00.30 dovecot/a+
  1258 root      20   0  167452   1308    708 S   0.0  0.1   0:00.14 dnsadmin +
  1262 root      20   0  209340  21324   3764 S   0.0  0.9   0:01.17 tailwatchd
  1263 root      20   0  262224  24624   6760 S   0.0  1.0   0:02.01 cpdavd - +
  1634 root      20   0  299272    760    384 S   0.0  0.0   0:00.19 php-fpm: +
  1673 root      38  18  130416   1440    708 S   0.0  0.1   0:00.02 cpanellog+
  2047 root      20   0  267052   8176    680 S   0.0  0.3   0:00.54 /usr/sbin+
  2068 root      20   0   12776    388    252 S   0.0  0.0   0:00.82 /usr/loca+
  2069 root      20   0   12732    360    248 S   0.0  0.0   0:00.70 /usr/loca+
  2070 root      20   0   12788    328    216 S   0.0  0.0   0:00.76 /usr/loca+
  2079 root      20   0   53256     40     40 S   0.0  0.0   0:00.05 /usr/loca+
  2194 root      20   0  181888  10608   1152 S   0.0  0.4   0:06.81 lfd - sle+
  2828 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  2835 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.13 [kworker]
 39734 root      20   0  247944 121108   4572 S   0.0  5.0   0:03.18 /usr/loca+
 48387 root      20   0  265948 130392   2968 S   0.0  5.4   0:02.63 spamd chi+
 48388 root      20   0  247944 117956   1456 S   0.0  4.9   0:00.00 spamd chi+
 64240 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 69958 nobody    20   0  277908  20972   4956 S   0.0  0.9   0:02.64 /usr/sbin+
 73626 nobody    20   0  277616  20296   4836 S   0.0  0.8   0:01.77 /usr/sbin+
 74810 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 75371 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 75515 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78334 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78365 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 79505 nobody    20   0  277780  20584   4780 S   0.0  0.9   0:01.31 /usr/sbin+
 80180 nobody    20   0  277944  20428   4564 S   0.0  0.8   0:01.17 /usr/sbin+
 81134 nobody    20   0  277780  20448   4628 S   0.0  0.8   0:01.01 /usr/sbin+
 82170 worencom  20   0   38500   3484   2632 S   0.0  0.1   0:00.00 dovecot/i+
 82719 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 83339 nobody    20   0  277540  19772   4356 S   0.0  0.8   0:00.80 /usr/sbin+
 84157 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 85652 nobody    20   0  277788  19524   4032 S   0.0  0.8   0:00.63 /usr/sbin+
 85665 nobody    20   0  277660  19420   4044 S   0.0  0.8   0:00.52 /usr/sbin+
 85667 nobody    20   0  277520  19232   4148 S   0.0  0.8   0:00.49 /usr/sbin+
 85668 nobody    20   0  277792  19852   4356 S   0.0  0.8   0:00.46 /usr/sbin+
 86141 root      20   0       0      0      0 D   0.0  0.0   0:00.02 [kworker/+
 86662 nobody    20   0  277920  19604   4160 S   0.0  0.8   0:00.37 /usr/sbin+
 86824 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 87805 nobody    20   0  277920  19436   3988 S   0.0  0.8   0:00.22 /usr/sbin+
 87843 nobody    20   0  277584  19192   3936 S   0.0  0.8   0:00.20 /usr/sbin+
 88157 nobody    20   0  277520  18940   3852 S   0.0  0.8   0:00.17 /usr/sbin+
 88253 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 88917 nobody    20   0  277544  18968   3828 S   0.0  0.8   0:00.05 /usr/sbin+
 89045 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 89118 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 89287 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 89361 root      20   0   41052   2784   2124 S   0.0  0.1   0:00.00 dovecot/a+
 89452 wp-tool+  20   0  445028    316    188 S   0.0  0.0   0:00.00 sw-engine+
 89455 healtho+  20   0  460772  67524   4216 S   0.0  2.8   0:02.03 php-fpm: +
 89462 healtho+  20   0  460640  67528   4220 S   0.0  2.8   0:02.04 php-fpm: +
 89466 healtho+  20   0  460772  67524   4220 S   0.0  2.8   0:02.03 php-fpm: +
 89508 nobody    20   0  277372  18116   3400 S   0.0  0.7   0:00.00 /usr/sbin+
 89538 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 89575 nigeria   20   0  400460   5300   2192 S   0.0  0.2   0:00.00 php-fpm: +
 89759 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89760 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89761 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89762 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89766 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89768 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89770 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89772 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89773 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89774 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89775 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89776 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89778 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89779 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89782 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89783 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89786 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89787 root      20   0  183044   2208   1640 S   0.0  0.1   0:00.00 /usr/sbin+
 89789 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 89793 root      20   0 1415968  15180    604 S   0.0  0.6   0:00.06 /usr/bin/+
 89796 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 89797 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 89799 root      20   0 1275804  10536    600 S   0.0  0.4   0:00.05 /usr/bin/+
 89800 root      35  15  113288   1428   1240 S   0.0  0.1   0:00.00 /bin/bash+
 89806 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89810 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 89811 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 89814 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 89819 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89821 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 89822 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 89823 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 89825 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 89826 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89827 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89829 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89832 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89833 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89835 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 89844 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 89845 root      20   0  188224  11108   5152 S   0.0  0.5   0:00.02 /usr/loca+
 89864 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 89866 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 89869 pactpay   20   0  480124  17304  11572 S   0.0  0.7   0:00.01 /opt/cpan+
 89884 mailnull  20   0   89504   5968   2188 S   0.0  0.2   0:00.00 /usr/sbin+
 89921 root      20   0  160224   2388   1636 S   0.0  0.1   0:00.00 top -n 2 +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    10:00   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    10:00   0:07  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    10:00   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    10:00   0:11  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   10:00   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   10:00   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   10:00   0:01  \_ [kworker/1:1H]
root        256  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ttm_swap]
root        266  0.0  0.0      0     0 ?        S<   10:00   0:01  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [xprtiod]
root        608  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kvm-irqfd-clean]
root        658  0.0  0.0      0     0 ?        S<   10:00   0:02  \_ [loop0]
root        673  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [jbd2/loop0-8]
root        675  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ext4-rsv-conver]
root      64240  0.0  0.0      0     0 ?        S    11:24   0:00  \_ [kworker/0:3]
root      74810  0.0  0.0      0     0 ?        S    11:39   0:00  \_ [kworker/0:0]
root      75371  0.0  0.0      0     0 ?        D    11:39   0:00  \_ [kworker/u200:1]
root      90011  0.0  0.0      0     0 ?        R    12:00   0:00  |   \_ [kworker/u200:1]
root      75515  0.0  0.0      0     0 ?        S    11:40   0:00  \_ [kworker/1:3]
root      78334  0.0  0.0      0     0 ?        D    11:44   0:00  \_ [kworker/1:5]
root      78365  0.0  0.0      0     0 ?        D    11:44   0:00  \_ [kworker/0:4]
root      82719  0.0  0.0      0     0 ?        S    11:50   0:00  \_ [kworker/1:1]
root      84157  0.0  0.0      0     0 ?        S    11:52   0:00  \_ [kworker/1:2]
root      86141  0.0  0.0      0     0 ?        S    11:55   0:00  \_ [kworker/0:1]
root      86824  0.0  0.0      0     0 ?        S    11:56   0:00  \_ [kworker/0:2]
root      88253  0.0  0.0      0     0 ?        R    11:58   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44412  3556 ?        Ss   10:00   0:12 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.0  39500  2144 ?        Ss   10:00   0:04 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   244 ?        Ss   10:00   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   488 ?        S<sl 10:00   0:00 /sbin/auditd
polkitd     487  0.0  0.1 612240  2864 ?        Ssl  10:00   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        489  0.0  0.0  21540   380 ?        Ss   10:00   0:00 /usr/sbin/irqbalance --foreground
nscd        493  0.0  0.0 994492  1284 ?        Ssl  10:00   0:04 /usr/sbin/nscd
root        494  0.0  0.0 152780   104 ?        Ss   10:00   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        496  0.0  0.0  24704  1156 ?        Rs   10:00   0:01 /usr/lib/systemd/systemd-logind
rpc         513  0.0  0.0  69256   156 ?        Ss   10:00   0:00 /sbin/rpcbind -w
root        516  0.0  0.0 195208     0 ?        Ssl  10:00   0:00 /usr/sbin/gssproxy -D
root        531  0.0  0.0  52852   356 ?        Ss   10:00   0:00 /usr/sbin/smartd -n -q never
dbus        535  0.0  0.0  57020  1332 ?        Ss   10:00   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        552  0.0  0.2 224144  6360 ?        Ss   10:00   0:00 queueprocd - waiting up to 60s to process a task
root        553  0.0  0.0   4388    24 ?        Ss   10:00   0:00 /usr/sbin/acpid
root        564  0.0  0.0 124480   424 ?        Ss   10:00   0:00 /usr/sbin/crond -n
root      89759  0.0  0.0 183052  2148 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      89789  0.0  0.0 113284  1212 ?        Ss   12:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      89793  0.0  0.6 1415968 15180 ?       Sl   12:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      89760  0.0  0.0 183052  2148 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      89825  0.0  0.0 113284  1212 ?        Ss   12:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      89837  0.0  0.4 1277356 12024 ?       Sl   12:00   0:00  |       \_ /usr/bin/update_imunify
root      89761  0.0  0.0 183052  2148 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      89796  0.0  0.0 113284  1212 ?        Ss   12:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      89799  0.0  0.4 1275804 10536 ?       Rl   12:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      89762  0.0  0.0 183052  2148 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      89797  0.0  0.0 113284  1212 ?        Ss   12:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      89800  0.0  0.0 113288  1428 ?        SN   12:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      89977  0.0  0.2 140888  5832 ?        SN   12:00   0:00  |           \_ /usr/local/lp/sonarperl/bin/perl /usr/local/lp/apps/sonarpush-helpers/hourly.d/eximData.pl
root      90009  0.0  0.1 140888  3120 ?        RN   12:00   0:00  |               \_ /usr/local/lp/sonarperl/bin/perl /usr/local/lp/apps/sonarpush-helpers/hourly.d/eximData.pl
root      89766  0.0  0.0 183052  2148 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      89822  0.0  0.0 113284  1212 ?        Ss   12:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      89835  0.0  0.0 108052   360 ?        S    12:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      89844  0.0  0.0 113288  1516 ?        S    12:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      90010  0.0  0.0 153840  2092 ?        R    12:00   0:00  |               \_ ps auxf
root      89768  0.0  0.0 183048  2152 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      89827  0.0  0.0  20164   808 ?        Ss   12:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      89770  0.0  0.0 183048  2152 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      89829  0.0  0.0  20164   808 ?        Ss   12:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      89772  0.0  0.0 183048  2152 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      89819  0.0  0.0  20164   808 ?        Ss   12:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      89773  0.0  0.0 183048  2152 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      89811  0.0  0.0  20164   804 ?        Ss   12:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      89774  0.0  0.0 183048  2152 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      89832  0.0  0.0  20164   808 ?        Ss   12:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      89775  0.0  0.0 183048  2152 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      89833  0.0  0.0  20164   808 ?        Ss   12:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      89776  0.0  0.0 183048  2152 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      89806  0.0  0.0  20164   808 ?        Ss   12:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      89778  0.0  0.0 183048  2152 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      89826  0.0  0.0  20164   808 ?        Ss   12:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      89779  0.0  0.0 183048  2152 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      89810  0.0  0.0  20164   804 ?        Ss   12:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      89782  0.0  0.0 183048  2148 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      89823  0.0  0.0 113284  1208 ?        Ss   12:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      89845  0.0  0.4 188224 11108 ?        S    12:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      89921  0.0  0.0 160224  2388 ?        S    12:00   0:00  |           \_ top -n 2 -b -c
root      89783  0.0  0.0 183048  2144 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      89821  0.0  0.0  20164   960 ?        Ss   12:00   0:00  |   \_ jailshell (pactpay) [89864] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   89864  0.0  0.0  20164   260 ?        S    12:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   89869  0.0  0.7 480124 17304 ?        S    12:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      89786  0.0  0.0 183048  2144 ?        S    12:00   0:00  \_ /usr/sbin/CROND -n
root      89814  0.0  0.0  20164   964 ?        Ss   12:00   0:00      \_ jailshell (nigeria) [89866] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   89866  0.0  0.0  20164   264 ?        S    12:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   89874  0.0  0.6 404052 16144 ?        S    12:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        566  0.0  0.0  24208     0 ?        Ss   10:00   0:00 /usr/sbin/atd -f
root        578  0.0  0.0 108296    32 tty1     Ss+  10:00   0:00 /sbin/agetty --noclear tty1 linux
root        579  0.0  0.0 114704     0 ttyS0    Ss+  10:00   0:00 /bin/bash
mailnull    630  0.0  0.1  89124  4444 ?        Ss   10:00   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  89884  0.0  0.2  89504  5968 ?        S    12:00   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    932  0.0  0.0  10388    48 ?        Ssl  10:00   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.1 445028  3200 ?        Ss   10:00   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  89452  0.0  0.0 445028   316 ?        S    11:59   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    936  0.0  0.0 113676    72 ?        Ssl  10:00   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    937  0.0  0.5 114016 12808 ?        Ssl  10:00   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.0 111304   364 ?        Ss   10:00   0:00 /usr/sbin/sshd -D
root      89045  0.0  0.1 111304  4264 ?        Ss   11:59   0:00  \_ sshd: [accepted]
root      89118  0.0  0.1 111304  4260 ?        Ss   11:59   0:00  \_ sshd: [accepted]
root      89287  0.0  0.1 111304  4268 ?        Ss   11:59   0:00  \_ sshd: [accepted]
systuser    940  0.0  0.0  12660    64 ?        Ssl  10:00   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.1 15.3 1763224 371676 ?      Ssl  10:00   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       949  0.0  1.3 990264 32764 ?        Ssl  10:00   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        951  0.0  0.1 400740  2972 ?        Ss   10:00   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  89455 13.5  2.7 460772 67524 ?        S    11:59   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  89462 14.5  2.7 460640 67528 ?        S    11:59   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  89466 15.6  2.7 460772 67524 ?        S    11:59   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   89575  0.0  0.2 400460  5300 ?        S    11:59   0:00  \_ php-fpm: pool nigeriadecide_org
root        955  0.0  0.0 389508   640 ?        Ss   10:00   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        957  0.0  0.0  51508   644 ?        Ss   10:00   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1099  0.0  0.1  47252  3548 ?        S    10:00   0:00  \_ dovecot/pop3-login
dovenull   1100  0.0  0.1  47484  3844 ?        S    10:00   0:00  \_ dovecot/imap-login
dovecot    1101  0.0  0.0  10320   236 ?        S    10:00   0:00  \_ dovecot/anvil
root       1102  0.0  0.0  10452   472 ?        S    10:00   0:00  \_ dovecot/log
dovenull   1103  0.0  0.1  47316  3692 ?        S    10:00   0:00  \_ dovecot/pop3-login
dovenull   1104  0.0  0.1  47440  3952 ?        S    10:00   0:00  \_ dovecot/imap-login
root       1109  0.0  0.0  24564  2368 ?        S    10:00   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   536 ?        S    10:00   0:00  \_ dovecot/stats
dovecot    1197  0.0  0.0  41156  1488 ?        S    10:00   0:00  \_ dovecot/auth
worencom  82170  0.0  0.1  38500  3484 ?        S    11:49   0:00  \_ dovecot/imap
root      89361  0.0  0.1  41052  2784 ?        S    11:59   0:00  \_ dovecot/auth -w
root        958  0.0  0.0 153404   252 ?        Ss   10:00   0:00 pure-ftpd (SERVER)
systuser    959  0.0  0.0 113272    76 ?        Ssl  10:00   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        968  0.0  0.0 396248   512 ?        Ss   10:00   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
cpanelc+    970  0.0  0.1  11400  4776 ?        Ss   10:00   0:05 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        972  0.0  0.1 240976  2744 ?        Ssl  10:00   0:02 /usr/sbin/rsyslogd -n
root        973  0.3  0.3 1350088 9588 ?        Ssl  10:00   0:25 /usr/bin/cspdaemon
root        974  0.0  0.2 261156  7188 ?        Ss   10:00   0:03 cpsrvd (SSL) - waiting for connections                   
root      89538  0.0  0.0      0     0 ?        Z    11:59   0:00  \_ [cpaneld - servi] <defunct>
telegraf    975  0.0  1.4 5654048 34288 ?       SLsl 10:00   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        976  0.0  0.0 572372   748 ?        Ssl  10:00   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        997  0.0  0.4 439788 11280 ?        Ss   10:00   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        998  0.2  0.4 1277312 10388 ?       Ssl  10:00   0:21 /usr/bin/checkstatus
root       1002  0.0  0.0 388892   452 ?        Ss   10:00   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
memcach+   1006  0.0  0.0 342400     0 ?        Ssl  10:00   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser   1135  0.0  0.1 157704  2976 ?        S    10:00   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1146  0.0  0.5 387528 13020 ?        Ss   10:00   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1147  0.0  1.3 412368 32000 ?        Ss   10:00   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1258  0.0  0.0 167452  1308 ?        Ss   10:00   0:00 dnsadmin - dormant mode
root       1262  0.0  0.8 209340 21324 ?        Ss   10:00   0:01 tailwatchd
root       1263  0.0  1.0 262224 24624 ?        Ss   10:00   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1634  0.0  0.0 299272   760 ?        Ss   10:00   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1440 ?        SN   10:00   0:00 cpanellogd - sleeping for logs
mysql      1838  1.5  9.4 1463560 229420 ?      Sl   10:00   1:47 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2047  0.0  0.3 267052  8176 ?        Ss   10:00   0:00 /usr/sbin/httpd -k start
