403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.48
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2026-01-05.00.00.txt
 ## swap threshold exceeded
## server overview
2026-01-05.00.00 load[0] mem[54/32] mysql[5/26] httpd[1]
              total        used        free      shared  buff/cache   available
Mem:           2363        1160         191         138        1011         879
Swap:          4047        1431        2616
 00:00:02 up 42 days,  2:48,  0 users,  load average: 0.07, 0.06, 0.13
## system overview
top - 00:00:02 up 42 days,  2:48,  0 users,  load average: 0.07, 0.06, 0.13
Tasks: 214 total,   7 running, 205 sleeping,   0 stopped,   2 zombie
%Cpu(s): 77.1 us, 20.0 sy,  0.0 ni,  0.0 id,  2.9 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   201848 free,  1201272 used,  1017180 buff/cache
KiB Swap:  4145144 total,  2679252 free,  1465892 used.   887744 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 19908 mysql     20   0 1481756 349288   2388 S  88.2 14.4  48:26.88 /usr/sbin+
 62887 root      20   0  175248  28468   2864 R  29.4  1.2   0:00.19 /usr/loca+
 63061 cloudsms  20   0  404052  15612  10164 S  11.8  0.6   0:00.02 /opt/cpan+
     1 root      20   0  192272   3532   1556 S   5.9  0.1 101:06.77 /usr/lib/+
 61599 root      20   0       0      0      0 R   5.9  0.0   0:00.12 [kworker/+
 81135 root      20   0  396248  11276   5648 S   5.9  0.5   0:49.85 php-fpm: +
 92390 cpanelc+  20   0   10868   4092   2360 S   5.9  0.2  17:35.18 /usr/loca+
     2 root      20   0       0      0      0 S   0.0  0.0   0:04.95 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   5:52.77 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   1:44.35 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0  60:48.72 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:10.31 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:10.29 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   1:57.61 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   8:13.09 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:01.32 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.30 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0  64:38.35 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:07.09 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   1:02.96 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   8:27.05 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   7:04.11 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   3:54.81 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40240   5460   5196 S   0.0  0.2  30:43.10 /usr/lib/+
   383 root      20   0   45352      8      4 S   0.0  0.0   0:00.45 /usr/lib/+
   412 root      16  -4   55532    484    352 S   0.0  0.0   4:28.38 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    348    260 S   0.0  0.0   1:32.90 /usr/sbin+
   489 root      20   0   24896   1184    792 R   0.0  0.0  16:00.90 /usr/lib/+
   494 polkitd   20   0  610664    984    464 S   0.0  0.0   8:56.15 /usr/lib/+
   496 root      20   0   52852    208    116 S   0.0  0.0   0:00.57 /usr/sbin+
   503 dbus      20   0   58748   1368    600 S   0.0  0.1  35:10.40 /usr/bin/+
   511 rpc       20   0   69256     88     28 S   0.0  0.0   0:03.78 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208     24      0 S   0.0  0.0   0:00.10 /usr/sbin+
   558 root      20   0  124508    424    292 S   0.0  0.0   2:11.48 /usr/sbin+
   576 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   3:34.73 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:15.55 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   928 systuser  20   0   11540     56      4 S   0.0  0.0   0:02.05 /usr/loca+
   929 systuser  20   0   12756     60      0 S   0.0  0.0   0:02.02 /usr/loca+
   931 systuser  20   0  112524     68      0 S   0.0  0.0   0:01.96 /usr/loca+
   932 systuser  20   0  111608     68      0 S   0.0  0.0   0:01.88 /usr/loca+
   935 root      20   0  572372    728    220 S   0.0  0.0   5:39.42 /usr/bin/+
   937 root      20   0  111304    364    256 S   0.0  0.0   6:37.05 /usr/sbin+
   939 root      20   0 1350728  11124      8 S   0.0  0.5   2:43.29 /usr/bin/+
   952 root      20   0  261032  26980   4560 S   0.0  1.1  12:45.18 cpsrvd (S+
   953 root      20   0  331088   6600   5268 S   0.0  0.3  16:32.16 /usr/sbin+
   972 memcach+  20   0  342400     48     48 S   0.0  0.0   1:29.37 /usr/bin/+
   974 root      20   0 1277312   2376      8 S   0.0  0.1   0:39.04 /usr/bin/+
   980 systuser  20   0  114272  10724   2764 S   0.0  0.4  18:32.45 /usr/loca+
  1144 systuser  20   0  157704   2936    944 S   0.0  0.1   0:19.37 SonarPush+
  1188 named     20   0 1185868  38704   1212 S   0.0  1.6  16:18.72 /usr/sbin+
  1239 root      20   0  167452   4152   2780 S   0.0  0.2   1:01.48 dnsadmin +
  1243 root      20   0  210740  11764   2180 S   0.0  0.5   7:48.66 tailwatchd
  1244 root      20   0  183900   6100   2864 S   0.0  0.3   7:41.72 cpdavd - +
 12995 root      20   0 1409340  61908    332 S   0.0  2.6   1:04.55 /usr/loca+
 15361 oysipao+  20   0    3148      4      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3156     36      0 S   0.0  0.0   1:32.47 [kworker]
 16217 root      20   0   51508   2288   1760 S   0.0  0.1   0:00.12 /usr/sbin+
 16224 dovenull  20   0   46912   4280   3248 S   0.0  0.2   0:00.18 dovecot/p+
 16225 dovenull  20   0   47144   4572   3344 S   0.0  0.2   0:00.10 dovecot/i+
 16226 dovecot   20   0   10320   1208   1016 S   0.0  0.0   0:00.03 dovecot/a+
 16227 root      20   0   10452   1396   1028 S   0.0  0.1   0:00.10 dovecot/l+
 16228 dovenull  20   0   46912   3860   2872 S   0.0  0.2   0:00.12 dovecot/p+
 16229 dovenull  20   0   47284   4540   3304 S   0.0  0.2   0:00.10 dovecot/i+
 16230 root      20   0   24528  12104   1288 S   0.0  0.5   0:00.05 dovecot/c+
 16231 dovecot   20   0   13568   1404   1140 S   0.0  0.1   0:00.01 dovecot/s+
 16234 dovecot   20   0   41056   2692   1920 S   0.0  0.1   0:00.21 dovecot/a+
 16262 mailnull  20   0   88988   9108   1556 S   0.0  0.4   0:00.10 /usr/sbin+
 16283 root      20   0  153404   3008   2264 S   0.0  0.1   0:00.17 pure-ftpd+
 16284 root      20   0  152780   2036   1488 S   0.0  0.1   0:00.00 /usr/sbin+
 16342 root      20   0  267196  28956   3084 S   0.0  1.2   0:00.36 /usr/sbin+
 16343 root      20   0   12804   1392   1180 S   0.0  0.1   0:00.33 /usr/loca+
 16344 root      20   0   12732   1368   1180 S   0.0  0.1   0:00.26 /usr/loca+
 16345 root      20   0   12820   1404   1180 S   0.0  0.1   0:00.31 /usr/loca+
 16346 root      20   0   53268  11800   2412 S   0.0  0.5   0:00.04 /usr/loca+
 16877 nobody    20   0  277928  37084   4976 S   0.0  1.5   0:02.78 /usr/sbin+
 17054 nobody    20   0  277888  37036   4992 S   0.0  1.5   0:02.39 /usr/sbin+
 21302 nobody    20   0  278208  37156   4968 S   0.0  1.5   0:02.51 /usr/sbin+
 26329 nobody    20   0  277888  37036   4980 S   0.0  1.5   0:02.72 /usr/sbin+
 28215 root      20   0       0      0      0 S   0.0  0.0   0:00.26 [kworker/+
 38069 nobody    20   0  277764  36804   4928 S   0.0  1.5   0:01.85 /usr/sbin+
 42971 nobody    20   0  277836  36868   4848 S   0.0  1.5   0:01.55 /usr/sbin+
 49613 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 50615 root      20   0       0      0      0 D   0.0  0.0   0:00.01 [kworker/+
 51669 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 54177 nobody    20   0  277772  36448   4504 S   0.0  1.5   0:00.77 /usr/sbin+
 54182 nobody    20   0  277920  36452   4452 S   0.0  1.5   0:00.79 /usr/sbin+
 54631 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 55269 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 56189 nobody    20   0  277820  36264   4316 S   0.0  1.5   0:00.38 /usr/sbin+
 56649 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 57486 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 59520 root      20   0  187936  17092   1100 S   0.0  0.7   2:15.34 lfd - sle+
 60256 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 61183 worencom  20   0   38712   3752   2688 S   0.0  0.2   0:00.00 dovecot/i+
 61275 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 62129 nobody    20   0  277508  35256   3600 S   0.0  1.5   0:00.01 /usr/sbin+
 62186 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62458 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 62515 root      20   0   60820   4504   3520 S   0.0  0.2   0:00.00 dovecot/l+
 62607 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 62613 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 62614 nigeria   20   0  400460   8244   2436 S   0.0  0.3   0:00.00 php-fpm: +
 62619 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 62623 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 62797 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 62798 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 62799 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.01 /usr/sbin+
