403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-18.01.57.txt
 ## swap threshold exceeded
## server overview
2025-11-18.01.57 load[0] mem[46/78] mysql[1/11] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1026         144          68        1191        1106
Swap:          1999        1693         306
 01:57:01 up  7:09,  0 users,  load average: 0.04, 0.14, 0.28
## system overview
top - 01:57:01 up  7:09,  0 users,  load average: 0.04, 0.14, 0.28
Tasks: 201 total,   8 running, 192 sleeping,   0 stopped,   1 zombie
%Cpu(s): 50.0 us, 46.9 sy,  0.0 ni,  3.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   123372 free,  1076056 used,  1220872 buff/cache
KiB Swap:  2047996 total,   313492 free,  1734504 used.  1107944 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
     1 root      20   0   44412   3380   1512 S  13.3  0.1   0:35.13 /usr/lib/+
   545 root      20   0   24624   1220    864 R   6.7  0.1   0:05.93 /usr/lib/+
   556 root      20   0  126420    836    400 S   6.7  0.0   0:00.84 /usr/sbin+
  1881 mysql     20   0 1458600 260920   2036 S   6.7 10.8   5:58.55 /usr/sbin+
  8164 nigeria   20   0  404052  16140  10384 S   6.7  0.7   0:00.01 /opt/cpan+
  8166 pactpay   20   0  412248  16140  10560 R   6.7  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.54 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.12 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:26.23 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.11 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:04.42 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:15.70 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   140 root      20   0       0      0      0 S   0.0  0.0   0:00.42 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.58 [kworker/+
   258 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   271 root       0 -20       0      0      0 S   0.0  0.0   0:01.86 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.45 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   361 root      20   0   39504   6916   6668 S   0.0  0.3   0:12.51 /usr/lib/+
   391 root      20   0   45424    184    180 S   0.0  0.0   0:00.37 /usr/lib/+
   413 root      16  -4   55532    556    428 S   0.0  0.0   0:01.77 /sbin/aud+
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   419 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   511 polkitd   20   0  612240    908    504 S   0.0  0.0   0:03.44 /usr/lib/+
   514 root      20   0  224148   3524   1024 S   0.0  0.1   0:00.31 queueproc+
   516 rpc       20   0   69256    204    144 S   0.0  0.0   0:00.02 /sbin/rpc+
   517 root      20   0   21540    416    328 S   0.0  0.0   0:00.58 /usr/sbin+
   521 root      20   0  152780    204    164 S   0.0  0.0   0:00.01 /usr/sbin+
   522 root      20   0   52852    392    284 S   0.0  0.0   0:00.01 /usr/sbin+
   523 dbus      20   0   58704   1400    668 R   0.0  0.1   0:13.45 /usr/bin/+
   532 root      20   0  195208     16     16 S   0.0  0.0   0:00.00 /usr/sbin+
   535 root      20   0    4388     68     64 S   0.0  0.0   0:00.00 /usr/sbin+
   558 root      20   0   25908    176    156 S   0.0  0.0   0:00.00 /usr/sbin+
   572 nscd      20   0 1199308   1776    728 S   0.0  0.1   0:21.38 /usr/sbin+
   578 root      20   0  114704    108    108 S   0.0  0.0   0:00.03 /bin/bash
   579 root      20   0  108296    124    120 S   0.0  0.0   0:00.00 /sbin/age+
   628 mailnull  20   0   89112   3508    424 S   0.0  0.1   0:00.52 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   687 root       0 -20       0      0      0 S   0.0  0.0   0:02.55 [loop0]
   729 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   730 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1054 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  1060 systuser  20   0  112268     72      0 S   0.0  0.0   0:00.01 /usr/loca+
  1061 root      20   0  153404    372    288 S   0.0  0.0   0:00.55 pure-ftpd+
  1062 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1063 systuser  20   0  114016  13164   2308 S   0.0  0.5   0:06.10 /usr/loca+
  1067 memcach+  20   0  342400    116    116 S   0.0  0.0   0:00.57 /usr/bin/+
  1068 root      20   0 1276356   8572    132 S   0.0  0.4   0:26.98 /usr/bin/+
  1069 telegraf  20   0 5654304  39052   6124 S   0.0  1.6   0:13.90 /usr/loca+
  1071 root      20   0  572372   1048    472 S   0.0  0.0   0:02.23 /usr/bin/+
  1072 root      20   0   51508    572    408 S   0.0  0.0   0:00.31 /usr/sbin+
  1076 root      20   0 1277056   5956    132 S   0.0  0.2   0:23.12 /usr/bin/+
  1085 systuser  20   0   12756     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1086 root      20   0  111304    476    376 S   0.0  0.0   0:02.40 /usr/sbin+
  1087 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.01 /usr/loca+
  1088 root      20   0  445028   1392   1280 S   0.0  0.1   0:01.09 sw-engine+
  1091 root      20   0  389508    572    472 S   0.0  0.0   0:00.73 php-fpm: +
  1098 named     20   0 1054792  42664   1764 S   0.0  1.8   0:14.20 /usr/sbin+
  1109 root      20   0  388892    684    472 S   0.0  0.0   0:00.68 php-fpm: +
  1113 root      20   0  281936   7220   6228 S   0.0  0.3   0:06.30 /usr/sbin+
  1117 root      20   0 1763304  70156    880 S   0.0  2.9   0:13.87 /usr/loca+
  1123 root      20   0  439788   1008    916 S   0.0  0.0   0:00.76 php-fpm: +
  1131 root      20   0  400740   2008    724 S   0.0  0.1   0:03.74 php-fpm: +
  1134 root      20   0  261284   6964   1812 S   0.0  0.3   0:02.80 cpsrvd (S+
  1139 cpanelc+  20   0   10608   3756   2384 S   0.0  0.2   0:20.64 /usr/loca+
  1149 root      20   0  396248    460    288 S   0.0  0.0   0:00.70 php-fpm: +
  1213 dovenull  20   0   46984   2420   1692 S   0.0  0.1   0:00.40 dovecot/p+
  1214 dovenull  20   0   47936   2940   1584 S   0.0  0.1   0:00.32 dovecot/i+
  1215 dovecot   20   0   10320    412    292 S   0.0  0.0   0:00.07 dovecot/a+
  1216 root      20   0   10452    644    448 S   0.0  0.0   0:00.32 dovecot/l+
  1217 dovenull  20   0   47056   2408   1588 S   0.0  0.1   0:00.57 dovecot/p+
  1218 dovenull  20   0   47752   3044   1708 S   0.0  0.1   0:00.23 dovecot/i+
  1226 root      20   0   24528   2232    360 S   0.0  0.1   0:00.15 dovecot/c+
  1227 dovecot   20   0   13568    460    256 S   0.0  0.0   0:00.05 dovecot/s+
  1292 systuser  20   0  157704   2944    892 S   0.0  0.1   0:00.11 SonarPush+
  1297 dovecot   20   0   41188   1576   1064 S   0.0  0.1   0:00.56 dovecot/a+
  1300 wp-tool+  20   0  412396  31932   1152 S   0.0  1.3   0:08.28 /usr/bin/+
  1301 wp-tool+  20   0  387556  13048   1404 S   0.0  0.5   0:00.27 /usr/bin/+
  1308 root      20   0  248116   4768    892 S   0.0  0.2   0:05.87 /usr/loca+
  1409 root      20   0  210184  10424   1968 S   0.0  0.4   0:03.30 tailwatchd
  1412 root      20   0  262224  19216   1288 S   0.0  0.8   0:01.37 cpdavd - +
  1413 root      20   0  167452   4276   2900 S   0.0  0.2   0:00.46 dnsadmin +
  1830 nobody    20   0  277616  20020   4736 S   0.0  0.8   0:00.80 /usr/sbin+
  1831 nobody    20   0  277680  20284   4728 S   0.0  0.8   0:00.78 /usr/sbin+
  1836 root      20   0  299272    788    408 S   0.0  0.0   0:00.70 php-fpm: +
  1853 root      38  18  130416   1432    756 S   0.0  0.1   0:00.06 cpanellog+
  1973 root      20   0       0      0      0 D   0.0  0.0   0:00.03 [kworker/+
  2063 root      20   0  266984   7764    724 S   0.0  0.3   0:03.66 /usr/sbin+
  2067 root      20   0   12828    388    280 S   0.0  0.0   0:02.86 /usr/loca+
  2068 root      20   0   12732    352    276 S   0.0  0.0   0:02.48 /usr/loca+
  2069 root      20   0   12852    404    284 S   0.0  0.0   0:02.67 /usr/loca+
  2075 root      20   0   53252    176    176 S   0.0  0.0   0:00.04 /usr/loca+
  2379 nobody    20   0  277744  19932   4680 S   0.0  0.8   0:00.77 /usr/sbin+
  2990 nobody    20   0  277860  20308   4836 S   0.0  0.8   0:00.68 /usr/sbin+
  4646 nobody    20   0  277744  19380   4360 S   0.0  0.8   0:00.37 /usr/sbin+
  5114 nobody    20   0  277876  19380   4276 S   0.0  0.8   0:00.38 /usr/sbin+
  5154 nobody    20   0  277876  19160   4184 S   0.0  0.8   0:00.45 /usr/sbin+
  5878 nobody    20   0  277508  19140   4348 S   0.0  0.8   0:00.25 /usr/sbin+
  5998 nobody    20   0  277776  19404   4240 S   0.0  0.8   0:00.32 /usr/sbin+
  6307 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
  6323 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6339 nobody    20   0  277744  18968   4120 S   0.0  0.8   0:00.27 /usr/sbin+
  7262 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  7506 root      20   0  264832  96348   3276 S   0.0  4.0   0:03.00 spamd chi+
  7507 root      20   0  248116   3476    468 S   0.0  0.1   0:00.01 spamd chi+
  7832 nobody    20   0  277744  18008   3260 S   0.0  0.7   0:00.05 /usr/sbin+
  7884 nobody    20   0  277884  18532   3748 S   0.0  0.8   0:00.03 /usr/sbin+
  7890 nobody    20   0  277744  17964   3220 S   0.0  0.7   0:00.05 /usr/sbin+
  7891 nobody    20   0  277744  18404   3640 S   0.0  0.8   0:00.03 /usr/sbin+
  7910 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  7911 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
  7929 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
  7958 nobody    20   0  277720  17976   3260 S   0.0  0.7   0:00.01 /usr/sbin+
  7973 nobody    20   0  277520  18184   3652 S   0.0  0.8   0:00.01 /usr/sbin+
  8026 nigeria   20   0  400460   4472   2360 S   0.0  0.2   0:00.00 php-fpm: +
  8061 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
  8063 root      20   0  153408    512    372 S   0.0  0.0   0:00.00 pure-ftpd+
  8064 root      20   0  153408    140      0 S   0.0  0.0   0:00.00 pure-ftpd+
  8068 salutem   20   0  407240  18076   4340 S   0.0  0.7   0:00.11 php-fpm: +
  8080 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  8091 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8092 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8094 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8095 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8096 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8097 root      20   0  182860   2472   1628 S   0.0  0.1   0:00.00 /usr/sbin+
  8098 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8099 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8100 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8101 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8103 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8104 root      20   0  182864   2404   1576 S   0.0  0.1   0:00.00 /usr/sbin+
  8106 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  8107 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
  8108 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
  8130 root      20   0  160244   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
  8137 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8138 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8139 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8140 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8141 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  8142 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8143 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8144 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  8145 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  8147 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  8156 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  8158 saboakin  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  8160 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  8165 saboakin  20   0  404052  15608  10156 S   0.0  0.6   0:00.00 /opt/cpan+
  8167 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  8168 nobody    20   0  277776  18216    164 R   0.0  0.8   0:00.00 /usr/sbin+
  8169 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
  8170 cloudsms  20   0  131852   3320   2388 R   0.0  0.1   0:00.00 /usr/loca+
 13053 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 13057 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.47 [kworker]
 14140 root      20   0  181752  28696   1240 S   0.0  1.2   0:07.05 lfd - sle+
 38740 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 51258 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 62775 root      20   0  182832    840    300 S   0.0  0.0   0:00.00 /usr/sbin+
 62833 root      20   0  113284    280    104 S   0.0  0.0   0:00.00 /bin/sh -+
 62852 root      20   0  108056     72      0 S   0.0  0.0   0:00.00 sleep 1h +
 68263 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 80271 root      20   0       0      0      0 R   0.0  0.0   0:00.05 [kworker/+
 85211 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 92929 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 96308 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 99286 nobody    20   0  277876  20336   4880 S   0.0  0.8   0:01.18 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov17   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov17   0:26  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov17   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov17   0:15  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [deferwq]
root        140  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov17   0:01  \_ [kworker/0:1H]
root        258  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ttm_swap]
root        271  0.0  0.0      0     0 ?        S<   Nov17   0:01  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root        418  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [rpciod]
root        419  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kvm-irqfd-clean]
root        687  0.0  0.0      0     0 ?        S<   Nov17   0:02  \_ [loop0]
root        729  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [jbd2/loop0-8]
root        730  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root      38740  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/u200:2]
root      51258  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/1:2]
root      68263  0.0  0.0      0     0 ?        S    01:06   0:00  \_ [kworker/0:2]
root      80271  0.0  0.0      0     0 ?        S    01:19   0:00  \_ [kworker/1:0]
root      85211  0.0  0.0      0     0 ?        D    01:24   0:00  \_ [kworker/u200:1]
root       8176  0.0  0.0      0     0 ?        R    01:57   0:00  |   \_ [kworker/u200:1]
root      92929  0.0  0.0      0     0 ?        S    01:33   0:00  \_ [kworker/0:0]
root      96308  0.0  0.0      0     0 ?        S    01:37   0:00  \_ [kworker/1:1]
root       1054  0.0  0.0      0     0 ?        S    01:45   0:00  \_ [kworker/0:3]
root       1973  0.0  0.0      0     0 ?        S    01:46   0:00  \_ [kworker/1:3]
root       6307  0.0  0.0      0     0 ?        D    01:53   0:00  \_ [kworker/0:1]
root       6323  0.0  0.0      0     0 ?        S    01:53   0:00  \_ [kworker/1:4]
root       7262  0.0  0.0      0     0 ?        D    01:55   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44416  3380 ?        Ds   Nov17   0:35 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        361  0.0  0.2  39504  6916 ?        Ss   Nov17   0:12 /usr/lib/systemd/systemd-journald
root        391  0.0  0.0  45424   184 ?        Ss   Nov17   0:00 /usr/lib/systemd/systemd-udevd
root        413  0.0  0.0  55532   556 ?        S<sl Nov17   0:01 /sbin/auditd
polkitd     511  0.0  0.0 612240   908 ?        Ssl  Nov17   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        514  0.0  0.1 224148  3524 ?        Ss   Nov17   0:00 queueprocd - waiting up to 60s to process a task
rpc         516  0.0  0.0  69256   204 ?        Ss   Nov17   0:00 /sbin/rpcbind -w
root        517  0.0  0.0  21540   416 ?        Ss   Nov17   0:00 /usr/sbin/irqbalance --foreground
root        521  0.0  0.0 152780   204 ?        Ss   Nov17   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        522  0.0  0.0  52852   392 ?        Ss   Nov17   0:00 /usr/sbin/smartd -n -q never
dbus        523  0.0  0.0  58704  1400 ?        Ss   Nov17   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        532  0.0  0.0 195208    16 ?        Ssl  Nov17   0:00 /usr/sbin/gssproxy -D
root        535  0.0  0.0   4388    68 ?        Ss   Nov17   0:00 /usr/sbin/acpid
root        545  0.0  0.0  24624  1220 ?        Ss   Nov17   0:05 /usr/lib/systemd/systemd-logind
root        556  0.0  0.0 126420   836 ?        Ss   Nov17   0:00 /usr/sbin/crond -n
root      62775  0.0  0.0 182832   840 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      62833  0.0  0.0 113284   280 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      62852  0.0  0.0 108056    72 ?        S    01:00   0:00  |       \_ sleep 1h 4m
root       8091  0.0  0.0 182864  2412 ?        S    01:57   0:00  \_ /usr/sbin/CROND -n
root       8106  0.0  0.0 113284  1212 ?        Ss   01:57   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       8107  0.0  0.0 108052   356 ?        S    01:57   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       8108  0.0  0.0 113288  1520 ?        S    01:57   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       8175  0.0  0.0 153840  2096 ?        R    01:57   0:00  |               \_ ps auxf
root       8092  0.0  0.0 182864  2412 ?        S    01:57   0:00  \_ /usr/sbin/CROND -n
root       8143  0.0  0.0  20164   804 ?        Ss   01:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       8094  0.0  0.0 182864  2412 ?        S    01:57   0:00  \_ /usr/sbin/CROND -n
root       8137  0.0  0.0  20164   804 ?        Ss   01:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       8095  0.0  0.0 182864  2412 ?        S    01:57   0:00  \_ /usr/sbin/CROND -n
root       8140  0.0  0.0  20164   804 ?        Ss   01:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       8096  0.0  0.0 182864  2412 ?        S    01:57   0:00  \_ /usr/sbin/CROND -n
root       8145  0.0  0.0  20164   968 ?        Ss   01:57   0:00  |   \_ jailshell (cloudsms) [8167] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms   8167  0.0  0.0  20164   260 ?        S    01:57   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms   8169  0.0  0.0 113284  1208 ?        S    01:57   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms   8170  0.0  0.5 400804 12708 ?        R    01:57   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue.php
root       8098  0.0  0.0 182864  2412 ?        S    01:57   0:00  \_ /usr/sbin/CROND -n
root       8142  0.0  0.0  20164   808 ?        Ss   01:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       8099  0.0  0.0 182864  2412 ?        S    01:57   0:00  \_ /usr/sbin/CROND -n
root       8139  0.0  0.0  20164   804 ?        Ss   01:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       8100  0.0  0.0 182864  2412 ?        S    01:57   0:00  \_ /usr/sbin/CROND -n
root       8138  0.0  0.0  20164   808 ?        Ss   01:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       8101  0.0  0.0 182864  2408 ?        S    01:57   0:00  \_ /usr/sbin/CROND -n
root       8141  0.0  0.0  20164   964 ?        Ss   01:57   0:00  |   \_ jailshell (pactpay) [8160] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    8160  0.0  0.0  20164   256 ?        S    01:57   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    8166  0.0  0.6 412248 16140 ?        Sl   01:57   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       8103  0.0  0.0 182864  2408 ?        S    01:57   0:00  \_ /usr/sbin/CROND -n
root       8144  0.0  0.0  20164   968 ?        Ss   01:57   0:00  |   \_ jailshell (nigeria) [8156] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    8156  0.0  0.0  20164   260 ?        S    01:57   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    8164  0.0  0.6 404052 16140 ?        S    01:57   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root       8104  0.0  0.0 182864  2404 ?        S    01:57   0:00  \_ /usr/sbin/CROND -n
root       8147  0.0  0.0  20164   968 ?        Ss   01:57   0:00      \_ jailshell (saboakin) [8158] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin   8158  0.0  0.0      0     0 ?        D    01:57   0:00          \_ [jailshell]
root        558  0.0  0.0  25908   176 ?        Ss   Nov17   0:00 /usr/sbin/atd -f
nscd        572  0.0  0.0 1199308 1776 ?        Ssl  Nov17   0:21 /usr/sbin/nscd
root        578  0.0  0.0 114704   108 ttyS0    Ss+  Nov17   0:00 /bin/bash
root        579  0.0  0.0 108296   124 tty1     Ss+  Nov17   0:00 /sbin/agetty --noclear tty1 linux
mailnull    628  0.0  0.1  89112  3508 ?        Ss   Nov17   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser   1060  0.0  0.0 112268    72 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1061  0.0  0.0 153404   372 ?        Ss   Nov17   0:00 pure-ftpd (SERVER)
root       8063  0.0  0.0 153408   512 ?        S    01:56   0:00  \_ pure-ftpd (IDLE)
root       8064  0.0  0.0 153408   140 ?        S    01:56   0:00      \_ pure-ftpd (PRIV)
systuser   1062  0.0  0.0  11796    44 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser   1063  0.0  0.5 114016 13164 ?        Ssl  Nov17   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+   1067  0.0  0.0 342400   116 ?        Ssl  Nov17   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1068  0.1  0.3 1276356 8572 ?        Ssl  Nov17   0:26 /usr/bin/cspdaemon
telegraf   1069  0.0  1.6 5654304 39052 ?       SLsl Nov17   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1071  0.0  0.0 572372  1048 ?        Ssl  Nov17   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1072  0.0  0.0  51508   572 ?        Ss   Nov17   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1213  0.0  0.0  46984  2420 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1214  0.0  0.1  47936  2940 ?        S    Nov17   0:00  \_ dovecot/imap-login
dovecot    1215  0.0  0.0  10320   412 ?        S    Nov17   0:00  \_ dovecot/anvil
root       1216  0.0  0.0  10452   644 ?        S    Nov17   0:00  \_ dovecot/log
dovenull   1217  0.0  0.0  47056  2408 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1218  0.0  0.1  47752  3044 ?        S    Nov17   0:00  \_ dovecot/imap-login
root       1226  0.0  0.0  24528  2232 ?        S    Nov17   0:00  \_ dovecot/config
dovecot    1227  0.0  0.0  13568   460 ?        S    Nov17   0:00  \_ dovecot/stats
dovecot    1297  0.0  0.0  41188  1576 ?        S    Nov17   0:00  \_ dovecot/auth
root       7929  0.0  0.1  41052  2728 ?        S    01:56   0:00  \_ dovecot/auth -w
root       1076  0.0  0.2 1277056 5956 ?        Ssl  Nov17   0:23 /usr/bin/checkstatus
systuser   1085  0.0  0.0  12756    48 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       1086  0.0  0.0 111304   476 ?        Ss   Nov17   0:02 /usr/sbin/sshd -D
root       7910  0.0  0.1 111304  4268 ?        Ss   01:56   0:00  \_ sshd: [accepted]
sshd       7911  0.0  0.1 115644  2628 ?        S    01:56   0:00      \_ sshd: [net]
systuser   1087  0.0  0.0 111864    76 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1088  0.0  0.0 445028  1392 ?        Ss   Nov17   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+   8061  0.0  0.0 445028   320 ?        S    01:56   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root       1091  0.0  0.0 389508   572 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named      1098  0.0  1.7 1054792 42664 ?       Ssl  Nov17   0:14 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1109  0.0  0.0 388892   684 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1113  0.0  0.2 281936  7220 ?        Ssl  Nov17   0:06 /usr/sbin/rsyslogd -n
root       1117  0.0  2.8 1763304 70156 ?       Ssl  Nov17   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1123  0.0  0.0 439788  1008 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1131  0.0  0.0 400740  2008 ?        Ss   Nov17   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    8026  0.0  0.1 400460  4472 ?        S    01:56   0:00  \_ php-fpm: pool nigeriadecide_org
root       1134  0.0  0.2 261284  6964 ?        Ss   Nov17   0:02 cpsrvd (SSL) - waiting for connections                   
root       8080  0.0  0.0      0     0 ?        Z    01:56   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+   1139  0.0  0.1  10608  3756 ?        Ss   Nov17   0:20 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1149  0.0  0.0 396248   460 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
salutem    8068  3.6  0.7 407240 18076 ?        S    01:56   0:00  \_ php-fpm: pool salutem_com_ng
systuser   1292  0.0  0.1 157704  2944 ?        S    Nov17   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1300  0.0  1.3 412396 31932 ?        Ss   Nov17   0:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1301  0.0  0.5 387556 13048 ?        Ss   Nov17   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1308  0.0  0.1 248116  4768 ?        Ss   Nov17   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7506  0.0  3.9 264832 96348 ?        S    Nov17   0:03  \_ spamd child
root       7507  0.0  0.1 248116  3476 ?        S    Nov17   0:00  \_ spamd child
root       1409  0.0  0.4 210184 10424 ?        Ss   Nov17   0:03 tailwatchd
root       1412  0.0  0.7 262224 19216 ?        Ss   Nov17   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1413  0.0  0.1 167452  4276 ?        Ss   Nov17   0:00 dnsadmin - dormant mode
root       1836  0.0  0.0 299272   788 ?        Ss   Nov17   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1853  0.0  0.0 130416  1432 ?        SN   Nov17   0:00 cpanellogd - sleeping for logs
mysql      1881  1.3 10.7 1458600 260920 ?      Sl   Nov17   5:58 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2063  0.0  0.3 266984  7764 ?        Ss   Nov17   0:03 /usr/sbin/httpd -k start
root       2067  0.0  0.0  12828   388 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2068  0.0  0.0  12732   352 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2069  0.0  0.0  12852   404 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2075  0.0  0.0  53252   176 ?        S    Nov17   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    99286  0.1  0.8 277876 20336 ?        S    01:40   0:01  \_ /usr/sbin/httpd -k start
nobody     1830  0.1  0.8 277616 20020 ?        S    01:45   0:00  \_ /usr/sbin/httpd -k start
nobody     1831  0.1  0.8 277680 20284 ?        S    01:45   0:00  \_ /usr/sbin/httpd -k start
nobody     2379  0.1  0.8 277744 19932 ?        S    01:46   0:00  \_ /usr/sbin/httpd -k start
nobody     2990  0.1  0.8 277860 20308 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody     4646  0.0  0.8 277744 19380 ?        S    01:49   0:00  \_ /usr/sbin/httpd -k start
nobody     5114  0.0  0.8 277876 19380 ?        S    01:50   0:00  \_ /usr/sbin/httpd -k start
nobody     5154  0.1  0.7 277876 19160 ?        S    01:50   0:00  \_ /usr/sbin/httpd -k start
nobody     5878  0.0  0.7 277508 19140 ?        S    01:51   0:00  \_ /usr/sbin/httpd -k start
nobody     5998  0.1  0.8 277776 19404 ?        S    01:52   0:00  \_ /usr/sbin/httpd -k start
cloudsms   8168  0.0  0.4 296416 11576 ?        R    01:57   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     6339  0.1  0.7 277744 18968 ?        S    01:53   0:00  \_ /usr/sbin/httpd -k start
nobody     7832  0.1  0.7 277744 18008 ?        S    01:56   0:00  \_ /usr/sbin/httpd -k start
nobody     7884  0.1  0.7 277884 18532 ?        S    01:56   0:00  \_ /usr/sbin/httpd -k start
nobody     7890  0.1  0.7 277744 17964 ?        S    01:56   0:00  \_ /usr/sbin/httpd -k start
nobody     7891  0.1  0.7 277744 18404 ?        S    01:56   0:00  \_ /usr/sbin/httpd -k start
nobody     7958  0.0  0.7 277720 17976 ?        S    01:56   0:00  \_ /usr/sbin/httpd -k start
nobody     7973  0.0  0.7 277520 18184 ?        S    01:56   0:00  \_ /usr/sbin/httpd -k start
oysipao+  13053  0.0  0.0   3148   416 ?        Ss   Nov17   0:00 [kworker]
oysipao+  13057  0.0  0.0   3152   492 ?        S    Nov17   0:00  \_ [kworker]
root      14140  0.1  1.1 181752 28696 ?        Ss   00:00   0:07 lfd - sleeping
## mysql stats
Uptime: 25735  Threads: 4  Questions: 2253050  Slow queries: 0  Opens: 8055  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.548
*************************** 1. row ***************************
     Id: 34152
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending to client
   Info: SELECT * FROM `14` WHERE `phone`='2348104658931' LIMIT 1
*************************** 2. row ***************************
     Id: 34153
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 34157
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 34159
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.35 TIME_WAIT
      1 114.119.137.160 TIME_WAIT
      1 148.113.128.88 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 23.239.187.240 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 54.39.210.96 TIME_WAIT
      1 75.102.28.68 TIME_WAIT
      1 84.37.104.133 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 18-Nov-2025 01:57:01 WAT
   Restart Time: Monday, 17-Nov-2025 18:48:12 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 hours 8 minutes 49 seconds
   Server load: 0.04 0.14 0.28
   Total accesses: 131446 - Total Traffic: 3.2 GB - Total Duration: 67251994
   CPU Usage: u4.82 s5.27 cu1705.4 cs1342.47 - 11.9% CPU load
   5.11 requests/sec - 128.7 kB/second - 25.2 kB/request - 511.632 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

_KKKK_K__WRW_KK_.K..............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn Child  Slot      Client     Protocol             VHost                                         Request
   0-0  99286 0/215/5906 _ 5.12 1     1   3372805 0.0  6.16  138.86 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80        GET / HTTP/1.1
   1-0  5114  1/77/6062  K 1.53 0     271 2973481 34.1 1.55  140.75 192.178.4.96   http/1.1 team.cloudware.ng:443         GET /sets/111808128715 HTTP/1.1
   2-0  5878  1/52/5772  K 0.90 0     260 2861888 33.8 1.03  136.45 192.178.4.99   http/1.1 team.cloudware.ng:443         GET /ctg/search/similarImageSearchResultView/?ctgItemCd=89864 H
   3-0  7832  1/7/5346   K 0.18 2     298 2783314 36.3 0.22  128.84 192.178.4.101  http/1.1 team.cloudware.ng:443         GET /?l=1383446477 HTTP/1.1
   4-0  6339  2/50/5910  K 1.12 3     23  2850530 6.5  1.16  137.88 66.249.70.7    http/1.1 test.cloudware.ng:443         GET /1430471723?goodscode=1428597686 HTTP/1.1
   5-0  7884  0/7/5727   _ 0.10 1     1   2825542 0.0  0.12  140.70 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80        GET / HTTP/1.1
   6-0  1830  1/141/5651 K 3.20 2     290 2847695 35.6 3.18  140.06 192.178.4.102  http/1.1 team.cloudware.ng:443         GET /?l=482079794 HTTP/1.1
   7-0  1831  0/144/5262 _ 3.15 1     264 2563470 0.0  6.93  136.36 192.178.4.105  http/1.1 team.cloudware.ng:443         GET /?l=242757017 HTTP/1.1
   8-0  7890  0/8/4986   _ 0.21 1     267 2416767 0.0  0.25  118.07 192.178.4.97   http/1.1 team.cloudware.ng:443         GET /ctg/search/similarImageSearchResultView/?ctgItemCd=294705
   9-0  7891  0/6/5075   W 0.11 0     0   2507181 0.0  0.15  122.50 ::1            http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   10-0 4646  0/70/5007  R 1.53 55    24  2478988 0.0  1.48  123.50 27.125.243.211 http/1.1
   11-0 5998  0/66/5342  W 1.43 0     0   2559355 0.0  1.24  145.08 92.205.19.191  http/1.1 developers.cloudsms.com.ng:80 GET /api.php?userid=10312800&password=lovely1&type=5&destinatio
   12-0 7958  0/3/4511   _ 0.02 1     268 2398211 0.0  0.07  110.89 192.178.4.100  http/1.1 team.cloudware.ng:443         GET /?l=4170506228 HTTP/1.1
   13-0 2990  1/128/4618 K 2.98 2     367 2205059 12.9 2.83  112.35 74.7.227.191   http/1.1 salutem.com.ng:443            GET / HTTP/1.1
   14-0 5154  1/79/4621  K 1.82 0     273 2381709 34.2 2.24  111.25 192.178.4.99   http/1.1 team.cloudware.ng:443         GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2485845
   15-0 7973  0/3/4661   _ 0.03 0     0   2344236 0.0  0.06  112.39 ::1            http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   16-0 -     0/0/4322   . 0.00 369   0   2925234 0.0  0.00  117.14 ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   17-0 2379  2/136/4372 K 3.25 2     252 2114153 64.6 3.23  112.67 192.178.4.102  http/1.1 team.cloudware.ng:443         GET /h_469 HTTP/1.1
   18-0 -     0/0/3615   . 0.00 620   0   1825227 0.0  0.00  81.09  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   19-0 -     0/0/3408   . 0.00 470   0   1651505 0.0  0.00  82.26  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   20-0 -     0/0/3774   . 0.00 522   4   1862443 0.0  0.00  92.64  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   21-0 -     0/0/2588   . 0.00 585   0   1324681 0.0  0.00  62.29  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   22-0 -     0/0/2505   . 0.00 681   0   1204535 0.0  0.00  57.74  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   23-0 -     0/0/2562   . 0.00 983   0   1230190 0.0  0.00  56.60  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   24-0 -     0/0/2612   . 0.00 542   0   1424846 0.0  0.00  82.46  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   25-0 -     0/0/1656   . 0.00 830   0   923260  0.0  0.00  40.56  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   26-0 -     0/0/1443   . 0.00 964   0   817373  0.0  0.00  35.63  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   27-0 -     0/0/1630   . 0.00 1220  0   914233  0.0  0.00  38.46  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   28-0 -     0/0/1498   . 0.00 1007  0   804177  0.0  0.00  33.37  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   29-0 -     0/0/1363   . 0.00 1150  0   755502  0.0  0.00  32.93  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   30-0 -     0/0/1127   . 0.00 1061  0   637386  0.0  0.00  28.97  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   31-0 -     0/0/1235   . 0.00 1252  0   555507  0.0  0.00  33.04  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   32-0 -     0/0/684    . 0.00 1251  0   379153  0.0  0.00  18.95  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   33-0 -     0/0/1043   . 0.00 1221  0   641336  0.0  0.00  29.10  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   34-0 -     0/0/570    . 0.00 1945  0   301126  0.0  0.00  14.19  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   35-0 -     0/0/485    . 0.00 1865  0   269474  0.0  0.00  13.08  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   36-0 -     0/0/536    . 0.00 1938  0   285304  0.0  0.00  14.21  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   37-0 -     0/0/571    . 0.00 1951  0   312680  0.0  0.00  17.39  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   38-0 -     0/0/393    . 0.00 1880  0   210032  0.0  0.00  11.22  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   39-0 -     0/0/117    . 0.00 1947  0   55834   0.0  0.00  2.88   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   40-0 -     0/0/553    . 0.00 1664  0   304216  0.0  0.00  12.50  ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   41-0 -     0/0/92     . 0.00 1924  0   46762   0.0  0.00  2.01   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   42-0 -     0/0/133    . 0.00 1930  0   70946   0.0  0.00  3.30   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   43-0 -     0/0/261    . 0.00 1926  0   98531   0.0  0.00  3.86   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   44-0 -     0/0/204    . 0.00 1927  0   109910  0.0  0.00  5.24   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   45-0 -     0/0/101    . 0.00 1879  4   55382   0.0  0.00  2.76   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   46-0 -     0/0/288    . 0.00 1791  0   150853  0.0  0.00  6.96   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   47-0 -     0/0/68     . 0.00 1955  0   35210   0.0  0.00  1.49   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   48-0 -     0/0/295    . 0.00 1732  0   141556  0.0  0.00  6.89   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   49-0 -     0/0/30     . 0.00 1921  0   16178   0.0  0.00  0.58   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   50-0 -     0/0/59     . 0.00 1929  0   37294   0.0  0.00  1.37   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   51-0 -     0/0/78     . 0.00 1933  0   38474   0.0  0.00  1.77   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   52-0 -     0/0/36     . 0.00 1949  0   12911   0.0  0.00  0.88   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   53-0 -     0/0/79     . 0.00 1798  0   38738   0.0  0.00  2.05   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   54-0 -     0/0/175    . 0.00 1789  0   92053   0.0  0.00  5.08   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   55-0 -     0/0/74     . 0.00 1957  0   40667   0.0  0.00  2.04   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   56-0 -     0/0/119    . 0.00 1428  0   56499   0.0  0.00  3.12   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   57-0 -     0/0/10     . 0.00 1956  0   3025    0.0  0.00  0.14   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   58-0 -     0/0/11     . 0.00 1954  0   599     0.0  0.00  0.87   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   59-0 -     0/0/5      . 0.00 1958  0   13      0.0  0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   60-0 -     0/0/179    . 0.00 1564  0   93245   0.0  0.00  4.78   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   61-0 -     0/0/11     . 0.00 1922  0   5546    0.0  0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   62-0 -     0/0/19     . 0.00 11953 0   7935    0.0  0.00  0.50   ::1            http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 711
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...62)
   index usage: 12%, cache usage: 16%
   total entries stored since starting: 94530
   total entries replaced since starting: 0
   total entries expired since starting: 93792
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 9 hit, 223 miss
   total removes since starting: 27 hit, 13 miss
Youez - 2016 - github.com/yon3zu
LinuXploit