root       2068  0.0  0.0  12776   388 ?        S    10:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2069  0.0  0.0  12732   360 ?        S    10:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2070  0.0  0.0  12788   328 ?        S    10:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2079  0.0  0.0  53256    40 ?        S    10:00   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    69958  0.1  0.8 277908 20972 ?        S    11:31   0:02  \_ /usr/sbin/httpd -k start
nobody    73626  0.1  0.8 277616 20296 ?        S    11:37   0:01  \_ /usr/sbin/httpd -k start
nobody    74259  0.1  0.8 277792 20628 ?        S    11:38   0:01  \_ /usr/sbin/httpd -k start
nobody    79505  0.1  0.8 277780 20584 ?        S    11:45   0:01  \_ /usr/sbin/httpd -k start
nobody    80180  0.1  0.8 277944 20428 ?        S    11:46   0:01  \_ /usr/sbin/httpd -k start
nobody    81134  0.1  0.8 277780 20448 ?        S    11:47   0:01  \_ /usr/sbin/httpd -k start
nobody    83339  0.1  0.8 277540 19772 ?        S    11:51   0:00  \_ /usr/sbin/httpd -k start
nobody    85622  0.1  0.8 277916 19456 ?        S    11:54   0:00  \_ /usr/sbin/httpd -k start
nobody    85652  0.1  0.8 277788 19524 ?        S    11:54   0:00  \_ /usr/sbin/httpd -k start
nobody    85665  0.1  0.8 277660 19420 ?        S    11:54   0:00  \_ /usr/sbin/httpd -k start
nobody    85667  0.1  0.7 277520 19232 ?        S    11:54   0:00  \_ /usr/sbin/httpd -k start
nobody    85668  0.1  0.8 277792 19852 ?        S    11:54   0:00  \_ /usr/sbin/httpd -k start
nobody    86662  0.1  0.8 277920 19604 ?        S    11:55   0:00  \_ /usr/sbin/httpd -k start
nobody    87805  0.1  0.8 277920 19436 ?        S    11:57   0:00  \_ /usr/sbin/httpd -k start
nobody    87843  0.1  0.7 277584 19192 ?        S    11:57   0:00  \_ /usr/sbin/httpd -k start
nobody    88157  0.1  0.7 277520 18940 ?        S    11:57   0:00  \_ /usr/sbin/httpd -k start
nobody    88917  0.0  0.7 277544 18968 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    89508  0.0  0.7 277372 18116 ?        S    11:59   0:00  \_ /usr/sbin/httpd -k start
root       2194  0.0  0.4 181888 10608 ?        Ss   10:01   0:06 lfd - sleeping
oysipao+   2828  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+   2835  0.0  0.0   3152   492 ?        S    10:01   0:00  \_ [kworker]
root      39734  0.0  5.0 247944 121108 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      48387  0.0  5.3 265948 130392 ?       S    11:02   0:02  \_ spamd child
root      48388  0.0  4.8 247944 117956 ?       S    11:02   0:00  \_ spamd child
## mysql stats
Uptime: 28861  Threads: 3  Questions: 730299  Slow queries: 0  Opens: 2940  Flush tables: 1  Open tables: 1999  Queries per second avg: 25.304
*************************** 1. row ***************************
     Id: 10516
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 10517
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `13` WHERE `phone`='2348167205939' LIMIT 1
*************************** 3. row ***************************
     Id: 10532
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.113 TIME_WAIT
      1 148.113.128.122 TIME_WAIT
      1 ::1 TIME_WAIT
      1 3.109.246.212 TIME_WAIT
      1 54.236.181.119 TIME_WAIT
      1 87.250.224.202 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     14 43.162.124.109 TIME_WAIT
     86 159.65.137.58 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 12:00:02 WAT
   Restart Time: Sunday, 23-Nov-2025 03:59:04 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 58 seconds
   Server load: 0.59 0.77 0.68
   Total accesses: 38623 - Total Traffic: 776.3 MB - Total Duration: 60506025
   CPU Usage: u10.54 s4.08 cu420.9 cs310.89 - 2.59% CPU load
   1.34 requests/sec - 27.5 kB/second - 20.6 kB/request - 1566.58 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

__KR_KK_C___..L.R..K.K.._W......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req   Dur    Conn  Child  Slot     Client     Protocol             VHost                                         Request
   0-0  83339 0/170/2113 _ 3.62  0    337 949728   0.0   3.23  43.97 43.162.124.109 http/1.1
   1-0  69958 0/528/1954 _ 10.90 0    347 924517   0.0   10.90 40.82 192.178.4.102  http/1.1 team.cloudware.ng:443         GET /?l=257124299 HTTP/1.1
   2-0  87805 4/53/2052  K 0.76  1    415 833125   126.4 0.90  40.53 192.178.4.105  http/1.1 team.cloudware.ng:443         GET /?l=3876786599 HTTP/1.1
   3-0  86662 0/74/2293  R 1.38  2    309 926721   0.0   3.07  43.37 159.65.137.58  http/1.1 health.oyostate.gov.ng:443
   4-0  88157 0/37/1910  _ 0.67  0    0   777554   0.0   0.74  41.90 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80        GET /whm-server-status HTTP/1.0
   5-0  74259 1/380/2085 K 7.10  0    537 1028074  35.4  7.70  46.83 192.178.4.96   http/1.1 team.cloudware.ng:443         GET /?l=3401775274 HTTP/1.1
   6-0  79505 2/277/2142 K 5.39  1    373 44278998 63.7  5.26  39.04 192.178.4.98   http/1.1 team.cloudware.ng:443         GET /?l=1552521056 HTTP/1.1
   7-0  88917 0/17/1881  _ 0.15  0    10  802196   0.0   0.21  35.83 54.92.171.106  http/1.1 nigeriadecide.org:443         GET /polling_unit_category.php/2019elections/blog/images/blog/i
   8-0  80180 1/244/1784 C 4.89  5    64  713012   0.5   4.71  33.25 102.90.103.48  http/1.1 developers.cloudsms.com.ng:80 GET /api.php?&userid=42366540&password=P%40ssw0rd&type=5&destin
   9-0  87843 0/41/1373  _ 0.78  0    147 660937   0.0   0.86  29.16 128.140.8.200  http/1.1 cloudsms.com.ng:443           GET /cron/process_queue3.php HTTP/1.1
   10-0 89508 0/4/1464   _ 0.00  0    391 621703   0.0   0.02  27.78 43.162.124.109 http/1.1
   11-0 81134 0/238/2121 _ 3.90  0    0   900508   0.0   3.98  40.42 ::1            http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   12-0 -     0/0/1398   . 0.00  152  0   649718   0.0   0.00  32.40 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   13-0 -     0/0/1645   . 0.00  298  0   941356   0.0   0.00  33.25 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   14-0 85622 1/78/1380  L 1.44  0    25  490381   0.6   1.57  21.05 43.162.124.109 http/1.1 nescrow.com.ng:80             \x16\x03\x01\x06J\x01
   15-0 -     0/0/1428   . 0.00  14   0   665903   0.0   0.00  31.81 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   16-0 73626 0/359/893  R 7.03  2    309 443054   0.0   7.27  19.44 43.162.124.109 http/1.1
   17-0 -     0/0/1311   . 0.00  334  0   539636   0.0   0.00  23.19 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   18-0 -     0/0/1303   . 0.00  59   0   634301   0.0   0.00  28.54 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   19-0 85652 10/116/557 K 2.52  1    352 302667   303.5 2.71  12.11 192.178.4.104  http/1.1 team.cloudware.ng:443         GET /?l=1046064169 HTTP/1.1
   20-0 -     0/0/800    . 0.00  322  0   222710   0.0   0.00  9.90  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   21-0 85665 6/110/623  K 1.97  0    364 345111   186.9 2.13  15.27 192.178.4.103  http/1.1 team.cloudware.ng:443         GET /?l=1102351098 HTTP/1.1
   22-0 -     0/0/1098   . 0.00  144  0   373041   0.0   0.00  16.25 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   23-0 -     0/0/444    . 0.00  327  0   180727   0.0   0.00  8.96  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   24-0 85667 0/92/129   _ 1.94  0    261 62183    0.0   2.10  2.62  192.178.4.99   http/1.1 team.cloudware.ng:443         GET /?l=2840920736 HTTP/1.1
   25-0 85668 0/104/774  W 1.77  0    0   381752   0.0   1.98  17.97 ::1            http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   26-0 -     0/0/958    . 0.00  747  0   491724   0.0   0.00  23.43 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   27-0 -     0/0/180    . 0.00  2246 0   102991   0.0   0.00  4.33  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   28-0 -     0/0/436    . 0.00  1348 0   210989   0.0   0.00  10.75 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   29-0 -     0/0/89     . 0.00  2643 0   45248    0.0   0.00  2.10  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   30-0 -     0/0/5      . 0.00  2631 0   5446     0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 846
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 0...36)
   index usage: 14%, cache usage: 20%
   total entries stored since starting: 20640
   total entries replaced since starting: 0
   total entries expired since starting: 19790
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 71 miss
   total removes since starting: 5 hit, 16 miss
Youez - 2016 - github.com/yon3zu
LinuXploit