 62800 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.02 /usr/sbin+
 62804 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 62805 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 62806 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 62809 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 62810 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 62812 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 62813 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 62814 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 62815 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 62816 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 62817 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 62818 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 62821 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 62822 root      20   0  183076   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 62825 root      20   0  183076   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 62828 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 62829 root      35  15  113288   1428   1240 S   0.0  0.1   0:00.00 /bin/bash+
 62849 root      35  15  140888   6020   2904 S   0.0  0.2   0:00.01 /usr/loca+
 62852 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 62853 root      20   0 1349280  10308    604 S   0.0  0.4   0:00.05 /usr/bin/+
 62856 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 62861 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 62862 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 62863 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 62864 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 62867 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 62868 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 62869 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 62871 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 62873 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 62874 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 62875 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 62877 root      20   0   20164    964    764 S   0.0  0.0   0:00.01 jailshell+
 62880 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 62881 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 62882 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 62883 root      20   0 1276060  10704    600 S   0.0  0.4   0:00.07 /usr/bin/+
 62884 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 62885 root      20   0 1277356  11784    600 S   0.0  0.5   0:00.07 /usr/bin/+
 62889 root      20   0  108052    352    284 S   0.0  0.0   0:00.02 /usr/bin/+
 62893 root      20   0  188156  11024   5144 S   0.0  0.5   0:00.02 /usr/loca+
 62917 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 62922 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 62928 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 62934 nigeria   20   0  404052  16144  10384 S   0.0  0.7   0:00.06 /opt/cpan+
 62939 pactpay   20   0  480124  17680  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 62954 root      20   0  160224   2372   1636 S   0.0  0.1   0:00.01 top -n 2 +
 62955 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 62958 cloudsms  20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /usr/loca+
 62974 cloudsms  20   0  404052  15344  10008 S   0.0  0.6   0:00.01 /opt/cpan+
 62984 mailnull  35  15   82564   3672   2756 R   0.0  0.2   0:00.00 exim -bpc
 63055 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 63058 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 63060 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 72712 root      20   0  445028    596    480 S   0.0  0.0   2:51.19 sw-engine+
 72887 wp-tool+  20   0  412396   3468   1360 S   0.0  0.1  14:13.41 /usr/bin/+
 72891 wp-tool+  20   0  387556   3288   1412 S   0.0  0.1   0:23.20 /usr/bin/+
 77741 root      20   0  248852  56332   1232 S   0.0  2.3   0:11.09 /usr/loca+
 81125 root      20   0  400740  13224   7936 S   0.0  0.5   4:54.95 php-fpm: +
 81130 root      20   0  388892  11272   6192 S   0.0  0.5   0:48.98 php-fpm: +
 81140 root      20   0  389508  10872   6212 S   0.0  0.4   0:50.72 php-fpm: +
 81145 root      20   0  439788  24404  16872 S   0.0  1.0   0:50.72 php-fpm: +
 82067 root      20   0  263256 104332   3004 S   0.0  4.3   0:01.61 spamd chi+
 85330 telegraf  20   0 5654308  29268   5776 S   0.0  1.2  25:49.71 /usr/loca+
 91745 root      20   0  224392   5740   1148 S   0.0  0.2   0:19.73 queueproc+
 91923 root      20   0  248852  57284   1276 S   0.0  2.4   0:00.01 spamd chi+
 92394 root      38  18  130416   1384    684 S   0.0  0.1   0:04.16 cpanellog+
 92408 nscd      20   0 1377676   2460    616 S   0.0  0.1   5:29.61 /usr/sbin+
 92476 root      20   0  299272    616    432 S   0.0  0.0   0:54.62 php-fpm: +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S     2025   0:04 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S     2025   5:52  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S     2025   1:44  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S     2025   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R     2025  60:48  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S     2025   0:10  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S     2025   0:10  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S     2025   1:57  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S     2025   8:13  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S     2025   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S     2025   0:01  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S     2025  64:38  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN    2025   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN    2025   0:07  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S     2025   1:02  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S     2025   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S     2025   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<    2025   8:27  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<    2025   7:04  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S     2025   3:54  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<    2025   3:34  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S     2025   0:15  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ext4-rsv-conver]
root      28215  0.0  0.0      0     0 ?        S    Jan04   0:00  \_ [kworker/0:2]
root      49613  0.0  0.0      0     0 ?        S    Jan04   0:00  \_ [kworker/u200:2]
root      50615  0.0  0.0      0     0 ?        S    Jan04   0:00  \_ [kworker/1:2]
root      51669  0.0  0.0      0     0 ?        S    Jan04   0:00  \_ [kworker/0:3]
root      54631  0.0  0.0      0     0 ?        S    Jan04   0:00  \_ [kworker/1:1]
root      55269  0.0  0.0      0     0 ?        S    Jan04   0:00  \_ [kworker/0:0]
root      56649  0.0  0.0      0     0 ?        S    Jan04   0:00  \_ [kworker/1:4]
root      57486  0.0  0.0      0     0 ?        S    Jan04   0:00  \_ [kworker/u200:1]
root      60256  0.0  0.0      0     0 ?        S    Jan04   0:00  \_ [kworker/1:3]
root      61275  0.0  0.0      0     0 ?        S    Jan04   0:00  \_ [kworker/0:1]
root      61599  0.0  0.0      0     0 ?        S    Jan04   0:00  \_ [kworker/u200:0]
root      62186  0.0  0.0      0     0 ?        S    Jan04   0:00  \_ [kworker/0:4]
root          1  0.1  0.1 192272  3532 ?        Ss    2025 101:06 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  40240  5460 ?        Ss    2025  30:43 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352     8 ?        Ss    2025   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   484 ?        S<sl  2025   4:28 /sbin/auditd
root        487  0.0  0.0  21540   348 ?        Ss    2025   1:32 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24896  1184 ?        Ss    2025  16:00 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610664   984 ?        Ssl   2025   8:56 /usr/lib/polkit-1/polkitd --no-debug
root        496  0.0  0.0  52852   208 ?        Ss    2025   0:00 /usr/sbin/smartd -n -q never
dbus        503  0.0  0.0  58748  1368 ?        Ss    2025  35:10 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256    88 ?        Ss    2025   0:03 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss    2025   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208     0 ?        Ssl   2025   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208    24 ?        Ss    2025   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124508   424 ?        Ss    2025   2:11 /usr/sbin/crond -n
root      62797  0.0  0.0 183080  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      62868  0.0  0.0 113284  1208 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      62883  7.0  0.4 1276060 10704 ?       Sl   00:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      62798  0.0  0.0 183080  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      62856  0.0  0.0 113284  1212 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      62885  7.0  0.4 1277356 11784 ?       Sl   00:00   0:00  |       \_ /usr/bin/update_imunify
root      62799  1.0  0.0 183080  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      62852  0.0  0.0 113284  1212 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      62853  5.0  0.4 1349280 10308 ?       Sl   00:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      62800  2.0  0.0 183080  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      62828  0.0  0.0 113284  1212 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      62829  0.0  0.0 113288  1428 ?        SN   00:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      62849  1.0  0.2 140888  6020 ?        SN   00:00   0:00  |           \_ /usr/local/lp/sonarperl/bin/perl /usr/local/lp/apps/sonarpush-helpers/hourly.d/eximData.pl
mailnull  62984  0.0  0.1  82564  3672 ?        DN   00:00   0:00  |               \_ exim -bpc
root      62804  0.0  0.0 183080  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      62862  0.0  0.0 113284  1212 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /usr/sbin/csf --lfd restart > /dev/null 2>&1
root      62887 21.0  1.2 179952 31200 ?        R    00:00   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/sbin/csf --lfd restart
root      62805  0.0  0.0 183080  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      62864  0.0  0.0 113284  1212 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      62889  2.0  0.0 108052   352 ?        S    00:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      62917  0.0  0.0 113288  1520 ?        S    00:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      63065  0.0  0.0 153840  2096 ?        R    00:00   0:00  |               \_ ps auxf
root      62806  0.0  0.0 183080  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      62869  0.0  0.0  20164   808 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      62809  0.0  0.0 183080  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      62871  0.0  0.0  20164   804 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      62810  0.0  0.0 183080  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      62867  0.0  0.0  20164   988 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      63066  0.0  0.2  38648  6508 ?        R    00:00   0:00  |       \_ /usr/local/cpanel/bin/setupvirtfs 1014
root      62812  0.0  0.0 183076  2148 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      62882  0.0  0.0  20164   984 ?        Ss   00:00   0:00  |   \_ jailshell (cloudsms) [63058] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  63058  0.0  0.0  20164   260 ?        S    00:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  63060  0.0  0.0 113284  1212 ?        S    00:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  63061  0.0  0.6 404052 15612 ?        S    00:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      62813  0.0  0.0 183076  2148 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      62873  0.0  0.0  20164   808 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      62814  0.0  0.0 183076  2148 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      62863  0.0  0.0  20164   988 ?        Ss   00:00   0:00  |   \_ jailshell (cloudsms) [62955] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  62955  0.0  0.0  20164   264 ?        S    00:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  62958  0.0  0.0 113284  1208 ?        S    00:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  62974  0.0  0.6 404052 15344 ?        S    00:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      62815  0.0  0.0 183076  2148 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      62880  0.0  0.0  20164   808 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      62816  0.0  0.0 183076  2148 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      62874  0.0  0.0  20164   808 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      62817  0.0  0.0 183076  2148 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      62881  0.0  0.0  20164   808 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      62818  0.0  0.0 183076  2148 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      62875  0.0  0.0  20164   808 ?        Ss   00:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      62821  0.0  0.0 183076  2148 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      62861  0.0  0.0 113284  1212 ?        Ss   00:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      62893  2.0  0.4 188156 11024 ?        S    00:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      62954  1.0  0.0 160224  2372 ?        S    00:00   0:00  |           \_ top -n 2 -b -c
root      62822  0.0  0.0 183076  2144 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      62877  1.0  0.0  20164   964 ?        Ss   00:00   0:00  |   \_ jailshell (pactpay) [62928] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   62928  0.0  0.0  20164   260 ?        S    00:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   62939  2.0  0.7 480124 17680 ?        S    00:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      62825  0.0  0.0 183076  2136 ?        S    00:00   0:00  \_ /usr/sbin/CROND -n
root      62884  0.0  0.0  20164   968 ?        Ss   00:00   0:00      \_ jailshell (nigeria) [62922] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   62922  0.0  0.0  20164   264 ?        S    00:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   62934  6.0  0.6 404052 16144 ?        S    00:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        576  0.0  0.0 108296     4 tty1     Ss+   2025   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704     0 ttyS0    Ss+   2025   0:00 /bin/bash
systuser    928  0.0  0.0  11540    56 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756    60 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524    68 ?        Ssl   2025   0:01 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608    68 ?        Ssl   2025   0:01 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        935  0.0  0.0 572372   728 ?        Ssl   2025   5:39 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        937  0.0  0.0 111304   364 ?        Ss    2025   6:37 /usr/sbin/sshd -D
root        939  0.0  0.4 1350728 11124 ?       Ssl   2025   2:43 /usr/bin/cspdaemon
root        952  0.0  1.1 261032 26980 ?        Ss    2025  12:45 cpsrvd (SSL) - waiting for connections                   
root      62607  0.0  0.0      0     0 ?        Z    Jan04   0:00  \_ [cpaneld - servi] <defunct>
root      62613  0.0  0.0      0     0 ?        Z    Jan04   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.2 331088  6600 ?        Ssl   2025  16:32 /usr/sbin/rsyslogd -n
memcach+    972  0.0  0.0 342400    48 ?        Ssl   2025   1:29 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 1277312 2376 ?        Ssl   2025   0:39 /usr/bin/checkstatus
systuser    980  0.0  0.4 114272 10724 ?        Ssl   2025  18:32 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser   1144  0.0  0.1 157704  2936 ?        S     2025   0:19 SonarPush 0.6.12 [sleeping]
root       1239  0.0  0.1 167452  4152 ?        Ss    2025   1:01 dnsadmin - dormant mode
root       1243  0.0  0.4 210740 11764 ?        Ss    2025   7:48 tailwatchd
root       1244  0.0  0.2 183900  6100 ?        Ss    2025   7:41 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
oysipao+  15361  0.0  0.0   3148     4 ?        Ss    2025   0:00 [kworker]
oysipao+  15368  0.0  0.0   3156    36 ?        S     2025   1:32  \_ [kworker]
telegraf  85330  0.0  1.2 5654308 29268 ?       SLsl  2025  25:49 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root      72712  0.0  0.0 445028   596 ?        Ss    2025   2:51 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  62619  0.0  0.0 445028   324 ?        S    Jan04   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  62623  0.0  0.0 445028   324 ?        S    Jan04   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  72887  0.0  0.1 412396  3468 ?        Ss    2025  14:13 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+  72891  0.0  0.1 387556  3288 ?        Ss    2025   0:23 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
named      1188  0.0  1.5 1185868 38704 ?       Ssl   2025  16:18 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root      81125  0.0  0.5 400740 13224 ?        Ss    2025   4:54 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   62614  0.0  0.3 400460  8244 ?        S    Jan04   0:00  \_ php-fpm: pool nigeriadecide_org
root      81130  0.0  0.4 388892 11272 ?        Ss    2025   0:48 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root      81135  0.0  0.4 396248 11276 ?        Ss    2025   0:49 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root      81140  0.0  0.4 389508 10872 ?        Ss    2025   0:50 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root      81145  0.0  1.0 439788 24404 ?        Ss    2025   0:50 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root      91745  0.0  0.2 224392  5740 ?        Ss    2025   0:19 queueprocd - waiting up to 60s to process a task
cpanelc+  92390  0.0  0.1  10868  4092 ?        Rs    2025  17:35 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root      92394  0.0  0.0 130416  1384 ?        SN    2025   0:04 cpanellogd - sleeping for logs
nscd      92408  0.0  0.1 1377676 2460 ?        Ssl   2025   5:29 /usr/sbin/nscd
root      92476  0.0  0.0 299272   616 ?        Ss    2025   0:54 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root      12995  0.0  2.5 1409340 61908 ?       Ssl  Jan02   1:04 /usr/local/cpanel/3rdparty/bin/clamd -F
mysql     19908  1.6 14.4 1481756 349288 ?      Sl   Jan02  48:26 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root      59520  0.1  0.7 187936 17092 ?        Ss   Jan04   2:15 lfd - sleeping
root      77741  0.0  2.3 248852 56332 ?        Ss   Jan04   0:11 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      82067  0.0  4.3 263256 104332 ?       S    Jan04   0:01  \_ spamd child
root      91923  0.0  2.3 248852 57284 ?        S    Jan04   0:00  \_ spamd child
root      16217  0.0  0.0  51508  2288 ?        Ss   Jan04   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull  16224  0.0  0.1  46912  4280 ?        S    Jan04   0:00  \_ dovecot/pop3-login
dovenull  16225  0.0  0.1  47144  4572 ?        S    Jan04   0:00  \_ dovecot/imap-login
dovecot   16226  0.0  0.0  10320  1208 ?        S    Jan04   0:00  \_ dovecot/anvil
root      16227  0.0  0.0  10452  1396 ?        S    Jan04   0:00  \_ dovecot/log
dovenull  16228  0.0  0.1  46912  3860 ?        S    Jan04   0:00  \_ dovecot/pop3-login
dovenull  16229  0.0  0.1  47284  4540 ?        S    Jan04   0:00  \_ dovecot/imap-login
root      16230  0.0  0.5  24528 12104 ?        S    Jan04   0:00  \_ dovecot/config
dovecot   16231  0.0  0.0  13568  1404 ?        S    Jan04   0:00  \_ dovecot/stats
dovecot   16234  0.0  0.1  41056  2692 ?        S    Jan04   0:00  \_ dovecot/auth
worencom  61183  0.0  0.1  38712  3752 ?        S    Jan04   0:00  \_ dovecot/imap
root      62458  0.0  0.1  41052  2724 ?        S    Jan04   0:00  \_ dovecot/auth -w
root      62515  0.0  0.1  60820  4504 ?        S    Jan04   0:00  \_ dovecot/lmtp
mailnull  16262  0.0  0.3  88988  9108 ?        Ss   Jan04   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root      16283  0.0  0.1 153404  3008 ?        Ss   Jan04   0:00 pure-ftpd (SERVER)
root      16284  0.0  0.0 152780  2036 ?        Ss   Jan04   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root      16342  0.0  1.1 267196 28956 ?        Ss   Jan04   0:00 /usr/sbin/httpd -k start
root      16343  0.0  0.0  12804  1392 ?        S    Jan04   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      16344  0.0  0.0  12732  1368 ?        S    Jan04   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      16345  0.0  0.0  12820  1404 ?        S    Jan04   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      16346  0.0  0.4  53268 11800 ?        S    Jan04   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    16877  0.0  1.5 277928 37084 ?        S    Jan04   0:02  \_ /usr/sbin/httpd -k start
nobody    17054  0.0  1.5 277888 37036 ?        S    Jan04   0:02  \_ /usr/sbin/httpd -k start
nobody    21302  0.0  1.5 278208 37156 ?        S    Jan04   0:02  \_ /usr/sbin/httpd -k start
nobody    26329  0.0  1.5 277888 37036 ?        S    Jan04   0:02  \_ /usr/sbin/httpd -k start
nobody    38069  0.0  1.5 277764 36804 ?        S    Jan04   0:01  \_ /usr/sbin/httpd -k start
nobody    42971  0.0  1.5 277836 36868 ?        S    Jan04   0:01  \_ /usr/sbin/httpd -k start
nobody    54177  0.0  1.5 277772 36448 ?        S    Jan04   0:00  \_ /usr/sbin/httpd -k start
nobody    54182  0.0  1.5 277920 36452 ?        S    Jan04   0:00  \_ /usr/sbin/httpd -k start
nobody    56189  0.0  1.4 277820 36264 ?        S    Jan04   0:00  \_ /usr/sbin/httpd -k start
nobody    62129  0.0  1.4 277508 35256 ?        S    Jan04   0:00  \_ /usr/sbin/httpd -k start
## mysql stats
Uptime: 179045  Threads: 5  Questions: 16553449  Slow queries: 0  Opens: 43257  Flush tables: 1  Open tables: 2000  Queries per second avg: 92.454
*************************** 1. row ***************************
     Id: 240517
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 240520
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 240528
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 4. row ***************************
     Id: 240529
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 240531
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 119.12.176.33 TIME_WAIT
      1 15.235.96.255 TIME_WAIT
      1 15.235.98.204 TIME_WAIT
      1 15.235.98.77 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 198.235.24.252 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.39.0.100 TIME_WAIT
      1 54.39.210.180 TIME_WAIT
      1 54.39.89.247 TIME_WAIT
      1 94.102.49.210 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 216.73.216.10 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.66 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Dec 8 2025 14:42:54
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 05-Jan-2026 00:00:02 WAT
   Restart Time: Sunday, 04-Jan-2026 22:02:00 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 58 minutes 1 second
   Server load: 0.07 0.06 0.13
   Total accesses: 13413 - Total Traffic: 96.0 MB - Total Duration: 2291614
   CPU Usage: u11.2 s4.91 cu70.95 cs37.67 - 1.76% CPU load
   1.89 requests/sec - 13.9 kB/second - 7.3 kB/request - 170.85 ms/request
   2 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

_W_____R_..._...................................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req  Dur   Conn Child  Slot     Client     Protocol         VHost                                      Request
   0-0  38069 0/1033/1457 _ 6.03  0    8   322613 0.0  4.78  7.37  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   1-0  42971 0/821/1223  W 5.73  0    0   289035 0.0  5.70  8.60  ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   2-0  26329 0/1256/1380 _ 12.15 0    11  210887 0.0  6.42  7.23  185.191.171.7  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?lga=Kankia&state=Katsina&ward=Ga
   3-0  54177 0/287/663   _ 3.77  0    216 90140  0.0  2.04  4.72  116.203.134.67 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue4.php HTTP/1.1
   4-0  62129 0/5/1059    _ 0.01  0    154 163656 0.0  0.02  6.64  128.140.8.200  http/1.1 cloudsms.com.ng:443    GET /cron/process_queue3.php HTTP/1.1
   5-0  16877 0/1348/1348 _ 10.09 0    0   130251 0.0  6.37  6.37  ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   6-0  56189 0/201/925   _ 0.69  1    125 267985 0.0  1.21  13.06 116.203.129.16 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue1.php HTTP/1.1
   7-0  17054 0/1122/1122 R 8.77  3    5   247559 0.0  7.99  7.99  44.197.76.210  http/1.1 nigeriadecide.org:443
   8-0  54182 0/330/830   _ 4.12  1    123 108601 0.0  1.70  9.58  116.203.129.16 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue5.php HTTP/1.1
   9-0  -     0/0/325     . 0.00  1431 0   178389 0.0  0.00  4.35  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   10-0 -     0/0/267     . 0.00  1444 0   33526  0.0  0.00  2.47  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   11-0 -     0/0/1022    . 0.00  47   0   115204 0.0  0.00  7.40  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   12-0 21302 0/1080/1097 _ 11.83 1    84  97129  0.0  6.66  6.78  116.203.129.16 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue2.php HTTP/1.1
   13-0 -     0/0/214     . 0.00  1424 0   7758   0.0  0.00  0.84  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-0 -     0/0/481     . 0.00  2145 0   28876  0.0  0.00  2.58  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 293
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 38 seconds, (range: 1...108)
   index usage: 5%, cache usage: 7%
   total entries stored since starting: 7031
   total entries replaced since starting: 0
   total entries expired since starting: 6737
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 5 hit, 167 miss
   total removes since starting: 1 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit