403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-24.00.48.txt
 ## swap threshold exceeded
## server overview
2025-11-24.00.48 load[0] mem[57/34] mysql[1/11] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        1240          69         136        1053         801
Swap:          4047        1497        2550
 00:48:01 up 10:07,  0 users,  load average: 0.37, 0.40, 0.36
## system overview
top - 00:48:01 up 10:07,  0 users,  load average: 0.37, 0.40, 0.36
Tasks: 195 total,   5 running, 188 sleeping,   0 stopped,   2 zombie
%Cpu(s): 63.6 us, 21.2 sy,  0.0 ni,  9.1 id,  6.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    75536 free,  1275912 used,  1068852 buff/cache
KiB Swap:  4145144 total,  2612216 free,  1532928 used.   814864 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1744 mysql     20   0 1458608 295544   3064 S 120.0 12.2   7:51.13 /usr/sbin+
 92212 nigeria   20   0  404052  16140  10384 R  13.3  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44400   3576   1684 S   6.7  0.1   0:51.99 /usr/lib/+
    14 root      20   0       0      0      0 S   6.7  0.0   0:05.05 [ksoftirq+
    36 root      20   0       0      0      0 S   6.7  0.0   0:22.07 [kswapd0]
 92209 pactpay   20   0       0      0      0 Z   6.7  0.0   0:00.02 [php-cgi]+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.94 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.25 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:33.04 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.22 [migratio+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   0:00.97 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:03.23 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:02.62 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.97 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39500   1804   1496 S   0.0  0.1   0:23.37 /usr/lib/+
   383 root      20   0   45352    556    532 S   0.0  0.0   0:00.44 /usr/lib/+
   412 root      16  -4   55532    640    508 S   0.0  0.0   0:03.80 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    644    532 S   0.0  0.0   0:00.83 /usr/sbin+
   489 root      20   0   24704   1388   1028 S   0.0  0.1   0:08.60 /usr/lib/+
   494 polkitd   20   0  610540   1168    776 S   0.0  0.0   0:04.96 /usr/lib/+
   495 root      20   0  224144   5948   1364 S   0.0  0.2   0:00.42 queueproc+
   496 root      20   0   52852    524    412 S   0.0  0.0   0:00.01 /usr/sbin+
   497 root      20   0  152780    472    428 S   0.0  0.0   0:00.02 /usr/sbin+
   503 dbus      20   0   58716   1604    900 S   0.0  0.1   0:19.43 /usr/bin/+
   506 nscd      20   0 1336536   2096    900 S   0.0  0.1   0:21.95 /usr/sbin+
   511 rpc       20   0   69256    324    264 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388    288    284 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208    300    300 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208    276    252 S   0.0  0.0   0:00.00 /usr/sbin+
   558 root      20   0  124476    732    604 S   0.0  0.0   0:01.04 /usr/sbin+
   576 root      20   0  108296    416    412 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704    448    448 S   0.0  0.0   0:00.02 /bin/bash
   621 mailnull  20   0   89112   4204   1164 S   0.0  0.2   0:00.68 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:02.51 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   927 root      20   0   51508    868    704 S   0.0  0.0   0:00.52 /usr/sbin+
   928 systuser  20   0   11540     56      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   12756     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   931 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   932 systuser  20   0  111608     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   933 root      20   0  153404    712    628 S   0.0  0.0   0:00.81 pure-ftpd+
   934 root      20   0  445028   1628   1512 S   0.0  0.1   0:01.49 sw-engine+
   935 root      20   0  572372   1320    744 S   0.0  0.1   0:03.08 /usr/bin/+
   936 telegraf  20   0 5654304  39072   2608 S   0.0  1.6   0:19.55 /usr/loca+
   937 root      20   0  111304    824    716 S   0.0  0.0   0:06.06 /usr/sbin+
   939 root      20   0 1350088   9356    384 S   0.0  0.4   0:25.00 /usr/bin/+
   941 root      20   0  400740   3476   1020 S   0.0  0.1   0:04.23 php-fpm: +
   946 root      20   0  396248    924    744 S   0.0  0.0   0:00.94 php-fpm: +
   951 root      20   0  439788   1344   1136 S   0.0  0.1   0:00.99 php-fpm: +
   952 root      20   0  261164   7240   1932 S   0.0  0.3   0:05.32 cpsrvd (S+
   953 root      20   0  331088   3452   2128 S   0.0  0.1   0:11.56 /usr/sbin+
   959 root      20   0  389508   1000    784 S   0.0  0.0   0:00.93 php-fpm: +
   960 root      20   0 1763224 153412    720 S   0.0  6.3   0:13.92 /usr/loca+
   969 cpanelc+  20   0   10516   3684   2432 S   0.0  0.2   0:28.29 /usr/loca+
   970 named     20   0  990264  40604   1824 S   0.0  1.7   0:15.89 /usr/sbin+
   972 memcach+  20   0  342400    392    392 S   0.0  0.0   0:00.79 /usr/bin/+
   974 root      20   0 1277312   9236    384 S   0.0  0.4   0:23.01 /usr/bin/+
   980 systuser  20   0  114016  15104   2336 S   0.0  0.6   0:08.66 /usr/loca+
   995 root      20   0  388892    944    736 S   0.0  0.0   0:00.86 php-fpm: +
  1053 dovenull  20   0   46984   3260   2372 S   0.0  0.1   0:01.26 dovecot/p+
  1054 dovenull  20   0   47960   4272   2552 S   0.0  0.2   0:00.37 dovecot/i+
  1055 dovecot   20   0   10320    588    468 S   0.0  0.0   0:00.24 dovecot/a+
  1056 root      20   0   10452    648    452 S   0.0  0.0   0:00.63 dovecot/l+
  1057 dovenull  20   0   47052   2812   2028 S   0.0  0.1   0:00.98 dovecot/p+
  1058 dovenull  20   0   47512   3128   1928 S   0.0  0.1   0:00.25 dovecot/i+
  1064 root      20   0   24528   2436    604 S   0.0  0.1   0:00.23 dovecot/c+
  1065 dovecot   20   0   13568    876    632 S   0.0  0.0   0:00.08 dovecot/s+
  1122 dovecot   20   0   41188   1744   1216 S   0.0  0.1   0:01.52 dovecot/a+
  1144 systuser  20   0  157704   3280   1280 S   0.0  0.1   0:00.16 SonarPush+
  1146 wp-tool+  20   0  412396  32748   1904 S   0.0  1.4   0:11.58 /usr/bin/+
  1147 wp-tool+  20   0  387556  13576   1936 S   0.0  0.6   0:00.34 /usr/bin/+
  1174 root      20   0  248224 118964   2420 S   0.0  4.9   0:07.10 /usr/loca+
  1239 root      20   0  228228  16948   4048 S   0.0  0.7   0:00.57 dnsadmin +
  1243 root      20   0  209476  12056   2208 S   0.0  0.5   0:04.01 tailwatchd
  1244 root      20   0  262224  22480   4620 S   0.0  0.9   0:02.54 cpdavd - +
  1676 root      38  18  130416   1616    876 S   0.0  0.1   0:00.08 cpanellog+
  2037 root      20   0  267052   8892    924 S   0.0  0.4   0:02.28 /usr/sbin+
  2039 root      20   0   12824    616    504 S   0.0  0.0   0:03.33 /usr/loca+
  2040 root      20   0   12732    572    500 S   0.0  0.0   0:02.83 /usr/loca+
  2041 root      20   0   12840    628    504 S   0.0  0.0   0:03.07 /usr/loca+
  2045 root      20   0   53256    432    432 S   0.0  0.0   0:00.05 /usr/loca+
  2152 root      20   0  299272    820    656 S   0.0  0.0   0:01.02 php-fpm: +
  6714 root      20   0  264456 128292   2520 S   0.0  5.3   0:03.65 spamd chi+
  6715 root      20   0  248224 117008    484 S   0.0  4.8   0:00.02 spamd chi+
 15361 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3152    428      0 S   0.0  0.0   0:00.66 [kworker]
 17881 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
 60917 root      20   0  181564  29628   2308 S   0.0  1.2   0:03.25 lfd - sle+
 70266 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 73221 worencom  20   0   38720   2384   1132 S   0.0  0.1   0:00.12 dovecot/i+
 73342 nobody    20   0  277908  20908   4832 S   0.0  0.9   0:02.05 /usr/sbin+
 74802 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 75107 nobody    20   0  277908  20840   4772 S   0.0  0.9   0:01.82 /usr/sbin+
 75269 nobody    20   0  277916  20628   4756 S   0.0  0.9   0:01.86 /usr/sbin+
 75406 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 75503 nobody    20   0  277804  20932   4868 S   0.0  0.9   0:02.04 /usr/sbin+
 75515 nobody    20   0  277904  20936   4848 S   0.0  0.9   0:01.79 /usr/sbin+
 82021 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 83488 nobody    20   0  277584  20040   4352 S   0.0  0.8   0:01.06 /usr/sbin+
 84780 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 85981 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86637 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 87716 nobody    20   0  277508  19764   4176 S   0.0  0.8   0:00.57 /usr/sbin+
 87854 nobody    20   0  277900  20100   4252 S   0.0  0.8   0:00.48 /usr/sbin+
 87862 nobody    20   0  277900  19784   4024 S   0.0  0.8   0:00.51 /usr/sbin+
 87977 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 88522 nobody    20   0  277772  19896   4072 S   0.0  0.8   0:00.39 /usr/sbin+
 90326 nobody    20   0  277584  19776   4076 S   0.0  0.8   0:00.25 /usr/sbin+
 90335 nobody    20   0  277884  19684   3928 S   0.0  0.8   0:00.19 /usr/sbin+
 90336 nobody    20   0  277904  19492   3720 S   0.0  0.8   0:00.07 /usr/sbin+
 91081 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 91366 nobody    20   0  277520  18784   3272 S   0.0  0.8   0:00.10 /usr/sbin+
 91381 nobody    20   0  277536  19532   3892 S   0.0  0.8   0:00.07 /usr/sbin+
 91382 nobody    20   0  277584  19508   3820 S   0.0  0.8   0:00.09 /usr/sbin+
 91394 nobody    20   0  277388  19192   3768 S   0.0  0.8   0:00.02 /usr/sbin+
 91574 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 91800 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 92113 nigeria   20   0  400460   5640   2392 S   0.0  0.2   0:00.00 php-fpm: +
 92128 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 92131 root      20   0  157100   5080   3788 S   0.0  0.2   0:00.00 sshd: unk+
 92132 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: unk+
 92136 wp-tool+  20   0  445028    328    196 S   0.0  0.0   0:00.00 sw-engine+
 92139 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92140 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92141 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92143 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92144 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92145 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92146 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92147 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92148 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92149 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92150 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92151 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92153 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92155 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 92156 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 92157 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 92177 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92178 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92179 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92182 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92183 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 92184 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92185 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92186 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 92187 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 /usr/loca+
 92188 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 92189 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92190 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92200 pactpay   20   0   20164    260      0 R   0.0  0.0   0:00.00 jailshell+
 92211 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 92218 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 92220 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92222 cloudw    20   0  353712  15968  10484 S   0.0  0.7   0:00.00 /opt/cpan+
 92224 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [setupvir+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov23   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov23   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov23   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov23   0:33  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov23   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov23   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov23   0:22  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov23   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov23   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   Nov23   0:03  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov23   0:02  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    Nov23   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<   Nov23   0:02  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root      17881  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [kworker/u200:0]
root      70266  0.0  0.0      0     0 ?        S    00:14   0:00  \_ [kworker/0:2]
root      74802  0.0  0.0      0     0 ?        S    00:21   0:00  \_ [kworker/0:3]
root      75406  0.0  0.0      0     0 ?        S    00:22   0:00  \_ [kworker/1:3]
root      82021  0.0  0.0      0     0 ?        S    00:32   0:00  \_ [kworker/1:1]
root      84780  0.0  0.0      0     0 ?        S    00:36   0:00  \_ [kworker/0:0]
root      85981  0.0  0.0      0     0 ?        S    00:38   0:00  \_ [kworker/1:2]
root      86637  0.0  0.0      0     0 ?        S    00:39   0:00  \_ [kworker/u200:2]
root      87977  0.0  0.0      0     0 ?        S    00:41   0:00  \_ [kworker/0:1]
root      91081  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/0:4]
root      92220  0.0  0.0      0     0 ?        S    00:48   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44400  3576 ?        Ss   Nov23   0:51 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.0  39500  1804 ?        Ss   Nov23   0:23 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   556 ?        Ss   Nov23   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   640 ?        S<sl Nov23   0:03 /sbin/auditd
root        487  0.0  0.0  21540   644 ?        Ss   Nov23   0:00 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24704  1388 ?        Ss   Nov23   0:08 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610540  1168 ?        Ssl  Nov23   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        495  0.0  0.2 224144  5948 ?        Ss   Nov23   0:00 queueprocd - waiting up to 60s to process a task
root        496  0.0  0.0  52852   524 ?        Ss   Nov23   0:00 /usr/sbin/smartd -n -q never
root        497  0.0  0.0 152780   472 ?        Ss   Nov23   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        503  0.0  0.0  58716  1604 ?        Ss   Nov23   0:19 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        506  0.0  0.0 1336536 2096 ?        Ssl  Nov23   0:21 /usr/sbin/nscd
rpc         511  0.0  0.0  69256   324 ?        Ss   Nov23   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388   288 ?        Ss   Nov23   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208   300 ?        Ssl  Nov23   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208   276 ?        Ss   Nov23   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124476   732 ?        Ss   Nov23   0:01 /usr/sbin/crond -n
root      92139  0.0  0.0 183044  2144 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      92155  0.0  0.0 113284  1212 ?        Ss   00:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      92156  0.0  0.0 108052   360 ?        S    00:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      92157  0.0  0.0 113288  1520 ?        S    00:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      92228  0.0  0.0 153840  2096 ?        R    00:48   0:00  |               \_ ps auxf
root      92140  0.0  0.0 183044  2144 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      92187  0.0  0.0  20164   988 ?        Ss   00:48   0:00  |   \_ jailshell (cloudsms) [92225] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  92225  0.0  0.0  20164   264 ?        S    00:48   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  92226  0.0  0.0 113284  1212 ?        S    00:48   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  92227  0.0  0.5 400936 12964 ?        R    00:48   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php
root      92141  0.0  0.0 183044  2144 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      92189  0.0  0.0  20164   808 ?        Ss   00:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      92143  0.0  0.0 183044  2144 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      92184  0.0  0.0  20164   808 ?        Ss   00:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      92144  0.0  0.0 183044  2140 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      92190  0.0  0.0  20164   808 ?        Ss   00:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      92145  0.0  0.0 183044  2140 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      92182  0.0  0.0  20164   808 ?        Ss   00:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      92146  0.0  0.0 183044  2140 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      92185  0.0  0.0  20164   808 ?        Ss   00:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      92147  0.0  0.0 183044  2136 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      92188  0.0  0.0  20164   804 ?        Ss   00:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      92148  0.0  0.0 183044  2136 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      92177  0.0  0.0  20164   808 ?        Ss   00:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      92149  0.0  0.0 183044  2136 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      92178  0.0  0.0  20164   808 ?        Ss   00:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      92150  0.0  0.0 183044  2136 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      92179  0.0  0.0  20164   808 ?        Ss   00:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      92151  0.0  0.0 183044  2136 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      92186  0.0  0.0  20164   964 ?        Ss   00:48   0:00  |   \_ jailshell (pactpay) [92200] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   92200  0.0  0.0      0     0 ?        D    00:48   0:00  |       \_ [jailshell]
root      92153  0.0  0.0 183044  2136 ?        S    00:48   0:00  \_ /usr/sbin/CROND -n
root      92183  0.0  0.0  20164   968 ?        Ss   00:48   0:00      \_ jailshell (nigeria) [92211] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   92211  0.0  0.0  20164   260 ?        S    00:48   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   92212  0.0  0.6 404052 16140 ?        R    00:48   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        576  0.0  0.0 108296   416 tty1     Ss+  Nov23   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704   448 ttyS0    Ss+  Nov23   0:00 /bin/bash
mailnull    621  0.0  0.1  89112  4204 ?        Ss   Nov23   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        927  0.0  0.0  51508   868 ?        Ss   Nov23   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1053  0.0  0.1  46984  3260 ?        S    Nov23   0:01  \_ dovecot/pop3-login
dovenull   1054  0.0  0.1  47960  4272 ?        S    Nov23   0:00  \_ dovecot/imap-login
dovecot    1055  0.0  0.0  10320   588 ?        S    Nov23   0:00  \_ dovecot/anvil
root       1056  0.0  0.0  10452   648 ?        S    Nov23   0:00  \_ dovecot/log
dovenull   1057  0.0  0.1  47052  2812 ?        S    Nov23   0:00  \_ dovecot/pop3-login
dovenull   1058  0.0  0.1  47512  3128 ?        S    Nov23   0:00  \_ dovecot/imap-login
root       1064  0.0  0.1  24528  2436 ?        S    Nov23   0:00  \_ dovecot/config
dovecot    1065  0.0  0.0  13568   876 ?        S    Nov23   0:00  \_ dovecot/stats
dovecot    1122  0.0  0.0  41188  1744 ?        S    Nov23   0:01  \_ dovecot/auth
worencom  73221  0.0  0.0  38720  2384 ?        S    Nov23   0:00  \_ dovecot/imap
root      91574  0.0  0.1  41052  2728 ?        S    00:46   0:00  \_ dovecot/auth -w
systuser    928  0.0  0.0  11540    56 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756    64 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524    72 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608    72 ?        Ssl  Nov23   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        933  0.0  0.0 153404   712 ?        Ss   Nov23   0:00 pure-ftpd (SERVER)
root        934  0.0  0.0 445028  1628 ?        Ss   Nov23   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  92136  0.0  0.0 445028   328 ?        S    00:47   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        935  0.0  0.0 572372  1320 ?        Ssl  Nov23   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    936  0.0  1.6 5654304 39072 ?       SLsl Nov23   0:19 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        937  0.0  0.0 111304   824 ?        Ss   Nov23   0:06 /usr/sbin/sshd -D
root      91800  0.0  0.1 111304  4268 ?        Ss   00:47   0:00  \_ sshd: [accepted]
root      92131  0.0  0.2 157100  5080 ?        Ss   00:47   0:00  \_ sshd: unknown [priv]
sshd      92132  0.0  0.1 115644  2632 ?        S    00:47   0:00      \_ sshd: unknown [net]
root        939  0.0  0.3 1350088 9356 ?        Ssl  Nov23   0:25 /usr/bin/cspdaemon
root        941  0.0  0.1 400740  3476 ?        Ss   Nov23   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   92113  0.0  0.2 400460  5640 ?        S    00:47   0:00  \_ php-fpm: pool nigeriadecide_org
root        946  0.0  0.0 396248   924 ?        Ss   Nov23   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        951  0.0  0.0 439788  1344 ?        Ss   Nov23   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        952  0.0  0.2 261164  7240 ?        Ss   Nov23   0:05 cpsrvd (SSL) - waiting for connections                   
root      92128  0.0  0.0      0     0 ?        Z    00:47   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.1 331088  3452 ?        Ssl  Nov23   0:11 /usr/sbin/rsyslogd -n
root        959  0.0  0.0 389508  1000 ?        Ss   Nov23   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        960  0.0  6.3 1763224 153412 ?      Ssl  Nov23   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
cpanelc+    969  0.0  0.1  10516  3684 ?        Ss   Nov23   0:28 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
named       970  0.0  1.6 990264 40604 ?        Ssl  Nov23   0:15 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    972  0.0  0.0 342400   392 ?        Ssl  Nov23   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.3 1277312 9236 ?        Ssl  Nov23   0:23 /usr/bin/checkstatus
systuser    980  0.0  0.6 114016 15104 ?        Ssl  Nov23   0:08 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        995  0.0  0.0 388892   944 ?        Ss   Nov23   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser   1144  0.0  0.1 157704  3280 ?        S    Nov23   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1146  0.0  1.3 412396 32748 ?        Ss   Nov23   0:11 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1147  0.0  0.5 387556 13576 ?        Ss   Nov23   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1174  0.0  4.9 248224 118964 ?       Ss   Nov23   0:07 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6714  0.0  5.3 264456 128292 ?       S    Nov23   0:03  \_ spamd child
root       6715  0.0  4.8 248224 117008 ?       S    Nov23   0:00  \_ spamd child
root       1239  0.0  0.7 228228 16948 ?        Ss   Nov23   0:00 dnsadmin - server mode
root       1243  0.0  0.4 209476 12056 ?        Ss   Nov23   0:04 tailwatchd
root       1244  0.0  0.9 262224 22480 ?        Ss   Nov23   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1676  0.0  0.0 130416  1616 ?        SN   Nov23   0:00 cpanellogd - sleeping for logs
mysql      1744  1.2 12.2 1458608 295544 ?      Sl   Nov23   7:51 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2037  0.0  0.3 267052  8892 ?        Ss   Nov23   0:02 /usr/sbin/httpd -k start
root       2039  0.0  0.0  12824   616 ?        S    Nov23   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2040  0.0  0.0  12732   572 ?        S    Nov23   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2041  0.0  0.0  12840   628 ?        S    Nov23   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2045  0.0  0.0  53256   432 ?        S    Nov23   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    73342  0.1  0.8 277908 20908 ?        S    00:18   0:02  \_ /usr/sbin/httpd -k start
nobody    75107  0.1  0.8 277908 20840 ?        S    00:21   0:01  \_ /usr/sbin/httpd -k start
nobody    75269  0.1  0.8 277916 20628 ?        S    00:21   0:01  \_ /usr/sbin/httpd -k start
nobody    75503  0.1  0.8 277804 20932 ?        S    00:22   0:02  \_ /usr/sbin/httpd -k start
nobody    75515  0.1  0.8 277904 20936 ?        S    00:22   0:01  \_ /usr/sbin/httpd -k start
nobody    83488  0.1  0.8 277584 20040 ?        S    00:34   0:01  \_ /usr/sbin/httpd -k start
nobody    87716  0.1  0.8 277508 19764 ?        S    00:40   0:00  \_ /usr/sbin/httpd -k start
nobody    87854  0.1  0.8 277900 20100 ?        S    00:40   0:00  \_ /usr/sbin/httpd -k start
nobody    87862  0.1  0.8 277900 19784 ?        S    00:40   0:00  \_ /usr/sbin/httpd -k start
nobody    88522  0.1  0.8 277772 19896 ?        S    00:41   0:00  \_ /usr/sbin/httpd -k start
nobody    90326  0.1  0.8 277584 19776 ?        S    00:44   0:00  \_ /usr/sbin/httpd -k start
cloudw    92222  0.0  0.6 353712 15968 ?        S    00:48   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    90335  0.1  0.8 277884 19684 ?        S    00:44   0:00  \_ /usr/sbin/httpd -k start
nobody    90336  0.0  0.8 277904 19492 ?        S    00:44   0:00  \_ /usr/sbin/httpd -k start
nobody    91366  0.1  0.7 277520 18784 ?        S    00:46   0:00  \_ /usr/sbin/httpd -k start
nobody    91381  0.0  0.8 277536 19532 ?        S    00:46   0:00  \_ /usr/sbin/httpd -k start
nobody    91382  0.1  0.8 277584 19508 ?        S    00:46   0:00  \_ /usr/sbin/httpd -k start
nobody    91394  0.0  0.7 277388 19192 ?        S    00:46   0:00  \_ /usr/sbin/httpd -k start
root       2152  0.0  0.0 299272   820 ?        Ss   Nov23   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
oysipao+  15361  0.0  0.0   3148   416 ?        Ss   Nov23   0:00 [kworker]
oysipao+  15368  0.0  0.0   3152   428 ?        S    Nov23   0:00  \_ [kworker]
root      60917  0.1  1.2 181564 29628 ?        Ss   00:00   0:03 lfd - sleeping
## mysql stats
Uptime: 36421  Threads: 2  Questions: 3042516  Slow queries: 0  Opens: 7334  Flush tables: 1  Open tables: 2000  Queries per second avg: 83.537
*************************** 1. row ***************************
     Id: 51298
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: init
   Info: SELECT * FROM `05` WHERE `phone`='2348167205939' LIMIT 1
*************************** 2. row ***************************
     Id: 51301
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 103.131.71.161 TIME_WAIT
      1 103.131.71.171 TIME_WAIT
      1 104.210.140.133 TIME_WAIT
      1 104.210.140.140 TIME_WAIT
      1 ::1 TIME_WAIT
      1 202.214.238.61 TIME_WAIT
      1 54.39.210.162 TIME_WAIT
      1 54.39.6.241 TIME_WAIT
      1 93.158.90.65 TIME_WAIT
      1 93.158.90.67 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 141.0.13.18 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 24-Nov-2025 00:48:01 WAT
   Restart Time: Sunday, 23-Nov-2025 14:41:06 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 10 hours 6 minutes 55 seconds
   Server load: 0.37 0.40 0.36
   Total accesses: 145211 - Total Traffic: 3.5 GB - Total Duration: 67790350
   CPU Usage: u10.04 s5.6 cu1714.05 cs1323.93 - 8.39% CPU load
   3.99 requests/sec - 100.3 kB/second - 25.2 kB/request - 466.84 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KW.KR_KKKKKWK_R_................_........K......................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS  Req   Dur   Conn  Child  Slot      Client     Protocol         VHost                                      Request
   0-0  75269 10/337/8914 K 8.24 1    26  3993259 82.7  8.66  214.39 51.75.119.75   http/1.1 cloudsms.com.ng:443    GET /help_center.php/recharge/SendToAll/recharge/recharge/recha
   1-0  88522 0/72/8372   W 1.88 0    0   3920568 0.0   2.21  191.08 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   2-0  -     0/0/8460    . 0.00 32   0   3888752 0.0   0.00  205.70 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   3-0  75107 10/369/7925 K 7.23 2    345 3544514 309.0 8.54  184.16 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=1016602522 HTTP/1.1
   4-0  91366 0/15/7445   R 0.42 29   392 3420349 0.0   0.46  188.59 202.214.238.61 http/1.1
   5-0  83488 0/186/7983  _ 4.73 0    9   4033947 0.0   4.57  199.32 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   6-0  91381 3/13/7266   K 0.22 2    350 3452451 95.5  0.25  196.17 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=3367182850 HTTP/1.1
   7-0  91382 3/18/7528   K 0.36 2    346 3513697 92.6  0.42  190.83 192.178.4.100  http/1.1 team.cloudware.ng:80   GET /?l=3145037650 HTTP/1.1
   8-0  87716 1/99/7219   K 2.44 0    403 3478840 35.0  3.07  194.87 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=2035744656 HTTP/1.1
   9-0  87854 1/87/6944   K 1.84 1    399 3219598 35.0  1.99  167.61 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=1848214684 HTTP/1.1
   10-0 87862 2/85/7423   K 2.20 4    355 3460269 65.9  2.33  166.29 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=490911834 HTTP/1.1
   11-0 90326 2/41/6678   W 1.05 0    0   2983230 65.2  1.06  159.55 192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=3551162756 HTTP/1.1
   12-0 73342 2/443/6531  K 9.20 0    348 2995373 65.3  9.40  165.03 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=2966539628 HTTP/1.1
   13-0 90335 0/35/6039   _ 0.88 0    400 2876764 0.0   0.99  153.22 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=1688855437 HTTP/1.1
   14-0 90336 0/18/6306   R 0.55 122  1   2904832 0.0   0.35  155.78 180.23.219.182 http/1.1
   15-0 91394 0/8/5564    _ 0.06 0    7   2545861 0.0   0.15  125.60 98.84.200.43   http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/blog/images/blog/polling_
   16-0 -     0/0/5550    . 0.00 1549 0   2369725 0.0   0.00  131.24 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 -     0/0/3925    . 0.00 1544 0   1912341 0.0   0.00  105.17 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 -     0/0/2730    . 0.00 714  0   1148967 0.0   0.00  70.82  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 -     0/0/2097    . 0.00 1540 0   1069701 0.0   0.00  57.52  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -     0/0/2307    . 0.00 1547 4   1233256 0.0   0.00  67.79  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/2761    . 0.00 1512 0   1289749 0.0   0.00  62.61  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/2652    . 0.00 410  0   1393553 0.0   0.00  65.26  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/1467    . 0.00 1504 0   865511  0.0   0.00  34.09  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/426     . 0.00 1545 0   243165  0.0   0.00  9.31   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/297     . 0.00 1514 0   228918  0.0   0.00  10.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/87      . 0.00 1254 0   27734   0.0   0.00  1.92   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/707     . 0.00 376  0   306111  0.0   0.00  16.45  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/13      . 0.00 1543 0   4002    0.0   0.00  0.21   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/243     . 0.00 1510 0   101832  0.0   0.00  5.33   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/74      . 0.00 1524 0   28837   0.0   0.00  1.56   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/120     . 0.00 1527 0   43607   0.0   0.00  2.59   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 75503 0/435/443   _ 8.61 0    10  220082  0.0   9.13  9.21   54.39.6.241    http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?state=Ondo&lga=Ilaje&ward=Mahin%
   33-0 -     0/0/296     . 0.00 174  0   137337  0.0   0.00  6.94   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/150     . 0.00 1535 0   65868   0.0   0.00  4.26   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/9       . 0.00 1539 0   3231    0.0   0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/57      . 0.00 1374 0   21713   0.0   0.00  1.22   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/198     . 0.00 1349 0   67827   0.0   0.00  4.03   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/20      . 0.00 1513 0   7972    0.0   0.00  0.39   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/254     . 0.00 1502 0   102204  0.0   0.00  5.58   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/107     . 0.00 1534 0   44871   0.0   0.00  2.61   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 75515 1/318/327   K 7.43 3    395 163375  36.1  7.96  8.14   192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=614088590 HTTP/1.1
   42-0 -     0/0/21      . 0.00 6062 0   9542    0.0   0.00  0.54   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/18      . 0.00 6054 0   7946    0.0   0.00  0.60   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/339     . 0.00 6048 0   120247  0.0   0.00  6.33   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/206     . 0.00 6069 0   46218   0.0   0.00  2.49   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/16      . 0.00 6066 0   5548    0.0   0.00  0.54   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/23      . 0.00 5983 0   8310    0.0   0.00  0.54   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/2       . 0.00 6093 0   13      0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/16      . 0.00 5990 0   4076    0.0   0.00  0.46   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/4       . 0.00 6072 0   1797    0.0   0.00  0.09   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/16      . 0.00 5991 0   3078    0.0   0.00  0.31   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/13      . 0.00 6032 0   6220    0.0   0.00  0.43   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/4       . 0.00 6070 0   141     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2       . 0.00 6082 0   122     0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/2       . 0.00 6080 0   530     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/1       . 0.00 6100 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/2       . 0.00 6095 0   7       0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/1       . 0.00 6101 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/9       . 0.00 6033 0   3238    0.0   0.00  0.19   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/2       . 0.00 6090 0   4       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/2       . 0.00 6089 0   3       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/2       . 0.00 6073 0   2       0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/2       . 0.00 6074 0   2       0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/4       . 0.00 6058 0   111     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/5       . 0.00 6050 0   1387    0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/493     . 0.00 4319 0   203945  0.0   0.00  10.20  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/19      . 0.00 5905 0   8978    0.0   0.00  0.41   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/1       . 0.00 6096 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/4       . 0.00 6057 0   1777    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/17      . 0.00 6008 0   8603    0.0   0.00  0.41   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/6       . 0.00 6053 0   2279    0.0   0.00  0.14   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/38      . 0.00 5872 0   11175   0.0   0.00  0.63   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/1       . 0.00 6097 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/1       . 0.00 6099 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/1       . 0.00 6098 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/4       . 0.00 6060 0   1217    0.0   0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 707
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 0...59)
   index usage: 12%, cache usage: 16%
   total entries stored since starting: 104609
   total entries replaced since starting: 0
   total entries expired since starting: 103881
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 44 hit, 227 miss
   total removes since starting: 21 hit, 17 miss
Youez - 2016 - github.com/yon3zu
LinuXploit