403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.02.45.txt
 ## swap threshold exceeded
## server overview
2025-11-07.02.45 load[0] mem[62/68] mysql[5/11] httpd[5]
              total        used        free      shared  buff/cache   available
Mem:           2363        1386          97          90         878         715
Swap:          1999        1409         590
 02:45:02 up  7:55,  0 users,  load average: 0.69, 0.58, 0.94
## system overview
top - 02:45:02 up  7:55,  0 users,  load average: 0.69, 0.58, 0.94
Tasks: 207 total,   9 running, 197 sleeping,   0 stopped,   1 zombie
%Cpu(s): 78.8 us, 21.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    78772 free,  1447300 used,   894228 buff/cache
KiB Swap:  2047996 total,   603388 free,  1444608 used.   705660 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1759 mysql     20   0 1458584 254052   3552 S  50.0 10.5  10:25.64 /usr/sbin+
 92035 healtho+  20   0  466864  80136   4344 R  43.8  3.3   0:06.23 php-fpm: +
 92038 healtho+  20   0  461848  74220   4216 R  31.2  3.1   0:06.08 php-fpm: +
 93143 ebolapr+  20   0  303676  24056  10680 R  31.2  1.0   0:00.05 /opt/cpan+
     6 root      20   0       0      0      0 S   6.2  0.0   0:02.66 [ksoftirq+
    36 root      20   0       0      0      0 R   6.2  0.0   0:17.11 [kswapd0]
 93153 cloudw    20   0  281716  12760   8520 R   6.2  0.5   0:00.01 /opt/cpan+
     1 root      20   0   44396   3476   1528 S   0.0  0.1   0:40.03 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.26 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:35.04 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.23 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.17 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.60 [kauditd]
   228 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:01.99 [kworker/+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:02.24 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:01.48 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   4572   4272 S   0.0  0.2   0:15.94 /usr/lib/+
   379 root      20   0   45356    176    164 S   0.0  0.0   0:00.38 /usr/lib/+
   408 root      16  -4   55532    512    384 S   0.0  0.0   0:02.70 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   490 dbus      20   0   58752   1380    656 S   0.0  0.1   0:14.66 /usr/bin/+
   511 rpc       20   0   69256    184    120 S   0.0  0.0   0:00.03 /sbin/rpc+
   515 root      20   0   52852    356    248 S   0.0  0.0   0:00.01 /usr/sbin+
   517 root      20   0  224148   4404   1036 S   0.0  0.2   0:00.36 queueproc+
   519 polkitd   20   0  612240   1092    704 S   0.0  0.0   0:03.76 /usr/lib/+
   522 root      20   0   24704   1268    824 S   0.0  0.1   0:06.44 /usr/lib/+
   524 root      20   0   21540    448    336 S   0.0  0.0   0:00.66 /usr/sbin+
   526 root      20   0  152780    180    136 S   0.0  0.0   0:00.02 /usr/sbin+
   532 nscd      20   0  861368   1292    692 S   0.0  0.1   0:06.48 /usr/sbin+
   540 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 root      20   0    4388     96     92 S   0.0  0.0   0:00.00 /usr/sbin+
   567 root      20   0  124480    468    336 S   0.0  0.0   0:00.79 /usr/sbin+
   569 root      20   0   24208     36     12 S   0.0  0.0   0:00.00 /usr/sbin+
   580 root      20   0  108296    100     96 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704     84     84 S   0.0  0.0   0:00.02 /bin/bash
   591 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   616 mailnull  20   0   89116   3916    876 S   0.0  0.2   0:00.39 /usr/sbin+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:02.30 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   933 root      20   0   51508    556    392 S   0.0  0.0   0:00.33 /usr/sbin+
   934 systuser  20   0  113932   2096      0 S   0.0  0.1   0:00.02 /usr/loca+
   935 systuser  20   0  114016  13292   2400 S   0.0  0.5   0:06.51 /usr/loca+
   938 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.61 /usr/bin/+
   939 root      20   0  111304    468    364 S   0.0  0.0   0:04.06 /usr/sbin+
   941 root      20   0  445028      4      4 S   0.0  0.0   0:00.05 sw-engine+
   943 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   945 systuser  20   0  111608     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   946 telegraf  20   0 5654048  35596   3736 S   0.0  1.5   0:15.56 /usr/loca+
   947 root      20   0  572372    916    336 S   0.0  0.0   0:02.46 /usr/bin/+
   948 systuser  20   0   10132     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   951 root      20   0  153404    356    272 S   0.0  0.0   0:00.61 pure-ftpd+
   963 named     20   0  858120  44380   2192 S   0.0  1.8   0:16.17 /usr/sbin+
   965 root      20   0  397344  13352   8096 S   0.0  0.6   0:07.00 php-fpm: +
   970 root      20   0  436392  24172  16672 S   0.0  1.0   0:00.87 php-fpm: +
   983 root      20   0  306512   5364   4140 S   0.0  0.2   0:08.16 /usr/sbin+
   992 root      20   0  392856  11036   5444 S   0.0  0.5   0:00.76 php-fpm: +
   994 root      20   0  261552   7548   1716 S   0.0  0.3   0:08.07 cpsrvd (S+
   995 cpanelc+  20   0   10528   3448   2288 S   0.0  0.1   0:22.43 /usr/loca+
   999 root      20   0  386112  10604   5980 S   0.0  0.4   0:00.78 php-fpm: +
  1000 root      20   0 1763064 135428    600 S   0.0  5.6   0:14.03 /usr/loca+
  1009 root      20   0  385496  10996   5932 S   0.0  0.5   0:01.03 php-fpm: +
  1075 dovenull  20   0   47064   2748   1920 S   0.0  0.1   0:00.57 dovecot/p+
  1076 dovenull  20   0   47472   3224   2036 S   0.0  0.1   0:00.28 dovecot/i+
  1077 dovecot   20   0   10320    380    268 S   0.0  0.0   0:00.05 dovecot/a+
  1078 root      20   0   10452    624    444 S   0.0  0.0   0:00.35 dovecot/l+
  1079 dovenull  20   0   47048   2688   1928 S   0.0  0.1   0:00.43 dovecot/p+
  1080 dovenull  20   0   47812   3216   1888 S   0.0  0.1   0:00.37 dovecot/i+
  1087 root      20   0   24528   2120    372 S   0.0  0.1   0:00.17 dovecot/c+
  1090 dovecot   20   0   13568    648    452 S   0.0  0.0   0:00.06 dovecot/s+
  1143 systuser  20   0  157704   2848    828 S   0.0  0.1   0:00.14 SonarPush+
  1150 wp-tool+  20   0  387556  13464   1824 S   0.0  0.6   0:00.29 /usr/bin/+
  1151 wp-tool+  20   0  410480  35688   1740 S   0.0  1.5   0:23.46 /usr/bin/+
  1175 dovecot   20   0   41128   1516   1056 S   0.0  0.1   0:00.51 dovecot/a+
  1182 root      20   0  248280 116580    800 S   0.0  4.8   0:06.19 /usr/loca+
  1235 root      20   0  167452   4200   2828 S   0.0  0.2   0:00.53 dnsadmin +
  1238 root      20   0  262224  22920   5064 S   0.0  0.9   0:01.42 cpdavd - +
  1239 root      20   0  209916  11476   2264 S   0.0  0.5   0:02.32 tailwatchd
  1684 root      38  18  130416   1388    708 S   0.0  0.1   0:00.07 cpanellog+
  1953 root      20   0  266984  30708   5532 S   0.0  1.3   0:01.69 /usr/sbin+
  2038 root      20   0  299272    560    392 S   0.0  0.0   0:00.79 php-fpm: +
  5242 root      20   0  262460 128964   3248 S   0.0  5.3   0:03.14 spamd chi+
  5243 root      20   0  248280 116032    280 S   0.0  4.8   0:00.01 spamd chi+
  7033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  7053 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.51 [kworker]
 28586 root      20   0  181868  29868   2220 S   0.0  1.2   0:09.43 lfd - sle+
 45429 root      20   0   12804   1388   1180 S   0.0  0.1   0:00.60 /usr/loca+
 45430 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.50 /usr/loca+
 45431 root      20   0   12840   1400   1180 S   0.0  0.1   0:00.55 /usr/loca+
 45432 root      20   0   53252  11836   2456 S   0.0  0.5   0:00.05 /usr/loca+
 50184 root      20   0  183048   2104   1544 S   0.0  0.1   0:00.00 /usr/sbin+
 50221 root      20   0  113284   1136    956 S   0.0  0.0   0:00.00 /bin/sh -+
 50249 root      20   0  108056    304    232 S   0.0  0.0   0:00.00 sleep 4h +
 59715 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kworker/+
 72908 root      20   0 1341636  10584    600 S   0.0  0.4   0:00.07 /usr/bin/+
 72948 root      20   0 1277312  11648    596 S   0.0  0.5   0:00.07 /usr/bin/+
 77702 nobody    20   0  277684  36244   4928 S   0.0  1.5   0:01.65 /usr/sbin+
 78901 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 81093 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82283 nobody    20   0  277676  35868   4556 S   0.0  1.5   0:01.25 /usr/sbin+
 82289 nobody    20   0  277680  35748   4408 S   0.0  1.5   0:01.00 /usr/sbin+
 82436 nobody    20   0  277772  36172   4784 S   0.0  1.5   0:01.18 /usr/sbin+
 83134 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 84437 nobody    20   0  277836  35888   4428 S   0.0  1.5   0:00.74 /usr/sbin+
 84815 nobody    20   0  277912  35876   4512 S   0.0  1.5   0:00.91 /usr/sbin+
 84916 nobody    20   0  277876  35756   4436 S   0.0  1.5   0:00.66 /usr/sbin+
 85064 nobody    20   0  277884  35812   4472 S   0.0  1.5   0:00.82 /usr/sbin+
 85829 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86262 nobody    20   0  277744  35816   4464 S   0.0  1.5   0:00.75 /usr/sbin+
 86712 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 88561 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 88881 nobody    20   0  277740  35320   3980 S   0.0  1.5   0:00.37 /usr/sbin+
 89071 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 90669 nobody    20   0  277892  35340   3996 S   0.0  1.5   0:00.20 /usr/sbin+
 91463 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 91477 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 91478 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 91584 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 92047 healtho+  20   0  459424  72104   4212 S   0.0  3.0   0:05.64 php-fpm: +
 92100 wp-tool+  20   0  426724  72104  16940 S   0.0  3.0   0:00.71 /usr/bin/+
 92379 nigeria   20   0  397064   8212   2436 S   0.0  0.3   0:00.00 php-fpm: +
 92623 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 92954 root      20   0  157100   5072   3784 S   0.0  0.2   0:00.00 sshd: unk+
 92957 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 93000 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 93002 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 93003 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 93004 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 93006 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 93007 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 93008 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 93009 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 93010 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 93011 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 93013 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 93014 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 93016 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 93020 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 93021 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 93022 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93023 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 93024 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 93025 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 93026 root      20   0   20164    980    784 S   0.0  0.0   0:00.00 jailshell+
 93027 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
 93029 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 93031 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 93036 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 93037 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 93038 root      20   0   20164    808    632 R   0.0  0.0   0:00.00 /usr/loca+
 93042 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 93046 root      20   0  113284   1464   1256 S   0.0  0.1   0:00.00 bash /usr+
 93048 root      20   0  188200  11084   5152 S   0.0  0.5   0:00.01 /usr/loca+
 93050 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 93054 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 93060 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 93070 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 93077 nigeria   20   0  400652  15936  10220 S   0.0  0.7   0:00.05 /opt/cpan+
 93093 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 93099 root      20   0  160224   2336   1636 S   0.0  0.1   0:00.00 top -n 2 +
 93126 wp-tool+  20   0    8632    648    536 S   0.0  0.0   0:00.00 timeout 6+
 93129 ebolapr+  20   0  753092   2020   1336 S   0.0  0.1   0:00.00 /usr/loca+
 93140 ebolapr+  20   0    8632    648    536 S   0.0  0.0   0:00.00 /usr/bin/+
 93142 root      20   0  111304   4264   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 93145 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 93146 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 93147 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 93149 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 93151 cloudsms  20   0  400652  15144   9844 S   0.0  0.6   0:00.00 /opt/cpan+
 93156 root      20   0  113284    208      0 R   0.0  0.0   0:00.00 bash /usr+
 93157 root      20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov06   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov06   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov06   0:35  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov06   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov06   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov06   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov06   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kauditd]
root        228  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov06   0:01  \_ [kworker/0:1H]
root        247  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [scsi_tmf_1]
root        250  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   Nov06   0:02  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    Nov06   0:01  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [xprtiod]
root        591  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   Nov06   0:02  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ext4-rsv-conver]
root      59715  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:1]
root      78901  0.0  0.0      0     0 ?        S    02:15   0:00  \_ [kworker/u200:2]
root      81093  0.0  0.0      0     0 ?        S    02:20   0:00  \_ [kworker/u200:0]
root      83134  0.0  0.0      0     0 ?        S    02:25   0:00  \_ [kworker/1:1]
root      85829  0.0  0.0      0     0 ?        S    02:31   0:00  \_ [kworker/1:2]
root      86712  0.0  0.0      0     0 ?        S    02:33   0:00  \_ [kworker/0:2]
root      88561  0.0  0.0      0     0 ?        S    02:37   0:00  \_ [kworker/1:3]
root      89071  0.0  0.0      0     0 ?        S    02:38   0:00  \_ [kworker/0:5]
root      91463  0.0  0.0      0     0 ?        S    02:43   0:00  \_ [kworker/1:0]
root      91477  0.0  0.0      0     0 ?        S    02:43   0:00  \_ [kworker/0:0]
root      91478  0.0  0.0      0     0 ?        S    02:43   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44396  3476 ?        Ss   Nov06   0:40 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.1  40244  4572 ?        Ss   Nov06   0:15 /usr/lib/systemd/systemd-journald
root        379  0.0  0.0  45356   176 ?        Ss   Nov06   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   512 ?        S<sl Nov06   0:02 /sbin/auditd
dbus        490  0.0  0.0  58752  1380 ?        Ss   Nov06   0:14 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256   184 ?        Ss   Nov06   0:00 /sbin/rpcbind -w
root        515  0.0  0.0  52852   356 ?        Ss   Nov06   0:00 /usr/sbin/smartd -n -q never
root        517  0.0  0.1 224148  4404 ?        Ss   Nov06   0:00 queueprocd - waiting up to 60s to process a task
polkitd     519  0.0  0.0 612240  1092 ?        Ssl  Nov06   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        522  0.0  0.0  24704  1268 ?        Ss   Nov06   0:06 /usr/lib/systemd/systemd-logind
root        524  0.0  0.0  21540   448 ?        Ss   Nov06   0:00 /usr/sbin/irqbalance --foreground
root        526  0.0  0.0 152780   180 ?        Ss   Nov06   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        532  0.0  0.0 861368  1292 ?        Ssl  Nov06   0:06 /usr/sbin/nscd
root        540  0.0  0.0 195208     0 ?        Ssl  Nov06   0:00 /usr/sbin/gssproxy -D
root        541  0.0  0.0   4388    96 ?        Ss   Nov06   0:00 /usr/sbin/acpid
root        567  0.0  0.0 124480   468 ?        Ss   Nov06   0:00 /usr/sbin/crond -n
root      50184  0.0  0.0 183048  2104 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      50221  0.0  0.0 113284  1136 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      50249  0.0  0.0 108056   304 ?        S    01:00   0:00  |       \_ sleep 4h 1m
root      93000  0.0  0.0 183048  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      93024  0.0  0.0 113284  1212 ?        Ss   02:45   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      93046  0.0  0.0 113284  1464 ?        S    02:45   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      93002  0.0  0.0 183048  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      93020  0.0  0.0 113284  1212 ?        Ss   02:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      93042  0.0  0.0 108052   356 ?        S    02:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      93050  0.0  0.0 113288  1516 ?        S    02:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      93158  0.0  0.0 153840  2100 ?        R    02:45   0:00  |               \_ ps auxf
root      93003  0.0  0.0 183048  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      93027  0.0  0.0  20164   984 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      93157  0.0  0.0  20164   260 ?        R    02:45   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      93004  0.0  0.0 183048  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      93021  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      93006  0.0  0.0 183048  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      93022  0.0  0.0  20164   808 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      93007  0.0  0.0 183048  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      93029  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      93008  0.0  0.0 183048  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      93026  0.0  0.0  20164   980 ?        Ss   02:45   0:00  |   \_ jailshell (cloudsms) [93145] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  93145  0.0  0.0  20164   256 ?        S    02:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  93149  0.0  0.0 113284  1212 ?        S    02:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  93151  0.0  0.6 400652 15144 ?        S    02:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      93009  0.0  0.0 183048  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      93038  0.0  0.0  20164   808 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      93010  0.0  0.0 183048  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      93025  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      93011  0.0  0.0 183048  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      93031  0.0  0.0  20164   808 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      93013  0.0  0.0 183048  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      93037  0.0  0.0 113284  1212 ?        Ss   02:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      93048  1.0  0.4 188200 11084 ?        S    02:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      93099  0.0  0.0 160224  2336 ?        S    02:45   0:00  |           \_ top -n 2 -b -c
root      93014  0.0  0.0 183048  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      93036  0.0  0.0  20164   968 ?        Ss   02:45   0:00  |   \_ jailshell (pactpay) [93054] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   93054  0.0  0.0  20164   264 ?        S    02:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   93070  1.0  0.7 476724 17484 ?        S    02:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      93016  0.0  0.0 183048  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      93023  0.0  0.0  20164   964 ?        Ss   02:45   0:00      \_ jailshell (nigeria) [93060] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   93060  0.0  0.0  20164   260 ?        S    02:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   93077  5.0  0.6 400652 15936 ?        S    02:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        569  0.0  0.0  24208    36 ?        Ss   Nov06   0:00 /usr/sbin/atd -f
root        580  0.0  0.0 108296   100 tty1     Ss+  Nov06   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704    84 ttyS0    Ss+  Nov06   0:00 /bin/bash
mailnull    616  0.0  0.1  89116  3916 ?        Ss   Nov06   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        933  0.0  0.0  51508   556 ?        Ss   Nov06   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.1  47064  2748 ?        S    Nov06   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  47472  3224 ?        S    Nov06   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   380 ?        S    Nov06   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   624 ?        S    Nov06   0:00  \_ dovecot/log
dovenull   1079  0.0  0.1  47048  2688 ?        S    Nov06   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47812  3216 ?        S    Nov06   0:00  \_ dovecot/imap-login
root       1087  0.0  0.0  24528  2120 ?        S    Nov06   0:00  \_ dovecot/config
dovecot    1090  0.0  0.0  13568   648 ?        S    Nov06   0:00  \_ dovecot/stats
dovecot    1175  0.0  0.0  41128  1516 ?        S    Nov06   0:00  \_ dovecot/auth
root      91584  0.0  0.1  60820  4512 ?        S    02:43   0:00  \_ dovecot/lmtp
root      92623  0.0  0.1  41052  2728 ?        S    02:44   0:00  \_ dovecot/auth -w
systuser    934  0.0  0.0 113932  2096 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.5 114016 13292 ?        Ssl  Nov06   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+    938  0.0  0.0 342400     0 ?        Ssl  Nov06   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   468 ?        Ss   Nov06   0:04 /usr/sbin/sshd -D
root      92954  0.0  0.2 157100  5072 ?        Ss   02:44   0:00  \_ sshd: unknown [priv]
sshd      92957  0.0  0.1 115644  2628 ?        S    02:44   0:00  |   \_ sshd: unknown [net]
root      93142  0.0  0.1 111304  4264 ?        Ss   02:45   0:00  \_ sshd: [accepted]
sshd      93147  0.0  0.1 115644  2628 ?        S    02:45   0:00      \_ sshd: [net]
root        941  0.0  0.0 445028     4 ?        Ss   Nov06   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    943  0.0  0.0  14068    48 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    945  0.0  0.0 111608    72 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    946  0.0  1.4 5654048 35596 ?       SLsl Nov06   0:15 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        947  0.0  0.0 572372   916 ?        Ssl  Nov06   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    948  0.0  0.0  10132    24 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        951  0.0  0.0 153404   356 ?        Ss   Nov06   0:00 pure-ftpd (SERVER)
named       963  0.0  1.8 858120 44380 ?        Ssl  Nov06   0:16 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.5 397344 13352 ?        Ss   Nov06   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  92035 13.8  3.3 466864 80136 ?        R    02:44   0:06  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  92038 14.1  3.0 461848 74484 ?        R    02:44   0:06  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  92047 13.4  2.9 459424 72104 ?        S    02:44   0:05  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   92379  0.0  0.3 397064  8212 ?        S    02:44   0:00  \_ php-fpm: pool nigeriadecide_org
root        970  0.0  0.9 436392 24172 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        983  0.0  0.2 306512  5364 ?        Ssl  Nov06   0:08 /usr/sbin/rsyslogd -n
root        992  0.0  0.4 392856 11036 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        994  0.0  0.3 261552  7548 ?        Ss   Nov06   0:08 cpsrvd (SSL) - waiting for connections                   
root      93093  0.0  0.0      0     0 ?        Z    02:45   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    995  0.0  0.1  10528  3448 ?        Ss   Nov06   0:22 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        999  0.0  0.4 386112 10604 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1000  0.0  5.5 1763064 135428 ?      Ssl  Nov06   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1009  0.0  0.4 385496 10996 ?        Ss   Nov06   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser   1143  0.0  0.1 157704  2848 ?        S    Nov06   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1150  0.0  0.5 387556 13464 ?        Ss   Nov06   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+  92100  2.5  2.9 426724 72104 ?        S    02:44   0:00  \_ /usr/bin/sw-engine -d auto_prepend_file=/usr/local/cpanel/3rdparty/wp-toolkit/scripts/scheduled-task-prepend-file.php /usr/local/cpanel/3rdparty/wp-toolkit/plib/scripts/instances-auto-update.php
wp-tool+  93126  0.0  0.0   8632   648 ?        S    02:45   0:00      \_ timeout 60 /usr/local/cpanel/3rdparty/wp-toolkit//bin/wpt-panopticon -user ebolaprevention -operation run-wp-cli -work-dir /home/ebolaprevention/public_html/blog -preserve-environment WP_CLI_CONFIG_PATH,PATH -php-max-execution-time 60 -- config-settings get --params=DB_CHARSET,DB_NAME,DB_USER,DB_PASSWORD,DB_HOST,DOMAIN_CURRENT_SITE,PATH_CURRENT_SITE,MULTISITE,SUBDOMAIN_INSTALL,WP_AUTO_UPDATE_CORE,WPCACHEHOME,WP_DEBUG,WP_DEBUG_LOG,WP_DEBUG_DISPLAY,SCRIPT_DEBUG,SAVEQUERIES,WP_HOME,WP_SITEURL,CONCATENATE_SCRIPTS,DISALLOW_FILE_EDIT,WP_CACHE_KEY_SALT,DISABLE_WP_CRON,WP_REDIS_PREFIX,WP_TOOLKIT_API_TOKEN,WP_TOOLKIT_ANALYTICS,WP_TOOLKIT_ANALYTICS_KEY,WP_TOOLKIT_ANALYTICS_HOST --format=json
ebolapr+  93129  0.0  0.0 753092  2020 ?        Sl   02:45   0:00          \_ /usr/local/cpanel/3rdparty/wp-toolkit//bin/wpt-panopticon -user ebolaprevention -operation run-wp-cli -work-dir /home/ebolaprevention/public_html/blog -preserve-environment WP_CLI_CONFIG_PATH,PATH -php-max-execution-time 60 -- config-settings get --params=DB_CHARSET,DB_NAME,DB_USER,DB_PASSWORD,DB_HOST,DOMAIN_CURRENT_SITE,PATH_CURRENT_SITE,MULTISITE,SUBDOMAIN_INSTALL,WP_AUTO_UPDATE_CORE,WPCACHEHOME,WP_DEBUG,WP_DEBUG_LOG,WP_DEBUG_DISPLAY,SCRIPT_DEBUG,SAVEQUERIES,WP_HOME,WP_SITEURL,CONCATENATE_SCRIPTS,DISALLOW_FILE_EDIT,WP_CACHE_KEY_SALT,DISABLE_WP_CRON,WP_REDIS_PREFIX,WP_TOOLKIT_API_TOKEN,WP_TOOLKIT_ANALYTICS,WP_TOOLKIT_ANALYTICS_KEY,WP_TOOLKIT_ANALYTICS_HOST --format=json
ebolapr+  93140  0.0  0.0   8632   648 ?        S    02:45   0:00              \_ /usr/bin/timeout 60 /usr/local/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/ebolaprevention/public_html/blog config-settings get --params=DB_CHARSET,DB_NAME,DB_USER,DB_PASSWORD,DB_HOST,DOMAIN_CURRENT_SITE,PATH_CURRENT_SITE,MULTISITE,SUBDOMAIN_INSTALL,WP_AUTO_UPDATE_CORE,WPCACHEHOME,WP_DEBUG,WP_DEBUG_LOG,WP_DEBUG_DISPLAY,SCRIPT_DEBUG,SAVEQUERIES,WP_HOME,WP_SITEURL,CONCATENATE_SCRIPTS,DISALLOW_FILE_EDIT,WP_CACHE_KEY_SALT,DISABLE_WP_CRON,WP_REDIS_PREFIX,WP_TOOLKIT_API_TOKEN,WP_TOOLKIT_ANALYTICS,WP_TOOLKIT_ANALYTICS_KEY,WP_TOOLKIT_ANALYTICS_HOST --format=json
ebolapr+  93143  0.0  1.0 303676 24848 ?        R    02:45   0:00                  \_ /opt/cpanel/ea-php74/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/ebolaprevention/public_html/blog config-settings get --params=DB_CHARSET,DB_NAME,DB_USER,DB_PASSWORD,DB_HOST,DOMAIN_CURRENT_SITE,PATH_CURRENT_SITE,MULTISITE,SUBDOMAIN_INSTALL,WP_AUTO_UPDATE_CORE,WPCACHEHOME,WP_DEBUG,WP_DEBUG_LOG,WP_DEBUG_DISPLAY,SCRIPT_DEBUG,SAVEQUERIES,WP_HOME,WP_SITEURL,CONCATENATE_SCRIPTS,DISALLOW_FILE_EDIT,WP_CACHE_KEY_SALT,DISABLE_WP_CRON,WP_REDIS_PREFIX,WP_TOOLKIT_API_TOKEN,WP_TOOLKIT_ANALYTICS,WP_TOOLKIT_ANALYTICS_KEY,WP_TOOLKIT_ANALYTICS_HOST --format=json
wp-tool+   1151  0.0  1.4 410480 35688 ?        Ss   Nov06   0:23 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1182  0.0  4.8 248280 116580 ?       Ss   Nov06   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5242  0.0  5.3 262460 128964 ?       S    Nov06   0:03  \_ spamd child
root       5243  0.0  4.7 248280 116032 ?       S    Nov06   0:00  \_ spamd child
root       1235  0.0  0.1 167452  4200 ?        Ss   Nov06   0:00 dnsadmin - dormant mode
root       1238  0.0  0.9 262224 22920 ?        Ss   Nov06   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1239  0.0  0.4 209916 11476 ?        Ss   Nov06   0:02 tailwatchd
