403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.02.45.txt
 ## swap threshold exceeded
## server overview
2025-11-21.02.45 load[0] mem[60/68] mysql[3/10] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1303          95          93         964         791
Swap:          1999        1437         562
 02:45:02 up  7:55,  0 users,  load average: 0.70, 0.98, 4.94
## system overview
top - 02:45:02 up  7:55,  0 users,  load average: 0.70, 0.98, 4.94
Tasks: 212 total,   5 running, 204 sleeping,   0 stopped,   3 zombie
%Cpu(s): 78.8 us, 21.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    78720 free,  1333476 used,  1008104 buff/cache
KiB Swap:  2047996 total,   575640 free,  1472356 used.   812132 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2435 mysql     20   0 1462240 271036   3512 S 137.5 11.2   5:40.74 /usr/sbin+
 39046 nigeria   20   0  302976  20036  10808 R  18.8  0.8   0:00.03 /opt/cpan+
 38991 nigeria   20   0  404052  16136  10380 S  12.5  0.7   0:00.04 /opt/cpan+
    36 root      20   0       0      0      0 S   6.2  0.0   0:17.34 [kswapd0]
 34671 nobody    20   0  277616  35800   4500 S   6.2  1.5   0:00.41 /usr/sbin+
     1 root      20   0   44396   3472   1600 S   0.0  0.1   0:39.55 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.64 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.38 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:28.20 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.35 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.84 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.01 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.59 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:02.07 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:01.99 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:01.82 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40244   6016   5704 S   0.0  0.2   0:14.99 /usr/lib/+
   386 root      20   0   45360    404    388 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    588    460 S   0.0  0.0   0:02.44 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 root      20   0   21540    528    444 S   0.0  0.0   0:00.62 /usr/sbin+
   482 root      20   0  152780    376    336 S   0.0  0.0   0:00.02 /usr/sbin+
   485 root      20   0  224288   6880   1800 S   0.0  0.3   0:00.36 queueproc+
   486 dbus      20   0   58728   1520    792 S   0.0  0.1   0:15.19 /usr/bin/+
   496 rpc       20   0   69256    268    208 S   0.0  0.0   0:00.03 /sbin/rpc+
   516 root      20   0   52852    564    452 S   0.0  0.0   0:00.00 /usr/sbin+
   518 root      20   0   24720   1316    940 S   0.0  0.1   0:06.67 /usr/lib/+
   522 nscd      20   0 1344744   2256    892 S   0.0  0.1   0:23.05 /usr/sbin+
   523 polkitd   20   0  610540   1112    712 S   0.0  0.0   0:03.91 /usr/lib/+
   549 root      20   0    4388    176    172 S   0.0  0.0   0:00.00 /usr/sbin+
   553 root      20   0  195208    204    204 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0  124476    628    500 S   0.0  0.0   0:00.81 /usr/sbin+
   575 root      20   0   24208    228    208 S   0.0  0.0   0:00.00 /usr/sbin+
   586 root      20   0  108296    308    304 S   0.0  0.0   0:00.00 /sbin/age+
   587 root      20   0  114704    304    304 S   0.0  0.0   0:00.02 /bin/bash
   603 mailnull  20   0   90820   3940    996 S   0.0  0.2   0:00.74 /usr/sbin+
   618 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.63 [loop0]
   661 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0  114016  13028   2260 S   0.0  0.5   0:06.83 /usr/loca+
   913 root      20   0  111304    660    560 S   0.0  0.0   0:03.39 /usr/sbin+
   914 root      20   0  153404    544    460 S   0.0  0.0   0:00.60 pure-ftpd+
   915 root      20   0  445028   1496   1380 S   0.0  0.1   0:01.22 sw-engine+
   916 systuser  20   0  111608     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   920 root      20   0 1277056   8888    276 S   0.0  0.4   0:35.79 /usr/bin/+
   923 root      20   0  396248    632    460 S   0.0  0.0   0:00.71 php-fpm: +
   927 root      20   0  439788   2228   1280 S   0.0  0.1   0:00.80 php-fpm: +
   929 named     20   0 1054792  42732   1996 S   0.0  1.8   0:14.30 /usr/sbin+
   930 root      20   0 1763340 158068    720 S   0.0  6.5   0:14.10 /usr/loca+
   937 root      20   0  261160   7516   2004 S   0.0  0.3   0:44.19 cpsrvd (S+
   944 systuser  20   0  113932     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   948 root      20   0   51656   1260    920 S   0.0  0.1   0:00.38 /usr/sbin+
   951 memcach+  20   0  342400    204    204 S   0.0  0.0   0:00.62 /usr/bin/+
   952 cpanelc+  20   0   10592   3596   2376 S   0.0  0.1   0:24.43 /usr/loca+
   956 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   957 root      20   0  298320   6556   5364 S   0.0  0.3   0:07.49 /usr/sbin+
   966 root      20   0  389508    888    676 S   0.0  0.0   0:00.77 php-fpm: +
   975 root      20   0  400740   2460    836 S   0.0  0.1   0:03.40 php-fpm: +
   976 telegraf  20   0 5654304  36196   5496 S   0.0  1.5   0:15.44 /usr/loca+
   985 root      20   0  388892    892    684 S   0.0  0.0   0:00.72 php-fpm: +
   986 root      20   0 1341892   9316    280 S   0.0  0.4   0:23.18 /usr/bin/+
   987 root      20   0  572372   1256    680 S   0.0  0.1   0:02.44 /usr/bin/+
  1080 dovecot   20   0   10320    572    456 S   0.0  0.0   0:00.13 dovecot/a+
  1131 root      20   0  247916 117592   1148 S   0.0  4.9   0:06.17 /usr/loca+
  1156 systuser  20   0  157708   3020   1044 S   0.0  0.1   0:00.13 SonarPush+
  1161 wp-tool+  20   0  387556  13624   1972 S   0.0  0.6   0:00.29 /usr/bin/+
  1162 wp-tool+  20   0  412396  32900   2092 S   0.0  1.4   0:09.07 /usr/bin/+
  1235 root      20   0  183900   6396   3168 S   0.0  0.3   0:02.77 cpdavd - +
  1239 root      20   0  167452   4112   2740 S   0.0  0.2   0:00.51 dnsadmin +
  1241 root      20   0  209680  12564   2528 S   0.0  0.5   0:03.46 tailwatchd
  1655 root      20   0  299272   1020    624 S   0.0  0.0   0:00.77 php-fpm: +
  1658 root      38  18  130416   1552    812 S   0.0  0.1   0:00.07 cpanellog+
  1937 root      20   0  267084  30824   5504 S   0.0  1.3   0:02.94 /usr/sbin+
  2729 dovenull  20   0   46912   4084   3048 S   0.0  0.2   0:00.07 dovecot/p+
  2730 dovenull  20   0   47148   4204   3072 S   0.0  0.2   0:00.03 dovecot/i+
  2731 root      20   0   10452   1212    840 S   0.0  0.1   0:00.04 dovecot/l+
  2732 dovenull  20   0   46912   4092   3052 S   0.0  0.2   0:00.08 dovecot/p+
  2733 dovenull  20   0   47056   4088   3060 S   0.0  0.2   0:00.02 dovecot/i+
  2734 root      20   0   24564  12084   1084 S   0.0  0.5   0:00.04 dovecot/c+
  2735 dovecot   20   0   13568   1220    952 S   0.0  0.1   0:00.00 dovecot/s+
  2736 dovecot   20   0   41188   2328   1492 S   0.0  0.1   0:00.13 dovecot/a+
  2737 root      20   0   12840   1388   1180 S   0.0  0.1   0:00.49 /usr/loca+
  2738 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.42 /usr/loca+
  2739 root      20   0   12884   1400   1180 S   0.0  0.1   0:00.46 /usr/loca+
  2740 root      20   0   53252  11860   2476 S   0.0  0.5   0:00.04 /usr/loca+
  6916 root      20   0  263284 129844   2844 S   0.0  5.4   0:05.53 spamd chi+
  6917 root      20   0  247916 116796    388 S   0.0  4.8   0:00.01 spamd chi+
 10252 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10256 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.51 [kworker]
 11223 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 22313 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 23385 nobody    20   0  277660  36188   4840 S   0.0  1.5   0:01.79 /usr/sbin+
 24525 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 27171 nobody    20   0  277940  36280   4688 S   0.0  1.5   0:01.31 /usr/sbin+
 27685 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 28334 nobody    20   0  277768  36044   4588 S   0.0  1.5   0:01.28 /usr/sbin+
 28480 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 28910 nobody    20   0  277820  36204   4664 S   0.0  1.5   0:01.13 /usr/sbin+
 28926 nobody    20   0  277624  36000   4636 S   0.0  1.5   0:01.05 /usr/sbin+
 28927 nobody    20   0  277616  36112   4756 S   0.0  1.5   0:00.96 /usr/sbin+
 29176 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 31029 nobody    20   0  277940  36024   4568 S   0.0  1.5   0:00.79 /usr/sbin+
 31402 nobody    20   0  277616  35812   4516 S   0.0  1.5   0:00.84 /usr/sbin+
 31417 nobody    20   0  277616  35952   4572 S   0.0  1.5   0:00.67 /usr/sbin+
 31508 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 31822 nobody    20   0  277940  35792   4360 S   0.0  1.5   0:00.73 /usr/sbin+
 33084 nobody    20   0  277616  35808   4492 S   0.0  1.5   0:00.46 /usr/sbin+
 34177 nobody    20   0  277940  35700   4252 S   0.0  1.5   0:00.43 /usr/sbin+
 34844 nobody    20   0  277612  35384   4096 S   0.0  1.5   0:00.37 /usr/sbin+
 35443 nobody    20   0  277612  35688   4396 S   0.0  1.5   0:00.26 /usr/sbin+
 35606 nobody    20   0  277612  35432   4096 S   0.0  1.5   0:00.24 /usr/sbin+
 36137 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 36776 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 36841 nobody    20   0  277576  35016   3760 S   0.0  1.4   0:00.10 /usr/sbin+
 36871 root      20   0  157312   4864   3584 S   0.0  0.2   0:00.00 sshd: roo+
 36872 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: roo+
 36885 wp-tool+  20   0  433492  77792  16936 S   0.0  3.2   0:01.22 /usr/bin/+
 38028 wp-tool+  20   0  445028    552    376 S   0.0  0.0   0:00.00 sw-engine+
 38254 nigeria   20   0  401180   8884   3908 S   0.0  0.4   0:00.20 php-fpm: +
 38746 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 38783 root      20   0  157100   5072   3784 S   0.0  0.2   0:00.00 sshd: unk+
 38784 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 38785 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 38786 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: unk+
 38868 mailnull  20   0   91012   4980   1792 S   0.0  0.2   0:00.00 /usr/sbin+
 38880 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38883 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38884 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38885 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38886 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38887 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38888 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38889 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38890 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38892 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38893 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38894 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38895 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38897 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38910 root      20   0   20164    988    784 R   0.0  0.0   0:00.00 /usr/loca+
 38911 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 38913 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38914 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 38916 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 38919 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38922 root      20   0  113284   1476   1256 S   0.0  0.1   0:00.00 bash /usr+
 38924 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 38925 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 38926 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 38927 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38928 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 38929 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 38931 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 38932 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 38935 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 38936 root      20   0  188220  11104   5152 S   0.0  0.5   0:00.02 /usr/loca+
 38944 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 38946 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 38949 pactpay   20   0  480124  17676  11880 S   0.0  0.7   0:00.01 /opt/cpan+
 38967 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 38995 root      20   0  160224   2352   1636 S   0.0  0.1   0:00.00 top -n 2 +
 39009 cloudsms  20   0   20164    256      0 R   0.0  0.0   0:00.00 jailshell+
 39011 cloudsms  20   0       0      0      0 Z   0.0  0.0   0:00.00 [bash] <d+
 39021 wp-tool+  20   0    8632    648    536 S   0.0  0.0   0:00.00 timeout 6+
 39031 nigeria   20   0  752836   2016   1348 S   0.0  0.1   0:00.00 /usr/loca+
 39035 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 39045 nigeria   20   0    8632    652    536 S   0.0  0.0   0:00.00 /usr/bin/+
 39047 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [setupvir+
 39050 root      20   0  113284    220      0 R   0.0  0.0   0:00.00 bash /usr+
 40404 root      20   0  182276  30296   2292 S   0.0  1.3   0:09.04 lfd - sle+
 75184 root      20   0       0      0      0 S   0.0  0.0   0:01.04 [kworker/+
 84944 root      20   0  183048   2068   1540 S   0.0  0.1   0:00.00 /usr/sbin+
 84987 root      20   0  113284   1108    928 S   0.0  0.0   0:00.00 /bin/sh -+
 85029 root      20   0  108056    308    232 S   0.0  0.0   0:00.00 sleep 5h +
 89738 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov20   0:28  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov20   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov20   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ata_sff]
root        244  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_0]
root        245  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov20   0:02  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   Nov20   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [xprtiod]
root        618  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov20   0:02  \_ [loop0]
root        661  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [jbd2/loop0-8]
root        668  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root      75184  0.0  0.0      0     0 ?        S    00:46   0:01  \_ [kworker/u200:2]
root      11223  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/1:2]
root      89738  0.0  0.0      0     0 ?        S    02:19   0:00  \_ [kworker/u200:0]
root      22313  0.0  0.0      0     0 ?        S    02:25   0:00  \_ [kworker/1:4]
root      24525  0.0  0.0      0     0 ?        S    02:28   0:00  \_ [kworker/0:3]
root      27685  0.0  0.0      0     0 ?        D    02:32   0:00  \_ [kworker/1:3]
root      28480  0.0  0.0      0     0 ?        S    02:33   0:00  \_ [kworker/0:0]
root      29176  0.0  0.0      0     0 ?        S    02:34   0:00  \_ [kworker/0:4]
root      31508  0.0  0.0      0     0 ?        S    02:37   0:00  \_ [kworker/1:1]
root      36137  0.0  0.0      0     0 ?        S    02:43   0:00  \_ [kworker/0:1]
root      36776  0.0  0.0      0     0 ?        S    02:44   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44396  3472 ?        Ss   Nov20   0:39 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  40244  6016 ?        Ss   Nov20   0:14 /usr/lib/systemd/systemd-journald
root        386  0.0  0.0  45360   404 ?        Ss   Nov20   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   588 ?        S<sl Nov20   0:02 /sbin/auditd
root        481  0.0  0.0  21540   528 ?        Ss   Nov20   0:00 /usr/sbin/irqbalance --foreground
root        482  0.0  0.0 152780   376 ?        Ss   Nov20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        485  0.0  0.2 224288  6880 ?        Ss   Nov20   0:00 queueprocd - waiting up to 60s to process a task
dbus        486  0.0  0.0  58728  1520 ?        Rs   Nov20   0:15 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         496  0.0  0.0  69256   268 ?        Ss   Nov20   0:00 /sbin/rpcbind -w
root        516  0.0  0.0  52852   564 ?        Ss   Nov20   0:00 /usr/sbin/smartd -n -q never
root        518  0.0  0.0  24720  1316 ?        Ss   Nov20   0:06 /usr/lib/systemd/systemd-logind
nscd        522  0.0  0.0 1344744 2256 ?        Ssl  Nov20   0:23 /usr/sbin/nscd
polkitd     523  0.0  0.0 610540  1112 ?        Ssl  Nov20   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        549  0.0  0.0   4388   176 ?        Ss   Nov20   0:00 /usr/sbin/acpid
root        553  0.0  0.0 195208   204 ?        Ssl  Nov20   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0 124476   628 ?        Ss   Nov20   0:00 /usr/sbin/crond -n
root      84944  0.0  0.0 183048  2068 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      84987  0.0  0.0 113284  1108 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      85029  0.0  0.0 108056   308 ?        S    01:00   0:00  |       \_ sleep 5h 53m
root      38880  0.0  0.0 183044  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      38916  0.0  0.0 113284  1212 ?        Ss   02:45   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      38922  0.0  0.0 113284  1476 ?        S    02:45   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      39050  0.0  0.0 113284   600 ?        S    02:45   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      39053  0.0  0.0 108076   356 ?        R    02:45   0:00  |               \_ cat /var/cpanel/mainip
root      38883  0.0  0.0 183044  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      38926  0.0  0.0 113284  1208 ?        Ss   02:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      38935  0.0  0.0 108052   356 ?        S    02:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      38944  0.0  0.0 113288  1516 ?        S    02:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      39052  0.0  0.0 153840  2092 ?        R    02:45   0:00  |               \_ ps auxf
root      38884  0.0  0.0 183044  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      38910  0.0  0.0  20164   988 ?        Ss   02:45   0:00  |   \_ jailshell (cloudsms) [39051] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  39051  0.0  0.0  20164   264 ?        S    02:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  39054  0.0  0.0  20164   264 ?        R    02:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      38885  0.0  0.0 183044  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      38924  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      38886  0.0  0.0 183044  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      38919  0.0  0.0  20164   808 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      38887  0.0  0.0 183040  2208 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      38888  0.0  0.0 183044  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      38927  0.0  0.0  20164   808 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      38889  0.0  0.0 183044  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      38913  0.0  0.0  20164   808 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      38890  0.0  0.0 183044  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      38932  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      38892  0.0  0.0 183044  2140 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      38914  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      38893  0.0  0.0 183044  2140 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      38931  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      38894  0.0  0.0 183044  2140 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      38925  0.0  0.0 113284  1208 ?        Ss   02:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      38936  0.0  0.4 188220 11104 ?        S    02:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      38995  0.0  0.0 160224  2352 ?        S    02:45   0:00  |           \_ top -n 2 -b -c
root      38895  0.0  0.0 183044  2140 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      38928  0.0  0.0  20164   964 ?        Ss   02:45   0:00  |   \_ jailshell (pactpay) [38946] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   38946  0.0  0.0  20164   260 ?        S    02:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   38949  0.0  0.7 480124 17676 ?        S    02:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      38897  0.0  0.0 183044  2140 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      38929  0.0  0.0  20164   964 ?        Ss   02:45   0:00      \_ jailshell (nigeria) [38967] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   38967  0.0  0.0  20164   260 ?        S    02:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   38991  0.0  0.6 404052 16136 ?        S    02:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        575  0.0  0.0  24208   228 ?        Ss   Nov20   0:00 /usr/sbin/atd -f
root        586  0.0  0.0 108296   308 tty1     Ss+  Nov20   0:00 /sbin/agetty --noclear tty1 linux
root        587  0.0  0.0 114704   304 ttyS0    Ss+  Nov20   0:00 /bin/bash
mailnull    603  0.0  0.1  90820  3940 ?        Ss   Nov20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  38868  0.0  0.2  91012  4980 ?        S    02:45   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.5 114016 13028 ?        Ssl  Nov20   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        913  0.0  0.0 111304   660 ?        Ss   Nov20   0:03 /usr/sbin/sshd -D
root      36871  0.0  0.2 157312  4864 ?        Ss   02:44   0:00  \_ sshd: root [priv]
sshd      36872  0.0  0.1 115644  2628 ?        S    02:44   0:00  |   \_ sshd: root [net]
root      38783  0.0  0.2 157100  5072 ?        Ss   02:44   0:00  \_ sshd: unknown [priv]
sshd      38784  0.0  0.1 115644  2628 ?        S    02:44   0:00  |   \_ sshd: unknown [net]
root      38785  0.0  0.2 157100  5076 ?        Ss   02:44   0:00  \_ sshd: unknown [priv]
sshd      38786  0.0  0.1 115644  2624 ?        S    02:44   0:00      \_ sshd: unknown [net]
root        914  0.0  0.0 153404   544 ?        Ss   Nov20   0:00 pure-ftpd (SERVER)
root        915  0.0  0.0 445028  1496 ?        Ss   Nov20   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  38028  0.0  0.0 445028   552 ?        S    02:44   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    916  0.0  0.0 111608    76 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    917  0.0  0.0  12660    60 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        920  0.1  0.3 1277056 8888 ?        Ssl  Nov20   0:35 /usr/bin/checkstatus
root        923  0.0  0.0 396248   632 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        927  0.0  0.0 439788  2228 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       929  0.0  1.7 1054792 42732 ?       Ssl  Nov20   0:14 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        930  0.0  6.5 1763340 158068 ?      Ssl  Nov20   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        937  0.1  0.3 261160  7516 ?        Ss   Nov20   0:44 cpsrvd (SSL) - waiting for connections                   
root      38746  0.0  0.0      0     0 ?        Z    02:44   0:00  \_ [cpaneld - servi] <defunct>
systuser    944  0.0  0.0 113932    76 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        948  0.0  0.0  51656  1260 ?        Ss   Nov20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1080  0.0  0.0  10320   572 ?        S    Nov20   0:00  \_ dovecot/anvil
dovenull   2729  0.0  0.1  46912  4084 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2730  0.0  0.1  47148  4204 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2731  0.0  0.0  10452  1212 ?        S    01:25   0:00  \_ dovecot/log
dovenull   2732  0.0  0.1  46912  4092 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2733  0.0  0.1  47056  4088 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2734  0.0  0.4  24564 12084 ?        S    01:25   0:00  \_ dovecot/config
dovecot    2735  0.0  0.0  13568  1220 ?        S    01:25   0:00  \_ dovecot/stats
dovecot    2736  0.0  0.0  41188  2328 ?        S    01:25   0:00  \_ dovecot/auth
memcach+    951  0.0  0.0 342400   204 ?        Ssl  Nov20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    952  0.0  0.1  10592  3596 ?        Ss   Nov20   0:24 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    956  0.0  0.0  10132    28 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        957  0.0  0.2 298320  6556 ?        Ssl  Nov20   0:07 /usr/sbin/rsyslogd -n
root        966  0.0  0.0 389508   888 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        975  0.0  0.1 400740  2460 ?        Ss   Nov20   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   38254  1.1  0.3 401180  8884 ?        S    02:44   0:00  \_ php-fpm: pool nigeriadecide_org
telegraf    976  0.0  1.4 5654304 36196 ?       SLsl Nov20   0:15 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        985  0.0  0.0 388892   892 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.0  0.3 1341892 9316 ?        Ssl  Nov20   0:23 /usr/bin/cspdaemon
root        987  0.0  0.0 572372  1256 ?        Ssl  Nov20   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1131  0.0  4.8 247916 117592 ?       Ss   Nov20   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6916  0.0  5.3 263284 129844 ?       S    Nov20   0:05  \_ spamd child
root       6917  0.0  4.8 247916 116796 ?       S    Nov20   0:00  \_ spamd child
systuser   1156  0.0  0.1 157708  3020 ?        S    Nov20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1161  0.0  0.5 387556 13624 ?        Ss   Nov20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+  36885  2.3  3.2 433492 77792 ?        S    02:44   0:01  \_ /usr/bin/sw-engine -d auto_prepend_file=/usr/local/cpanel/3rdparty/wp-toolkit/scripts/scheduled-task-prepend-file.php /usr/local/cpanel/3rdparty/wp-toolkit/plib/scripts/instances-auto-update.php
wp-tool+  39021  0.0  0.0   8632   648 ?        S    02:45   0:00      \_ timeout 60 /usr/local/cpanel/3rdparty/wp-toolkit//bin/wpt-panopticon -user nigeria -operation run-wp-cli -work-dir /home/nigeria/public_html/blog -preserve-environment WP_CLI_CONFIG_PATH,PATH -php-max-execution-time 60 -- security-keys are_keys_correct
nigeria   39031  0.0  0.0 752836  2016 ?        Sl   02:45   0:00          \_ /usr/local/cpanel/3rdparty/wp-toolkit//bin/wpt-panopticon -user nigeria -operation run-wp-cli -work-dir /home/nigeria/public_html/blog -preserve-environment WP_CLI_CONFIG_PATH,PATH -php-max-execution-time 60 -- security-keys are_keys_correct
nigeria   39045  0.0  0.0   8632   652 ?        S    02:45   0:00              \_ /usr/bin/timeout 60 /usr/local/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/nigeria/public_html/blog security-keys are_keys_correct
nigeria   39046  0.0  0.9 305024 23468 ?        R    02:45   0:00                  \_ /opt/cpanel/ea-php74/root/usr/bin/php -r require '/usr/local/cpanel/3rdparty/wp-toolkit/plib/vendor/wp-cli/wpt-wp-cli.php'; -d safe_mode=off -d display_errors=on -d opcache.enable_cli=off -d open_basedir= -d error_reporting=341 -d max_execution_time=60 --no-header -- --no-color --path=/home/nigeria/public_html/blog security-keys are_keys_correct
wp-tool+   1162  0.0  1.3 412396 32900 ?        Ss   Nov20   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1235  0.0  0.2 183900  6396 ?        Ss   Nov20   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.1 167452  4112 ?        Ss   Nov20   0:00 dnsadmin - dormant mode
root       1241  0.0  0.5 209680 12564 ?        Ss   Nov20   0:03 tailwatchd
root       1655  0.0  0.0 299272  1020 ?        Ss   Nov20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1658  0.0  0.0 130416  1552 ?        SN   Nov20   0:00 cpanellogd - sleeping for logs
root       1937  0.0  1.2 267084 30824 ?        Ss   Nov20   0:02 /usr/sbin/httpd -k start
root       2737  0.0  0.0  12840  1388 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2738  0.0  0.0  12732  1364 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2739  0.0  0.0  12884  1400 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2740  0.0  0.4  53252 11860 ?        S    01:25   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    23385  0.1  1.4 277660 36188 ?        S    02:26   0:01  \_ /usr/sbin/httpd -k start
nobody    27171  0.1  1.4 277940 36280 ?        S    02:31   0:01  \_ /usr/sbin/httpd -k start
nobody    28334  0.1  1.4 277768 36044 ?        S    02:32   0:01  \_ /usr/sbin/httpd -k start
nobody    28910  0.1  1.4 277820 36204 ?        S    02:33   0:01  \_ /usr/sbin/httpd -k start
nobody    28926  0.1  1.4 277624 36000 ?        S    02:33   0:01  \_ /usr/sbin/httpd -k start
nobody    28927  0.1  1.4 277616 36112 ?        S    02:33   0:00  \_ /usr/sbin/httpd -k start
nobody    31029  0.1  1.4 277940 36024 ?        S    02:36   0:00  \_ /usr/sbin/httpd -k start
nobody    31402  0.1  1.4 277616 35812 ?        S    02:36   0:00  \_ /usr/sbin/httpd -k start
nobody    31417  0.1  1.4 277616 35952 ?        S    02:36   0:00  \_ /usr/sbin/httpd -k start
nobody    31822  0.1  1.4 277940 35792 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    33084  0.1  1.4 277616 35808 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    34177  0.1  1.4 277940 35700 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    34671  0.1  1.4 277616 35800 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    34844  0.1  1.4 277612 35384 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    35443  0.1  1.4 277612 35688 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    35606  0.1  1.4 277612 35432 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    36841  0.1  1.4 277576 35016 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
mysql      2435  1.1 11.1 1462240 271036 ?      Sl   Nov20   5:40 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  10252  0.0  0.0   3148   416 ?        Ss   Nov20   0:00 [kworker]
oysipao+  10256  0.0  0.0   3152   492 ?        S    Nov20   0:00  \_ [kworker]
root      40404  0.0  1.2 182276 30296 ?        Ss   00:00   0:09 lfd - sleeping
## mysql stats
Uptime: 28439  Threads: 3  Questions: 2106724  Slow queries: 0  Opens: 7653  Flush tables: 1  Open tables: 2000  Queries per second avg: 74.078
*************************** 1. row ***************************
     Id: 34817
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 34823
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 34828
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 10.30.9.122 TIME_WAIT
      1 114.119.134.212 TIME_WAIT
      1 114.119.154.41 TIME_WAIT
      1 17.22.245.95 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.104 TIME_WAIT
      1 192.178.4.105 TIME_WAIT
      1 ::1 TIME_WAIT
      1 68.221.67.170 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      4 104.131.19.237 TIME_WAIT
     20 209.250.242.219 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 02:45:02 WAT
   Restart Time: Thursday, 20-Nov-2025 18:50:17 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 7 hours 54 minutes 45 seconds
   Server load: 0.70 0.98 4.94
   Total accesses: 146453 - Total Traffic: 3.7 GB - Total Duration: 79800633
   CPU Usage: u9.67 s6.09 cu1934 cs1549.97 - 12.3% CPU load
   5.14 requests/sec - 135.8 kB/second - 26.4 kB/request - 544.889 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

__KKKKWKK.K.KWK__W._............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client     Protocol          VHost                                       Request
   0-1  35443 0/46/7241  _ 1.05 0     0   3930716 0.0   1.18  191.41 ::1            http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   1-1  31822 0/123/7010 _ 3.05 0     0   3699050 0.0   3.47  180.10 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80   GET /whm-server-status HTTP/1.0
   2-1  34177 3/81/6559  K 1.72 1     301 3541718 94.3  2.25  167.83 192.178.4.102  http/1.1 team.cloudware.ng:443    GET /?l=3849052163 HTTP/1.1
   3-1  35606 4/43/6996  K 0.98 0     365 3921025 127.2 1.23  184.36 192.178.4.105  http/1.1 team.cloudware.ng:443    GET /?l=527799847 HTTP/1.1
   4-1  31402 1/147/7073 K 3.47 2     391 3719966 36.3  3.85  188.67 192.178.4.98   http/1.1 team.cloudware.ng:443    GET /?l=3542534480 HTTP/1.1
   5-1  27171 1/230/6746 K 5.29 2     310 3861573 35.9  5.69  177.03 66.249.70.39   http/1.1 support.cloudware.ng:443 GET /?c=27106400 HTTP/1.1
   6-1  31417 3/132/7015 W 2.64 0     0   3857201 95.6  3.05  198.05 192.178.4.103  http/1.1 team.cloudware.ng:443    GET /?l=3380295726 HTTP/1.1
   7-1  34671 1/70/6685  K 1.68 0     329 3705529 34.7  1.92  179.57 192.178.4.100  http/1.1 team.cloudware.ng:443    GET /?l=2682006144 HTTP/1.1
   8-1  36841 1/19/6838  K 0.36 0     280 3715054 34.0  0.42  172.34 192.178.4.105  http/1.1 team.cloudware.ng:443    GET /?l=3811470932 HTTP/1.1
   9-1  -     0/0/6589   . 0.00 157   0   3420730 0.0   0.00  161.33 ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   10-1 33084 3/83/6668  K 1.75 1     271 3434484 96.4  2.30  163.91 192.178.4.97   http/1.1 team.cloudware.ng:443    GET /?l=2918723532 HTTP/1.1
   11-1 -     0/0/6316   . 0.00 54    0   3393686 0.0   0.00  161.85 ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   12-1 34844 4/65/6356  K 1.54 3     400 3427843 126.2 1.67  164.19 192.178.4.96   http/1.1 team.cloudware.ng:443    GET /?l=3242517293 HTTP/1.1
   13-1 28910 0/197/6597 W 4.67 0     0   3432413 0.0   5.50  163.66 192.178.4.99   http/1.1 team.cloudware.ng:443    GET /?l=885431772 HTTP/1.1
   14-1 28334 2/281/6300 K 5.50 1     405 3249543 66.3  7.04  153.26 192.178.4.101  http/1.1 team.cloudware.ng:443    GET /?l=1658414913 HTTP/1.1
   15-1 31029 0/145/5818 _ 3.19 0     5   3272551 0.0   3.54  150.46 213.230.82.161 http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php?lga=Nsukka&state=Enugu&ward=Eha-
   16-1 28926 0/184/5275 _ 4.22 0     346 2825539 0.0   5.34  143.62 192.178.4.99   http/1.1 team.cloudware.ng:443    GET /?l=1015039318 HTTP/1.1
   17-1 23385 0/299/4407 W 7.38 0     0   2576606 0.0   8.51  110.07 ::1            http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   18-1 -     0/0/4433   . 0.00 156   0   2516246 0.0   0.00  110.80 ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   19-1 28927 0/165/4117 _ 3.92 0     265 2318620 0.0   4.21  108.38 192.178.4.100  http/1.1 team.cloudware.ng:443    GET /?l=2692557815 HTTP/1.1
   20-1 -     0/0/3748   . 0.00 568   0   2204868 0.0   0.00  103.56 ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   21-1 -     0/0/3082   . 0.00 264   0   1650143 0.0   0.00  78.57  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   22-1 -     0/0/3375   . 0.00 1336  0   1856998 0.0   0.00  83.46  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   23-1 -     0/0/3154   . 0.00 1702  0   1740049 0.0   0.00  80.91  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   24-1 -     0/0/1928   . 0.00 2457  0   963238  0.0   0.00  46.70  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   25-1 -     0/0/1261   . 0.00 1487  0   817594  0.0   0.00  34.01  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   26-1 -     0/0/715    . 0.00 2501  0   428654  0.0   0.00  18.36  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   27-1 -     0/0/506    . 0.00 2213  0   297127  0.0   0.00  11.85  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   28-1 -     0/0/543    . 0.00 2413  0   356892  0.0   0.00  15.93  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   29-1 -     0/0/434    . 0.00 2503  0   260477  0.0   0.00  11.18  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   30-1 -     0/0/332    . 0.00 2490  0   200777  0.0   0.00  7.47   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   31-1 -     0/0/274    . 0.00 2512  0   193753  0.0   0.00  6.38   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   32-0 -     0/0/593    . 0.00 9324  0   371705  0.0   0.00  14.42  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   33-0 -     0/0/301    . 0.00 8863  0   111013  0.0   0.00  5.26   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   34-0 -     0/0/28     . 0.00 11053 0   15090   0.0   0.00  0.72   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   35-0 -     0/0/7      . 0.00 11060 0   640     0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   36-0 -     0/0/74     . 0.00 10931 0   36928   0.0   0.00  1.90   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   37-0 -     0/0/61     . 0.00 10888 0   25914   0.0   0.00  1.45   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   38-0 -     0/0/65     . 0.00 10981 0   27597   0.0   0.00  1.54   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   39-0 -     0/0/28     . 0.00 11012 0   13821   0.0   0.00  1.08   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   40-0 -     0/0/265    . 0.00 10162 0   139506  0.0   0.00  7.31   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   41-0 -     0/0/4      . 0.00 11069 0   8       0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   42-0 -     0/0/12     . 0.00 11068 0   4242    0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   43-0 -     0/0/89     . 0.00 10793 0   42251   0.0   0.00  2.07   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   44-0 -     0/0/10     . 0.00 11057 0   2792    0.0   0.00  0.14   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   45-0 -     0/0/55     . 0.00 10794 0   25889   0.0   0.00  1.32   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   46-0 -     0/0/463    . 0.00 9746  0   190150  0.0   0.00  10.76  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   47-0 -     0/0/7      . 0.00 11073 0   2404    0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1050
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...46)
   index usage: 18%, cache usage: 24%
   total entries stored since starting: 16039
   total entries replaced since starting: 0
   total entries expired since starting: 14981
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 36 miss
   total removes since starting: 8 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit