403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-15.20.27.txt
 ## swap threshold exceeded
## server overview
2025-11-15.20.27 load[0] mem[60/67] mysql[3/10] httpd[19]
              total        used        free      shared  buff/cache   available
Mem:           2363        1373         145          56         844         766
Swap:          1999        1457         542
 20:27:01 up  6:02,  0 users,  load average: 0.05, 0.25, 0.31
## system overview
top - 20:27:01 up  6:02,  0 users,  load average: 0.05, 0.25, 0.31
Tasks: 199 total,   9 running, 189 sleeping,   0 stopped,   1 zombie
%Cpu(s): 57.6 us, 42.4 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   115208 free,  1440268 used,   864824 buff/cache
KiB Swap:  2047996 total,   555452 free,  1492544 used.   751240 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1785 mysql     20   0 1458332 269900   4596 S  37.5 11.2   5:35.42 /usr/sbin+
 85141 nigeria   20   0  404052  16140  10384 S  12.5  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44280   3560   1708 S   6.2  0.1   0:30.54 /usr/lib/+
 84627 nobody    20   0  277732  19336   3540 S   6.2  0.8   0:00.06 /usr/sbin+
 85132 cloudw    20   0  366220  16592  10884 S   6.2  0.7   0:00.01 /opt/cpan+
 85150 saboakin  20   0       0      0      0 Z   6.2  0.0   0:00.01 [php-cgi]+
 85151 pactpay   20   0  479860  16172  10580 R   6.2  0.7   0:00.01 /opt/cpan+
 85155 cloudsms  20   0  404052  15608  10164 S   6.2  0.6   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.50 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.04 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:23.03 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.95 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:04.33 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:16.90 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.39 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.16 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.57 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   343 root       0 -20       0      0      0 S   0.0  0.0   0:01.76 [kworker/+
   358 root      20   0   39500   7800   7496 S   0.0  0.3   0:11.05 /usr/lib/+
   385 root      20   0   45444    620    552 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    628    500 S   0.0  0.0   0:01.66 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 root      20   0   21540    608    520 S   0.0  0.0   0:00.48 /usr/sbin+
   516 root      20   0  152780    432    388 S   0.0  0.0   0:00.01 /usr/sbin+
   521 root      20   0   24708   1408   1040 S   0.0  0.1   0:05.04 /usr/lib/+
   523 nscd      20   0 1264844   1916    924 S   0.0  0.1   0:17.80 /usr/sbin+
   524 root      20   0   52852    564    456 S   0.0  0.0   0:00.01 /usr/sbin+
   527 polkitd   20   0  612240   1056    672 S   0.0  0.0   0:02.99 /usr/lib/+
   529 root      20   0  224148   6124   1540 S   0.0  0.3   0:00.29 queueproc+
   531 dbus      20   0   58740   1624    900 R   0.0  0.1   0:11.40 /usr/bin/+
   539 rpc       20   0   69256    248    188 S   0.0  0.0   0:00.02 /sbin/rpc+
   541 root      20   0    4388     92     88 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    216    216 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    668    532 S   0.0  0.0   0:00.62 /usr/sbin+
   577 root      20   0   24208    272    244 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296    264    260 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704    276    276 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   89108   4284   1252 S   0.0  0.2   0:00.40 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.48 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  111304    728    628 S   0.0  0.0   0:02.32 /usr/sbin+
   919 root      20   0 1350088   8140    276 S   0.0  0.3   0:19.88 /usr/bin/+
   920 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 telegraf  20   0 5654304  37120   6112 S   0.0  1.5   0:12.15 /usr/loca+
   922 memcach+  20   0  342400    300    300 S   0.0  0.0   0:00.47 /usr/bin/+
   924 root      20   0  153404    600    516 S   0.0  0.0   0:00.45 pure-ftpd+
   926 root      20   0  572372   1152    576 S   0.0  0.0   0:01.93 /usr/bin/+
   927 systuser  20   0  114016  15476   2968 S   0.0  0.6   0:05.24 /usr/loca+
   928 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   930 root      20   0   51508    788    624 S   0.0  0.0   0:00.27 /usr/sbin+
   932 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   933 root      20   0  445028    280    280 S   0.0  0.0   0:00.05 sw-engine+
   935 root      20   0 1277312   8984    296 S   0.0  0.4   0:24.24 /usr/bin/+
   946 root      20   0  396248   1036    852 S   0.0  0.0   0:00.58 php-fpm: +
   954 named     20   0 1055796  34836   2252 S   0.0  1.4   0:10.71 /usr/sbin+
   957 root      20   0  273744   7672   6732 S   0.0  0.3   0:05.54 /usr/sbin+
   973 root      20   0  400740   3208   1044 S   0.0  0.1   0:03.56 php-fpm: +
   975 root      20   0  439788   1916   1708 S   0.0  0.1   0:00.69 php-fpm: +
   978 cpanelc+  20   0   10456   3688   2436 R   0.0  0.2   0:17.74 /usr/loca+
   980 root      20   0  388892   1084    868 S   0.0  0.0   0:00.66 php-fpm: +
   991 root      20   0  389508    996    756 S   0.0  0.0   0:00.63 php-fpm: +
   992 root      20   0 1763124 203528   1380 S   0.0  8.4   0:14.01 /usr/loca+
   993 root      20   0  261288   7084   2008 S   0.0  0.3   0:04.59 cpsrvd (S+
  1065 dovenull  20   0   47524   3744   2476 S   0.0  0.2   0:00.39 dovecot/p+
  1066 dovenull  20   0   47612   4064   2684 S   0.0  0.2   0:00.27 dovecot/i+
  1067 dovecot   20   0   10320    600    488 S   0.0  0.0   0:00.07 dovecot/a+
  1068 root      20   0   10452    632    456 S   0.0  0.0   0:00.24 dovecot/l+
  1069 dovenull  20   0   47456   3852   2604 S   0.0  0.2   0:00.32 dovecot/p+
  1070 dovenull  20   0   47548   3468   2240 S   0.0  0.1   0:00.21 dovecot/i+
  1077 root      20   0   24528   2772    716 S   0.0  0.1   0:00.14 dovecot/c+
  1078 dovecot   20   0   13568    752    520 S   0.0  0.0   0:00.05 dovecot/s+
  1150 root      20   0  248140 119248   2816 S   0.0  4.9   0:05.40 /usr/loca+
  1151 systuser  20   0  157704   3080   1036 S   0.0  0.1   0:00.11 SonarPush+
  1152 dovecot   20   0   41180   1632   1176 S   0.0  0.1   0:00.54 dovecot/a+
  1153 wp-tool+  20   0  387528   5044   1768 S   0.0  0.2   0:00.25 /usr/bin/+
  1154 wp-tool+  20   0  410452  30812   1840 S   0.0  1.3   0:18.31 /usr/bin/+
  1229 root      20   0  262224  23352   5492 S   0.0  1.0   0:01.52 cpdavd - +
  1231 root      20   0  209616  12544   2680 S   0.0  0.5   0:02.55 tailwatchd
  1232 root      20   0  167452   1592    992 S   0.0  0.1   0:00.34 dnsadmin +
  1638 root      20   0  299272    956    576 S   0.0  0.0   0:00.57 php-fpm: +
  1681 root      38  18  130416   1600    828 S   0.0  0.1   0:00.05 cpanellog+
  1909 root      20   0  266984   8896    832 S   0.0  0.4   0:02.13 /usr/sbin+
  1911 root      20   0   12832    588    452 S   0.0  0.0   0:02.66 /usr/loca+
  1912 root      20   0   12732    572    464 S   0.0  0.0   0:02.33 /usr/loca+
  1913 root      20   0   12872    592    448 S   0.0  0.0   0:02.53 /usr/loca+
  1918 root      20   0   53344    360    360 S   0.0  0.0   0:00.04 /usr/loca+
  2012 root      20   0  183280  12292   1336 S   0.0  0.5   0:20.23 lfd - sle+
  8198 root      20   0  262088 129276   3400 S   0.0  5.3   0:02.46 spamd chi+
  8199 root      20   0  249268 118736   1192 S   0.0  4.9   0:00.04 spamd chi+
 23796 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 31033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.37 [kworker]
 50857 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 55671 nobody    20   0  277880  21420   4988 S   0.0  0.9   0:03.44 /usr/sbin+
 58106 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 61020 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 65819 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 67642 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 69072 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 73591 root      20   0       0      0      0 R   0.0  0.0   0:00.04 [kworker/+
 74342 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 75042 nobody    20   0  277828  20744   4672 S   0.0  0.9   0:01.20 /usr/sbin+
 76137 nobody    20   0  277656  20312   4400 S   0.0  0.8   0:00.79 /usr/sbin+
 77786 nobody    20   0  277616  20336   4504 S   0.0  0.8   0:00.58 /usr/sbin+
 79945 nobody    20   0  277680  20144   4232 S   0.0  0.8   0:00.75 /usr/sbin+
 80317 nobody    20   0  277512  19852   4108 S   0.0  0.8   0:00.51 /usr/sbin+
 80346 nobody    20   0  277744  20200   4220 S   0.0  0.8   0:00.52 /usr/sbin+
 80902 nobody    20   0  277844  20020   4164 S   0.0  0.8   0:00.47 /usr/sbin+
 81153 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 81176 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 81413 nobody    20   0  277584  19820   4080 S   0.0  0.8   0:00.50 /usr/sbin+
 82384 nobody    20   0  277668  19860   3964 S   0.0  0.8   0:00.18 /usr/sbin+
 82728 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 83265 nobody    20   0  277520  19668   4032 S   0.0  0.8   0:00.25 /usr/sbin+
 83830 nobody    20   0  277880  19792   3984 S   0.0  0.8   0:00.16 /usr/sbin+
 83952 nobody    20   0  277732  19680   3852 S   0.0  0.8   0:00.10 /usr/sbin+
 84270 nobody    20   0  277840  19704   3896 S   0.0  0.8   0:00.08 /usr/sbin+
 84611 nobody    20   0  277880  19600   3816 S   0.0  0.8   0:00.04 /usr/sbin+
 84616 nobody    20   0  277744  19316   3500 S   0.0  0.8   0:00.02 /usr/sbin+
 84624 nobody    20   0  277888  19348   3556 S   0.0  0.8   0:00.04 /usr/sbin+
 84625 nobody    20   0  277864  19548   3776 S   0.0  0.8   0:00.06 /usr/sbin+
 84626 nobody    20   0  277732  19112   3360 S   0.0  0.8   0:00.09 /usr/sbin+
 84991 nigeria   20   0  409376  15956   3920 S   0.0  0.7   0:00.18 php-fpm: +
 85008 workflo+  20   0  524940  59400   6076 S   0.0  2.5   0:00.24 php-fpm: +
 85012 workflo+  20   0  522608  56096   4384 S   0.0  2.3   0:00.20 php-fpm: +
 85013 nescrow+  20   0   37840   3012   2480 S   0.0  0.1   0:00.00 dovecot/i+
 85060 root      20   0  261420   7848   1448 S   0.0  0.3   0:00.00 cpsrvd (S+
 85065 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 85067 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 85069 root      20   0  183048   2152   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 85071 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 85073 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 85074 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 85075 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 85076 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 85078 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 85079 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85081 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 85082 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 85083 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 85084 root      20   0  108052    592    496 S   0.0  0.0   0:00.00 /usr/bin/+
 85085 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 85111 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 85112 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 85116 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 85117 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 85118 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 85119 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 85120 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 85121 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 85124 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 85131 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 85137 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 85138 nobody    20   0  276908  15540    684 S   0.0  0.6   0:00.00 /usr/sbin+
 85143 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 85144 saboakin  20   0   20164    260      0 R   0.0  0.0   0:00.00 jailshell+
 85145 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 85148 cloudw    20   0  366088  16592  10892 R   0.0  0.7   0:00.00 /opt/cpan+
 85152 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 85154 cloudw    20   0  366088  16592  10884 S   0.0  0.7   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    14:24   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    14:24   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    14:24   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    14:24   0:23  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    14:24   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    14:24   0:16  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   14:24   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   14:24   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   14:24   0:02  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    14:24   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   14:24   0:01  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   14:24   0:02  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ext4-rsv-conver]
root      65819  0.0  0.0      0     0 ?        S    17:51   0:00  \_ [kworker/u200:1]
root      23796  0.0  0.0      0     0 ?        S    19:04   0:00  \_ [kworker/u200:0]
root      50857  0.0  0.0      0     0 ?        S    19:42   0:00  \_ [kworker/0:3]
root      58106  0.0  0.0      0     0 ?        S    19:52   0:00  \_ [kworker/1:5]
root      61020  0.0  0.0      0     0 ?        S    19:56   0:00  \_ [kworker/0:0]
root      67642  0.0  0.0      0     0 ?        S    20:04   0:00  \_ [kworker/0:4]
root      69072  0.0  0.0      0     0 ?        S    20:06   0:00  \_ [kworker/1:1]
root      73591  0.0  0.0      0     0 ?        R    20:12   0:00  \_ [kworker/1:0]
root      74342  0.0  0.0      0     0 ?        S    20:13   0:00  \_ [kworker/0:2]
root      81153  0.0  0.0      0     0 ?        S    20:22   0:00  \_ [kworker/0:1]
root      81176  0.0  0.0      0     0 ?        S    20:22   0:00  \_ [kworker/1:2]
root      82728  0.0  0.0      0     0 ?        S    20:24   0:00  \_ [kworker/u200:2]
root          1  0.1  0.1  44280  3560 ?        Ss   14:24   0:30 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.3  39500  7800 ?        Ss   14:24   0:11 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444   620 ?        Ss   14:24   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   628 ?        S<sl 14:24   0:01 /sbin/auditd
root        512  0.0  0.0  21540   608 ?        Ss   14:24   0:00 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780   432 ?        Ss   14:24   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1408 ?        Rs   14:24   0:05 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1264844 1916 ?        Ssl  14:24   0:17 /usr/sbin/nscd
root        524  0.0  0.0  52852   564 ?        Ss   14:24   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240  1056 ?        Ssl  14:24   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.2 224148  6124 ?        Ss   14:24   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58740  1624 ?        Ss   14:24   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256   248 ?        Ss   14:24   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    92 ?        Ss   14:24   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   216 ?        Ssl  14:24   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   668 ?        Ss   14:24   0:00 /usr/sbin/crond -n
root      85069  0.0  0.0 183048  2152 ?        S    20:27   0:00  \_ /usr/sbin/CROND -n
root      85083  0.0  0.0 113284  1212 ?        Ss   20:27   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      85084  0.0  0.0 108052   592 ?        S    20:27   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      85085  0.0  0.0 113288  1516 ?        S    20:27   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      85164  0.0  0.0 153840  2100 ?        R    20:27   0:00  |               \_ ps auxf
root      85071  0.0  0.0 183048  2156 ?        S    20:27   0:00  \_ /usr/sbin/CROND -n
root      85119  0.0  0.0  20164   804 ?        Ss   20:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      85073  0.0  0.0 183048  2152 ?        S    20:27   0:00  \_ /usr/sbin/CROND -n
root      85116  0.0  0.0  20164   968 ?        Ss   20:27   0:00  |   \_ jailshell (cloudsms) [85143] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  85143  0.0  0.0  20164   264 ?        S    20:27   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  85152  0.0  0.0 113284  1212 ?        S    20:27   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  85155  1.0  0.6 404052 15608 ?        S    20:27   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      85074  0.0  0.0 183048  2152 ?        S    20:27   0:00  \_ /usr/sbin/CROND -n
root      85111  0.0  0.0  20164   808 ?        Ss   20:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      85075  0.0  0.0 183048  2152 ?        S    20:27   0:00  \_ /usr/sbin/CROND -n
root      85117  0.0  0.0  20164   804 ?        Ss   20:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      85076  0.0  0.0 183048  2148 ?        S    20:27   0:00  \_ /usr/sbin/CROND -n
root      85112  0.0  0.0  20164   808 ?        Ss   20:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      85078  0.0  0.0 183048  2148 ?        S    20:27   0:00  \_ /usr/sbin/CROND -n
root      85121  0.0  0.0  20164   808 ?        Ss   20:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      85079  0.0  0.0 183048  2152 ?        S    20:27   0:00  \_ /usr/sbin/CROND -n
root      85120  0.0  0.0  20164   968 ?        Ss   20:27   0:00  |   \_ jailshell (pactpay) [85145] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   85145  0.0  0.0  20164   264 ?        S    20:27   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   85151  1.0  0.6 479860 16172 ?        Rl   20:27   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      85081  0.0  0.0 183048  2148 ?        S    20:27   0:00  \_ /usr/sbin/CROND -n
root      85118  0.0  0.0  20164   968 ?        Ss   20:27   0:00  |   \_ jailshell (nigeria) [85131] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   85131  0.0  0.0  20164   260 ?        S    20:27   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   85141  2.0  0.6 404052 16140 ?        S    20:27   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      85082  0.0  0.0 183048  2156 ?        S    20:27   0:00  \_ /usr/sbin/CROND -n
root      85124  0.0  0.0  20164   964 ?        Ss   20:27   0:00      \_ jailshell (saboakin) [85144] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  85144  0.0  0.0      0     0 ?        D    20:27   0:00          \_ [jailshell]
root        577  0.0  0.0  24208   272 ?        Ss   14:24   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296   264 tty1     Ss+  14:24   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704   276 ttyS0    Ss+  14:24   0:00 /bin/bash
mailnull    622  0.0  0.1  89108  4284 ?        Ss   14:24   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   728 ?        Ss   14:24   0:02 /usr/sbin/sshd -D
root      85065  0.0  0.1 111304  4264 ?        Ss   20:27   0:00  \_ sshd: [accepted]
sshd      85067  0.0  0.1 115644  2624 ?        S    20:27   0:00      \_ sshd: [net]
root        919  0.0  0.3 1350088 8140 ?        Ssl  14:24   0:19 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864    72 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  1.5 5654304 37120 ?       SLsl 14:24   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400   300 ?        Ssl  14:24   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   600 ?        Ss   14:24   0:00 pure-ftpd (SERVER)
root        926  0.0  0.0 572372  1152 ?        Ssl  14:24   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.6 114016 15476 ?        Ssl  14:24   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    56 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132    44 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508   788 ?        Ss   14:24   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.1  47524  3744 ?        S    14:24   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.1  47612  4064 ?        S    14:24   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320   600 ?        S    14:24   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   632 ?        S    14:24   0:00  \_ dovecot/log
dovenull   1069  0.0  0.1  47456  3852 ?        S    14:24   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.1  47548  3468 ?        S    14:24   0:00  \_ dovecot/imap-login
root       1077  0.0  0.1  24528  2772 ?        S    14:24   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568   752 ?        S    14:24   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1632 ?        S    14:24   0:00  \_ dovecot/auth
nescrow+  85013  0.0  0.1  37840  3012 ?        S    20:26   0:00  \_ dovecot/imap
systuser    932  0.0  0.0 113932    68 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 445028   280 ?        Ss   14:24   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        935  0.1  0.3 1277312 8984 ?        Ssl  14:24   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248  1036 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       954  0.0  1.4 1055796 34836 ?       Ssl  14:24   0:10 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.3 273744  7672 ?        Ssl  14:24   0:05 /usr/sbin/rsyslogd -n
root        973  0.0  0.1 400740  3208 ?        Ss   14:24   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   84991  2.2  0.6 409376 15956 ?        S    20:26   0:00  \_ php-fpm: pool nigeriadecide_org
workflo+  85008  4.8  2.4 524940 59400 ?        S    20:26   0:00  \_ php-fpm: pool blog_workflow-management-software_com
workflo+  85012  4.0  2.3 522608 56096 ?        S    20:26   0:00  \_ php-fpm: pool blog_workflow-management-software_com
root        975  0.0  0.0 439788  1916 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10456  3688 ?        Ss   14:24   0:17 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892  1084 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   996 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  8.4 1763124 203528 ?      Ssl  14:24   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.2 261288  7084 ?        Ss   14:24   0:04 cpsrvd (SSL) - waiting for connections                   
root      85060  0.0  0.3 261420  7848 ?        S    20:27   0:00  \_ cpsrvd (SSL) - waiting for connections                   
root       1150  0.0  4.9 248140 119248 ?       Ss   14:24   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  5.3 262088 129276 ?       S    14:30   0:02  \_ spamd child
root       8199  0.0  4.9 249268 118736 ?       S    14:30   0:00  \_ spamd child
systuser   1151  0.0  0.1 157704  3080 ?        S    14:24   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1153  0.0  0.2 387528  5044 ?        Ss   14:24   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1154  0.0  1.2 410452 30812 ?        Ss   14:24   0:18 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1229  0.0  0.9 262224 23352 ?        Ss   14:24   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1231  0.0  0.5 209616 12544 ?        Ss   14:24   0:02 tailwatchd
root       1232  0.0  0.0 167452  1592 ?        Ss   14:24   0:00 dnsadmin - dormant mode
root       1638  0.0  0.0 299272   956 ?        Ss   14:24   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1681  0.0  0.0 130416  1600 ?        SN   14:24   0:00 cpanellogd - sleeping for logs
mysql      1785  1.5 11.1 1458332 269900 ?      Sl   14:24   5:35 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.3 266984  8896 ?        Ss   14:24   0:02 /usr/sbin/httpd -k start
root       1911  0.0  0.0  12832   588 ?        S    14:24   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1912  0.0  0.0  12732   572 ?        S    14:24   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1913  0.0  0.0  12872   592 ?        S    14:24   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1918  0.0  0.0  53344   360 ?        S    14:24   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    55671  0.1  0.8 277880 21420 ?        S    19:48   0:03  \_ /usr/sbin/httpd -k start
nobody    75042  0.1  0.8 277828 20744 ?        S    20:13   0:01  \_ /usr/sbin/httpd -k start
nobody    76137  0.1  0.8 277656 20312 ?        S    20:15   0:00  \_ /usr/sbin/httpd -k start
nobody    77786  0.1  0.8 277616 20336 ?        S    20:17   0:00  \_ /usr/sbin/httpd -k start
nobody    79945  0.1  0.8 277680 20144 ?        S    20:20   0:00  \_ /usr/sbin/httpd -k start
cloudw    85132  1.0  0.6 366220 16592 ?        S    20:27   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    80317  0.1  0.8 277512 19852 ?        S    20:20   0:00  \_ /usr/sbin/httpd -k start
nobody    80346  0.1  0.8 277744 20200 ?        S    20:20   0:00  \_ /usr/sbin/httpd -k start
nobody    80902  0.1  0.8 277844 20020 ?        S    20:21   0:00  \_ /usr/sbin/httpd -k start
nobody    81413  0.1  0.8 277584 19820 ?        S    20:22   0:00  \_ /usr/sbin/httpd -k start
cloudw    85148  0.0  0.6 366088 16592 ?        S    20:27   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    82384  0.0  0.8 277668 19860 ?        S    20:23   0:00  \_ /usr/sbin/httpd -k start
nobody    83265  0.1  0.8 277520 19668 ?        S    20:24   0:00  \_ /usr/sbin/httpd -k start
nobody    83830  0.1  0.8 277880 19792 ?        S    20:25   0:00  \_ /usr/sbin/httpd -k start
nobody    83952  0.0  0.8 277732 19680 ?        S    20:25   0:00  \_ /usr/sbin/httpd -k start
nobody    84270  0.1  0.8 277840 19704 ?        S    20:25   0:00  \_ /usr/sbin/httpd -k start
nobody    84611  0.0  0.8 277880 19600 ?        S    20:26   0:00  \_ /usr/sbin/httpd -k start
nobody    84616  0.0  0.7 277744 19316 ?        S    20:26   0:00  \_ /usr/sbin/httpd -k start
nobody    84624  0.0  0.7 277888 19348 ?        S    20:26   0:00  \_ /usr/sbin/httpd -k start
nobody    84625  0.1  0.8 277864 19548 ?        S    20:26   0:00  \_ /usr/sbin/httpd -k start
cloudw    85154  0.0  0.6 366220 16592 ?        S    20:27   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    84626  0.2  0.7 277732 19112 ?        S    20:26   0:00  \_ /usr/sbin/httpd -k start
nobody    84627  0.1  0.7 277732 19336 ?        S    20:26   0:00  \_ /usr/sbin/httpd -k start
nobody    85138  0.0  0.6 276908 15540 ?        S    20:27   0:00  \_ /usr/sbin/httpd -k start
root       2012  0.0  0.5 183280 12292 ?        Ss   14:24   0:20 lfd - sleeping
oysipao+  31033  0.0  0.0   3148   416 ?        Ss   15:00   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152   424 ?        S    15:00   0:00  \_ [kworker]
## mysql stats
Uptime: 21756  Threads: 7  Questions: 2182830  Slow queries: 0  Opens: 6478  Flush tables: 1  Open tables: 2000  Queries per second avg: 100.332
*************************** 1. row ***************************
     Id: 31022
   User: workflow_wp673
   Host: localhost
     db: workflow_wp673
Command: Sleep
   Time: 4
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 31023
   User: workflow_wp673
   Host: localhost
     db: workflow_wp673
Command: Sleep
   Time: 5
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 31032
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 31033
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 31036
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 1
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 6. row ***************************
     Id: 31037
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 7. row ***************************
     Id: 31039
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 47.128.121.242 TIME_WAIT
      1 66.249.70.8 TIME_WAIT
      1 91.134.90.219 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 104.248.90.230 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.172 TIME_WAIT
      4 47.128.39.175 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 20:27:02 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 2 minutes 31 seconds
   Server load: 0.05 0.25 0.31
   Total accesses: 122000 - Total Traffic: 2.7 GB - Total Duration: 66944803
   CPU Usage: u7.1 s4.86 cu1429.94 cs1223.69 - 12.3% CPU load
   5.61 requests/sec - 129.1 kB/second - 23.0 kB/request - 548.728 ms/request
   21 requests currently being processed, 0 workers gracefully restarting, 0 idle workers

WKWK.K.KRWWKRWRKR.KKKWKK........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur   Conn  Child  Slot      Client      Protocol              VHost                                          Request
   0-0  79945 0/130/5780 W 3.42  0     0   3230247 0.0   3.59  130.59 66.249.70.8     http/1.1 test.cloudware.ng:443           GET /?1605824735?goodscode=1603720878 HTTP/1.1
   1-0  80902 6/95/5845  K 2.16  0     288 3470377 165.4 2.10  134.44 66.249.70.3     http/1.1 test.cloudware.ng:443           GET /?1605764180?goodscode=1603660402 HTTP/1.1
   2-0  85138 0/0/5682   W 0.00  0     0   3170749 0.0   0.00  128.69 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   3-0  83830 1/30/5554  K 0.68  2     274 3077797 30.8  0.77  127.08 66.249.70.2     http/1.1 test.cloudware.ng:443           GET /?202273230?goodscode=0202008890 HTTP/1.1
   4-0  -     0/0/5987   . 0.00  13    0   3221683 0.0   0.00  130.86 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   5-0  84270 1/17/5719  K 0.30  0     276 3028544 32.7  0.35  122.62 66.249.70.6     http/1.1 test.cloudware.ng:443           GET /?1438906132?goodscode=1437021042 HTTP/1.1
   6-0  -     0/0/5718   . 0.00  15    0   3051967 0.0   0.00  127.35 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   7-0  55671 5/621/5672 K 15.75 4     344 3011397 138.7 15.49 122.49 66.249.70.1     http/1.1 test.cloudware.ng:443           GET /?1584561291?goodscode=1582485302 HTTP/1.1
   8-0  82384 0/32/5362  R 0.77  42    268 2878072 0.0   1.07  117.36 47.128.39.175   http/1.1
   9-0  75042 0/244/5358 W 5.47  4     0   2889199 0.0   5.31  140.21 162.216.149.161 http/1.1 blog.workflow-management-softwa GET / HTTP/1.1
   10-0 83952 0/25/5163  W 0.37  4     0   2849362 0.0   0.52  115.40 96.30.57.23     http/1.1 blog.workflow-management-softwa POST /wp-cron.php?doing_wp_cron=1763234817.59755206108093261718
   11-0 83265 3/41/5409  K 1.10  1     258 2813408 85.9  1.11  117.74 66.249.70.7     http/1.1 test.cloudware.ng:443           GET /?889492009?goodscode=0888326990 HTTP/1.1
   12-0 80317 0/95/5032  R 2.35  0     0   2952889 0.0   2.41  110.12 66.249.70.5     http/1.1 test.cloudware.ng:443
   13-0 81413 0/90/5388  W 2.30  0     0   2957340 0.0   2.73  121.02 66.249.70.7     http/1.1 test.cloudware.ng:443           GET /262737039?goodscode=0262393454 HTTP/1.1
   14-0 76137 0/152/4693 R 3.33  41    312 2508986 0.0   3.74  104.81 47.128.39.175   http/1.1
   15-0 84611 2/14/4850  K 0.08  0     291 2722394 58.4  0.38  105.09 66.249.70.6     http/1.1 test.cloudware.ng:443           GET /?889346163?goodscode=0888181334 HTTP/1.1
   16-0 84616 0/6/4659   R 0.05  3     319 2388891 0.0   0.09  100.35 173.212.217.36  http/1.1 health.oyostate.gov.ng:443
   17-0 -     0/0/3967   . 0.00  16    0   2188328 0.0   0.00  87.96  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 77786 1/107/3915 K 2.58  3     299 2078563 35.5  3.11  89.79  66.249.70.38    http/1.1 support.cloudware.ng:443        GET /?c=3516409382 HTTP/1.1
   19-0 80346 4/120/4033 K 2.33  2     298 2063642 111.0 2.61  84.91  66.249.70.2     http/1.1 test.cloudware.ng:443           GET /?194930899?goodscode=0194676182 HTTP/1.1
   20-0 84624 2/15/2593  K 0.08  1     267 1486782 56.6  0.44  58.74  66.249.70.4     http/1.1 test.cloudware.ng:443           GET /?41115505?goodscode=0041062382 HTTP/1.1
   21-0 84625 3/14/2956  W 0.19  0     0   1623461 85.4  0.22  66.64  66.249.70.5     http/1.1 test.cloudware.ng:443           GET /?1439058172?goodscode=1437172882 HTTP/1.1
   22-0 84626 2/16/2907  K 0.42  1     370 1715861 57.2  0.43  73.62  66.249.70.4     http/1.1 test.cloudware.ng:443           GET /185608241?goodscode=0185365742 HTTP/1.1
   23-0 84627 1/11/3051  K 0.23  0     380 1644389 31.7  0.26  67.89  66.249.70.6     http/1.1 test.cloudware.ng:443           GET /?1291721321?goodscode=1290029134 HTTP/1.1
   24-0 -     0/0/1255   . 0.00  17    0   964948  0.0   0.00  34.24  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/1073   . 0.00  4050  0   578853  0.0   0.00  24.79  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/340    . 0.00  4478  0   191122  0.0   0.00  7.33   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/229    . 0.00  4396  0   131368  0.0   0.00  4.56   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/451    . 0.00  4397  0   249299  0.0   0.00  10.39  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/208    . 0.00  4488  0   110983  0.0   0.00  4.82   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/135    . 0.00  4469  0   70455   0.0   0.00  2.78   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/334    . 0.00  4460  0   138424  0.0   0.00  5.74   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/186    . 0.00  4482  0   108063  0.0   0.00  3.91   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/133    . 0.00  4191  0   66770   0.0   0.00  2.59   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/570    . 0.00  4364  0   335795  0.0   0.00  10.96  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/198    . 0.00  4095  0   110788  0.0   0.00  2.36   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/2      . 0.00  10781 0   2       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/2      . 0.00  10779 0   2       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/4      . 0.00  10747 0   1546    0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00  10774 0   5       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/3      . 0.00  10745 0   848     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/12     . 0.00  10728 0   7059    0.0   0.00  0.29   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00  10773 0   2       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/97     . 0.00  10498 0   53562   0.0   0.00  2.39   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/23     . 0.00  10685 0   3814    0.0   0.00  0.34   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/3      . 0.00  10752 0   23      0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/3      . 0.00  10749 0   832     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/2      . 0.00  10775 0   6       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/4      . 0.00  10736 0   921     0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/13     . 0.00  10550 0   14143   0.0   0.00  1.65   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/429    . 0.00  9262  0   249693  0.0   0.00  9.67   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/9      . 0.00  10733 0   3943    0.0   0.00  0.17   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/2      . 0.00  10776 0   3       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/74     . 0.00  10496 0   38750   0.0   0.00  1.65   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00  10762 0   9       0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/300    . 0.00  9710  0   179725  0.0   0.00  11.46  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/25     . 0.00  10683 0   15231   0.0   0.00  0.63   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -     0/0/2      . 0.00  10770 0   2       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -     0/0/4      . 0.00  10734 0   50      0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-0 -     0/0/5      . 0.00  10737 0   1352    0.0   0.00  0.15   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -     0/0/130    . 0.00  10282 0   67696   0.0   0.00  3.03   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -     0/0/4      . 0.00  10760 0   12      0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-0 -     0/0/3      . 0.00  10764 0   12      0.0   0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-0 -     0/0/3      . 0.00  10750 0   17      0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-0 -     0/0/2      . 0.00  10785 0   70      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-0 -     0/0/3      . 0.00  10743 0   542     0.0   0.00  0.05   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-0 -     0/0/2      . 0.00  10763 0   4       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00  10769 0   2       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-0 -     0/0/2      . 0.00  10771 0   3       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-0 -     0/0/77     . 0.00  10484 0   33074   0.0   0.00  1.77   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00  10772 0   2       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-0 -     0/0/99     . 0.00  10489 0   56987   0.0   0.00  2.35   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-0 -     0/0/53     . 0.00  10580 0   30095   0.0   0.00  1.25   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-0 -     0/0/114    . 0.00  10395 0   66491   0.0   0.00  2.83   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   74-0 -     0/0/23     . 0.00  10719 0   14782   0.0   0.00  0.59   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-0 -     0/0/3      . 0.00  10746 0   17      0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-0 -     0/0/1      . 0.00  10786 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-0 -     0/0/4      . 0.00  10753 0   1899    0.0   0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-0 -     0/0/10     . 0.00  10730 0   5029    0.0   0.00  0.20   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   79-0 -     0/0/4      . 0.00  10731 0   1613    0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   80-0 -     0/0/11     . 0.00  10732 0   6686    0.0   0.00  0.28   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   81-0 -     0/0/4      . 0.00  10758 0   2480    0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   82-0 -     0/0/3      . 0.00  10765 0   23      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   83-0 -     0/0/3      . 0.00  10739 0   644     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   84-0 -     0/0/2      . 0.00  10757 0   3       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   85-0 -     0/0/7      . 0.00  10724 0   3861    0.0   0.00  0.17   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 966
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 12 seconds, (range: 1...57)
   index usage: 17%, cache usage: 23%
   total entries stored since starting: 64506
   total entries replaced since starting: 0
   total entries expired since starting: 63515
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 56 miss
   total removes since starting: 25 hit, 16 miss
Youez - 2016 - github.com/yon3zu
LinuXploit