403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.03.45.txt
 ## swap threshold exceeded
## server overview
2025-11-16.03.45 load[0] mem[63/71] mysql[3/25] httpd[6]
              total        used        free      shared  buff/cache   available
Mem:           2363        1341          97          18         925         818
Swap:          1999        1576         423
 03:45:01 up 13:20,  0 users,  load average: 0.56, 0.83, 0.58
## system overview
top - 03:45:01 up 13:20,  0 users,  load average: 0.56, 0.83, 0.58
Tasks: 197 total,   3 running, 193 sleeping,   0 stopped,   1 zombie
%Cpu(s): 80.6 us, 19.4 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    96580 free,  1376204 used,   947516 buff/cache
KiB Swap:  2047996 total,   433980 free,  1614016 used.   835504 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1785 mysql     20   0 1462292 224816   3792 S 137.5  9.3  11:17.20 /usr/sbin+
 85745 nigeria   20   0  404052  16140  10384 S  18.8  0.7   0:00.04 /opt/cpan+
   343 root       0 -20       0      0      0 S   6.2  0.0   0:03.77 [kworker/+
 85840 cloudsms  20   0  404052  15348  10008 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44412   3188   1452 S   0.0  0.1   1:05.37 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.91 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.27 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:47.98 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.12 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:08.31 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:35.94 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.06 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.84 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:04.77 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:03.15 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39500   1268   1092 S   0.0  0.1   0:23.82 /usr/lib/+
   385 root      20   0   45444     72     68 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    184     88 S   0.0  0.0   0:03.52 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 root      20   0   21540    348    260 S   0.0  0.0   0:01.08 /usr/sbin+
   516 root      20   0  152780     52     48 S   0.0  0.0   0:00.03 /usr/sbin+
   521 root      20   0   24708   1076    792 S   0.0  0.0   0:11.15 /usr/lib/+
   523 nscd      20   0 1264844   1124    556 S   0.0  0.0   0:38.57 /usr/sbin+
   524 root      20   0   52852      4      0 S   0.0  0.0   0:00.01 /usr/sbin+
   527 polkitd   20   0  612240    924    628 S   0.0  0.0   0:06.58 /usr/lib/+
   529 root      20   0  224148   3188    924 S   0.0  0.1   0:00.53 queueproc+
   531 dbus      20   0   58740   1252    600 S   0.0  0.1   0:25.40 /usr/bin/+
   539 rpc       20   0   69256     48     44 S   0.0  0.0   0:00.05 /sbin/rpc+
   541 root      20   0    4388     32     28 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    428    292 S   0.0  0.0   0:01.36 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296     44     40 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704     12     12 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   88988   2744    592 S   0.0  0.1   0:00.97 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:05.96 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  111304    376    276 S   0.0  0.0   0:04.89 /usr/sbin+
   919 root      20   0 1350088   6396     12 S   0.0  0.3   0:20.16 /usr/bin/+
   920 systuser  20   0  111864     60      0 S   0.0  0.0   0:00.02 /usr/loca+
   921 telegraf  20   0 5654304  34248   5900 S   0.0  1.4   0:26.28 /usr/loca+
   922 memcach+  20   0  342400      0      0 S   0.0  0.0   0:01.06 /usr/bin/+
   924 root      20   0  153404    268    188 S   0.0  0.0   0:00.99 pure-ftpd+
   926 root      20   0  572372    796    336 S   0.0  0.0   0:04.16 /usr/bin/+
   927 systuser  20   0  114016  10144   2752 S   0.0  0.4   0:11.41 /usr/loca+
   928 systuser  20   0   12756     20      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   930 root      20   0   51508    344    208 S   0.0  0.0   0:00.56 /usr/sbin+
   932 systuser  20   0  113932      4      0 S   0.0  0.0   0:00.02 /usr/loca+
   933 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   935 root      20   0 1277312   5968     32 S   0.0  0.2   0:24.35 /usr/bin/+
   946 root      20   0  396248    236    144 S   0.0  0.0   0:01.23 php-fpm: +
   954 named     20   0 1185864  23528   1892 S   0.0  1.0   0:24.63 /usr/sbin+
   957 root      20   0  331088   1956   1580 S   0.0  0.1   0:12.26 /usr/sbin+
   973 root      20   0  400740   1736    520 S   0.0  0.1   0:07.33 php-fpm: +
   975 root      20   0  439788    220    132 S   0.0  0.0   0:01.46 php-fpm: +
   978 cpanelc+  20   0   10456   3444   2316 R   0.0  0.1   0:38.16 /usr/loca+
   980 root      20   0  388892    396    304 S   0.0  0.0   0:01.46 php-fpm: +
   991 root      20   0  389508    228    140 S   0.0  0.0   0:01.35 php-fpm: +
   992 root      20   0 1901868 573440   1236 S   0.0 23.7   0:37.54 /usr/loca+
   993 root      20   0  261288   4028    960 S   0.0  0.2   0:09.65 cpsrvd (S+
  1065 dovenull  20   0   47524    748    432 S   0.0  0.0   0:00.92 dovecot/p+
  1066 dovenull  20   0   47948    992    580 S   0.0  0.0   0:00.54 dovecot/i+
  1067 dovecot   20   0   10320    392    280 S   0.0  0.0   0:00.14 dovecot/a+
  1068 root      20   0   10452    440    292 S   0.0  0.0   0:00.54 dovecot/l+
  1069 dovenull  20   0   47600    908    580 S   0.0  0.0   0:00.72 dovecot/p+
  1070 dovenull  20   0   47848   2056   1400 S   0.0  0.1   0:00.46 dovecot/i+
  1077 root      20   0   24528   1608    472 S   0.0  0.1   0:00.28 dovecot/c+
  1078 dovecot   20   0   13568    420    268 S   0.0  0.0   0:00.10 dovecot/s+
  1150 root      20   0  248140   2804    744 S   0.0  0.1   0:08.56 /usr/loca+
  1151 systuser  20   0  157704   2936    968 S   0.0  0.1   0:00.22 SonarPush+
  1152 dovecot   20   0   41180    992    664 S   0.0  0.0   0:01.11 dovecot/a+
  1153 wp-tool+  20   0  387556   2548   1224 S   0.0  0.1   0:00.43 /usr/bin/+
  1154 wp-tool+  20   0  410480   9528   1248 S   0.0  0.4   0:40.66 /usr/bin/+
  1229 root      20   0  183900   2188     40 S   0.0  0.1   0:02.58 cpdavd - +
  1231 root      20   0  210204   5704   1000 S   0.0  0.2   0:06.19 tailwatchd
  1232 root      20   0  167452   1220    672 S   0.0  0.1   0:00.77 dnsadmin +
  1638 root      20   0  299272    436    280 S   0.0  0.0   0:01.29 php-fpm: +
  1681 root      38  18  130416    112     60 S   0.0  0.0   0:00.12 cpanellog+
  1909 root      20   0  266984   5452    372 S   0.0  0.2   0:04.77 /usr/sbin+
  8198 root      20   0  268280  50936   1160 S   0.0  2.1   0:07.90 spamd chi+
  8199 root      20   0  249268   1336    388 S   0.0  0.1   0:00.07 spamd chi+
 31033 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152     48     12 S   0.0  0.0   0:00.90 [kworker]
 47250 root      20   0       0      0      0 S   0.0  0.0   0:00.23 [kworker/+
 48777 root      20   0  182324   6636   1084 S   0.0  0.3   0:14.92 lfd - sle+
 56521 root      20   0  123576    328    116 S   0.0  0.0   0:00.00 /usr/sbin+
 64252 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66208 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 68134 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70611 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 78155 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 79438 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 79492 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 81139 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 81206 root      30  10  132964    716     16 S   0.0  0.0   0:00.00 ConfigSer+
 81217 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 208+
 81352 root      20   0  183052     20     20 S   0.0  0.0   0:00.00 /usr/sbin+
 81404 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 81423 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 3h +
 81530 root      20   0   12804    148     24 S   0.0  0.0   0:00.04 /usr/loca+
 81531 root      20   0   12732     72      0 S   0.0  0.0   0:00.03 /usr/loca+
 81532 root      20   0   12820    180     48 S   0.0  0.0   0:00.03 /usr/loca+
 81548 root      20   0   53256   5152     64 S   0.0  0.2   0:00.04 /usr/loca+
 81549 nobody    20   0  277776  10484   3580 S   0.0  0.4   0:00.72 /usr/sbin+
 81550 nobody    20   0  277636  10088   3412 S   0.0  0.4   0:00.64 /usr/sbin+
 81551 nobody    20   0  277908  11024   3708 S   0.0  0.5   0:00.45 /usr/sbin+
 81552 nobody    20   0  277620  10632   3428 S   0.0  0.4   0:00.92 /usr/sbin+
 81553 nobody    20   0  277712  12308   3656 S   0.0  0.5   0:00.41 /usr/sbin+
 81597 nobody    20   0  277672  16760   3660 S   0.0  0.7   0:00.38 /usr/sbin+
 81614 nobody    20   0  277776  15640   2892 S   0.0  0.6   0:00.93 /usr/sbin+
 81693 nobody    20   0  277512  15632   3744 S   0.0  0.6   0:00.42 /usr/sbin+
 81703 nobody    20   0  277776  13128   3936 S   0.0  0.5   0:00.66 /usr/sbin+
 81761 nobody    20   0  277788  17708   3932 S   0.0  0.7   0:00.55 /usr/sbin+
 82245 nobody    20   0  277924  13208   3792 S   0.0  0.5   0:00.72 /usr/sbin+
 83092 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 83280 nobody    20   0  277776  15228   3604 S   0.0  0.6   0:00.46 /usr/sbin+
 83905 nobody    20   0  277776  18320   3912 S   0.0  0.8   0:00.17 /usr/sbin+
 83925 nobody    20   0  277776  18308   3900 S   0.0  0.8   0:00.13 /usr/sbin+
 84542 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 85428 root      20   0  111304   4276   3256 S   0.0  0.2   0:00.00 sshd: [ac+
 85431 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 85659 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 85684 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85685 root      20   0  183048   2164   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 85686 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85687 root      20   0  183048   2164   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 85688 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85689 root      20   0  183048   2164   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 85690 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85691 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 85693 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 85694 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85695 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85696 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 85698 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 85709 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 85711 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 85713 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 85714 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 85715 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 85718 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 85719 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 85721 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 85722 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 85723 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 85724 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 85725 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 85726 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 85727 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 85730 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 85738 root      20   0  188220  11100   5148 S   0.0  0.5   0:00.02 /usr/loca+
 85741 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 85748 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 85752 pactpay   20   0  480124  17684  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 85788 root      20   0  160224   2332   1636 S   0.0  0.1   0:00.00 top -n 2 +
 85836 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 85838 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 85839 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 95255 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov15   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov15   0:47  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov15   0:08  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov15   0:35  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov15   0:04  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    Nov15   0:03  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   Nov15   0:03  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov15   0:05  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root      95255  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/u200:0]
root      47250  0.0  0.0      0     0 ?        S    02:49   0:00  \_ [kworker/1:3]
root      64252  0.0  0.0      0     0 ?        S    03:15   0:00  \_ [kworker/0:4]
root      66208  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/u200:1]
root      68134  0.0  0.0      0     0 ?        S    03:21   0:00  \_ [kworker/0:2]
root      70611  0.0  0.0      0     0 ?        S    03:24   0:00  \_ [kworker/1:0]
root      78155  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/1:1]
root      79438  0.0  0.0      0     0 ?        S    03:36   0:00  \_ [kworker/0:0]
root      79492  0.0  0.0      0     0 ?        S    03:36   0:00  \_ [kworker/0:3]
root      81139  0.0  0.0      0     0 ?        S    03:39   0:00  \_ [kworker/1:4]
root      83092  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [kworker/u200:2]
root      84542  0.0  0.0      0     0 ?        S    03:43   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44412  3188 ?        Ss   Nov15   1:05 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.0  39500  1268 ?        Ss   Nov15   0:23 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444    72 ?        Ss   Nov15   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   184 ?        S<sl Nov15   0:03 /sbin/auditd
root        512  0.0  0.0  21540   348 ?        Ss   Nov15   0:01 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780    52 ?        Ss   Nov15   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1076 ?        Ss   Nov15   0:11 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1264844 1124 ?        Ssl  Nov15   0:38 /usr/sbin/nscd
root        524  0.0  0.0  52852     4 ?        Ss   Nov15   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240   924 ?        Ssl  Nov15   0:06 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.1 224148  3188 ?        Ss   Nov15   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58740  1252 ?        Ss   Nov15   0:25 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256    48 ?        Ss   Nov15   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    32 ?        Ss   Nov15   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov15   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   428 ?        Ss   Nov15   0:01 /usr/sbin/crond -n
root      81352  0.0  0.0 183052    20 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      81404  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      81423  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 3h 16m
root      85684  0.0  0.0 183048  2160 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      85709  0.0  0.0 113284  1212 ?        Ss   03:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      85713  0.0  0.0 108052   356 ?        S    03:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      85730  0.0  0.0 113288  1516 ?        S    03:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      85841  0.0  0.0 153840  2096 ?        R    03:45   0:00  |               \_ ps auxf
root      85685  0.0  0.0 183048  2164 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      85724  0.0  0.0  20164   808 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      85686  0.0  0.0 183048  2160 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      85722  0.0  0.0  20164   808 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      85687  0.0  0.0 183048  2164 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      85725  0.0  0.0  20164   804 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      85688  0.0  0.0 183048  2160 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      85718  0.0  0.0  20164   804 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      85689  0.0  0.0 183048  2164 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      85726  0.0  0.0  20164   804 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      85690  0.0  0.0 183048  2156 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      85715  0.0  0.0  20164   988 ?        Ss   03:45   0:00  |   \_ jailshell (cloudsms) [85838] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  85838  0.0  0.0  20164   260 ?        S    03:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  85839  0.0  0.0 113284  1208 ?        S    03:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  85840  0.0  0.6 404052 15348 ?        S    03:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      85691  0.0  0.0 183048  2160 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      85723  0.0  0.0  20164   808 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      85693  0.0  0.0 183048  2156 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      85719  0.0  0.0  20164   808 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      85694  0.0  0.0 183048  2152 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      85714  0.0  0.0  20164   804 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      85695  0.0  0.0 183048  2152 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      85721  0.0  0.0 113284  1212 ?        Ss   03:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      85738  0.0  0.4 188220 11100 ?        S    03:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      85788  0.0  0.0 160224  2332 ?        S    03:45   0:00  |           \_ top -n 2 -b -c
root      85696  0.0  0.0 183048  2156 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      85711  0.0  0.0  20164   968 ?        Ss   03:45   0:00  |   \_ jailshell (pactpay) [85748] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   85748  0.0  0.0  20164   264 ?        S    03:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   85752  0.0  0.7 480124 17684 ?        S    03:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      85698  0.0  0.0 183048  2152 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      85727  0.0  0.0  20164   968 ?        Ss   03:45   0:00      \_ jailshell (nigeria) [85741] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   85741  0.0  0.0  20164   260 ?        S    03:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   85745  0.0  0.6 404052 16140 ?        S    03:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov15   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296    44 tty1     Ss+  Nov15   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704    12 ttyS0    Ss+  Nov15   0:00 /bin/bash
mailnull    622  0.0  0.1  88988  2744 ?        Ss   Nov15   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   376 ?        Ss   Nov15   0:04 /usr/sbin/sshd -D
root      85428  0.0  0.1 111304  4276 ?        Ss   03:44   0:00  \_ sshd: [accepted]
sshd      85431  0.0  0.1 115644  2628 ?        S    03:44   0:00      \_ sshd: [net]
root        919  0.0  0.2 1350088 6396 ?        Ssl  Nov15   0:20 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864    60 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  1.4 5654304 34248 ?       SLsl Nov15   0:26 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400     0 ?        Ssl  Nov15   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   268 ?        Ss   Nov15   0:00 pure-ftpd (SERVER)
root        926  0.0  0.0 572372   796 ?        Ssl  Nov15   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.4 114016 10144 ?        Ssl  Nov15   0:11 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    20 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132     0 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508   344 ?        Ss   Nov15   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.0  47524   748 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.0  47948   992 ?        S    Nov15   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320   392 ?        S    Nov15   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   440 ?        S    Nov15   0:00  \_ dovecot/log
dovenull   1069  0.0  0.0  47600   908 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.0  47848  2056 ?        S    Nov15   0:00  \_ dovecot/imap-login
root       1077  0.0  0.0  24528  1608 ?        S    Nov15   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568   420 ?        S    Nov15   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180   992 ?        S    Nov15   0:01  \_ dovecot/auth
systuser    932  0.0  0.0 113932     4 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 445028     0 ?        Ss   Nov15   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        935  0.0  0.2 1277312 5968 ?        Ssl  Nov15   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248   236 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       954  0.0  0.9 1185864 23528 ?       Ssl  Nov15   0:24 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.0 331088  1956 ?        Ssl  Nov15   0:12 /usr/sbin/rsyslogd -n
root        973  0.0  0.0 400740  1736 ?        Ss   Nov15   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
root        975  0.0  0.0 439788   220 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10456  3444 ?        Ss   Nov15   0:38 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892   396 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   228 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0 23.6 1901868 573440 ?      Ssl  Nov15   0:37 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.1 261288  4028 ?        Ss   Nov15   0:09 cpsrvd (SSL) - waiting for connections                   
root      85659  0.0  0.0      0     0 ?        Z    03:44   0:00  \_ [cpaneld - servi] <defunct>
root       1150  0.0  0.1 248140  2804 ?        Ss   Nov15   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  2.1 268280 50936 ?        S    Nov15   0:07  \_ spamd child
root       8199  0.0  0.0 249268  1336 ?        S    Nov15   0:00  \_ spamd child
systuser   1151  0.0  0.1 157704  2936 ?        S    Nov15   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1153  0.0  0.1 387556  2548 ?        Ss   Nov15   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1154  0.0  0.3 410480  9528 ?        Ss   Nov15   0:40 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1229  0.0  0.0 183900  2188 ?        Ss   Nov15   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1231  0.0  0.2 210204  5704 ?        Ss   Nov15   0:06 tailwatchd
root       1232  0.0  0.0 167452  1220 ?        Ss   Nov15   0:00 dnsadmin - dormant mode
root       1638  0.0  0.0 299272   436 ?        Ss   Nov15   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1681  0.0  0.0 130416   112 ?        SN   Nov15   0:00 cpanellogd - sleeping for logs
mysql      1785  1.4  9.2 1462292 224816 ?      Sl   Nov15  11:17 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.2 266984  5452 ?        Ss   Nov15   0:04 /usr/sbin/httpd -k start
root      81530  0.0  0.0  12804   148 ?        S    03:39   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      81531  0.0  0.0  12732    72 ?        S    03:39   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      81532  0.0  0.0  12820   180 ?        S    03:39   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      81548  0.0  0.2  53256  5152 ?        S    03:39   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    81549  0.2  0.4 277776 10484 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    81550  0.1  0.4 277636 10088 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    81551  0.1  0.4 277908 11024 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    81552  0.2  0.4 277620 10632 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    81553  0.1  0.5 277712 12308 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    81597  0.1  0.6 277672 16760 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    81614  0.2  0.6 277776 15640 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    81693  0.1  0.6 277512 15632 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    81703  0.1  0.5 277776 13128 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    81761  0.1  0.7 277788 17708 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    82245  0.2  0.5 277924 13208 ?        S    03:40   0:00  \_ /usr/sbin/httpd -k start
nobody    83280  0.2  0.6 277776 15228 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    83905  0.0  0.7 277776 18320 ?        S    03:42   0:00  \_ /usr/sbin/httpd -k start
nobody    83925  0.0  0.7 277776 18308 ?        S    03:42   0:00  \_ /usr/sbin/httpd -k start
oysipao+  31033  0.0  0.0   3148     8 ?        Ss   Nov15   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152    48 ?        S    Nov15   0:00  \_ [kworker]
root      48777  0.1  0.2 182324  6636 ?        Ss   00:00   0:14 lfd - sleeping
root      56521  0.0  0.0 123576   328 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
root      81206  0.0  0.0 132964   716 ?        SN   03:39   0:00 ConfigServer Version Check
root      81217  0.0  0.0 108056     0 ?        SN   03:39   0:00  \_ sleep 20878
## mysql stats
Uptime: 48035  Threads: 3  Questions: 4245852  Slow queries: 0  Opens: 14324  Flush tables: 1  Open tables: 2000  Queries per second avg: 88.390
*************************** 1. row ***************************
     Id: 59817
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 59822
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `oyo_official_polling_unit` WHERE `pu_code`='30/02/05/002accreditationhasendedvotingab
*************************** 3. row ***************************
     Id: 59826
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.4 TIME_WAIT
      1 114.119.153.50 TIME_WAIT
      1 172.213.21.146 TIME_WAIT
      1 172.71.102.66 TIME_WAIT
      1 ::1 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 03:45:01 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 13 hours 20 minutes 31 seconds
   Server load: 0.56 0.83 0.58
   Total accesses: 248917 - Total Traffic: 5.1 GB - Total Duration: 123864922
   CPU Usage: u4.79 s7.54 cu3029.36 cs2574.22 - 11.7% CPU load
   5.18 requests/sec - 111.0 kB/second - 21.4 kB/request - 497.615 ms/request
   6 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

_KK__K_KK___W......_............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc      M CPU   SS   Req   Dur   Conn  Child  Slot     Client     Protocol         VHost                                      Request
   0-1  81597 0/63/12588   _ 2.08 1     398 5930458 0.0   1.51  251.60 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=3382090841 HTTP/1.1
   1-1  81614 34/115/12882 K 3.28 0     24  6234177 33.7  1.01  254.12 66.249.70.8   http/1.1 test.cloudware.ng:443  GET /203252954?goodscode=0202987330 HTTP/1.1
   2-1  81693 32/94/12237  K 2.15 0     79  5861827 32.0  1.32  249.32 66.249.70.7   http/1.1 test.cloudware.ng:443  GET /906806639?goodscode=0905618926 HTTP/1.1
   3-1  81552 0/234/12623  _ 6.75 2     26  5798132 0.0   1.34  248.52 66.249.70.6   http/1.1 test.cloudware.ng:80   GET /2366126594?goodscode=2363026274 HTTP/1.1
   4-1  81703 0/191/13184  _ 4.33 0     0   6654586 0.0   1.08  250.88 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   5-1  81551 1/107/11720  K 2.49 1     502 5713519 232.7 1.56  247.38 192.178.4.98  http/1.1 team.cloudware.ng:443  GET /vendor/php-cs-fixer/diff/src/v1_4/LCS/ HTTP/1.1
   6-1  81761 0/152/12160  _ 3.37 0     0   5797211 0.0   1.35  247.38 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   7-1  82245 3/198/11321  K 5.54 0     416 5368435 96.9  2.83  227.71 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /?l=4091984369 HTTP/1.1
   8-1  83280 1/134/10804  K 3.26 2     359 5364002 33.5  1.14  226.23 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?l=559916836 HTTP/1.1
   9-1  83905 0/31/11015   _ 0.69 2     1   5203020 0.0   0.86  248.84 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   10-1 81553 0/66/11084   _ 2.34 2     1   5223769 0.0   2.36  238.50 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   11-1 83925 0/28/10290   _ 0.54 3     7   5269118 0.0   0.72  230.90 44.209.187.99 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/2019elections/images/2019electio
   12-1 81549 0/230/10089  W 5.59 0     0   5378330 0.0   1.10  207.61 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   13-0 -     0/0/9893     . 0.00 702   0   5035378 0.0   0.00  210.50 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-0 -     0/0/8700     . 0.00 705   0   4278843 0.0   0.00  185.31 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 -     0/0/9036     . 0.00 353   392 4682652 0.0   0.00  193.95 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=1505981542 HTTP/1.1
   16-0 -     0/0/8125     . 0.00 765   0   4046073 0.0   0.00  175.36 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 -     0/0/7806     . 0.00 804   0   3708865 0.0   0.00  159.19 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 -     0/0/6743     . 0.00 1101  0   3647060 0.0   0.00  157.52 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-1 81550 0/160/7341   _ 3.80 1     345 3532859 0.0   1.85  146.86 192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=174501634 HTTP/1.1
   20-0 -     0/0/4830     . 0.00 1278  0   2517337 0.0   0.00  104.70 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/4778     . 0.00 766   0   2497608 0.0   0.00  104.33 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/4592     . 0.00 1099  0   2570219 0.0   0.00  109.25 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/4649     . 0.00 856   0   2574917 0.0   0.00  107.67 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/2611     . 0.00 2791  0   1598512 0.0   0.00  62.90  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/1339     . 0.00 2916  0   720622  0.0   0.00  30.12  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/1182     . 0.00 4685  0   641835  0.0   0.00  26.97  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/767      . 0.00 4597  0   421900  0.0   0.00  15.98  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/967      . 0.00 4666  0   448661  0.0   0.00  17.56  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/522      . 0.00 4679  0   306534  0.0   0.00  11.62  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/1233     . 0.00 4688  0   719887  0.0   0.00  28.67  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/632      . 0.00 4678  0   244800  0.0   0.00  9.07   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/399      . 0.00 4664  0   188326  0.0   0.00  6.04   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/212      . 0.00 4687  0   119093  0.0   0.00  3.76   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/839      . 0.00 4417  0   454966  0.0   0.00  14.68  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/256      . 0.00 4675  0   159053  0.0   0.00  3.08   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/249      . 0.00 4651  0   209399  0.0   0.00  5.47   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/269      . 0.00 4671  0   116246  0.0   0.00  3.21   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/87       . 0.00 4684  0   41995   0.0   0.00  0.97   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/679      . 0.00 4669  0   324717  0.0   0.00  13.47  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/146      . 0.00 4674  0   134902  0.0   0.00  2.38   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/303      . 0.00 4222  0   130078  0.0   0.00  4.55   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/169      . 0.00 4662  0   102387  0.0   0.00  10.66  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/140      . 0.00 4693  0   75922   0.0   0.00  3.52   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/638      . 0.00 3130  0   199834  0.0   0.00  13.45  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/534      . 0.00 4667  0   268130  0.0   0.00  12.15  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/31       . 0.00 4668  0   37248   0.0   0.00  0.34   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/157      . 0.00 4682  0   39861   0.0   0.00  1.58   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/253      . 0.00 4488  0   72401   0.0   0.00  3.19   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/115      . 0.00 4574  0   85640   0.0   0.00  3.68   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/448      . 0.00 4694  0   253173  0.0   0.00  9.86   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/48       . 0.00 4650  0   22050   0.0   0.00  0.69   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/30       . 0.00 4692  0   8952    0.0   0.00  0.37   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/125      . 0.00 7464  0   81098   0.0   0.00  2.15   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/286      . 0.00 7458  0   153536  0.0   0.00  5.93   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/422      . 0.00 7440  0   320901  0.0   0.00  13.81  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/79       . 0.00 7488  0   50774   0.0   0.00  0.83   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/30       . 0.00 7489  0   8201    0.0   0.00  0.34   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/345      . 0.00 7324  0   224672  0.0   0.00  7.04   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/211      . 0.00 7328  0   85306   0.0   0.00  3.87   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/257      . 0.00 7072  0   154505  0.0   0.00  5.37   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/210      . 0.00 7343  0   75311   0.0   0.00  2.34   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/225      . 0.00 7483  0   116672  0.0   0.00  4.21   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/53       . 0.00 7330  0   41973   0.0   0.00  0.90   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/234      . 0.00 7451  0   61300   0.0   0.00  1.81   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/104      . 0.00 7331  0   43929   0.0   0.00  1.17   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/54       . 0.00 7449  0   37444   0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/137      . 0.00 7050  0   63130   0.0   0.00  2.34   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/21       . 0.00 7480  0   40095   0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/201      . 0.00 7459  0   93119   0.0   0.00  3.98   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/66       . 0.00 7468  0   66683   0.0   0.00  1.28   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/931      . 0.00 7442  0   498006  0.0   0.00  20.96  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/182      . 0.00 7319  0   69161   0.0   0.00  2.55   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/263      . 0.00 7446  0   128005  0.0   0.00  4.46   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/95       . 0.00 7316  0   55142   0.0   0.00  2.51   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/15       . 0.00 7476  0   12842   0.0   0.00  0.15   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/151      . 0.00 7479  0   87735   0.0   0.00  3.29   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/15       . 0.00 7478  0   2685    0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/17       . 0.00 7502  0   16053   0.0   0.00  0.22   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/43       . 0.00 7490  0   30142   0.0   0.00  0.74   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   80-0 -     0/0/21       . 0.00 7486  0   6790    0.0   0.00  0.30   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   81-0 -     0/0/361      . 0.00 7485  0   198769  0.0   0.00  8.30   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   82-0 -     0/0/6        . 0.00 7461  0   876     0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   83-0 -     0/0/3        . 0.00 37018 0   644     0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   84-0 -     0/0/2        . 0.00 37036 0   3       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   85-0 -     0/0/7        . 0.00 37003 0   3861    0.0   0.00  0.17   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 669
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 15 seconds, (range: 0...63)
   index usage: 11%, cache usage: 16%
   total entries stored since starting: 771
   total entries replaced since starting: 0
   total entries expired since starting: 102
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 0 miss
   total removes since starting: 0 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit