403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.00.30.txt
 ## swap threshold exceeded
## server overview
2025-11-17.00.30 load[0] mem[68/48] mysql[6/8] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1552         161          53         650         598
Swap:          1999        1076         923
 00:30:01 up  1:11,  0 users,  load average: 0.06, 0.18, 0.31
## system overview
top - 00:30:01 up  1:11,  0 users,  load average: 0.06, 0.18, 0.31
Tasks: 206 total,   4 running, 201 sleeping,   0 stopped,   1 zombie
%Cpu(s): 62.5 us, 31.2 sy,  0.0 ni,  3.1 id,  3.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   151640 free,  1591384 used,   677276 buff/cache
KiB Swap:  2047996 total,   946172 free,  1101824 used.   607376 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1460796 247580   5352 S 113.3 10.2   0:50.67 /usr/sbin+
 67508 nigeria   20   0  404052  16140  10384 R  20.0  0.7   0:00.05 /opt/cpan+
 67497 root      20   0  188860  12948   5544 R  13.3  0.5   0:00.04 /usr/loca+
    14 root      20   0       0      0      0 S   6.7  0.0   0:00.85 [ksoftirq+
     1 root      20   0   44400   3508   1644 S   0.0  0.1   0:06.57 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.29 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.25 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:04.69 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.24 [migratio+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:08.06 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:00.87 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:00.66 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:00.25 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39500   8120   7824 S   0.0  0.3   0:02.82 /usr/lib/+
   376 root      20   0   45376    584    436 S   0.0  0.0   0:00.33 /usr/lib/+
   381 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kworker/+
   407 root      16  -4   55532    592    464 S   0.0  0.0   0:00.45 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    316    272 S   0.0  0.0   0:00.00 /usr/sbin+
   475 polkitd   20   0  612240   1168    752 S   0.0  0.0   0:00.62 /usr/lib/+
   476 root      20   0   24716   1312    940 S   0.0  0.1   0:01.03 /usr/lib/+
   483 root      20   0   21540    536    424 S   0.0  0.0   0:00.09 /usr/sbin+
   484 rpc       20   0   69256    192     84 S   0.0  0.0   0:00.01 /sbin/rpc+
   485 root      20   0   52852    408    344 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1432    768 S   0.0  0.1   0:02.27 /usr/bin/+
   494 root      20   0  195208    116    116 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  861368   1492    880 S   0.0  0.1   0:04.27 /usr/sbin+
   515 root      20   0    4388    112    108 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   5868   1156 S   0.0  0.2   0:00.13 queueproc+
   545 root      20   0  124480    584    452 S   0.0  0.0   0:00.13 /usr/sbin+
   546 root      20   0   24208     60     60 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704    212    212 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296    212    208 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   4116   1100 S   0.0  0.2   0:00.09 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:02.13 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    584    484 S   0.0  0.0   0:00.66 /usr/sbin+
   912 systuser  20   0  113016     80      0 S   0.0  0.0   0:00.00 /usr/loca+
   917 root      20   0  224592   7344   6644 S   0.0  0.3   0:01.35 /usr/sbin+
   918 named     20   0  924724  29024   2168 S   0.0  1.2   0:02.67 /usr/sbin+
   919 root      20   0 1763124 532436   1296 S   0.0 22.0   0:14.01 /usr/loca+
   924 systuser  20   0   10388     52      0 S   0.0  0.0   0:00.00 /usr/loca+
   925 root      20   0   51508    668    508 S   0.0  0.0   0:00.07 /usr/sbin+
   926 root      20   0  572372   1180    600 S   0.0  0.0   0:00.45 /usr/bin/+
   928 root      20   0  445028   3388   3280 S   0.0  0.1   0:00.13 sw-engine+
   937 root      20   0  439788  11376  11168 S   0.0  0.5   0:00.24 php-fpm: +
   938 systuser  20   0  114016  13760   2540 S   0.0  0.6   0:01.14 /usr/loca+
   939 root      20   0  261164  24696   2204 S   0.0  1.0   0:00.90 cpsrvd (S+
   943 root      20   0 1277312  10604    228 S   0.0  0.4   0:20.23 /usr/bin/+
   944 root      20   0 1276356   7884    228 S   0.0  0.3   0:24.74 /usr/bin/+
   947 cpanelc+  20   0   10080   2968   2404 R   0.0  0.1   0:03.66 /usr/loca+
   952 root      20   0  396248    696    512 S   0.0  0.0   0:00.22 php-fpm: +
   957 root      20   0  388892    696    596 S   0.0  0.0   0:00.20 php-fpm: +
   962 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   963 telegraf  20   0 5654048  36424   6004 S   0.0  1.5   0:02.64 /usr/loca+
   964 root      20   0  153404    468    384 S   0.0  0.0   0:00.08 pure-ftpd+
   967 root      20   0  400740   1048    836 S   0.0  0.0   0:00.75 php-fpm: +
   968 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   969 memcach+  20   0  342400    192    192 S   0.0  0.0   0:00.10 /usr/bin/+
   974 root      20   0  389508    720    516 S   0.0  0.0   0:00.18 php-fpm: +
  1080 dovenull  20   0   46912   1624    996 S   0.0  0.1   0:00.06 dovecot/p+
  1081 dovenull  20   0   47196   2904   1976 S   0.0  0.1   0:00.04 dovecot/i+
  1082 dovecot   20   0   10320    372    260 S   0.0  0.0   0:00.00 dovecot/a+
  1083 root      20   0   10452    748    568 S   0.0  0.0   0:00.04 dovecot/l+
  1084 dovenull  20   0   46984   2356   1688 S   0.0  0.1   0:00.09 dovecot/p+
  1085 dovenull  20   0   47172   2724   1940 S   0.0  0.1   0:00.01 dovecot/i+
  1091 root      20   0   24396   2164    624 S   0.0  0.1   0:00.04 dovecot/c+
  1095 dovecot   20   0   13568    740    524 S   0.0  0.0   0:00.00 dovecot/s+
  1123 root      20   0  248032 119200   2572 S   0.0  4.9   0:03.34 /usr/loca+
  1160 dovecot   20   0   41056   1520   1088 S   0.0  0.1   0:00.09 dovecot/a+
  1168 systuser  20   0  157704   3016   1036 S   0.0  0.1   0:00.04 SonarPush+
  1176 wp-tool+  20   0  387556   5020   1636 S   0.0  0.2   0:00.12 /usr/bin/+
  1177 wp-tool+  20   0  412368  32416   1624 S   0.0  1.3   0:01.56 /usr/bin/+
  1211 root      20   0  209168  11772   2288 S   0.0  0.5   0:00.67 tailwatchd
  1213 root      20   0  183900   6696   3460 S   0.0  0.3   0:00.38 cpdavd - +
  1216 root      20   0  167452   1492    892 S   0.0  0.1   0:00.11 dnsadmin +
  1627 root      20   0  299272    868    488 S   0.0  0.0   0:00.11 php-fpm: +
  1673 root      38  18  130416   1584    820 S   0.0  0.1   0:00.00 cpanellog+
  1928 root      20   0  266984   8180    860 S   0.0  0.3   0:00.68 /usr/sbin+
  1932 root      20   0   12784    516    376 S   0.0  0.0   0:00.57 /usr/loca+
  1933 root      20   0   12732    480    368 S   0.0  0.0   0:00.50 /usr/loca+
  1934 root      20   0   12800    492    348 S   0.0  0.0   0:00.53 /usr/loca+
  1939 root      20   0   53256    256    256 S   0.0  0.0   0:00.04 /usr/loca+
  8393 root      20   0  260292 125200   3624 S   0.0  5.2   0:00.49 spamd chi+
  8394 root      20   0  248032 117180    592 S   0.0  4.8   0:00.00 spamd chi+
 29807 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 33454 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 40045 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.02 [kworker]
 40218 root      20   0  181168  28728   1768 S   0.0  1.2   0:01.93 lfd - sle+
 47691 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 49449 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 50675 nobody    20   0  277868  20160   4804 S   0.0  0.8   0:01.62 /usr/sbin+
 51858 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 54816 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 55587 nobody    20   0  277556  19872   4700 S   0.0  0.8   0:01.44 /usr/sbin+
 59515 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 60546 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 61104 nobody    20   0  277852  19736   4516 S   0.0  0.8   0:00.61 /usr/sbin+
 61775 nobody    20   0  277760  19620   4364 S   0.0  0.8   0:00.63 /usr/sbin+
 61776 nobody    20   0  277884  19524   4380 S   0.0  0.8   0:00.64 /usr/sbin+
 61795 nobody    20   0  277528  19604   4560 S   0.0  0.8   0:00.64 /usr/sbin+
 61800 nobody    20   0  277892  19528   4328 S   0.0  0.8   0:00.74 /usr/sbin+
 62065 nobody    20   0  277752  19604   4468 S   0.0  0.8   0:00.51 /usr/sbin+
 62652 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 63973 nobody    20   0  277680  19248   4216 S   0.0  0.8   0:00.43 /usr/sbin+
 64008 nobody    20   0  277744  19336   4216 S   0.0  0.8   0:00.32 /usr/sbin+
 64041 nobody    20   0  277748  18912   3832 S   0.0  0.8   0:00.47 /usr/sbin+
 64813 nobody    20   0  277884  19180   4072 S   0.0  0.8   0:00.23 /usr/sbin+
 65201 nobody    20   0  277744  19244   4128 S   0.0  0.8   0:00.32 /usr/sbin+
 65326 nobody    20   0  277488  18928   4092 S   0.0  0.8   0:00.26 /usr/sbin+
 65640 nobody    20   0  277876  19044   3984 S   0.0  0.8   0:00.17 /usr/sbin+
 65659 nobody    20   0  277552  18888   3968 S   0.0  0.8   0:00.19 /usr/sbin+
 65660 nobody    20   0  277680  19124   4060 S   0.0  0.8   0:00.18 /usr/sbin+
 65779 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65783 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65881 nobody    20   0  277744  19040   3976 S   0.0  0.8   0:00.20 /usr/sbin+
 66417 nobody    20   0  277744  18872   3808 S   0.0  0.8   0:00.14 /usr/sbin+
 66774 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 66951 nobody    20   0  277400  18672   3680 S   0.0  0.8   0:00.04 /usr/sbin+
 67113 wp-tool+  20   0  445028    316    192 S   0.0  0.0   0:00.00 sw-engine+
 67376 mailnull  20   0   89500   5424   2224 S   0.0  0.2   0:00.00 /usr/sbin+
 67377 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 67386 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 67410 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 67411 nigeria   20   0  400460   4460   2328 S   0.0  0.2   0:00.00 php-fpm: +
 67425 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67426 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67427 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67428 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67429 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67431 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67432 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67433 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67434 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67435 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67437 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67438 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67439 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67440 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67441 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67443 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67454 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67455 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67456 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67457 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 67458 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67459 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67462 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67463 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67465 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67468 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67469 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67471 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67472 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 67473 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 67474 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 67475 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 67477 root      20   0  188200  11080   5148 S   0.0  0.5   0:00.02 /usr/loca+
 67479 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 67488 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 67495 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 67502 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 67505 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 67534 cloudw    20   0  353712  15980  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 67561 root      20   0  160220   2068   1584 R   0.0  0.1   0:00.00 top -bcn1
 67564 root      20   0  160220   2064   1584 S   0.0  0.1   0:00.00 top -n 2 +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov16   0:04  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov16   0:08  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        381  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kworker/1:2]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:02  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root      29807  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kworker/0:2]
root      33454  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kworker/1:4]
root      47691  0.0  0.0      0     0 ?        S    00:08   0:00  \_ [kworker/1:1]
root      49449  0.0  0.0      0     0 ?        S    00:10   0:00  \_ [kworker/0:4]
root      51858  0.0  0.0      0     0 ?        S    00:12   0:00  \_ [kworker/u200:2]
root      54816  0.0  0.0      0     0 ?        S    00:16   0:00  \_ [kworker/0:0]
root      59515  0.0  0.0      0     0 ?        S    00:21   0:00  \_ [kworker/1:3]
root      60546  0.0  0.0      0     0 ?        S    00:22   0:00  \_ [kworker/0:3]
root      62652  0.0  0.0      0     0 ?        S    00:24   0:00  \_ [kworker/u200:1]
root      65779  0.0  0.0      0     0 ?        S    00:28   0:00  \_ [kworker/0:1]
root      65783  0.0  0.0      0     0 ?        S    00:28   0:00  \_ [kworker/0:5]
root          1  0.1  0.1  44400  3508 ?        Ss   Nov16   0:06 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.3  39500  8120 ?        Ss   Nov16   0:02 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376   584 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   592 ?        S<sl Nov16   0:00 /sbin/auditd
root        470  0.0  0.0 152780   316 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240  1168 ?        Ssl  Nov16   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1312 ?        Ss   Nov16   0:01 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   536 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256   192 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   408 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1432 ?        Ss   Nov16   0:02 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208   116 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 861368  1492 ?        Ssl  Nov16   0:04 /usr/sbin/nscd
root        515  0.0  0.0   4388   112 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224148  5868 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   584 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      67425  0.0  0.0 183048  2152 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      67474  0.0  0.0 113284  1212 ?        Ss   00:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      67479  0.0  0.0 108052   356 ?        S    00:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      67488  0.0  0.0 113288  1520 ?        S    00:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      67583  0.0  0.0 153840  2092 ?        R    00:30   0:00  |               \_ ps auxf
root      67426  0.0  0.0 183048  2156 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      67469  0.0  0.0  20164   804 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      67427  0.0  0.0 183048  2156 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      67468  0.0  0.0  20164   804 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      67428  0.0  0.0 183048  2156 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      67458  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      67429  0.0  0.0 183048  2156 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      67456  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      67431  0.0  0.0 183048  2156 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      67455  0.0  0.0  20164   804 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      67432  0.0  0.0 183048  2156 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      67462  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      67433  0.0  0.0 183048  2152 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      67454  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      67434  0.0  0.0 183048  2152 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      67471  0.0  0.0  20164   804 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      67435  0.0  0.0 183048  2152 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      67463  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      67437  0.0  0.0 183048  2148 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      67465  0.0  0.0  20164   804 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      67438  0.0  0.0 183048  2148 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      67459  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      67439  0.0  0.0 183048  2144 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      67473  0.0  0.0 113284  1212 ?        Ss   00:30   0:00  |   \_ /bin/sh -c /usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache
root      67497  0.0  0.5 188860 12948 ?        D    00:30   0:00  |       \_ /usr/local/cpanel/bin/update_db_cache
root      67440  0.0  0.0 183048  2144 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      67472  0.0  0.0 113284  1212 ?        Ss   00:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      67477  0.0  0.4 188200 11080 ?        S    00:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      67564  0.0  0.0 160224  2340 ?        S    00:30   0:00  |           \_ top -n 2 -b -c
root      67441  0.0  0.0 183048  2148 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      67475  0.0  0.0  20164   968 ?        Ss   00:30   0:00  |   \_ jailshell (pactpay) [67495] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   67495  0.0  0.0      0     0 ?        D    00:30   0:00  |       \_ [jailshell]
root      67443  0.0  0.0 183048  2148 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      67457  0.0  0.0  20164   964 ?        Ss   00:30   0:00      \_ jailshell (nigeria) [67505] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   67505  0.0  0.0  20164   260 ?        S    00:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   67508  0.0  0.6 404052 16140 ?        S    00:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208    60 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704   212 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296   212 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  4116 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  67376  0.0  0.2  89500  5424 ?        S    00:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   584 ?        Ss   Nov16   0:00 /usr/sbin/sshd -D
root      66774  0.0  0.1 111304  4260 ?        Ss   00:29   0:00  \_ sshd: [accepted]
root      67377  0.0  0.1 111304  4268 ?        Ss   00:29   0:00  \_ sshd: [accepted]
sshd      67386  0.0  0.1 115644  2628 ?        S    00:29   0:00      \_ sshd: [net]
systuser    912  0.0  0.0 113016    80 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.3 224592  7344 ?        Ssl  Nov16   0:01 /usr/sbin/rsyslogd -n
named       918  0.0  1.1 924724 29024 ?        Ssl  Nov16   0:02 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.3 21.9 1763124 532436 ?      Ssl  Nov16   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    52 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   668 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.0  46912  1624 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  47196  2904 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   372 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   748 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.0  46984  2356 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47172  2724 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24396  2164 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   740 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41056  1520 ?        S    Nov16   0:00  \_ dovecot/auth
root        926  0.0  0.0 572372  1180 ?        Ssl  Nov16   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.1 445028  3388 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  67113  0.0  0.0 445028   316 ?        S    00:29   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.4 439788 11376 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13760 ?        Ssl  Nov16   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  1.0 261164 24696 ?        Ss   Nov16   0:00 cpsrvd (SSL) - waiting for connections                   
root      67410  0.0  0.0      0     0 ?        Z    00:29   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.4  0.4 1277312 10604 ?       Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.5  0.3 1276356 7884 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10080  2968 ?        Rs   Nov16   0:03 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   696 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   696 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    48 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.5 5654048 36424 ?       SLsl Nov16   0:02 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   468 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740  1048 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   67411  0.0  0.1 400460  4460 ?        S    00:29   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    968  0.0  0.0 112524    72 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400   192 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   720 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  4.9 248032 119200 ?       Ss   Nov16   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  5.1 260292 125200 ?       S    Nov16   0:00  \_ spamd child
root       8394  0.0  4.8 248032 117180 ?       S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  3016 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.2 387556  5020 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  1.3 412368 32416 ?        Ss   Nov16   0:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.4 209168 11772 ?        Ss   Nov16   0:00 tailwatchd
root       1213  0.0  0.2 183900  6696 ?        Ss   Nov16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1216  0.0  0.0 167452  1492 ?        Ss   Nov16   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   868 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1584 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.3 266984  8180 ?        Ss   Nov16   0:00 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12784   516 ?        S    Nov16   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   480 ?        S    Nov16   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12800   492 ?        S    Nov16   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256   256 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    50675  0.1  0.8 277868 20160 ?        S    00:11   0:01  \_ /usr/sbin/httpd -k start
nobody    55587  0.1  0.8 277556 19872 ?        S    00:16   0:01  \_ /usr/sbin/httpd -k start
nobody    61104  0.1  0.8 277852 19736 ?        S    00:22   0:00  \_ /usr/sbin/httpd -k start
nobody    61775  0.1  0.8 277760 19620 ?        S    00:23   0:00  \_ /usr/sbin/httpd -k start
nobody    61776  0.1  0.8 277884 19524 ?        S    00:23   0:00  \_ /usr/sbin/httpd -k start
nobody    61795  0.1  0.8 277528 19604 ?        S    00:23   0:00  \_ /usr/sbin/httpd -k start
nobody    61800  0.1  0.8 277892 19528 ?        S    00:23   0:00  \_ /usr/sbin/httpd -k start
nobody    62065  0.1  0.8 277752 19604 ?        S    00:23   0:00  \_ /usr/sbin/httpd -k start
nobody    63973  0.1  0.7 277680 19248 ?        S    00:26   0:00  \_ /usr/sbin/httpd -k start
nobody    64008  0.1  0.7 277744 19336 ?        S    00:26   0:00  \_ /usr/sbin/httpd -k start
nobody    64041  0.1  0.7 277748 18912 ?        S    00:26   0:00  \_ /usr/sbin/httpd -k start
nobody    64813  0.1  0.7 277884 19180 ?        S    00:26   0:00  \_ /usr/sbin/httpd -k start
cloudw    67534  0.0  0.6 353712 15980 ?        S    00:30   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    65201  0.1  0.7 277744 19244 ?        S    00:27   0:00  \_ /usr/sbin/httpd -k start
nobody    65326  0.1  0.7 277488 18928 ?        S    00:27   0:00  \_ /usr/sbin/httpd -k start
nobody    65640  0.1  0.7 277876 19044 ?        S    00:27   0:00  \_ /usr/sbin/httpd -k start
nobody    65659  0.1  0.7 277552 18888 ?        S    00:27   0:00  \_ /usr/sbin/httpd -k start
nobody    65660  0.1  0.7 277680 19124 ?        S    00:27   0:00  \_ /usr/sbin/httpd -k start
nobody    65881  0.1  0.7 277744 19040 ?        S    00:28   0:00  \_ /usr/sbin/httpd -k start
nobody    66417  0.1  0.7 277744 18872 ?        S    00:28   0:00  \_ /usr/sbin/httpd -k start
nobody    66951  0.1  0.7 277400 18672 ?        S    00:29   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.1 10.2 1460796 247580 ?      Sl   Nov16   0:50 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148   416 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152   424 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.1  1.1 181168 28728 ?        Ss   00:00   0:01 lfd - sleeping
## mysql stats
Uptime: 4227  Threads: 2  Questions: 306726  Slow queries: 0  Opens: 2414  Flush tables: 1  Open tables: 1947  Queries per second avg: 72.563
*************************** 1. row ***************************
     Id: 4570
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: init
   Info: SELECT * FROM `21` WHERE `phone`='2348054324826' LIMIT 1
*************************** 2. row ***************************
     Id: 4578
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.48 TIME_WAIT
      1 142.44.225.20 TIME_WAIT
      1 148.113.130.82 TIME_WAIT
      1 15.235.98.97 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 185.11.166.192 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.231.115.89 TIME_WAIT
      1 51.161.65.44 TIME_WAIT
      1 78.157.49.100 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 66.240.236.13 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 00:30:01 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 11 minutes 12 seconds
   Server load: 0.06 0.18 0.31
   Total accesses: 25766 - Total Traffic: 679.7 MB - Total Duration: 13171995
   CPU Usage: u7.05 s3.39 cu346.21 cs283.26 - 15% CPU load
   6.03 requests/sec - 162.9 kB/second - 27.0 kB/request - 511.216 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

KW_K_WKK...___K_KK.._.........KK.......K...._...................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req  Dur   Conn  Child  Slot    Client     Protocol           VHost                                        Request
   0-0  63973 1/85/1146  K 2.11 4    23  598893 5.8   1.91  31.51 66.249.70.7   http/1.1 test.cloudware.ng:443      GET /881617049?goodscode=0880462350 HTTP/1.1
   1-0  64813 11/40/1016 W 0.90 0    0   554056 343.3 0.98  27.66 192.178.4.104 http/1.1 team.cloudware.ng:443      GET /?l=435745734 HTTP/1.1
   2-0  66417 0/24/948   _ 0.64 1    1   476853 0.0   0.88  26.59 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   3-0  61104 5/105/1101 K 2.51 2    399 557949 159.6 2.99  28.49 192.178.4.98  http/1.1 team.cloudware.ng:443      GET /?l=3821266918 HTTP/1.1
   4-0  64008 0/55/1031  _ 1.48 0    0   511569 0.0   1.42  28.92 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   5-0  66951 0/9/1079   W 0.15 0    0   523037 0.0   0.21  28.86 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   6-0  65201 1/57/1088  K 1.48 0    480 524800 220.5 1.85  28.67 192.178.4.98  http/1.1 team.cloudware.ng:443      GET /var/cache/prod/pools/VV6jqwmg-R/J/E/ HTTP/1.1
   7-0  64041 5/72/868   K 2.07 0    363 443880 154.0 2.10  22.19 192.178.4.99  http/1.1 team.cloudware.ng:443      GET /?l=3931787385 HTTP/1.1
   8-0  -     0/0/916    . 0.00 65   0   447105 0.0   0.00  23.49 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-0  -     0/0/960    . 0.00 14   0   501178 0.0   0.00  25.67 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 -     0/0/1003   . 0.00 13   0   521300 0.0   0.00  27.10 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-0 55587 0/250/966  _ 6.90 1    388 507116 0.0   6.24  26.27 66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=2863013590 HTTP/1.1
   12-0 62065 0/89/995   _ 2.21 0    301 548075 0.0   2.37  26.86 192.178.4.103 http/1.1 team.cloudware.ng:443      GET /?l=976943397 HTTP/1.1
   13-0 65640 0/30/1090  _ 0.70 1    1   577072 0.0   0.75  29.34 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   14-0 65326 4/43/881   K 1.03 4    354 474990 126.7 1.19  24.52 192.178.4.100 http/1.1 team.cloudware.ng:443      GET /?l=3717291112 HTTP/1.1
   15-0 65659 0/29/887   _ 0.78 1    9   474400 0.0   0.97  24.60 100.27.153.9  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/blog/assets/js/blo
   16-0 65660 6/31/790   K 0.75 1    418 418896 190.6 1.21  21.95 192.178.4.96  http/1.1 team.cloudware.ng:443      GET /?l=2270315886 HTTP/1.1
   17-0 65881 1/33/782   K 0.87 1    405 386144 34.4  1.05  19.09 192.178.4.96  http/1.1 team.cloudware.ng:443      GET /?l=2899086775 HTTP/1.1
   18-0 -     0/0/738    . 0.00 382  0   373601 0.0   0.00  19.15 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/511    . 0.00 243  0   257890 0.0   0.00  13.88 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 50675 0/312/596  _ 7.73 1    318 270540 0.0   6.81  13.65 192.178.4.97  http/1.1 team.cloudware.ng:443      GET /?l=3495964056 HTTP/1.1
   21-0 -     0/0/765    . 0.00 353  0   428244 0.0   0.00  22.61 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/580    . 0.00 244  0   300655 0.0   0.00  15.16 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/674    . 0.00 374  0   342612 0.0   0.00  17.55 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/648    . 0.00 380  0   348672 0.0   0.00  16.93 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/352    . 0.00 80   0   150265 0.0   0.00  8.81  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/152    . 0.00 372  0   69551  0.0   0.00  3.17  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/418    . 0.00 349  0   202778 0.0   0.00  10.11 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/442    . 0.00 352  0   227041 0.0   0.00  11.06 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/70     . 0.00 366  0   36084  0.0   0.00  1.51  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 61775 1/112/192  K 2.80 2    299 98199  32.1  3.20  5.19  66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3934888163 HTTP/1.1
   31-0 61776 4/113/193  K 2.71 2    271 96264  127.9 2.87  4.31  192.178.4.101 http/1.1 team.cloudware.ng:443      GET /?l=2301938599 HTTP/1.1
   32-0 -     0/0/71     . 0.00 383  0   32316  0.0   0.00  1.29  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/106    . 0.00 378  0   46426  0.0   0.00  3.26  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/292    . 0.00 371  0   156256 0.0   0.00  7.78  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/28     . 0.00 365  0   6362   0.0   0.00  0.28  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/170    . 0.00 311  0   85805  0.0   0.00  4.16  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/11     . 0.00 375  0   7767   0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/144    . 0.00 358  0   77733  0.0   0.00  3.62  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 61795 6/114/178  K 2.98 0    421 92611  190.9 2.72  4.33  192.178.4.102 http/1.1 team.cloudware.ng:443      GET /?l=4188029771 HTTP/1.1
   40-0 -     0/0/88     . 0.00 245  0   19096  0.0   0.00  1.31  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/8      . 0.00 377  0   3054   0.0   0.00  0.05  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/43     . 0.00 233  0   22487  0.0   0.00  0.98  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/114    . 0.00 376  0   52913  0.0   0.00  2.30  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 61800 0/128/155  _ 3.34 0    0   83304  0.0   3.56  3.96  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   45-0 -     0/0/42     . 0.00 381  0   19040  0.0   0.00  0.83  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/11     . 0.00 354  0   5124   0.0   0.00  0.16  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/20     . 0.00 315  0   7973   0.0   0.00  0.58  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/83     . 0.00 66   0   40607  0.0   0.00  1.94  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/37     . 0.00 369  0   18588  0.0   0.00  0.72  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/7      . 0.00 364  0   3381   0.0   0.00  0.08  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/9      . 0.00 338  0   3457   0.0   0.00  0.11  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/2      . 0.00 3073 0   1702   0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/7      . 0.00 3049 0   2649   0.0   0.00  0.07  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00 3072 0   1806   0.0   0.00  0.01  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/27     . 0.00 2994 0   13156  0.0   0.00  0.55  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/189    . 0.00 2239 0   98784  0.0   0.00  5.53  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00 2934 0   19861  0.0   0.00  0.82  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1231
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...20)
   index usage: 21%, cache usage: 29%
   total entries stored since starting: 20083
   total entries replaced since starting: 0
   total entries expired since starting: 18851
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 60 miss
   total removes since starting: 1 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit