403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-24.00.15.txt
 ## swap threshold exceeded
## server overview
2025-11-24.00.15 load[0] mem[55/34] mysql[3/11] httpd[9]
              total        used        free      shared  buff/cache   available
Mem:           2363        1209         102         141        1051         839
Swap:          4047        1492        2555
 00:15:01 up  9:34,  0 users,  load average: 0.29, 0.37, 0.39
## system overview
top - 00:15:01 up  9:34,  0 users,  load average: 0.35, 0.38, 0.39
Tasks: 204 total,   1 running, 202 sleeping,   0 stopped,   1 zombie
%Cpu(s): 60.0 us, 23.3 sy,  0.0 ni, 16.7 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   109780 free,  1233480 used,  1077040 buff/cache
KiB Swap:  4145144 total,  2617080 free,  1528064 used.   864188 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1744 mysql     20   0 1458608 281224   3920 S  66.7 11.6   7:36.06 /usr/sbin+
 62113 nobody    20   0  277592  20212   4436 S  13.3  0.8   0:01.04 /usr/sbin+
 70856 nigeria   20   0  404052  16140  10384 S  13.3  0.7   0:00.07 /opt/cpan+
   503 dbus      20   0   58716   1604    900 S   6.7  0.1   0:18.41 /usr/bin/+
 70956 root      20   0  137992   5360   2656 S   6.7  0.2   0:00.01 /usr/loca+
     1 root      20   0   44400   3648   1764 S   0.0  0.2   0:49.30 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.85 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.18 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:31.33 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.16 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.79 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:21.19 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   0:00.91 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:03.02 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:02.50 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.87 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40240   2616   2304 S   0.0  0.1   0:22.01 /usr/lib/+
   383 root      20   0   45352    556    532 S   0.0  0.0   0:00.44 /usr/lib/+
   412 root      16  -4   55532    644    512 S   0.0  0.0   0:03.57 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    644    532 S   0.0  0.0   0:00.78 /usr/sbin+
   489 root      20   0   24704   1392   1032 S   0.0  0.1   0:08.14 /usr/lib/+
   494 polkitd   20   0  610540   1184    800 S   0.0  0.0   0:04.70 /usr/lib/+
   495 root      20   0  224144   5912   1328 S   0.0  0.2   0:00.40 queueproc+
   496 root      20   0   52852    604    492 S   0.0  0.0   0:00.01 /usr/sbin+
   497 root      20   0  152780    480    436 S   0.0  0.0   0:00.02 /usr/sbin+
   506 nscd      20   0 1336536   2156    960 S   0.0  0.1   0:20.74 /usr/sbin+
   511 rpc       20   0   69256    324    264 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388    288    284 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208    300    300 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208    292    268 S   0.0  0.0   0:00.00 /usr/sbin+
   558 root      20   0  124476    736    608 S   0.0  0.0   0:00.98 /usr/sbin+
   576 root      20   0  108296    416    412 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704    448    448 S   0.0  0.0   0:00.02 /bin/bash
   621 mailnull  20   0   89112   4336   1296 S   0.0  0.2   0:00.66 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:02.50 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   927 root      20   0   51508    892    728 S   0.0  0.0   0:00.49 /usr/sbin+
   928 systuser  20   0   11540     56      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   12756     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   931 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   932 systuser  20   0  111608     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   933 root      20   0  153404    712    628 S   0.0  0.0   0:00.77 pure-ftpd+
   934 root      20   0  445028   1628   1512 S   0.0  0.1   0:01.42 sw-engine+
   935 root      20   0  572372   1320    744 S   0.0  0.1   0:02.93 /usr/bin/+
   936 telegraf  20   0 5654304  42024   5708 S   0.0  1.7   0:18.52 /usr/loca+
   937 root      20   0  111304    824    716 S   0.0  0.0   0:05.71 /usr/sbin+
   939 root      20   0 1350088   9356    384 S   0.0  0.4   0:24.98 /usr/bin/+
   941 root      20   0  400740   3480   1024 S   0.0  0.1   0:04.01 php-fpm: +
   946 root      20   0  396248    924    744 S   0.0  0.0   0:00.89 php-fpm: +
   951 root      20   0  439788   1392   1184 S   0.0  0.1   0:00.94 php-fpm: +
   952 root      20   0  261164   7384   2112 S   0.0  0.3   0:05.13 cpsrvd (S+
   953 root      20   0  331088   4180   2856 S   0.0  0.2   0:10.92 /usr/sbin+
   959 root      20   0  389508   1048    832 S   0.0  0.0   0:00.88 php-fpm: +
   960 root      20   0 1763224 154076    852 S   0.0  6.4   0:13.92 /usr/loca+
   969 cpanelc+  20   0   10516   3688   2436 S   0.0  0.2   0:26.78 /usr/loca+
   970 named     20   0  990264  39944   2420 S   0.0  1.7   0:14.99 /usr/sbin+
   972 memcach+  20   0  342400    392    392 S   0.0  0.0   0:00.75 /usr/bin/+
   974 root      20   0 1277312   9236    384 S   0.0  0.4   0:23.01 /usr/bin/+
   980 systuser  20   0  114016  15224   2488 S   0.0  0.6   0:08.19 /usr/loca+
   995 root      20   0  388892   1020    812 S   0.0  0.0   0:00.82 php-fpm: +
  1053 dovenull  20   0   46984   3384   2496 S   0.0  0.1   0:01.19 dovecot/p+
  1054 dovenull  20   0   47960   3616   2104 S   0.0  0.1   0:00.35 dovecot/i+
  1055 dovecot   20   0   10320    588    468 S   0.0  0.0   0:00.22 dovecot/a+
  1056 root      20   0   10452    648    452 S   0.0  0.0   0:00.59 dovecot/l+
  1057 dovenull  20   0   47052   2956   2172 S   0.0  0.1   0:00.92 dovecot/p+
  1058 dovenull  20   0   47512   3348   2148 S   0.0  0.1   0:00.24 dovecot/i+
  1064 root      20   0   24528   2504    672 S   0.0  0.1   0:00.22 dovecot/c+
  1065 dovecot   20   0   13568    900    656 S   0.0  0.0   0:00.08 dovecot/s+
  1122 dovecot   20   0   41188   1776   1248 S   0.0  0.1   0:01.45 dovecot/a+
  1144 systuser  20   0  157704   3096   1096 S   0.0  0.1   0:00.16 SonarPush+
  1146 wp-tool+  20   0  412396  33340   2496 S   0.0  1.4   0:10.96 /usr/bin/+
  1147 wp-tool+  20   0  387556  13976   2336 S   0.0  0.6   0:00.33 /usr/bin/+
  1174 root      20   0  248224 118964   2420 S   0.0  4.9   0:06.86 /usr/loca+
  1239 root      20   0  167452   1556    984 S   0.0  0.1   0:00.51 dnsadmin +
  1243 root      20   0  209344  12364   2564 S   0.0  0.5   0:03.77 tailwatchd
  1244 root      20   0  183900   6084   2852 S   0.0  0.3   0:02.37 cpdavd - +
  1676 root      38  18  130416   1624    884 S   0.0  0.1   0:00.08 cpanellog+
  2037 root      20   0  267052   8896    928 S   0.0  0.4   0:02.15 /usr/sbin+
  2039 root      20   0   12792    616    504 S   0.0  0.0   0:03.16 /usr/loca+
  2040 root      20   0   12732    572    500 S   0.0  0.0   0:02.69 /usr/loca+
  2041 root      20   0   12808    628    504 S   0.0  0.0   0:02.92 /usr/loca+
  2045 root      20   0   53256    432    432 S   0.0  0.0   0:00.05 /usr/loca+
  2152 root      20   0  299272    892    728 S   0.0  0.0   0:00.96 php-fpm: +
  6714 root      20   0  264456 128408   2636 S   0.0  5.3   0:03.50 spamd chi+
  6715 root      20   0  248224 117008    484 S   0.0  4.8   0:00.02 spamd chi+
 15361 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3152    428      0 S   0.0  0.0   0:00.62 [kworker]
 17881 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 44904 nobody    20   0  277724  21176   5048 S   0.0  0.9   0:02.82 /usr/sbin+
 51811 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 55015 nobody    20   0  277608  20792   4864 S   0.0  0.9   0:01.81 /usr/sbin+
 55033 nobody    20   0  277584  20668   4708 S   0.0  0.9   0:01.87 /usr/sbin+
 56772 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 59728 nobody    20   0  277568  20560   4728 S   0.0  0.8   0:01.31 /usr/sbin+
 60814 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 60917 root      20   0  181200  29424   2392 S   0.0  1.2   0:01.08 lfd - sle+
 62328 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 62419 nobody    20   0  277916  20952   4680 S   0.0  0.9   0:00.98 /usr/sbin+
 64062 nobody    20   0  277784  20544   4488 S   0.0  0.8   0:00.96 /usr/sbin+
 64671 nobody    20   0  277616  20176   4412 S   0.0  0.8   0:00.83 /usr/sbin+
 65217 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65266 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65312 nobody    20   0  277584  20084   4436 S   0.0  0.8   0:00.69 /usr/sbin+
 65881 nobody    20   0  277536  19936   4260 S   0.0  0.8   0:00.61 /usr/sbin+
 66262 nobody    20   0  277584  19768   4100 S   0.0  0.8   0:00.56 /usr/sbin+
 66271 nobody    20   0  277520  19908   4260 S   0.0  0.8   0:00.54 /usr/sbin+
 66426 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66514 nobody    20   0  277520  19720   4156 S   0.0  0.8   0:00.53 /usr/sbin+
 67365 nobody    20   0  277908  19940   4136 S   0.0  0.8   0:00.51 /usr/sbin+
 68364 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 69600 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 69672 nobody    20   0  277520  19404   3852 S   0.0  0.8   0:00.13 /usr/sbin+
 69782 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 70266 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70288 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70496 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 70603 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 70604 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 70641 nigeria   20   0  400460   5388   2184 S   0.0  0.2   0:00.00 php-fpm: +
 70710 wp-tool+  20   0  445028    328    196 S   0.0  0.0   0:00.00 sw-engine+
 70743 root      20   0  111304   4440   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 70744 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 70758 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 70773 root      20   0  111304   4444   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 70774 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 70779 root      20   0  111304   4444   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 70780 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 70785 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70788 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 70790 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 70791 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 70792 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 70797 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70798 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 70801 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 70816 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 70818 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 70823 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 70827 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 70829 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 70831 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 70832 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 70834 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 70837 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 70839 root      20   0  188196  11080   5148 S   0.0  0.5   0:00.01 /usr/loca+
 70842 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 70845 root      20   0  159160  13296   2912 S   0.0  0.5   0:00.06 /usr/loca+
 70849 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 70867 root      20   0  160224   2376   1636 S   0.0  0.1   0:00.01 top -n 2 +
 70942 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 70955 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 70966 root      20   0  137992   3636    956 S   0.0  0.2   0:00.00 /usr/loca+
 70967 root      20   0  137992   3648    968 S   0.0  0.2   0:00.00 /usr/loca+
 70968 root      20   0  137992   3640    960 S   0.0  0.2   0:00.00 /usr/loca+
 70972 root      20   0  137992   3652    964 S   0.0  0.2   0:00.00 /usr/loca+
 70973 root      20   0  137992   3656    968 S   0.0  0.2   0:00.00 /usr/loca+
 70976 root      20   0  137992   3660    972 S   0.0  0.2   0:00.00 /usr/loca+
 70977 root      20   0  137992   3664    976 S   0.0  0.2   0:00.00 /usr/loca+
 70978 root      20   0  137992   3668    976 S   0.0  0.2   0:00.00 /usr/loca+
 70979 root      20   0  137992   3668    976 S   0.0  0.2   0:00.00 /usr/loca+
 70980 root      20   0  137992   3668    976 S   0.0  0.2   0:00.00 /usr/loca+
 70982 root      20   0  137992   3664    972 S   0.0  0.2   0:00.00 /usr/loca+
 70984 root      20   0  137992   3664    968 S   0.0  0.2   0:00.00 /usr/loca+
 73221 worencom  20   0   38720   3044   1880 S   0.0  0.1   0:00.10 dovecot/i+
 85547 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov23   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov23   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov23   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov23   0:31  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov23   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    Nov23   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov23   0:21  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov23   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov23   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   Nov23   0:03  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov23   0:02  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    Nov23   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<   Nov23   0:02  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root      85547  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [kworker/u200:2]
root      17881  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [kworker/u200:0]
root      51811  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [kworker/1:5]
root      56772  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [kworker/0:1]
root      60814  0.0  0.0      0     0 ?        S    00:00   0:00  \_ [kworker/0:3]
root      62328  0.0  0.0      0     0 ?        S    00:02   0:00  \_ [kworker/0:4]
root      65217  0.0  0.0      0     0 ?        S    00:06   0:00  \_ [kworker/1:1]
root      65266  0.0  0.0      0     0 ?        S    00:06   0:00  \_ [kworker/1:3]
root      66426  0.0  0.0      0     0 ?        S    00:08   0:00  \_ [kworker/0:0]
root      69600  0.0  0.0      0     0 ?        S    00:13   0:00  \_ [kworker/1:0]
root      70266  0.0  0.0      0     0 ?        S    00:14   0:00  \_ [kworker/0:2]
root      70288  0.0  0.0      0     0 ?        S    00:14   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44400  3648 ?        Ss   Nov23   0:49 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  40240  2616 ?        Ss   Nov23   0:22 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   556 ?        Ss   Nov23   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   644 ?        S<sl Nov23   0:03 /sbin/auditd
root        487  0.0  0.0  21540   644 ?        Ss   Nov23   0:00 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24704  1392 ?        Ss   Nov23   0:08 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610540  1184 ?        Ssl  Nov23   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        495  0.0  0.2 224144  5912 ?        Ss   Nov23   0:00 queueprocd - waiting up to 60s to process a task
root        496  0.0  0.0  52852   604 ?        Ss   Nov23   0:00 /usr/sbin/smartd -n -q never
root        497  0.0  0.0 152780   480 ?        Ss   Nov23   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        503  0.0  0.0  58716  1604 ?        Ss   Nov23   0:18 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        506  0.0  0.0 1336536 2156 ?        Ssl  Nov23   0:20 /usr/sbin/nscd
rpc         511  0.0  0.0  69256   324 ?        Ss   Nov23   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388   288 ?        Ss   Nov23   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208   300 ?        Ssl  Nov23   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208   292 ?        Ss   Nov23   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124476   736 ?        Ss   Nov23   0:00 /usr/sbin/crond -n
root      70785  0.0  0.0 183044  2144 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      70823  0.0  0.0 113284  1212 ?        Ss   00:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      70837  0.0  0.0 108052   356 ?        S    00:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      70842  0.0  0.0 113288  1516 ?        S    00:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      70987  0.0  0.0 153840  2096 ?        R    00:15   0:00  |               \_ ps auxf
root      70788  0.0  0.0 183044  2148 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      70831  0.0  0.0  20164   804 ?        Ss   00:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      70790  0.0  0.0 183044  2148 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      70834  0.0  0.0  20164   804 ?        Ss   00:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      70791  0.0  0.0 183044  2148 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      70818  0.0  0.0  20164   804 ?        Ss   00:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      70792  0.0  0.0 183044  2148 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      70829  0.0  0.0  20164   808 ?        Ss   00:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      70797  0.0  0.0 183044  2136 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      70827  0.0  0.0 113284  1212 ?        Ss   00:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      70839  0.0  0.4 188196 11080 ?        S    00:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      70867  0.0  0.0 160224  2376 ?        S    00:15   0:00  |           \_ top -n 2 -b -c
root      70798  0.0  0.0 183044  2136 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      70832  0.0  0.0 113284  1212 ?        Ss   00:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1
root      70845  0.0  0.5 159160 13296 ?        S    00:15   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/autorepair recoverymgmt
root      70956  0.0  0.2 137992  5360 ?        R    00:15   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/MirrorSearch_pingtest httpupdate.cpanel.net 0.0833333333333333 4 80
root      70966  0.0  0.1 137992  3636 ?        S    00:15   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/MirrorSearch_pingtest httpupdate.cpanel.net 0.0833333333333333 4 80
root      70967  0.0  0.1 137992  3648 ?        S    00:15   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/MirrorSearch_pingtest httpupdate.cpanel.net 0.0833333333333333 4 80
root      70968  0.0  0.1 137992  3640 ?        S    00:15   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/MirrorSearch_pingtest httpupdate.cpanel.net 0.0833333333333333 4 80
root      70972  0.0  0.1 137992  3652 ?        S    00:15   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/MirrorSearch_pingtest httpupdate.cpanel.net 0.0833333333333333 4 80
root      70973  0.0  0.1 137992  3656 ?        S    00:15   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/MirrorSearch_pingtest httpupdate.cpanel.net 0.0833333333333333 4 80
root      70976  0.0  0.1 137992  3660 ?        S    00:15   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/MirrorSearch_pingtest httpupdate.cpanel.net 0.0833333333333333 4 80
root      70977  0.0  0.1 137992  3664 ?        S    00:15   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/MirrorSearch_pingtest httpupdate.cpanel.net 0.0833333333333333 4 80
root      70978  0.0  0.1 137992  3668 ?        S    00:15   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/MirrorSearch_pingtest httpupdate.cpanel.net 0.0833333333333333 4 80
root      70979  0.0  0.0      0     0 ?        Z    00:15   0:00  |               \_ [MirrorSearch_pi] <defunct>
root      70980  0.0  0.0      0     0 ?        Z    00:15   0:00  |               \_ [MirrorSearch_pi] <defunct>
root      70982  0.0  0.1 137992  3664 ?        S    00:15   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/MirrorSearch_pingtest httpupdate.cpanel.net 0.0833333333333333 4 80
root      70801  0.0  0.0 183044  2140 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      70816  0.0  0.0  20164   972 ?        Ss   00:15   0:00      \_ jailshell (nigeria) [70849] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   70849  0.0  0.0  20164   264 ?        S    00:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   70856  0.0  0.6 404052 16140 ?        R    00:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        576  0.0  0.0 108296   416 tty1     Ss+  Nov23   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704   448 ttyS0    Ss+  Nov23   0:00 /bin/bash
mailnull    621  0.0  0.1  89112  4336 ?        Ss   Nov23   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        927  0.0  0.0  51508   892 ?        Ss   Nov23   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1053  0.0  0.1  46984  3384 ?        S    Nov23   0:01  \_ dovecot/pop3-login
dovenull   1054  0.0  0.1  47960  3616 ?        S    Nov23   0:00  \_ dovecot/imap-login
dovecot    1055  0.0  0.0  10320   588 ?        S    Nov23   0:00  \_ dovecot/anvil
root       1056  0.0  0.0  10452   648 ?        S    Nov23   0:00  \_ dovecot/log
dovenull   1057  0.0  0.1  47052  2956 ?        S    Nov23   0:00  \_ dovecot/pop3-login
dovenull   1058  0.0  0.1  47512  3348 ?        S    Nov23   0:00  \_ dovecot/imap-login
root       1064  0.0  0.1  24528  2504 ?        S    Nov23   0:00  \_ dovecot/config
dovecot    1065  0.0  0.0  13568   900 ?        S    Nov23   0:00  \_ dovecot/stats
dovecot    1122  0.0  0.0  41188  1776 ?        S    Nov23   0:01  \_ dovecot/auth
worencom  73221  0.0  0.1  38720  3044 ?        S    Nov23   0:00  \_ dovecot/imap
root      68364  0.0  0.1  41052  2724 ?        S    00:11   0:00  \_ dovecot/auth -w
root      69782  0.0  0.1  60820  4512 ?        S    00:13   0:00  \_ dovecot/lmtp
systuser    928  0.0  0.0  11540    56 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756    64 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524    72 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608    72 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        933  0.0  0.0 153404   712 ?        Ss   Nov23   0:00 pure-ftpd (SERVER)
root        934  0.0  0.0 445028  1628 ?        Ss   Nov23   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  70710  0.0  0.0 445028   328 ?        S    00:14   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        935  0.0  0.0 572372  1320 ?        Ssl  Nov23   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    936  0.0  1.7 5654304 42024 ?       SLsl Nov23   0:18 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        937  0.0  0.0 111304   824 ?        Ss   Nov23   0:05 /usr/sbin/sshd -D
root      70496  0.0  0.1 111304  4264 ?        Ss   00:14   0:00  \_ sshd: [accepted]
root      70603  0.0  0.1 111304  4268 ?        Ss   00:14   0:00  \_ sshd: [accepted]
sshd      70604  0.0  0.1 115644  2628 ?        S    00:14   0:00  |   \_ sshd: [net]
root      70743  0.0  0.1 111304  4440 ?        Ss   00:14   0:00  \_ sshd: [accepted]
sshd      70744  0.0  0.1 115644  2628 ?        S    00:14   0:00  |   \_ sshd: [net]
root      70773  0.0  0.1 111304  4444 ?        Ss   00:14   0:00  \_ sshd: [accepted]
sshd      70774  0.0  0.1 115644  2632 ?        S    00:14   0:00  |   \_ sshd: [net]
root      70779  0.0  0.1 111304  4444 ?        Ss   00:15   0:00  \_ sshd: [accepted]
sshd      70780  0.0  0.1 115644  2632 ?        S    00:15   0:00  |   \_ sshd: [net]
root      70942  0.0  0.1 111304  4264 ?        Ss   00:15   0:00  \_ sshd: [accepted]
root        939  0.0  0.3 1350088 9356 ?        Ssl  Nov23   0:24 /usr/bin/cspdaemon
root        941  0.0  0.1 400740  3480 ?        Ss   Nov23   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   70641  0.0  0.2 400460  5388 ?        S    00:14   0:00  \_ php-fpm: pool nigeriadecide_org
root        946  0.0  0.0 396248   924 ?        Ss   Nov23   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        951  0.0  0.0 439788  1392 ?        Ss   Nov23   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        952  0.0  0.3 261164  7384 ?        Ss   Nov23   0:05 cpsrvd (SSL) - waiting for connections                   
root      70758  0.0  0.0      0     0 ?        Z    00:14   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.1 331088  4180 ?        Ssl  Nov23   0:10 /usr/sbin/rsyslogd -n
root        959  0.0  0.0 389508  1048 ?        Ss   Nov23   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        960  0.0  6.3 1763224 154076 ?      Ssl  Nov23   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
cpanelc+    969  0.0  0.1  10516  3688 ?        Ss   Nov23   0:26 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
named       970  0.0  1.6 990264 39944 ?        Ssl  Nov23   0:14 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    972  0.0  0.0 342400   392 ?        Ssl  Nov23   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.3 1277312 9236 ?        Ssl  Nov23   0:23 /usr/bin/checkstatus
systuser    980  0.0  0.6 114016 15224 ?        Ssl  Nov23   0:08 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        995  0.0  0.0 388892  1020 ?        Ss   Nov23   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser   1144  0.0  0.1 157704  3096 ?        S    Nov23   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1146  0.0  1.3 412396 33340 ?        Ss   Nov23   0:10 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1147  0.0  0.5 387556 13976 ?        Ss   Nov23   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1174  0.0  4.9 248224 118964 ?       Ss   Nov23   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6714  0.0  5.3 264456 128408 ?       S    Nov23   0:03  \_ spamd child
root       6715  0.0  4.8 248224 117008 ?       S    Nov23   0:00  \_ spamd child
root       1239  0.0  0.0 167452  1556 ?        Ss   Nov23   0:00 dnsadmin - dormant mode
root       1243  0.0  0.5 209344 12364 ?        Ss   Nov23   0:03 tailwatchd
root       1244  0.0  0.2 183900  6084 ?        Ss   Nov23   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1676  0.0  0.0 130416  1624 ?        SN   Nov23   0:00 cpanellogd - sleeping for logs
mysql      1744  1.3 11.6 1458608 281224 ?      Sl   Nov23   7:36 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2037  0.0  0.3 267052  8896 ?        Ss   Nov23   0:02 /usr/sbin/httpd -k start
root       2039  0.0  0.0  12792   616 ?        S    Nov23   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2040  0.0  0.0  12732   572 ?        S    Nov23   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2041  0.0  0.0  12808   628 ?        S    Nov23   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2045  0.0  0.0  53256   432 ?        S    Nov23   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    44904  0.1  0.8 277724 21176 ?        S    Nov23   0:02  \_ /usr/sbin/httpd -k start
nobody    55015  0.1  0.8 277608 20792 ?        S    Nov23   0:01  \_ /usr/sbin/httpd -k start
nobody    55033  0.1  0.8 277584 20668 ?        S    Nov23   0:01  \_ /usr/sbin/httpd -k start
nobody    59728  0.1  0.8 277568 20560 ?        S    Nov23   0:01  \_ /usr/sbin/httpd -k start
nobody    62113  0.1  0.8 277592 20212 ?        S    00:01   0:01  \_ /usr/sbin/httpd -k start
nobody    62419  0.1  0.8 277916 20952 ?        S    00:02   0:00  \_ /usr/sbin/httpd -k start
nobody    64062  0.1  0.8 277784 20544 ?        S    00:04   0:00  \_ /usr/sbin/httpd -k start
nobody    64671  0.1  0.8 277616 20176 ?        S    00:05   0:00  \_ /usr/sbin/httpd -k start
nobody    65312  0.1  0.8 277584 20084 ?        S    00:06   0:00  \_ /usr/sbin/httpd -k start
nobody    65881  0.1  0.8 277536 19936 ?        S    00:07   0:00  \_ /usr/sbin/httpd -k start
nobody    66262  0.1  0.8 277584 19768 ?        S    00:07   0:00  \_ /usr/sbin/httpd -k start
nobody    66271  0.1  0.8 277520 19908 ?        S    00:07   0:00  \_ /usr/sbin/httpd -k start
nobody    66514  0.1  0.8 277520 19720 ?        S    00:08   0:00  \_ /usr/sbin/httpd -k start
nobody    67365  0.1  0.8 277908 19940 ?        S    00:09   0:00  \_ /usr/sbin/httpd -k start
nobody    69672  0.1  0.8 277520 19404 ?        S    00:13   0:00  \_ /usr/sbin/httpd -k start
root       2152  0.0  0.0 299272   892 ?        Ss   Nov23   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
oysipao+  15361  0.0  0.0   3148   416 ?        Ss   Nov23   0:00 [kworker]
oysipao+  15368  0.0  0.0   3152   428 ?        S    Nov23   0:00  \_ [kworker]
root      60917  0.1  1.2 181200 29424 ?        Ss   00:00   0:01 lfd - sleeping
## mysql stats
Uptime: 34441  Threads: 2  Questions: 2900353  Slow queries: 0  Opens: 7073  Flush tables: 1  Open tables: 2000  Queries per second avg: 84.212
*************************** 1. row ***************************
     Id: 49118
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Opening tables
   Info: SELECT * FROM `36` WHERE `phone`='2348100807938' LIMIT 1
*************************** 2. row ***************************
     Id: 49130
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.137.160 TIME_WAIT
      1 ::1 TIME_WAIT
      1 34.147.22.160 TIME_WAIT
      1 54.39.210.113 TIME_WAIT
      1 72.167.46.126 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 182.171.125.53 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 24-Nov-2025 00:15:01 WAT
   Restart Time: Sunday, 23-Nov-2025 14:41:06 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 9 hours 33 minutes 55 seconds
   Server load: 0.35 0.38 0.39
   Total accesses: 138152 - Total Traffic: 3.3 GB - Total Duration: 64572794
   CPU Usage: u11.33 s6 cu1623.25 cs1255.83 - 8.41% CPU load
   4.01 requests/sec - 101.1 kB/second - 25.2 kB/request - 467.404 ms/request
   8 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

_K_KW_K.KK__K_..R.........._....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req   Dur   Conn  Child  Slot      Client     Protocol         VHost                                      Request
   0-0  69672 0/25/8494  _ 0.50  2    1   3796814 0.0   0.53  203.76 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   1-0  64062 4/200/7963 K 3.79  0    353 3726692 126.1 4.00  178.74 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=2595534377 HTTP/1.1
   2-0  66262 0/135/8118 _ 2.20  0    0   3718435 0.0   2.30  196.94 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   3-0  64671 6/257/7495 K 2.74  1    372 3317220 189.0 3.55  174.07 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=1063776004 HTTP/1.1
   4-0  66514 0/128/7133 W 2.03  0    0   3262679 0.0   2.23  180.47 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   5-0  59728 0/254/7710 _ 5.51  0    303 3914107 0.0   5.76  192.87 192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=1069807972 HTTP/1.1
   6-0  65312 2/164/6816 K 2.69  3    292 3270198 64.7  3.87  185.33 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=629692318 HTTP/1.1
   7-0  -     0/0/7327   . 0.00  44   0   3412796 0.0   0.00  185.43 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   8-0  44904 1/544/7018 K 11.43 1    348 3375110 34.4  14.24 189.10 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=3917791950 HTTP/1.1
   9-0  62113 4/214/6765 K 4.06  0    336 3146733 123.7 4.44  163.20 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=1228982720 HTTP/1.1
   10-0 62419 0/256/7209 _ 3.94  2    268 3354461 0.0   4.72  160.49 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=691963164 HTTP/1.1
   11-0 65881 0/122/6496 _ 2.43  0    0   2930143 0.0   2.56  156.35 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   12-0 66271 1/122/6055 K 2.35  0    370 2784800 34.8  2.22  154.82 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=3879562326 HTTP/1.1
   13-0 67365 0/105/5606 _ 2.30  0    3   2705900 0.0   2.13  144.74 107.20.25.33   http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/blog/blog/images/blog/2019electi
   14-0 -     0/0/5997   . 0.00  1417 0   2781554 0.0   0.00  149.55 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 -     0/0/5543   . 0.00  1420 0   2545155 0.0   0.00  125.21 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 55015 0/363/5446 R 7.27  27   267 2327021 0.0   7.67  129.01 182.171.125.53 http/1.1
   17-0 -     0/0/3913   . 0.00  427  0   1908083 0.0   0.00  104.92 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 -     0/0/2581   . 0.00  1416 0   1080895 0.0   0.00  67.22  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 -     0/0/2090   . 0.00  503  0   1066327 0.0   0.00  57.30  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -     0/0/2293   . 0.00  401  0   1229980 0.0   0.00  67.59  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/2744   . 0.00  762  0   1287937 0.0   0.00  62.21  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/2371   . 0.00  1422 4   1236344 0.0   0.00  57.61  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/1452   . 0.00  1421 0   864578  0.0   0.00  33.94  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/416    . 0.00  1419 0   241967  0.0   0.00  9.18   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/275    . 0.00  1194 0   222309  0.0   0.00  9.53   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/30     . 0.00  1423 0   11611   0.0   0.00  0.63   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 55033 0/359/364  _ 7.60  1    299 153673  0.0   8.00  8.12   192.178.4.100  http/1.1 team.cloudware.ng:80   GET /?l=607705077 HTTP/1.1
   28-0 -     0/0/6      . 0.00  1415 0   742     0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/238    . 0.00  1413 0   99938   0.0   0.00  5.24   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/66     . 0.00  1161 0   26455   0.0   0.00  1.40   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/112    . 0.00  4105 0   42205   0.0   0.00  2.49   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/8      . 0.00  4096 0   8       0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/9      . 0.00  4103 0   2003    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/145    . 0.00  4098 0   64024   0.0   0.00  4.21   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/8      . 0.00  4083 0   3231    0.0   0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/22     . 0.00  4029 0   6006    0.0   0.00  0.46   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/156    . 0.00  4042 4   48368   0.0   0.00  3.05   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/8      . 0.00  4081 0   2128    0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/244    . 0.00  4099 0   99836   0.0   0.00  5.38   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/104    . 0.00  4085 0   44859   0.0   0.00  2.60   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/9      . 0.00  4101 0   2913    0.0   0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/21     . 0.00  4082 0   9542    0.0   0.00  0.54   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/18     . 0.00  4074 0   7946    0.0   0.00  0.60   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/339    . 0.00  4068 0   120247  0.0   0.00  6.33   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/206    . 0.00  4089 0   46218   0.0   0.00  2.49   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/16     . 0.00  4086 0   5548    0.0   0.00  0.54   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/23     . 0.00  4003 0   8310    0.0   0.00  0.54   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00  4113 0   13      0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/16     . 0.00  4010 0   4076    0.0   0.00  0.46   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/4      . 0.00  4092 0   1797    0.0   0.00  0.09   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/16     . 0.00  4011 0   3078    0.0   0.00  0.31   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/13     . 0.00  4052 0   6220    0.0   0.00  0.43   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/4      . 0.00  4090 0   141     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00  4102 0   122     0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/2      . 0.00  4100 0   530     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/1      . 0.00  4120 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/2      . 0.00  4115 0   7       0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/1      . 0.00  4121 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/9      . 0.00  4053 0   3238    0.0   0.00  0.19   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/2      . 0.00  4110 0   4       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/2      . 0.00  4109 0   3       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/2      . 0.00  4093 0   2       0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/2      . 0.00  4094 0   2       0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/4      . 0.00  4078 0   111     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/5      . 0.00  4070 0   1387    0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/493    . 0.00  2339 0   203945  0.0   0.00  10.20  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/19     . 0.00  3925 0   8978    0.0   0.00  0.41   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/1      . 0.00  4116 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/4      . 0.00  4077 0   1777    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/17     . 0.00  4028 0   8603    0.0   0.00  0.41   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/6      . 0.00  4073 0   2279    0.0   0.00  0.14   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/38     . 0.00  3892 0   11175   0.0   0.00  0.63   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/1      . 0.00  4117 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/1      . 0.00  4119 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/1      . 0.00  4118 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/4      . 0.00  4080 0   1217    0.0   0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 756
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 0...36)
   index usage: 13%, cache usage: 17%
   total entries stored since starting: 99610
   total entries replaced since starting: 0
   total entries expired since starting: 98833
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 20 hit, 202 miss
   total removes since starting: 21 hit, 15 miss
Youez - 2016 - github.com/yon3zu
LinuXploit