403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-24.02.15.txt
 ## swap threshold exceeded
## server overview
2025-11-24.02.15 load[4] mem[73/38] mysql[8/11] httpd[16]
              total        used        free      shared  buff/cache   available
Mem:           2363        1655         101          32         606         502
Swap:          4047        1703        2344
 02:15:02 up 11:34,  0 users,  load average: 4.93, 2.31, 1.10
## system overview
top - 02:15:03 up 11:34,  0 users,  load average: 4.93, 2.31, 1.10
Tasks: 209 total,   9 running, 199 sleeping,   0 stopped,   1 zombie
%Cpu(s): 84.4 us, 15.6 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    90088 free,  1708992 used,   621220 buff/cache
KiB Swap:  4145144 total,  2400708 free,  1744436 used.   500744 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1744 mysql     20   0 1458608 215220   4816 S  43.8  8.9   9:06.45 /usr/sbin+
 52190 healtho+  20   0  465576  72240   4276 R  31.2  3.0   0:03.15 php-fpm: +
 52368 healtho+  20   0  450912  55740   3796 R  31.2  2.3   0:00.23 php-fpm: +
 51982 cloudw    20   0  571324 107920   6612 R  25.0  4.5   0:06.49 php-fpm: +
 52179 healtho+  20   0  465248  71104   4188 R  25.0  2.9   0:04.41 php-fpm: +
     1 root      20   0   44400   3212   1424 S   6.2  0.1   0:58.92 /usr/lib/+
 52312 nigeria   20   0  404052  16136  10380 S   6.2  0.7   0:00.08 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.24 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.45 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:37.86 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.42 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.74 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:36.73 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   0:01.07 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:04.90 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:04.25 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:02.35 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40240   7620   7364 S   0.0  0.3   0:26.09 /usr/lib/+
   383 root      20   0   45352      8      4 S   0.0  0.0   0:00.44 /usr/lib/+
   412 root      16  -4   55532    452    320 S   0.0  0.0   0:04.22 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    348    260 S   0.0  0.0   0:00.95 /usr/sbin+
   489 root      20   0   24704   1172    808 S   0.0  0.0   0:09.83 /usr/lib/+
   494 polkitd   20   0  610540    960    600 S   0.0  0.0   0:05.70 /usr/lib/+
   495 root      20   0  224144   3204    928 S   0.0  0.1   0:00.47 queueproc+
   496 root      20   0   52852    340    240 S   0.0  0.0   0:00.01 /usr/sbin+
   497 root      20   0  152780     72     28 S   0.0  0.0   0:00.02 /usr/sbin+
   503 dbus      20   0   58716   1320    600 S   0.0  0.1   0:22.29 /usr/bin/+
   506 nscd      20   0 1336536   1976    784 S   0.0  0.1   0:25.81 /usr/sbin+
   511 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.04 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   558 root      20   0  124476    424    296 S   0.0  0.0   0:01.19 /usr/sbin+
   576 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   621 mailnull  20   0   89112   3828    804 S   0.0  0.2   0:00.79 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:02.59 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   927 root      20   0   51508    452    292 S   0.0  0.0   0:00.59 /usr/sbin+
   928 systuser  20   0   11540     44      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   12756     52      0 S   0.0  0.0   0:00.02 /usr/loca+
   931 systuser  20   0  112524     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   932 systuser  20   0  111608     56      0 S   0.0  0.0   0:00.02 /usr/loca+
   933 root      20   0  153404    220    136 S   0.0  0.0   0:00.93 pure-ftpd+
   934 root      20   0  445028    588    472 S   0.0  0.0   0:01.72 sw-engine+
   935 root      20   0  572372    668    208 S   0.0  0.0   0:03.56 /usr/bin/+
   936 telegraf  20   0 5654304  40668   5460 S   0.0  1.7   0:22.47 /usr/loca+
   937 root      20   0  111304    364    256 S   0.0  0.0   0:06.71 /usr/sbin+
   939 root      20   0 1350088   8292      4 S   0.0  0.3   0:25.05 /usr/bin/+
   941 root      20   0  400740   1964    608 S   0.0  0.1   0:04.99 php-fpm: +
   946 root      20   0  396248    312    228 S   0.0  0.0   0:01.12 php-fpm: +
   951 root      20   0  439788    308    216 S   0.0  0.0   0:01.16 php-fpm: +
   952 root      20   0  261164   5256   1208 S   0.0  0.2   0:05.98 cpsrvd (S+
   953 root      20   0  331088   7452   6924 S   0.0  0.3   0:12.97 /usr/sbin+
   959 root      20   0  389508    288    196 S   0.0  0.0   0:01.10 php-fpm: +
   960 root      20   0 1828280 379716    508 S   0.0 15.7   0:30.78 /usr/loca+
   969 cpanelc+  20   0   10516   3408   2300 R   0.0  0.1   0:32.37 /usr/loca+
   970 named     20   0  989260  33920   1600 S   0.0  1.4   0:18.57 /usr/sbin+
   972 memcach+  20   0  342400     48     48 S   0.0  0.0   0:00.91 /usr/bin/+
   974 root      20   0 1277312   2348      4 S   0.0  0.1   0:23.03 /usr/bin/+
   980 systuser  20   0  114016  12536   2716 S   0.0  0.5   0:09.93 /usr/loca+
   995 root      20   0  388892    268    184 S   0.0  0.0   0:01.03 php-fpm: +
  1053 dovenull  20   0   46984   2192   1600 S   0.0  0.1   0:01.45 dovecot/p+
  1054 dovenull  20   0   48008   2572   1540 S   0.0  0.1   0:00.40 dovecot/i+
  1055 dovecot   20   0   10320    456    340 S   0.0  0.0   0:00.28 dovecot/a+
  1056 root      20   0   10452    524    344 S   0.0  0.0   0:00.71 dovecot/l+
  1057 dovenull  20   0   47052   2152   1544 S   0.0  0.1   0:01.11 dovecot/p+
  1058 dovenull  20   0   47652   2428   1632 S   0.0  0.1   0:00.28 dovecot/i+
  1064 root      20   0   24528   1760    476 S   0.0  0.1   0:00.27 dovecot/c+
  1065 dovecot   20   0   13568    616    448 S   0.0  0.0   0:00.10 dovecot/s+
  1122 dovecot   20   0   41188   1484    992 S   0.0  0.1   0:01.78 dovecot/a+
  1144 systuser  20   0  157704   2964    972 S   0.0  0.1   0:00.19 SonarPush+
  1146 wp-tool+  20   0  412396   7432   1360 S   0.0  0.3   0:13.31 /usr/bin/+
  1147 wp-tool+  20   0  387556   3320   1412 S   0.0  0.1   0:00.39 /usr/bin/+
  1174 root      20   0  248224  11780    712 S   0.0  0.5   0:07.73 /usr/loca+
  1239 root      20   0  167452   4116   2748 S   0.0  0.2   0:00.71 dnsadmin +
  1243 root      20   0  209476  10344   2364 S   0.0  0.4   0:04.61 tailwatchd
  1244 root      20   0  262224  23132   5268 S   0.0  1.0   0:03.05 cpdavd - +
  1676 root      38  18  130416   1372    692 S   0.0  0.1   0:00.10 cpanellog+
  2037 root      20   0  267052   5540    556 S   0.0  0.2   0:02.66 /usr/sbin+
  2039 root      20   0   12764    328    212 S   0.0  0.0   0:03.83 /usr/loca+
  2040 root      20   0   12732    280    208 S   0.0  0.0   0:03.25 /usr/loca+
  2041 root      20   0   12772    340    216 S   0.0  0.0   0:03.54 /usr/loca+
  2045 root      20   0   53256      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2152 root      20   0  299272    420    256 S   0.0  0.0   0:01.23 php-fpm: +
  4514 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
  6714 root      20   0  266248  93172   2500 S   0.0  3.8   0:04.57 spamd chi+
  6715 root      20   0  248224  10484    256 S   0.0  0.4   0:00.02 spamd chi+
 15361 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.78 [kworker]
 15885 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 31412 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 36500 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 36568 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 37707 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 38524 nobody    20   0  277568  19656   4804 S   0.0  0.8   0:01.32 /usr/sbin+
 40522 nobody    20   0  277908  19536   4664 S   0.0  0.8   0:01.35 /usr/sbin+
 40533 nobody    20   0  277504  18816   4584 S   0.0  0.8   0:01.36 /usr/sbin+
 42689 nobody    20   0  277896  19764   4716 S   0.0  0.8   0:00.95 /usr/sbin+
 43057 nobody    20   0  277568  19308   4628 S   0.0  0.8   0:01.04 /usr/sbin+
 46798 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 46877 nobody    20   0  277584  18668   4460 S   0.0  0.8   0:00.62 /usr/sbin+
 46911 nobody    20   0  277852  19220   4420 S   0.0  0.8   0:00.58 /usr/sbin+
 47511 nobody    20   0  277864  18904   4412 S   0.0  0.8   0:00.37 /usr/sbin+
 48861 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 49703 nobody    20   0  277568  18612   4344 S   0.0  0.8   0:00.32 /usr/sbin+
 50430 nobody    20   0  277892  18392   4128 S   0.0  0.8   0:00.19 /usr/sbin+
 50735 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 50926 nobody    20   0  277600  18144   3868 S   0.0  0.7   0:00.13 /usr/sbin+
 50937 nobody    20   0  277600  18360   4112 S   0.0  0.8   0:00.14 /usr/sbin+
 50938 nobody    20   0  277528  18152   4076 S   0.0  0.7   0:00.12 /usr/sbin+
 50946 nobody    20   0  277528  18100   4008 S   0.0  0.7   0:00.21 /usr/sbin+
 50947 nobody    20   0  277528  17880   3796 S   0.0  0.7   0:00.16 /usr/sbin+
 51048 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51422 nobody    20   0  277528  17588   3664 S   0.0  0.7   0:00.07 /usr/sbin+
 51430 nobody    20   0  277528  18240   4116 S   0.0  0.8   0:00.10 /usr/sbin+
 51431 nobody    20   0  277528  17904   3924 S   0.0  0.7   0:00.12 /usr/sbin+
 51604 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51653 nobody    20   0  277568  17560   3580 S   0.0  0.7   0:00.06 /usr/sbin+
 52001 nobody    20   0  277528  17876   3816 S   0.0  0.7   0:00.05 /usr/sbin+
 52018 nigeria   20   0  400460   4548   2412 S   0.0  0.2   0:00.00 php-fpm: +
 52048 nobody    20   0  277536  17796   3824 S   0.0  0.7   0:00.03 /usr/sbin+
 52145 healtho+  20   0  462688  69548   4192 S   0.0  2.9   0:04.85 php-fpm: +
 52188 healtho+  20   0  462820  69468   4188 S   0.0  2.9   0:03.45 php-fpm: +
 52214 wp-tool+  20   0  445028    328    196 S   0.0  0.0   0:00.00 sw-engine+
 52249 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 52254 cloudw    20   0  287616  14588   9600 S   0.0  0.6   0:00.01 /opt/cpan+
 52276 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52279 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52280 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52282 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52283 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52285 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52287 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52289 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52291 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52292 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52294 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52296 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 52299 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 52300 root      20   0  113284   1464   1256 S   0.0  0.1   0:00.00 bash /usr+
 52301 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 52304 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52307 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 52310 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 52311 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 52316 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52318 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52319 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52320 root      20   0   20164    984    788 S   0.0  0.0   0:00.00 jailshell+
 52321 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 52329 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 52333 root      20   0  188212  11088   5148 S   0.0  0.5   0:00.02 /usr/loca+
 52341 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 52349 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 52350 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 52363 pactpay   20   0  480124  17668  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 52364 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 52374 cloudsms  20   0  404052  15352  10008 S   0.0  0.6   0:00.01 /opt/cpan+
 52382 root      20   0  160224   2376   1636 S   0.0  0.1   0:00.01 top -n 2 +
 52446 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 52447 cloudw    20   0  366088  16580  10888 R   0.0  0.7   0:00.00 /opt/cpan+
 52453 root      20   0  113284    612    396 S   0.0  0.0   0:00.00 bash /usr+
 52455 root      20   0  108076    356    284 R   0.0  0.0   0:00.00 cat /usr/+
 52456 root      20   0   20164    256      0 R   0.0  0.0   0:00.00 /usr/loca+
 60917 root      20   0  182104   9044   1100 S   0.0  0.4   0:08.50 lfd - sle+
100526 root      20   0  183048   1932   1376 S   0.0  0.1   0:00.00 /usr/sbin+
100564 root      20   0  113284   1176   1000 S   0.0  0.0   0:00.00 /bin/sh -+
100600 root      20   0  108056    340    268 S   0.0  0.0   0:00.00 sleep 4h +
100764 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov23   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov23   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov23   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov23   0:37  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov23   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov23   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov23   0:36  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov23   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov23   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S    Nov23   0:01  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   Nov23   0:04  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov23   0:04  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    Nov23   0:02  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<   Nov23   0:02  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root     100764  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/u200:0]
root       4514  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/0:0]
root      15885  0.0  0.0      0     0 ?        S    01:22   0:00  \_ [kworker/1:2]
root      31412  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/1:1]
root      36500  0.0  0.0      0     0 ?        S    01:52   0:00  \_ [kworker/1:0]
root      36568  0.0  0.0      0     0 ?        S    01:52   0:00  \_ [kworker/0:2]
root      37707  0.0  0.0      0     0 ?        S    01:54   0:00  \_ [kworker/u200:2]
root      46798  0.0  0.0      0     0 ?        S    02:07   0:00  \_ [kworker/0:1]
root      48861  0.0  0.0      0     0 ?        S    02:10   0:00  \_ [kworker/1:4]
root      51048  0.0  0.0      0     0 ?        S    02:13   0:00  \_ [kworker/0:3]
root      51604  0.0  0.0      0     0 ?        S    02:14   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44400  3212 ?        Ss   Nov23   0:58 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.3  40240  7620 ?        Ss   Nov23   0:26 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352     8 ?        Ss   Nov23   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   452 ?        S<sl Nov23   0:04 /sbin/auditd
root        487  0.0  0.0  21540   348 ?        Ss   Nov23   0:00 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24704  1172 ?        Ss   Nov23   0:09 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610540   960 ?        Ssl  Nov23   0:05 /usr/lib/polkit-1/polkitd --no-debug
root        495  0.0  0.1 224144  3204 ?        Ss   Nov23   0:00 queueprocd - waiting up to 60s to process a task
root        496  0.0  0.0  52852   340 ?        Ss   Nov23   0:00 /usr/sbin/smartd -n -q never
root        497  0.0  0.0 152780    72 ?        Ss   Nov23   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        503  0.0  0.0  58716  1320 ?        Ss   Nov23   0:22 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        506  0.0  0.0 1336536 1976 ?        Ssl  Nov23   0:25 /usr/sbin/nscd
rpc         511  0.0  0.0  69256    60 ?        Ss   Nov23   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov23   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208     0 ?        Ssl  Nov23   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208     4 ?        Ss   Nov23   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124476   424 ?        Ss   Nov23   0:01 /usr/sbin/crond -n
root     100526  0.0  0.0 183048  1932 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root     100564  0.0  0.0 113284  1176 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root     100600  0.0  0.0 108056   340 ?        S    01:00   0:00  |       \_ sleep 4h 23m
root      52276  0.0  0.0 183044  2144 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      52299  0.0  0.0 113284  1212 ?        Ss   02:15   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      52300  0.0  0.0 113284  1468 ?        S    02:15   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      52459  0.0  0.0 113284   216 ?        R    02:15   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      52279  0.0  0.0 183044  2144 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      52307  0.0  0.0 113284  1212 ?        Ss   02:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      52329  0.0  0.0 108052   360 ?        S    02:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      52341  0.0  0.0 113288  1516 ?        S    02:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      52457  0.0  0.0 153840  2092 ?        R    02:15   0:00  |               \_ ps auxf
root      52280  0.0  0.0 183044  2148 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      52319  0.0  0.0  20164   804 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      52282  0.0  0.0 183044  2148 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      52316  0.0  0.0  20164   808 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      52283  0.0  0.0 183044  2148 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      52304  0.0  0.0  20164   808 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      52285  0.0  0.0 183044  2140 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      52310  0.0  0.0  20164   968 ?        Ss   02:15   0:00  |   \_ jailshell (cloudsms) [52350] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  52350  0.0  0.0  20164   260 ?        S    02:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  52364  0.0  0.0 113284  1212 ?        S    02:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  52374  1.0  0.6 404052 15352 ?        S    02:15   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      52287  0.0  0.0 183044  2144 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      52320  0.0  0.0  20164   984 ?        Ss   02:15   0:00  |   \_ jailshell (cloudsms) [52456] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  52456  0.0  0.0  20164   256 ?        S    02:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  52458  0.0  0.0 113284  1212 ?        S    02:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      52289  0.0  0.0 183044  2140 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      52318  0.0  0.0  20164   804 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      52291  0.0  0.0 183044  2136 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      52321  0.0  0.0 113284  1208 ?        Ss   02:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      52333  1.0  0.4 188212 11088 ?        S    02:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      52382  1.0  0.0 160224  2376 ?        S    02:15   0:00  |           \_ top -n 2 -b -c
root      52292  0.0  0.0 183044  2140 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      52311  0.0  0.0  20164   968 ?        Ss   02:15   0:00  |   \_ jailshell (pactpay) [52349] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   52349  0.0  0.0  20164   260 ?        S    02:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   52363  1.0  0.7 480124 17668 ?        S    02:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      52294  0.0  0.0 183044  2140 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      52296  0.0  0.0  20164   968 ?        Ss   02:15   0:00      \_ jailshell (nigeria) [52301] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   52301  0.0  0.0  20164   260 ?        S    02:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   52312  4.0  0.6 404052 16136 ?        R    02:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        576  0.0  0.0 108296     4 tty1     Ss+  Nov23   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704     0 ttyS0    Ss+  Nov23   0:00 /bin/bash
mailnull    621  0.0  0.1  89112  3828 ?        Ss   Nov23   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        927  0.0  0.0  51508   452 ?        Ss   Nov23   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1053  0.0  0.0  46984  2192 ?        S    Nov23   0:01  \_ dovecot/pop3-login
dovenull   1054  0.0  0.1  48008  2572 ?        S    Nov23   0:00  \_ dovecot/imap-login
dovecot    1055  0.0  0.0  10320   456 ?        S    Nov23   0:00  \_ dovecot/anvil
root       1056  0.0  0.0  10452   524 ?        S    Nov23   0:00  \_ dovecot/log
dovenull   1057  0.0  0.0  47052  2152 ?        S    Nov23   0:01  \_ dovecot/pop3-login
dovenull   1058  0.0  0.1  47652  2428 ?        S    Nov23   0:00  \_ dovecot/imap-login
root       1064  0.0  0.0  24528  1760 ?        S    Nov23   0:00  \_ dovecot/config
dovecot    1065  0.0  0.0  13568   616 ?        S    Nov23   0:00  \_ dovecot/stats
dovecot    1122  0.0  0.0  41188  1484 ?        S    Nov23   0:01  \_ dovecot/auth
root      50735  0.0  0.1  41052  2728 ?        S    02:12   0:00  \_ dovecot/auth -w
systuser    928  0.0  0.0  11540    44 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756    52 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524    44 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608    56 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        933  0.0  0.0 153404   220 ?        Ss   Nov23   0:00 pure-ftpd (SERVER)
root        934  0.0  0.0 445028   588 ?        Ss   Nov23   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  52214  0.0  0.0 445028   328 ?        S    02:14   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        935  0.0  0.0 572372   668 ?        Ssl  Nov23   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    936  0.0  1.6 5654304 40668 ?       SLsl Nov23   0:22 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        937  0.0  0.0 111304   364 ?        Ss   Nov23   0:06 /usr/sbin/sshd -D
root        939  0.0  0.3 1350088 8292 ?        Ssl  Nov23   0:25 /usr/bin/cspdaemon
root        941  0.0  0.0 400740  1964 ?        Ss   Nov23   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    51982 18.5  4.4 573884 108384 ?       R    02:14   0:06  \_ php-fpm: pool cloudware_ng
nigeria   52018  0.0  0.1 400460  4548 ?        S    02:14   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  52145 30.3  2.8 462688 69548 ?        S    02:14   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  52179 34.0  2.9 465248 71104 ?        R    02:14   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  52188 28.7  2.8 462820 69468 ?        S    02:14   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  52190 28.7  2.9 465576 72240 ?        R    02:14   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  52368 12.0  2.3 450912 57324 ?        R    02:15   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        946  0.0  0.0 396248   312 ?        Ss   Nov23   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        951  0.0  0.0 439788   308 ?        Ss   Nov23   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        952  0.0  0.2 261164  5256 ?        Ss   Nov23   0:05 cpsrvd (SSL) - waiting for connections                   
root      52249  0.0  0.0      0     0 ?        Z    02:14   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.3 331088  7452 ?        Ssl  Nov23   0:12 /usr/sbin/rsyslogd -n
root        959  0.0  0.0 389508   288 ?        Ss   Nov23   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        960  0.0 15.6 1828280 379716 ?      Ssl  Nov23   0:30 /usr/local/cpanel/3rdparty/bin/clamd -F
cpanelc+    969  0.0  0.1  10516  3408 ?        Ss   Nov23   0:32 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
named       970  0.0  1.4 989260 33920 ?        Ssl  Nov23   0:18 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    972  0.0  0.0 342400    48 ?        Ssl  Nov23   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 1277312 2348 ?        Ssl  Nov23   0:23 /usr/bin/checkstatus
systuser    980  0.0  0.5 114016 12536 ?        Ssl  Nov23   0:09 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        995  0.0  0.0 388892   268 ?        Ss   Nov23   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser   1144  0.0  0.1 157704  2964 ?        S    Nov23   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1146  0.0  0.3 412396  7432 ?        Ss   Nov23   0:13 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1147  0.0  0.1 387556  3320 ?        Ss   Nov23   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1174  0.0  0.4 248224 11780 ?        Ss   Nov23   0:07 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6714  0.0  3.8 266248 93172 ?        S    Nov23   0:04  \_ spamd child
root       6715  0.0  0.4 248224 10484 ?        S    Nov23   0:00  \_ spamd child
root       1239  0.0  0.1 167452  4116 ?        Ss   Nov23   0:00 dnsadmin - dormant mode
root       1243  0.0  0.4 209476 10344 ?        Ss   Nov23   0:04 tailwatchd
root       1244  0.0  0.9 262224 23132 ?        Ss   Nov23   0:03 cpdavd - accepting connections on: 2091, 2077, 2078
root       1676  0.0  0.0 130416  1372 ?        SN   Nov23   0:00 cpanellogd - sleeping for logs
mysql      1744  1.3  8.8 1458608 215220 ?      Sl   Nov23   9:06 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2037  0.0  0.2 267052  5540 ?        Ss   Nov23   0:02 /usr/sbin/httpd -k start
root       2039  0.0  0.0  12764   328 ?        S    Nov23   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2040  0.0  0.0  12732   280 ?        S    Nov23   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2041  0.0  0.0  12772   340 ?        S    Nov23   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2045  0.0  0.0  53256     4 ?        S    Nov23   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    38524  0.1  0.8 277568 19656 ?        S    01:55   0:01  \_ /usr/sbin/httpd -k start
nobody    40522  0.1  0.8 277908 19536 ?        S    01:58   0:01  \_ /usr/sbin/httpd -k start
nobody    40533  0.1  0.7 277504 18816 ?        S    01:58   0:01  \_ /usr/sbin/httpd -k start
nobody    42689  0.1  0.8 277896 19764 ?        S    02:01   0:00  \_ /usr/sbin/httpd -k start
nobody    43057  0.1  0.7 277568 19308 ?        S    02:01   0:01  \_ /usr/sbin/httpd -k start
nobody    46877  0.1  0.7 277584 18668 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    46911  0.1  0.7 277852 19220 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    47511  0.0  0.7 277864 18904 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    49703  0.1  0.7 277568 18612 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    50430  0.1  0.7 277892 18392 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    50926  0.1  0.7 277600 18144 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    50937  0.1  0.7 277600 18360 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    50938  0.0  0.7 277528 18152 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    50946  0.1  0.7 277528 18100 ?        S    02:13   0:00  \_ /usr/sbin/httpd -k start
cloudw    52447  0.0  0.6 366220 16580 ?        S    02:15   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    50947  0.1  0.7 277528 17880 ?        S    02:13   0:00  \_ /usr/sbin/httpd -k start
nobody    51422  0.0  0.7 277528 17588 ?        S    02:13   0:00  \_ /usr/sbin/httpd -k start
nobody    51430  0.1  0.7 277528 18240 ?        S    02:13   0:00  \_ /usr/sbin/httpd -k start
nobody    51431  0.1  0.7 277528 17904 ?        S    02:13   0:00  \_ /usr/sbin/httpd -k start
nobody    51653  0.1  0.7 277568 17560 ?        S    02:14   0:00  \_ /usr/sbin/httpd -k start
nobody    52001  0.1  0.7 277528 17876 ?        S    02:14   0:00  \_ /usr/sbin/httpd -k start
nobody    52048  0.1  0.7 277536 17796 ?        S    02:14   0:00  \_ /usr/sbin/httpd -k start
root       2152  0.0  0.0 299272   420 ?        Ss   Nov23   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
oysipao+  15361  0.0  0.0   3148     8 ?        Ss   Nov23   0:00 [kworker]
oysipao+  15368  0.0  0.0   3152    36 ?        S    Nov23   0:00  \_ [kworker]
root      60917  0.1  0.3 182104  9044 ?        Ss   00:00   0:08 lfd - sleeping
cloudw    52254  0.3  0.6 287616 14588 ?        S    02:14   0:00 /opt/cpanel/ea-php70/root/usr/bin/php -f /home/cloudw/wptraining.cloudware.ng/wp-includes/gkqenc.php
## mysql stats
Uptime: 41643  Threads: 7  Questions: 3524265  Slow queries: 0  Opens: 8122  Flush tables: 1  Open tables: 2000  Queries per second avg: 84.630
*************************** 1. row ***************************
     Id: 58125
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 58126
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 58128
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 58131
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 5. row ***************************
     Id: 58132
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 58135
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 7. row ***************************
     Id: 58143
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.149.43 TIME_WAIT
      1 114.119.154.181 TIME_WAIT
      1 148.113.130.215 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.37.118.71 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 48.210.12.181 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 24-Nov-2025 02:15:03 WAT
   Restart Time: Sunday, 23-Nov-2025 14:41:06 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 11 hours 33 minutes 56 seconds
   Server load: 5.49 2.47 1.16
   Total accesses: 166497 - Total Traffic: 4.0 GB - Total Duration: 78837993
   CPU Usage: u7.17 s4.77 cu1978.36 cs1526.9 - 8.45% CPU load
   4 requests/sec - 101.5 kB/second - 25.4 kB/request - 473.51 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

KWK_KKKKWC__WKW__.K_.C..........................................
..K.............................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req    Dur   Conn  Child  Slot      Client      Protocol           VHost                                       Request
   0-0  51422 1/27/10169 K 0.15 1     503  4544967 35.2  0.22  243.67 192.178.4.102   http/1.1 team.cloudware.ng:443      GET /?l=996234272 HTTP/1.1
   1-0  43057 1/225/9398 W 4.15 1     0    4508052 8.7   4.42  215.82 45.3.32.106     http/1.1 cloudware.ng:443           POST /wp-login.php HTTP/1.1
   2-0  49703 1/73/9494  K 1.09 1     561  4449789 32.6  1.31  238.32 192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=3050613158 HTTP/1.1
   3-0  46877 0/141/9150 _ 2.33 0     1768 4217481 0.0   2.94  216.85 158.173.154.134 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   4-0  40522 1/316/8784 K 6.63 3     414  4015651 35.9  5.08  217.87 192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=2241566246 HTTP/1.1
   5-0  46911 1/131/9313 K 2.06 0     575  4655892 34.9  2.64  232.24 192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=2759238527 HTTP/1.1
   6-0  50926 1/92/8583  K 0.23 1     531  4077855 35.0  0.29  228.88 192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=4193159662 HTTP/1.1
   7-0  42689 1/222/8754 K 3.46 2     477  4093390 38.9  3.96  221.38 192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=1871390473 HTTP/1.1
   8-0  51430 0/33/8278  W 0.23 0     0    4070781 0.0   0.29  227.30 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   9-0  40533 1/298/8125 C 3.90 0     1789 3841272 2.3   7.26  200.67 158.173.154.134 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   10-0 47511 0/112/8344 _ 1.62 0     407  3926298 0.0   1.48  187.10 192.178.4.97    http/1.1 team.cloudware.ng:443      GET /?l=1849864162 HTTP/1.1
   11-0 50937 0/92/7760  _ 0.29 0     0    3606145 0.0   0.39  191.68 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   12-0 50938 0/45/7420  W 0.32 0     0    3446867 0.0   0.39  188.26 158.173.154.134 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   13-0 52001 3/14/6729  K 0.13 2     372  3200245 95.2  0.20  172.76 192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=3461006087 HTTP/1.1
   14-0 52048 0/12/7607  W 0.07 1     0    3531157 0.0   0.10  186.96 158.173.154.134 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   15-0 51431 0/35/6244  _ 0.41 0     14   2930902 0.0   0.45  145.65 44.205.120.22   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Odigbo&state=Ondo HTTP/1.1
   16-0 50430 0/65/6156  _ 0.57 0     4    2712861 0.0   0.67  152.80 216.244.66.226  http/1.1 theforge.com.ng:80         GET /uploads/companies_logo/olumide/?C=S;O=D HTTP/1.1
   17-0 -     0/0/4224   . 0.00 43    0    2047224 0.0   0.00  112.78 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 50946 5/51/3059  K 0.80 0     411  1348224 154.4 0.86  83.63  192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=290532756 HTTP/1.1
   19-0 50947 0/40/2506  _ 0.54 0     1716 1296138 0.0   0.56  67.03  158.173.154.134 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   20-0 -     0/0/2581   . 0.00 36    0    1336609 0.0   0.00  71.28  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 51653 1/20/2927  C 0.17 0     1809 1396863 2.3   0.20  66.44  158.173.154.134 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   22-0 -     0/0/2661   . 0.00 1130  0    1397015 0.0   0.00  65.43  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/1519   . 0.00 1189  0    889039  0.0   0.00  35.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/542    . 0.00 1188  0    294045  0.0   0.00  11.88  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/300    . 0.00 1163  0    229297  0.0   0.00  10.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/89     . 0.00 1162  0    32911   0.0   0.00  1.99   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/710    . 0.00 1158  0    307114  0.0   0.00  16.50  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/16     . 0.00 1161  0    4063    0.0   0.00  0.23   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/282    . 0.00 978   0    132073  0.0   0.00  6.27   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/105    . 0.00 994   0    51498   0.0   0.00  2.45   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/122    . 0.00 1185  0    43811   0.0   0.00  2.69   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/500    . 0.00 1192  0    254576  0.0   0.00  10.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/299    . 0.00 1156  0    138982  0.0   0.00  7.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/152    . 0.00 1183  0    65881   0.0   0.00  4.26   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/34     . 0.00 995   0    20100   0.0   0.00  0.70   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/60     . 0.00 1160  0    21725   0.0   0.00  1.24   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/201    . 0.00 1164  0    67939   0.0   0.00  4.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/22     . 0.00 1182  0    7976    0.0   0.00  0.40   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/269    . 0.00 1067  0    107484  0.0   0.00  5.78   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/109    . 0.00 1187  0    44874   0.0   0.00  2.62   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/511    . 0.00 1146  0    262372  0.0   0.00  12.48  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/24     . 0.00 1157  0    9556    0.0   0.00  0.56   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/20     . 0.00 1190  0    7953    0.0   0.00  0.62   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/340    . 0.00 1181  0    120248  0.0   0.00  6.33   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/402    . 0.00 217   0    257575  0.0   0.00  12.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/19     . 0.00 1151  0    7165    0.0   0.00  0.64   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/24     . 0.00 1178  0    8311    0.0   0.00  0.54   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/5      . 0.00 1138  0    31      0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/17     . 0.00 1177  0    4077    0.0   0.00  0.46   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/7      . 0.00 1147  0    3020    0.0   0.00  0.15   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/18     . 0.00 1150  0    3093    0.0   0.00  0.32   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/16     . 0.00 1153  0    6251    0.0   0.00  0.44   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/5      . 0.00 1180  0    142     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/3      . 0.00 1179  0    123     0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/3      . 0.00 1169  0    530     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/2      . 0.00 1168  0    1       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/3      . 0.00 1166  0    8       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/2      . 0.00 1176  0    1       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/11     . 0.00 1148  0    3270    0.0   0.00  0.20   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/3      . 0.00 1173  0    5       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/173    . 0.00 406   0    100973  0.0   0.00  4.33   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/4      . 0.00 1149  0    18      0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/45     . 0.00 987   0    30130   0.0   0.00  1.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/97     . 0.00 707   0    51206   0.0   0.00  2.29   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/6      . 0.00 1165  0    1388    0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 38524 2/288/781  K 4.90 4     506  423973  67.5  5.41  15.61  192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=1420812927 HTTP/1.1
   67-0 -     0/0/20     . 0.00 1167  0    8979    0.0   0.00  0.41   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/2      . 0.00 1175  0    1       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/8      . 0.00 1134  0    3015    0.0   0.00  0.17   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/18     . 0.00 1170  0    8604    0.0   0.00  0.41   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/259    . 0.00 180   0    136946  0.0   0.00  6.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/39     . 0.00 1174  0    11176   0.0   0.00  0.63   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/2      . 0.00 1171  0    1       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/2      . 0.00 1172  0    1       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/5      . 0.00 1136  0    1531    0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/4      . 0.00 11282 0    1217    0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1560
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...26)
   index usage: 27%, cache usage: 38%
   total entries stored since starting: 118935
   total entries replaced since starting: 0
   total entries expired since starting: 117347
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 46 hit, 306 miss
   total removes since starting: 28 hit, 18 miss
Youez - 2016 - github.com/yon3zu
LinuXploit