403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.22.54.txt
 ## swap threshold exceeded
## server overview
2025-11-22.22.54 load[0] mem[57/72] mysql[3/10] httpd[17]
              total        used        free      shared  buff/cache   available
Mem:           2363        1276          85         122        1001         793
Swap:          1999        1555         444
 22:54:01 up 11:51,  0 users,  load average: 0.18, 0.23, 0.45
## system overview
top - 22:54:01 up 11:51,  0 users,  load average: 0.18, 0.23, 0.45
Tasks: 200 total,   9 running, 189 sleeping,   0 stopped,   2 zombie
%Cpu(s): 53.1 us, 43.8 sy,  0.0 ni,  3.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    84152 free,  1329848 used,  1006300 buff/cache
KiB Swap:  2047996 total,   454160 free,  1593836 used.   788908 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1916 mysql     20   0 1478016 296848   4000 S  31.2 12.3   9:09.92 /usr/sbin+
  1739 nigeria   20   0  404052  16140  10384 S  12.5  0.7   0:00.02 /opt/cpan+
    36 root      20   0       0      0      0 S   6.2  0.0   0:18.83 [kswapd0]
  1733 cloudw    20   0  353712  15964  10484 S   6.2  0.7   0:00.01 /opt/cpan+
  1736 pactpay   20   0  480124  16780  11080 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44512   3440   1576 R   0.0  0.1   0:58.26 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 R   0.0  0.0   0:02.25 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.74 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:41.18 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.72 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:06.47 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:01.03 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:01.99 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.47 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:02.13 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40240   4764   4460 R   0.0  0.2   0:25.65 /usr/lib/+
   376 nobody    20   0  277908  19964   3888 S   0.0  0.8   0:00.13 /usr/sbin+
   384 root      20   0   45352    368    296 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    552    424 S   0.0  0.0   0:04.22 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    456    368 S   0.0  0.0   0:00.97 /usr/sbin+
   501 root      20   0   24704   1260    888 D   0.0  0.1   0:09.64 /usr/lib/+
   502 dbus      20   0   58720   1520    792 S   0.0  0.1   0:22.04 /usr/bin/+
   504 rpc       20   0   69256     64      4 S   0.0  0.0   0:00.04 /sbin/rpc+
   514 root      20   0  224148   5796   1264 S   0.0  0.2   0:00.47 queueproc+
   515 polkitd   20   0  610540    996    600 S   0.0  0.0   0:05.59 /usr/lib/+
   521 root      20   0  152780    228    184 S   0.0  0.0   0:00.02 /usr/sbin+
   523 root      20   0   52852    348    240 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0  994492   1468    752 S   0.0  0.1   0:30.38 /usr/sbin+
   544 root      20   0  195208     24     24 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     52     48 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     24      4 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124476    504    376 S   0.0  0.0   0:01.17 /usr/sbin+
   591 root      20   0  108296    136    132 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704    108    108 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   3968    932 S   0.0  0.2   0:00.83 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   646 nobody    20   0  277908  19844   3772 S   0.0  0.8   0:00.14 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.45 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     84     84 S   0.0  0.0   0:00.91 /usr/bin/+
   912 root      20   0 1277312   8024    140 S   0.0  0.3   0:24.70 /usr/bin/+
   913 systuser  20   0  111864     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   914 root      20   0  572372    916    328 S   0.0  0.0   0:03.64 /usr/bin/+
   915 root      20   0   51508    592    428 S   0.0  0.0   0:00.63 /usr/sbin+
   916 telegraf  20   0 5654304  37956   5720 S   0.0  1.6   0:22.62 /usr/loca+
   917 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 systuser  20   0  114016  14364   2432 S   0.0  0.6   0:09.95 /usr/loca+
   926 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   927 root      20   0  111304    492    392 S   0.0  0.0   0:06.44 /usr/sbin+
   928 root      20   0 1276100   8776    104 S   0.0  0.4   0:25.56 /usr/bin/+
   930 root      20   0  445028   1408   1296 S   0.0  0.1   0:01.63 sw-engine+
   931 root      20   0  153404    392    308 S   0.0  0.0   0:00.93 pure-ftpd+
   932 systuser  20   0   10132     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   934 root      20   0  439788   1204    996 S   0.0  0.0   0:01.11 php-fpm: +
   938 root      20   0  388892    856    644 S   0.0  0.0   0:01.00 php-fpm: +
   939 root      20   0 1763124 119480    584 S   0.0  4.9   0:13.84 /usr/loca+
   940 root      20   0  331088   5816   4536 S   0.0  0.2   0:12.62 /usr/sbin+
   949 named     20   0 1055800  43396   2184 S   0.0  1.8   0:18.73 /usr/sbin+
   958 root      20   0  400740   3024    720 S   0.0  0.1   0:04.93 php-fpm: +
   962 root      20   0  261692   9668   2548 S   0.0  0.4   0:06.15 cpsrvd (S+
   969 cpanelc+  20   0   10564   3820   2416 R   0.0  0.2   0:33.93 /usr/loca+
   979 root      20   0  396248    692    516 S   0.0  0.0   0:01.04 php-fpm: +
   985 root      20   0  389508    844    632 S   0.0  0.0   0:01.10 php-fpm: +
  1083 dovenull  20   0   47116   3532   2592 S   0.0  0.1   0:01.33 dovecot/p+
  1084 dovenull  20   0   48236   4552   2696 S   0.0  0.2   0:00.45 dovecot/i+
  1085 dovecot   20   0   10320    344    228 S   0.0  0.0   0:00.32 dovecot/a+
  1086 root      20   0   10452    544    368 S   0.0  0.0   0:00.82 dovecot/l+
  1087 dovenull  20   0   47264   3644   2600 S   0.0  0.2   0:01.55 dovecot/p+
  1088 dovenull  20   0   48324   4604   2672 S   0.0  0.2   0:00.44 dovecot/i+
  1093 root      20   0   24528   2564    592 S   0.0  0.1   0:00.28 dovecot/c+
  1096 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
  1101 dovecot   20   0   13568    628    412 S   0.0  0.0   0:00.11 dovecot/s+
  1142 root      20   0  247932 116988   1164 S   0.0  4.8   0:07.88 /usr/loca+
  1161 dovecot   20   0   41320   1780   1104 S   0.0  0.1   0:02.09 dovecot/a+
  1175 systuser  20   0  157708   3044   1004 S   0.0  0.1   0:00.18 SonarPush+
  1177 wp-tool+  20   0  387528   4816   1548 S   0.0  0.2   0:00.38 /usr/bin/+
  1178 wp-tool+  20   0  412368  28456   1720 S   0.0  1.2   0:13.44 /usr/bin/+
  1255 root      20   0  157100   5068   3784 S   0.0  0.2   0:00.00 sshd: unk+
  1256 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
  1260 root      20   0  262224  24620   6760 S   0.0  1.0   0:04.62 cpdavd - +
  1263 root      20   0  167452   1404    804 S   0.0  0.1   0:00.61 dnsadmin +
  1264 root      20   0  209648  12504   2376 S   0.0  0.5   0:05.13 tailwatchd
  1463 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
  1468 nobody    20   0  277520  19144   3260 S   0.0  0.8   0:00.01 /usr/sbin+
  1514 wp-tool+  20   0  445028    552    376 S   0.0  0.0   0:00.00 sw-engine+
  1606 workflo+  20   0  524940  59404   6064 S   0.0  2.5   0:00.22 php-fpm: +
  1607 nigeria   20   0  400460   5496   2404 S   0.0  0.2   0:00.00 php-fpm: +
  1613 workflo+  20   0  522608  56340   4388 S   0.0  2.3   0:00.20 php-fpm: +
  1625 nobody    20   0  277504  18880   3160 S   0.0  0.8   0:00.00 /usr/sbin+
  1641 root      20   0  162436   5836   4340 S   0.0  0.2   0:00.01 sshd: roo+
  1642 sshd      20   0  115644   2628   1556 S   0.0  0.1   0:00.00 sshd: roo+
  1643 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  1669 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1670 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1671 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1672 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1673 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1674 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1675 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1676 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1678 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1679 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1680 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1681 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1683 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1684 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1685 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  1686 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
  1687 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
  1709 root      20   0  160244   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
  1710 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1711 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1714 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1715 root      20   0   20164    964    764 R   0.0  0.0   0:00.00 jailshell+
  1716 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1717 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1718 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1719 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1720 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1721 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1722 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  1723 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  1724 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1730 saboakin  20   0       0      0      0 Z   0.0  0.0   0:00.00 [jailshel+
  1731 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  1732 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  1746 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
  1800 root      20   0  299272    872    496 S   0.0  0.0   0:01.12 php-fpm: +
  1834 root      38  18  130416   1512    776 S   0.0  0.1   0:00.11 cpanellog+
  2048 root      20   0  267052   9076    748 S   0.0  0.4   0:02.85 /usr/sbin+
  2050 root      20   0   12816    444    324 S   0.0  0.0   0:04.39 /usr/loca+
  2051 root      20   0   12732    380    304 S   0.0  0.0   0:03.89 /usr/loca+
  2052 root      20   0   12836    440    308 S   0.0  0.0   0:04.11 /usr/loca+
  2059 root      20   0   53340    180    180 S   0.0  0.0   0:00.05 /usr/loca+
  2138 root      20   0  186888  16124   1228 S   0.0  0.7   0:43.61 lfd - sle+
  5633 root      20   0  271996 135600   2524 S   0.0  5.6   0:05.12 spamd chi+
  5634 root      20   0  247932 116244    456 S   0.0  4.8   0:00.02 spamd chi+
 37862 root      20   0       0      0      0 S   0.0  0.0   0:00.40 [kworker/+
 47566 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.74 [kworker]
 55218 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 73628 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 81963 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 82843 nobody    20   0  277908  22056   5092 S   0.0  0.9   0:02.41 /usr/sbin+
 83923 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 90269 nobody    20   0  277916  21248   4928 S   0.0  0.9   0:01.75 /usr/sbin+
 90270 nobody    20   0  277908  21268   4924 S   0.0  0.9   0:01.63 /usr/sbin+
 90275 nobody    20   0  277884  21192   4796 S   0.0  0.9   0:01.62 /usr/sbin+
 90289 nobody    20   0  277908  21040   4712 S   0.0  0.9   0:01.56 /usr/sbin+
 90331 nobody    20   0  277584  21124   4880 S   0.0  0.9   0:01.80 /usr/sbin+
 90332 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92386 nobody    20   0  277908  21088   4796 S   0.0  0.9   0:01.29 /usr/sbin+
 93714 nobody    20   0  277908  21104   4732 S   0.0  0.9   0:01.33 /usr/sbin+
 96399 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 97029 nobody    20   0  277584  20404   4328 S   0.0  0.8   0:00.94 /usr/sbin+
 97681 root      20   0       0      0      0 D   0.0  0.0   0:00.01 [kworker/+
 97990 nobody    20   0  277516  20236   4300 S   0.0  0.8   0:00.59 /usr/sbin+
 99444 nobody    20   0  277536  20036   4120 S   0.0  0.8   0:00.50 /usr/sbin+
 99596 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101352 nobody    20   0  277884  20100   3988 S   0.0  0.8   0:00.29 /usr/sbin+
101375 nobody    20   0  277536  19984   4036 S   0.0  0.8   0:00.31 /usr/sbin+
102387 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    11:02   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    11:02   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    11:02   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        R    11:02   0:41  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    11:02   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    11:02   0:06  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    11:02   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   11:02   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   11:02   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    11:02   0:01  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   11:02   0:01  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   11:02   0:02  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    11:02   0:02  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   11:02   0:02  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   11:02   0:00  \_ [ext4-rsv-conver]
root      37862  0.0  0.0      0     0 ?        S    21:17   0:00  \_ [kworker/0:4]
root      55218  0.0  0.0      0     0 ?        S    21:44   0:00  \_ [kworker/1:3]
root      73628  0.0  0.0      0     0 ?        S    22:10   0:00  \_ [kworker/1:4]
root      81963  0.0  0.0      0     0 ?        S    22:22   0:00  \_ [kworker/1:1]
root      83923  0.0  0.0      0     0 ?        S    22:25   0:00  \_ [kworker/0:1]
root      90332  0.0  0.0      0     0 ?        S    22:34   0:00  \_ [kworker/u200:2]
root      96399  0.0  0.0      0     0 ?        S    22:43   0:00  \_ [kworker/0:3]
root      97681  0.0  0.0      0     0 ?        S    22:45   0:00  \_ [kworker/u200:0]
root      99596  0.0  0.0      0     0 ?        S    22:48   0:00  \_ [kworker/1:0]
root     102387  0.0  0.0      0     0 ?        D    22:52   0:00  \_ [kworker/0:0]
root       1096  0.0  0.0      0     0 ?        S    22:53   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44508  3440 ?        Rs   11:02   0:58 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  40240  4764 ?        Ss   11:02   0:25 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   368 ?        Ss   11:02   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   552 ?        S<sl 11:02   0:04 /sbin/auditd
root        499  0.0  0.0  21540   456 ?        Ss   11:02   0:00 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1260 ?        Ss   11:02   0:09 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58720  1520 ?        Ss   11:02   0:22 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256    64 ?        Ss   11:02   0:00 /sbin/rpcbind -w
root        514  0.0  0.2 224148  5796 ?        Ss   11:02   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.0 610540   996 ?        Ssl  11:02   0:05 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780   228 ?        Ss   11:02   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   348 ?        Ss   11:02   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 994492  1468 ?        Ssl  11:02   0:30 /usr/sbin/nscd
root        544  0.0  0.0 195208    24 ?        Ssl  11:02   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    52 ?        Ss   11:02   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    24 ?        Ss   11:02   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124476   504 ?        Ss   11:02   0:01 /usr/sbin/crond -n
root       1669  0.0  0.0 183044  2140 ?        S    22:54   0:00  \_ /usr/sbin/CROND -n
root       1685  0.0  0.0 113284  1212 ?        Ss   22:54   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       1686  0.0  0.0 108052   356 ?        S    22:54   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       1687  0.0  0.0 113288  1520 ?        S    22:54   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       1747  0.0  0.0 153672  1780 ?        R    22:54   0:00  |               \_ ps auxf
root       1670  0.0  0.0 183044  2144 ?        S    22:54   0:00  \_ /usr/sbin/CROND -n
root       1717  0.0  0.0  20164   804 ?        Ss   22:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       1671  0.0  0.0 183044  2144 ?        S    22:54   0:00  \_ /usr/sbin/CROND -n
root       1720  0.0  0.0  20164   804 ?        Ss   22:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root       1672  0.0  0.0 183044  2144 ?        S    22:54   0:00  \_ /usr/sbin/CROND -n
root       1710  0.0  0.0  20164   804 ?        Ss   22:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root       1673  0.0  0.0 183044  2144 ?        S    22:54   0:00  \_ /usr/sbin/CROND -n
root       1719  0.0  0.0  20164   804 ?        Ss   22:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       1674  0.0  0.0 183044  2144 ?        S    22:54   0:00  \_ /usr/sbin/CROND -n
root       1711  0.0  0.0  20164   808 ?        Ss   22:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       1675  0.0  0.0 183044  2144 ?        S    22:54   0:00  \_ /usr/sbin/CROND -n
root       1724  0.0  0.0  20164   804 ?        Ss   22:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       1676  0.0  0.0 183044  2144 ?        S    22:54   0:00  \_ /usr/sbin/CROND -n
root       1716  0.0  0.0  20164   808 ?        Ss   22:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       1678  0.0  0.0 183044  2144 ?        S    22:54   0:00  \_ /usr/sbin/CROND -n
root       1718  0.0  0.0  20164   804 ?        Ss   22:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       1679  0.0  0.0 183044  2144 ?        S    22:54   0:00  \_ /usr/sbin/CROND -n
root       1721  0.0  0.0  20164   808 ?        Ss   22:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       1680  0.0  0.0 183044  2144 ?        S    22:54   0:00  \_ /usr/sbin/CROND -n
root       1714  0.0  0.0  20164   804 ?        Ss   22:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       1681  0.0  0.0 183044  2144 ?        S    22:54   0:00  \_ /usr/sbin/CROND -n
root       1722  0.0  0.0  20164   968 ?        Ss   22:54   0:00  |   \_ jailshell (pactpay) [1731] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    1731  0.0  0.0  20164   260 ?        S    22:54   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    1736  0.0  0.6 480124 16780 ?        R    22:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       1683  0.0  0.0 183044  2144 ?        S    22:54   0:00  \_ /usr/sbin/CROND -n
root       1723  0.0  0.0  20164   968 ?        Ss   22:54   0:00  |   \_ jailshell (nigeria) [1732] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    1732  0.0  0.0  20164   260 ?        S    22:54   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    1739  0.0  0.6 404052 16140 ?        S    22:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root       1684  0.0  0.0 183040  2208 ?        R    22:54   0:00  \_ /usr/sbin/CROND -n
root        591  0.0  0.0 108296   136 tty1     Ss+  11:02   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704   108 ttyS0    Ss+  11:02   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  3968 ?        Ss   11:02   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    84 ?        Ssl  11:02   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.3 1277312 8024 ?        Ssl  11:02   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    80 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372   916 ?        Ssl  11:02   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   592 ?        Ss   11:02   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.1  47116  3532 ?        S    11:03   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  48236  4552 ?        S    11:03   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   344 ?        S    11:03   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   544 ?        S    11:03   0:00  \_ dovecot/log
dovenull   1087  0.0  0.1  47264  3644 ?        S    11:03   0:01  \_ dovecot/pop3-login
dovenull   1088  0.0  0.1  48324  4604 ?        S    11:03   0:00  \_ dovecot/imap-login
root       1093  0.0  0.1  24528  2564 ?        S    11:03   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   628 ?        S    11:03   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1780 ?        S    11:03   0:02  \_ dovecot/auth
root       1463  0.0  0.1  41052  2728 ?        S    22:53   0:00  \_ dovecot/auth -w
telegraf    916  0.0  1.5 5654304 37956 ?       SLsl 11:02   0:22 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756    56 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.5 114016 14364 ?        Ssl  11:02   0:09 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    72 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   492 ?        Ss   11:02   0:06 /usr/sbin/sshd -D
root       1255  0.0  0.2 157100  5068 ?        Ss   22:53   0:00  \_ sshd: unknown [priv]
sshd       1256  0.0  0.1 115644  2628 ?        S    22:53   0:00  |   \_ sshd: unknown [net]
root       1641  0.5  0.2 162436  5836 ?        Ss   22:53   0:00  \_ sshd: root [priv]
sshd       1642  0.0  0.1 115644  2628 ?        S    22:53   0:00      \_ sshd: root [net]
root        928  0.0  0.3 1276100 8776 ?        Ssl  11:02   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028  1408 ?        Ss   11:02   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+   1514  0.0  0.0 445028   552 ?        S    22:53   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   392 ?        Ss   11:02   0:00 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132    40 ?        Ssl  11:02   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.0 439788  1204 ?        Ss   11:02   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   856 ?        Ss   11:02   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        939  0.0  4.9 1763124 119480 ?      Ssl  11:02   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.2 331088  5824 ?        Ssl  11:02   0:12 /usr/sbin/rsyslogd -n
named       949  0.0  1.7 1055800 43396 ?       Ssl  11:02   0:18 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  3024 ?        Ss   11:03   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
workflo+   1606  4.4  2.4 524940 59404 ?        S    22:53   0:00  \_ php-fpm: pool blog_workflow-management-software_com
nigeria    1607  0.0  0.2 400460  5496 ?        S    22:53   0:00  \_ php-fpm: pool nigeriadecide_org
workflo+   1613  4.0  2.3 522608 56340 ?        S    22:53   0:00  \_ php-fpm: pool blog_workflow-management-software_com
root        962  0.0  0.3 261692  9668 ?        Ss   11:03   0:06 cpsrvd (SSL) - waiting for connections                   
root       1643  0.0  0.0      0     0 ?        Z    22:53   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10564  3820 ?        Ss   11:03   0:33 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   692 ?        Ss   11:03   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   844 ?        Ss   11:03   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  4.8 247932 116988 ?       Ss   11:03   0:07 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5633  0.0  5.6 271996 135600 ?       S    11:06   0:05  \_ spamd child
root       5634  0.0  4.8 247932 116244 ?       S    11:06   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  3044 ?        S    11:03   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387528  4816 ?        Ss   11:03   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  1.1 412368 28456 ?        Ss   11:03   0:13 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  1.0 262224 24620 ?        Ss   11:03   0:04 cpdavd - accepting connections on: 2091, 2077, 2078
root       1263  0.0  0.0 167452  1404 ?        Ss   11:03   0:00 dnsadmin - dormant mode
root       1264  0.0  0.5 209648 12504 ?        Ss   11:03   0:05 tailwatchd
root       1800  0.0  0.0 299272   872 ?        Ss   11:03   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1512 ?        SN   11:03   0:00 cpanellogd - sleeping for logs
mysql      1916  1.2 12.2 1478016 296848 ?      Sl   11:03   9:09 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  9076 ?        Ss   11:03   0:02 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12816   444 ?        S    11:03   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   380 ?        R    11:03   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12836   440 ?        S    11:03   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340   180 ?        S    11:03   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    82843  0.1  0.9 277908 22056 ?        S    22:23   0:02  \_ /usr/sbin/httpd -k start
nobody    90269  0.1  0.8 277916 21248 ?        S    22:34   0:01  \_ /usr/sbin/httpd -k start
nobody    90270  0.1  0.8 277908 21268 ?        S    22:34   0:01  \_ /usr/sbin/httpd -k start
cloudw     1733  0.0  0.6 353712 15964 ?        S    22:54   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    90275  0.1  0.8 277884 21192 ?        S    22:34   0:01  \_ /usr/sbin/httpd -k start
nobody    90289  0.1  0.8 277908 21040 ?        S    22:34   0:01  \_ /usr/sbin/httpd -k start
nobody    90331  0.1  0.8 277584 21124 ?        S    22:34   0:01  \_ /usr/sbin/httpd -k start
nobody    92386  0.1  0.8 277908 21088 ?        S    22:37   0:01  \_ /usr/sbin/httpd -k start
nobody    93714  0.1  0.8 277908 21104 ?        S    22:39   0:01  \_ /usr/sbin/httpd -k start
nobody    97029  0.1  0.8 277584 20404 ?        S    22:44   0:00  \_ /usr/sbin/httpd -k start
nobody    97990  0.1  0.8 277516 20236 ?        S    22:45   0:00  \_ /usr/sbin/httpd -k start
nobody    99444  0.1  0.8 277536 20036 ?        S    22:47   0:00  \_ /usr/sbin/httpd -k start
nobody   101352  0.1  0.8 277884 20100 ?        S    22:50   0:00  \_ /usr/sbin/httpd -k start
nobody   101375  0.1  0.8 277536 19984 ?        S    22:50   0:00  \_ /usr/sbin/httpd -k start
nobody      376  0.1  0.8 277908 19964 ?        S    22:52   0:00  \_ /usr/sbin/httpd -k start
nobody      646  0.1  0.8 277908 19844 ?        S    22:52   0:00  \_ /usr/sbin/httpd -k start
nobody     1468  0.0  0.7 277520 19144 ?        S    22:53   0:00  \_ /usr/sbin/httpd -k start
nobody     1625  0.0  0.7 277504 18880 ?        S    22:53   0:00  \_ /usr/sbin/httpd -k start
root       2138  0.1  0.6 186888 16124 ?        Ss   11:03   0:43 lfd - sleeping
oysipao+  47566  0.0  0.0   3148   416 ?        Ss   12:00   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152   424 ?        S    12:00   0:00  \_ [kworker]
## mysql stats
Uptime: 42655  Threads: 5  Questions: 3410810  Slow queries: 0  Opens: 8803  Flush tables: 1  Open tables: 2000  Queries per second avg: 79.962
*************************** 1. row ***************************
     Id: 53830
   User: workflow_wp673
   Host: localhost
     db: workflow_wp673
Command: Sleep
   Time: 4
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 53832
   User: workflow_wp673
   Host: localhost
     db: workflow_wp673
Command: Sleep
   Time: 5
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 53845
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 53848
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 53851
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 102.142.108.143 TIME_WAIT
      1 102.88.115.184 TIME_WAIT
      1 148.113.128.9 TIME_WAIT
      1 167.71.203.246 TIME_WAIT
      1 ::1 TIME_WAIT
      1 52.167.144.18 TIME_WAIT
      1 57.141.4.72 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 22:54:01 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 11 hours 50 minutes 50 seconds
   Server load: 0.18 0.23 0.45
   Total accesses: 195634 - Total Traffic: 4.7 GB - Total Duration: 94955119
   CPU Usage: u12.19 s6.96 cu2432.9 cs1909.3 - 10.2% CPU load
   4.59 requests/sec - 114.6 kB/second - 25.0 kB/request - 485.371 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

KWWK_KKKKKK_..........._W.....K..........W......................
.........K......................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc     M CPU    SS  Req   Dur   Conn  Child  Slot      Client     Protocol              VHost                                          Request
   0-0  82843  3/448/10358 K 10.59 1    264 5088860 94.5  10.58 253.02 192.178.4.97   http/1.1 team.cloudware.ng:443           GET /?l=662909846 HTTP/1.1
   1-0  1468   0/3/10237   W 0.05  5    0   5109885 0.0   0.07  250.36 35.233.95.0    http/1.1 blog.workflow-management-softwa GET / HTTP/1.1
   2-0  92386  0/234/10026 W 5.29  0    0   5249872 0.0   5.60  241.01 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   3-0  1625   1/1/9994    K 0.00  1    294 4978757 35.0  0.03  251.69 192.178.4.100  http/1.1 team.cloudware.ng:443           GET /?l=2004459672 HTTP/1.1
   4-0  93714  0/224/9813  _ 5.71  0    367 4889717 0.0   6.07  248.09 192.178.4.99   http/1.1 team.cloudware.ng:443           GET /?l=3038987445 HTTP/1.1
   5-0  97029  1/154/10010 K 4.06  1    1   4972687 0.8   4.11  269.15 167.71.203.246 http/1.1 login.cloudware.ng:80           GET /style.php HTTP/1.1
   6-0  97990  2/138/9585  K 2.17  2    313 4590939 65.1  2.55  239.65 192.178.4.102  http/1.1 team.cloudware.ng:443           GET /?l=1728456040 HTTP/1.1
   7-0  101352 2/51/9713   K 1.21  1    312 4758462 66.0  1.38  236.53 192.178.4.101  http/1.1 team.cloudware.ng:443           GET /?l=2688019863 HTTP/1.1
   8-0  99444  4/92/9463   K 1.99  2    356 4543793 124.3 2.21  228.94 192.178.4.98   http/1.1 team.cloudware.ng:443           GET /?l=735183836 HTTP/1.1
   9-0  101375 4/51/8641   K 1.27  0    271 4279023 126.4 1.39  217.34 192.178.4.103  http/1.1 team.cloudware.ng:443           GET /?l=2597571682 HTTP/1.1
   10-0 646    2/24/8658   K 0.53  3    257 4182202 65.7  0.63  207.24 192.178.4.97   http/1.1 team.cloudware.ng:443           GET /?l=2190157660 HTTP/1.1
   11-0 376    0/25/8815   _ 0.50  0    13  4248037 0.0   0.58  215.19 185.191.171.7  http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?lga=Ishielu&state=Ebonyi&ward=Nt
   12-0 -      0/0/8901    . 0.00  1088 0   4411333 0.0   0.00  225.54 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   13-0 -      0/0/7806    . 0.00  465  0   3857851 0.0   0.00  190.43 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   14-0 -      0/0/7240    . 0.00  1098 0   3549117 0.0   0.00  177.84 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-0 -      0/0/5810    . 0.00  1107 0   2775755 0.0   0.00  153.78 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   16-0 -      0/0/6387    . 0.00  1109 0   3029840 0.0   0.00  150.26 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-0 -      0/0/6259    . 0.00  1133 0   3013067 0.0   0.00  156.06 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 -      0/0/5224    . 0.00  1128 0   2560099 0.0   0.00  126.61 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-0 -      0/0/5778    . 0.00  315  0   2605281 0.0   0.00  133.59 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-0 -      0/0/4357    . 0.00  1131 0   2133458 0.0   0.00  103.94 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 -      0/0/3323    . 0.00  1087 0   1763556 0.0   0.00  81.36  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 -      0/0/2312    . 0.00  1124 0   1170596 0.0   0.00  64.21  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 90269  0/434/1913  _ 8.68  0    349 808044  0.0   6.84  36.79  192.178.4.102  http/1.1 team.cloudware.ng:443           GET /?l=2151518861 HTTP/1.1
   24-0 90270  0/334/1155  W 7.02  0    0   519317  0.0   7.19  26.74  192.178.4.104  http/1.1 team.cloudware.ng:443           GET /?l=3944452649 HTTP/1.1
   25-0 -      0/0/2028    . 0.00  1129 0   786487  0.0   0.00  44.89  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -      0/0/1285    . 0.00  1125 0   630308  0.0   0.00  29.95  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -      0/0/1001    . 0.00  874  0   523115  0.0   0.00  30.07  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -      0/0/1367    . 0.00  1118 0   608235  0.0   0.00  30.26  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -      0/0/1080    . 0.00  1086 0   515239  0.0   0.00  23.03  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 90275  2/347/1203  K 6.48  2    303 600947  67.9  7.52  28.10  192.178.4.96   http/1.1 team.cloudware.ng:443           GET /?l=1843044842 HTTP/1.1
   31-0 -      0/0/504     . 0.00  1111 0   205211  0.0   0.00  9.07   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -      0/0/487     . 0.00  1100 0   216759  0.0   0.00  9.74   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -      0/0/52      . 0.00  1126 0   71      0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -      0/0/551     . 0.00  1110 0   167076  0.0   0.00  7.92   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -      0/0/492     . 0.00  1121 0   245476  0.0   0.00  10.83  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -      0/0/59      . 0.00  1119 0   2577    0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -      0/0/163     . 0.00  542  0   87607   0.0   0.00  3.75   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -      0/0/628     . 0.00  1108 0   259896  0.0   0.00  11.98  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -      0/0/284     . 0.00  206  0   120492  0.0   0.00  6.08   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -      0/0/188     . 0.00  1102 0   88296   0.0   0.00  3.55   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 90289  0/300/328   W 6.45  4    0   144326  0.0   6.67  7.35   96.30.57.23    http/1.1 blog.workflow-management-softwa POST /wp-cron.php?doing_wp_cron=1763848436.50602102279663085937
   42-0 -      0/0/61      . 0.00  1113 0   1192    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -      0/0/44      . 0.00  1099 0   2624    0.0   0.00  0.20   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -      0/0/256     . 0.00  1094 0   118839  0.0   0.00  5.27   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -      0/0/161     . 0.00  1114 0   24705   0.0   0.00  1.09   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -      0/0/37      . 0.00  1097 0   3677    0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -      0/0/33      . 0.00  1112 0   11406   0.0   0.00  0.47   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -      0/0/196     . 0.00  1130 0   96660   0.0   0.00  3.99   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -      0/0/145     . 0.00  1096 0   50865   0.0   0.00  2.79   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -      0/0/74      . 0.00  983  0   20693   0.0   0.00  1.04   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -      0/0/2       . 0.00  1167 0   2       0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -      0/0/4       . 0.00  1159 0   1510    0.0   0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -      0/0/22      . 0.00  1120 0   2952    0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -      0/0/1       . 0.00  1179 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -      0/0/1       . 0.00  1180 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -      0/0/2       . 0.00  1173 0   4       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -      0/0/1       . 0.00  1178 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -      0/0/42      . 0.00  1104 0   55      0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-0 -      0/0/4       . 0.00  1166 0   1605    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -      0/0/127     . 0.00  648  0   52959   0.0   0.00  2.83   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -      0/0/1       . 0.00  1177 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-0 -      0/0/47      . 0.00  1095 0   1465    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-0 -      0/0/60      . 0.00  1123 0   53      0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-0 -      0/0/4       . 0.00  1160 0   3       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-0 -      0/0/7       . 0.00  1146 0   3350    0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-0 -      0/0/27      . 0.00  1122 0   28      0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-0 -      0/0/42      . 0.00  1127 0   46      0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-0 -      0/0/3       . 0.00  1165 0   1240    0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-0 -      0/0/2       . 0.00  1164 0   703     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-0 -      0/0/5       . 0.00  1157 0   1790    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-0 -      0/0/47      . 0.00  1105 0   737     0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-0 -      0/0/1       . 0.00  1176 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-0 90331  81/401/401  K 8.47  0    25  143152  545.3 7.20  7.20   193.70.44.235  http/1.1 cloudsms.com.ng:443             GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   74-0 -      0/0/9       . 0.00  1153 0   4803    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-0 -      0/0/1       . 0.00  1175 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-0 -      0/0/23      . 0.00  1117 0   2942    0.0   0.00  0.21   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-0 -      0/0/200     . 0.00  474  0   87870   0.0   0.00  4.44   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-0 -      0/0/63      . 0.00  977  0   25484   0.0   0.00  1.24   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 872
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...64)
   index usage: 15%, cache usage: 20%
   total entries stored since starting: 141899
   total entries replaced since starting: 0
   total entries expired since starting: 140997
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 351 miss
   total removes since starting: 30 hit, 185 miss
Youez - 2016 - github.com/yon3zu
LinuXploit