root       1684  0.0  0.0 130416  1388 ?        SN   Nov06   0:00 cpanellogd - sleeping for logs
mysql      1759  2.1 10.4 1458584 254052 ?      Sl   Nov06  10:25 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1953  0.0  1.2 266984 30708 ?        Ss   Nov06   0:01 /usr/sbin/httpd -k start
root      45429  0.0  0.0  12804  1388 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      45430  0.0  0.0  12732  1364 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      45431  0.0  0.0  12840  1400 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      45432  0.0  0.4  53252 11836 ?        S    00:47   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    77702  0.0  1.4 277684 36244 ?        S    02:12   0:01  \_ /usr/sbin/httpd -k start
nobody    82283  0.0  1.4 277676 35868 ?        S    02:23   0:01  \_ /usr/sbin/httpd -k start
nobody    82289  0.0  1.4 277680 35748 ?        S    02:23   0:01  \_ /usr/sbin/httpd -k start
nobody    82436  0.0  1.4 277772 36172 ?        S    02:23   0:01  \_ /usr/sbin/httpd -k start
nobody    84437  0.0  1.4 277836 35888 ?        S    02:28   0:00  \_ /usr/sbin/httpd -k start
nobody    84815  0.0  1.4 277912 35876 ?        S    02:29   0:00  \_ /usr/sbin/httpd -k start
nobody    84916  0.0  1.4 277876 35756 ?        S    02:29   0:00  \_ /usr/sbin/httpd -k start
nobody    85064  0.0  1.4 277884 35812 ?        S    02:29   0:00  \_ /usr/sbin/httpd -k start
nobody    86262  0.0  1.4 277744 35816 ?        S    02:32   0:00  \_ /usr/sbin/httpd -k start
cloudw    93153  0.0  0.6 350316 16620 ?        S    02:45   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    88881  0.0  1.4 277740 35320 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    90669  0.0  1.4 277892 35340 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
root       2038  0.0  0.0 299272   560 ?        Ss   Nov06   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
oysipao+   7033  0.0  0.0   3148   416 ?        Ss   Nov06   0:00 [kworker]
oysipao+   7053  0.0  0.0   3152   424 ?        S    Nov06   0:00  \_ [kworker]
root      28586  0.0  1.2 181868 29868 ?        Ss   00:00   0:09 lfd - sleeping
root      72908  0.0  0.4 1341636 10584 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      72948  0.0  0.4 1277312 11648 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 28527  Threads: 4  Questions: 4817312  Slow queries: 0  Opens: 8022  Flush tables: 1  Open tables: 2000  Queries per second avg: 168.868
*************************** 1. row ***************************
     Id: 70621
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 70623
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 70631
   User: ebolapre_wp547
   Host: localhost
     db: ebolapre_wp547
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 70632
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 110.249.202.139 TIME_WAIT
      1 114.119.128.58 TIME_WAIT
      1 142.44.225.42 TIME_WAIT
      1 15.235.27.192 TIME_WAIT
      1 170.23.15.1 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 192.178.4.99 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.154.149.197 TIME_WAIT
      1 54.39.136.34 TIME_WAIT
      1 84.37.232.90 TIME_WAIT
      1 91.208.184.168 TIME_WAIT
      1 92.71.98.6 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     13 123.253.22.30 TIME_WAIT
     79 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 02:45:02 WAT
   Restart Time: Thursday, 06-Nov-2025 18:49:42 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 7 hours 55 minutes 20 seconds
   Server load: 0.69 0.58 0.94
   Total accesses: 90252 - Total Traffic: 1.0 GB - Total Duration: 43356808
   CPU Usage: u7.35 s3.87 cu512.46 cs268.18 - 2.78% CPU load
   3.16 requests/sec - 38.3 kB/second - 12.1 kB/request - 480.397 ms/request
   5 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

.__W_W._._K_........C.....C.....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn Child  Slot     Client     Protocol           VHost                                        Request
   0-1  -     0/0/6597   . 0.00 98    0   2925815 0.0  0.00  77.57 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   1-1  84437 0/244/6587 _ 3.63 0     527 2969419 0.0  2.22  73.61 84.37.232.90   http/1.1 health.oyostate.gov.ng:443 GET /portfolio/oysphcb-recruitment-about-16000-candidates-begin
   2-1  84815 0/317/6828 _ 3.32 0     0   3000769 0.0  2.93  83.90 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   3-1  86262 0/331/6021 W 2.98 0     0   2676502 0.0  2.08  65.55 66.249.70.32   http/1.1 support.cloudware.ng:443   GET /?c=1928345245 HTTP/1.1
   4-1  84916 0/206/6007 _ 2.63 0     7   2803550 0.0  2.00  65.65 34.194.233.48  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/blog/polling_unit_category.
   5-1  90669 0/61/5668  W 0.51 0     0   2521071 0.0  0.67  67.88 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   6-1  -     0/0/5614   . 0.00 210   0   2572961 0.0  0.00  64.89 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-1  85064 0/416/5726 _ 3.98 1     1   2447555 0.0  1.98  66.57 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   8-1  -     0/0/4926   . 0.00 323   0   2337989 0.0  0.00  58.74 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-1  77702 0/505/5222 _ 5.77 0     302 2428493 0.0  5.41  62.96 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=3853669955 HTTP/1.1
   10-1 82436 1/368/4511 K 4.47 2     427 2303119 36.2 3.69  57.80 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=3818847001 HTTP/1.1
   11-1 88881 0/127/3757 _ 1.64 0     0   1960045 0.0  1.14  52.88 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   12-1 -     0/0/3682   . 0.00 367   0   1673514 0.0  0.00  53.56 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-1 -     0/0/2048   . 0.00 1169  0   1193623 0.0  0.00  28.43 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-1 -     0/0/2057   . 0.00 1172  0   1174948 0.0  0.00  21.51 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-1 -     0/0/2035   . 0.00 1178  0   1339486 0.0  0.00  19.97 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-1 -     0/0/3139   . 0.00 989   0   1606680 0.0  0.00  34.21 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-1 -     0/0/1389   . 0.00 816   0   975785  0.0  0.00  13.84 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-1 -     0/0/1237   . 0.00 256   0   851242  0.0  0.00  20.31 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-1 -     0/0/165    . 0.00 1211  4   161557  0.0  0.00  1.22  47.128.111.122 http/1.1
   20-1 82283 1/448/1068 C 9.23 0     921 564797  5.7  4.80  10.39 157.230.45.41  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   21-1 -     0/0/937    . 0.00 822   0   516242  0.0  0.00  12.17 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-1 -     0/0/1049   . 0.00 1177  0   501502  0.0  0.00  13.41 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-1 -     0/0/393    . 0.00 796   0   198868  0.0  0.00  4.56  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-1 -     0/0/436    . 0.00 588   0   228232  0.0  0.00  3.54  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-1 -     0/0/367    . 0.00 1190  0   132533  0.0  0.00  4.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-1 82289 1/313/595  C 4.59 0     736 268389  5.7  3.41  6.48  157.230.45.41  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   27-1 -     0/0/513    . 0.00 1199  0   237087  0.0  0.00  3.99  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-1 -     0/0/208    . 0.00 1196  0   104363  0.0  0.00  2.45  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-1 -     0/0/175    . 0.00 1212  0   89634   0.0  0.00  1.53  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-1 -     0/0/15     . 0.00 1200  0   3618    0.0  0.00  0.14  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/300    . 0.00 15036 0   132085  0.0  0.00  2.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/8      . 0.00 16190 0   1509    0.0  0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/5      . 0.00 16211 0   1381    0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/106    . 0.00 16193 0   53900   0.0  0.00  1.65  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00 16202 0   1494    0.0  0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/181    . 0.00 15549 0   68720   0.0  0.00  1.46  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/308    . 0.00 16215 0   157495  0.0  0.00  3.36  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/4      . 0.00 16212 4   712     0.0  0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/4      . 0.00 16205 0   1369    0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/116    . 0.00 15728 0   43685   0.0  0.00  1.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/1      . 0.00 16214 0   0       0.0  0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/4      . 0.00 16184 0   735     0.0  0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 16201 0   54      0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/236    . 0.00 15216 0   124261  0.0  0.00  2.80  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 416
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 20 seconds, (range: 3...58)
   index usage: 7%, cache usage: 10%
   total entries stored since starting: 14403
   total entries replaced since starting: 0
   total entries expired since starting: 13979
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 34 miss
   total removes since starting: 8 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit