403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.02.57.txt
 ## swap threshold exceeded
## server overview
2025-11-07.02.57 load[0] mem[60/70] mysql[6/11] httpd[7]
              total        used        free      shared  buff/cache   available
Mem:           2363        1265         210          90         887         822
Swap:          1999        1433         566
 02:57:01 up  8:07,  0 users,  load average: 0.55, 0.62, 0.80
## system overview
top - 02:57:01 up  8:07,  0 users,  load average: 0.55, 0.62, 0.80
Tasks: 189 total,   3 running, 185 sleeping,   0 stopped,   1 zombie
%Cpu(s): 79.4 us, 17.6 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,   221560 free,  1289600 used,   909140 buff/cache
KiB Swap:  2047996 total,   580092 free,  1467904 used.   848352 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1759 mysql     20   0 1458584 254064   3340 S 123.5 10.5  10:41.75 /usr/sbin+
 98941 healtho+  20   0  457240  70056   4216 S  23.5  2.9   0:02.53 php-fpm: +
 99127 nigeria   20   0  400652  15932  10220 S  11.8  0.7   0:00.07 /opt/cpan+
   994 root      20   0  261552   7240   1408 S   5.9  0.3   0:08.15 cpsrvd (S+
     1 root      20   0   44396   3488   1540 S   0.0  0.1   0:41.01 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.73 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.27 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:35.93 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.24 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.26 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:17.71 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.62 [kauditd]
   228 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:02.05 [kworker/+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:02.34 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:01.54 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   6864   6564 S   0.0  0.3   0:16.43 /usr/lib/+
   379 root      20   0   45356    176    164 S   0.0  0.0   0:00.38 /usr/lib/+
   408 root      16  -4   55532    512    384 S   0.0  0.0   0:02.79 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   490 dbus      20   0   58752   1380    656 S   0.0  0.1   0:15.14 /usr/bin/+
   511 rpc       20   0   69256    184    120 S   0.0  0.0   0:00.03 /sbin/rpc+
   515 root      20   0   52852    356    248 S   0.0  0.0   0:00.01 /usr/sbin+
   517 root      20   0  224148   4384   1016 S   0.0  0.2   0:00.37 queueproc+
   519 polkitd   20   0  612240   1092    704 S   0.0  0.0   0:03.89 /usr/lib/+
   522 root      20   0   24704   1264    820 S   0.0  0.1   0:06.65 /usr/lib/+
   524 root      20   0   21540    448    336 S   0.0  0.0   0:00.68 /usr/sbin+
   526 root      20   0  152780    172    128 S   0.0  0.0   0:00.02 /usr/sbin+
   532 nscd      20   0  926904   1336    716 S   0.0  0.1   0:06.71 /usr/sbin+
   540 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 root      20   0    4388     96     92 S   0.0  0.0   0:00.00 /usr/sbin+
   567 root      20   0  124480    468    336 S   0.0  0.0   0:00.81 /usr/sbin+
   569 root      20   0   24208     36     12 S   0.0  0.0   0:00.00 /usr/sbin+
   580 root      20   0  108296    100     96 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704     84     84 S   0.0  0.0   0:00.02 /bin/bash
   591 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   616 mailnull  20   0   89116   3748    708 S   0.0  0.2   0:00.39 /usr/sbin+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:02.90 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   933 root      20   0   51508    556    392 S   0.0  0.0   0:00.34 /usr/sbin+
   934 systuser  20   0  113932   2096      0 S   0.0  0.1   0:00.02 /usr/loca+
   935 systuser  20   0  114016  13308   2408 S   0.0  0.5   0:06.68 /usr/loca+
   938 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.63 /usr/bin/+
   939 root      20   0  111304    468    364 S   0.0  0.0   0:04.19 /usr/sbin+
   941 root      20   0  445028      4      4 S   0.0  0.0   0:00.05 sw-engine+
   943 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   945 systuser  20   0  111608     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   946 telegraf  20   0 5654048  36196   6020 S   0.0  1.5   0:15.94 /usr/loca+
   947 root      20   0  572372    916    336 S   0.0  0.0   0:02.52 /usr/bin/+
   948 systuser  20   0   10132     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   951 root      20   0  153404    356    272 S   0.0  0.0   0:00.63 pure-ftpd+
   963 named     20   0  858120  44676   2196 S   0.0  1.8   0:16.62 /usr/sbin+
   965 root      20   0  397344  13304   8048 S   0.0  0.5   0:07.18 php-fpm: +
   970 root      20   0  436392  23972  16512 S   0.0  1.0   0:00.89 php-fpm: +
   983 root      20   0  306512   7428   6172 S   0.0  0.3   0:08.40 /usr/sbin+
   992 root      20   0  392856  11032   5440 S   0.0  0.5   0:00.77 php-fpm: +
   995 cpanelc+  20   0   10528   3448   2288 S   0.0  0.1   0:22.98 /usr/loca+
   999 root      20   0  386112  10560   5976 S   0.0  0.4   0:00.79 php-fpm: +
  1000 root      20   0 1763064 112268    504 S   0.0  4.6   0:14.03 /usr/loca+
  1009 root      20   0  385496  10992   5928 S   0.0  0.5   0:01.05 php-fpm: +
  1075 dovenull  20   0   47064   2212   1384 S   0.0  0.1   0:00.57 dovecot/p+
  1076 dovenull  20   0   47472   2640   1452 S   0.0  0.1   0:00.28 dovecot/i+
  1077 dovecot   20   0   10320    380    268 S   0.0  0.0   0:00.05 dovecot/a+
  1078 root      20   0   10452    624    444 S   0.0  0.0   0:00.35 dovecot/l+
  1079 dovenull  20   0   47048   2160   1400 S   0.0  0.1   0:00.43 dovecot/p+
  1080 dovenull  20   0   47812   3164   1752 S   0.0  0.1   0:00.37 dovecot/i+
  1087 root      20   0   24528   2116    368 S   0.0  0.1   0:00.18 dovecot/c+
  1090 dovecot   20   0   13568    648    452 S   0.0  0.0   0:00.07 dovecot/s+
  1143 systuser  20   0  157704   2848    828 S   0.0  0.1   0:00.14 SonarPush+
  1150 wp-tool+  20   0  387556  13264   1624 S   0.0  0.5   0:00.30 /usr/bin/+
  1151 wp-tool+  20   0  410480  35644   1668 S   0.0  1.5   0:24.07 /usr/bin/+
  1175 dovecot   20   0   41128   1472   1012 S   0.0  0.1   0:00.53 dovecot/a+
  1182 root      20   0  248280 116576    796 S   0.0  4.8   0:06.28 /usr/loca+
  1235 root      20   0  167452   4156   2784 S   0.0  0.2   0:00.53 dnsadmin +
  1238 root      20   0  262228  24616   6760 S   0.0  1.0   0:01.52 cpdavd - +
  1239 root      20   0  209916  11740   2516 S   0.0  0.5   0:02.39 tailwatchd
  1684 root      38  18  130416   1396    716 S   0.0  0.1   0:00.07 cpanellog+
  1953 root      20   0  266984  30416   5340 S   0.0  1.3   0:01.72 /usr/sbin+
  2038 root      20   0  299272    508    340 S   0.0  0.0   0:00.81 php-fpm: +
  5242 root      20   0  262460 128384   2680 S   0.0  5.3   0:03.19 spamd chi+
  5243 root      20   0  248280 116032    280 S   0.0  4.8   0:00.01 spamd chi+
  7033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  7053 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.53 [kworker]
 28586 root      20   0  181968  29960   2212 S   0.0  1.2   0:10.15 lfd - sle+
 45429 root      20   0   12772   1388   1180 S   0.0  0.1   0:00.64 /usr/loca+
 45430 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.55 /usr/loca+
 45431 root      20   0   12788   1400   1180 S   0.0  0.1   0:00.60 /usr/loca+
 45432 root      20   0   53252  11720   2380 S   0.0  0.5   0:00.05 /usr/loca+
 50184 root      20   0  183048   2104   1544 S   0.0  0.1   0:00.00 /usr/sbin+
 50221 root      20   0  113284   1104    924 S   0.0  0.0   0:00.00 /bin/sh -+
 50249 root      20   0  108056    304    232 S   0.0  0.0   0:00.00 sleep 4h +
 72908 root      20   0 1341636  10556    600 S   0.0  0.4   0:00.09 /usr/bin/+
 72948 root      20   0 1277312  11648    596 S   0.0  0.5   0:00.07 /usr/bin/+
 78901 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 82289 nobody    20   0  277680  35936   4636 S   0.0  1.5   0:01.67 /usr/sbin+
 83134 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 84815 nobody    20   0  277912  35936   4632 S   0.0  1.5   0:01.48 /usr/sbin+
 85064 nobody    20   0  277884  36040   4636 S   0.0  1.5   0:01.42 /usr/sbin+
 85829 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86262 nobody    20   0  277680  35888   4660 S   0.0  1.5   0:01.51 /usr/sbin+
 89071 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 91463 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 91478 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 94578 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 94917 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 95365 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96553 nobody    20   0  277508  35348   4268 S   0.0  1.5   0:00.34 /usr/sbin+
 96559 nobody    20   0  277576  35212   4064 S   0.0  1.5   0:00.24 /usr/sbin+
 96665 nobody    20   0  277504  35424   4288 S   0.0  1.5   0:00.29 /usr/sbin+
 96679 nobody    20   0  277820  35268   4064 S   0.0  1.5   0:00.29 /usr/sbin+
 96683 nobody    20   0  277480  35260   4124 S   0.0  1.5   0:00.30 /usr/sbin+
 96685 nobody    20   0  277744  35384   4092 S   0.0  1.5   0:00.41 /usr/sbin+
 97140 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 97988 nobody    20   0  277892  35272   3936 S   0.0  1.5   0:00.14 /usr/sbin+
 98951 healtho+  20   0  457376  70052   4212 S   0.0  2.9   0:02.14 php-fpm: +
 98983 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 98984 nigeria   20   0  397064   8212   2436 S   0.0  0.3   0:00.00 php-fpm: +
 98987 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 99052 healtho+  20   0  428568  41136   4208 S   0.0  1.7   0:00.35 php-fpm: +
 99053 root      20   0  162436   5828   4336 S   0.0  0.2   0:00.01 sshd: roo+
 99054 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 99060 root      20   0  111304   4444   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 99062 root      20   0  262228  19392   1476 S   0.0  0.8   0:00.00 cpdavd - +
 99070 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 99078 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 99079 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 99080 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 99082 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 99083 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 99084 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 99086 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 99087 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 99088 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 99090 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 99092 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 99094 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 99096 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
 99099 root      20   0   20164    804    632 R   0.0  0.0   0:00.00 /usr/loca+
 99100 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 99101 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 99102 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 99104 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 99105 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 99106 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 99109 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 99113 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 99116 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 99117 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 99124 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 99143 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 99155 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 99158 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 99160 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [setupvir+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov06   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov06   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov06   0:35  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov06   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov06   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov06   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov06   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [kauditd]
root        228  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov06   0:02  \_ [kworker/0:1H]
root        247  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [scsi_tmf_1]
root        250  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   Nov06   0:02  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    Nov06   0:01  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [xprtiod]
root        591  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   Nov06   0:02  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    Nov06   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   Nov06   0:00  \_ [ext4-rsv-conver]
root      78901  0.0  0.0      0     0 ?        S    02:15   0:00  \_ [kworker/u200:2]
root      83134  0.0  0.0      0     0 ?        S    02:25   0:00  \_ [kworker/1:1]
root      85829  0.0  0.0      0     0 ?        S    02:31   0:00  \_ [kworker/1:2]
root      89071  0.0  0.0      0     0 ?        S    02:38   0:00  \_ [kworker/0:5]
root      91463  0.0  0.0      0     0 ?        S    02:43   0:00  \_ [kworker/1:0]
root      91478  0.0  0.0      0     0 ?        S    02:43   0:00  \_ [kworker/0:3]
root      94578  0.0  0.0      0     0 ?        S    02:46   0:00  \_ [kworker/1:4]
root      94917  0.0  0.0      0     0 ?        S    02:47   0:00  \_ [kworker/0:4]
root      95365  0.0  0.0      0     0 ?        S    02:48   0:00  \_ [kworker/u200:1]
root      97140  0.0  0.0      0     0 ?        S    02:52   0:00  \_ [kworker/1:3]
root      99143  0.0  0.0      0     0 ?        S    02:57   0:00  \_ [kworker/0:0]
root          1  0.1  0.1  44396  3488 ?        Ss   Nov06   0:41 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  40244  6864 ?        Ss   Nov06   0:16 /usr/lib/systemd/systemd-journald
root        379  0.0  0.0  45356   176 ?        Ss   Nov06   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   512 ?        S<sl Nov06   0:02 /sbin/auditd
dbus        490  0.0  0.0  58752  1380 ?        Ss   Nov06   0:15 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256   184 ?        Ss   Nov06   0:00 /sbin/rpcbind -w
root        515  0.0  0.0  52852   356 ?        Ss   Nov06   0:00 /usr/sbin/smartd -n -q never
root        517  0.0  0.1 224148  4384 ?        Ss   Nov06   0:00 queueprocd - waiting up to 60s to process a task
polkitd     519  0.0  0.0 612240  1092 ?        Ssl  Nov06   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        522  0.0  0.0  24704  1264 ?        Ss   Nov06   0:06 /usr/lib/systemd/systemd-logind
root        524  0.0  0.0  21540   448 ?        Ss   Nov06   0:00 /usr/sbin/irqbalance --foreground
root        526  0.0  0.0 152780   172 ?        Ss   Nov06   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        532  0.0  0.0 926904  1336 ?        Ssl  Nov06   0:06 /usr/sbin/nscd
root        540  0.0  0.0 195208     0 ?        Ssl  Nov06   0:00 /usr/sbin/gssproxy -D
root        541  0.0  0.0   4388    96 ?        Ss   Nov06   0:00 /usr/sbin/acpid
root        567  0.0  0.0 124480   468 ?        Ss   Nov06   0:00 /usr/sbin/crond -n
root      50184  0.0  0.0 183048  2104 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      50221  0.0  0.0 113284  1104 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      50249  0.0  0.0 108056   304 ?        S    01:00   0:00  |       \_ sleep 4h 1m
root      99078  0.0  0.0 183048  2140 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      99092  0.0  0.0 113284  1208 ?        Ss   02:57   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      99109  0.0  0.0 108052   360 ?        S    02:57   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      99116  0.0  0.0 113288  1516 ?        S    02:57   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      99161  0.0  0.0 153840  2096 ?        R    02:57   0:00  |               \_ ps auxf
root      99079  0.0  0.0 183048  2144 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      99099  0.0  0.0  20164   804 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      99080  0.0  0.0 183048  2144 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      99105  0.0  0.0  20164   804 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      99082  0.0  0.0 183048  2144 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      99100  0.0  0.0  20164   808 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      99083  0.0  0.0 183048  2140 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      99094  0.0  0.0  20164   804 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      99084  0.0  0.0 183048  2144 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      99104  0.0  0.0  20164   804 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      99086  0.0  0.0 183048  2144 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      99106  0.0  0.0  20164   804 ?        Ss   02:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      99087  0.0  0.0 183048  2144 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      99096  0.0  0.0  20164   984 ?        Ss   02:57   0:00  |   \_ jailshell (cloudsms) [99162] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  99162  0.0  0.0  20164   256 ?        S    02:57   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  99163  0.0  0.0 113284  1208 ?        S    02:57   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      99088  0.0  0.0 183048  2148 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      99101  0.0  0.0  20164   968 ?        Ss   02:57   0:00  |   \_ jailshell (pactpay) [99113] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   99113  0.0  0.0  20164   264 ?        S    02:57   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   99117  0.0  0.7 476724 17480 ?        S    02:57   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      99090  0.0  0.0 183048  2144 ?        S    02:57   0:00  \_ /usr/sbin/CROND -n
root      99102  0.0  0.0  20164   964 ?        Ss   02:57   0:00      \_ jailshell (nigeria) [99124] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   99124  0.0  0.0  20164   260 ?        S    02:57   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   99127  0.0  0.6 400652 15932 ?        R    02:57   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        569  0.0  0.0  24208    36 ?        Ss   Nov06   0:00 /usr/sbin/atd -f
root        580  0.0  0.0 108296   100 tty1     Ss+  Nov06   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704    84 ttyS0    Ss+  Nov06   0:00 /bin/bash
mailnull    616  0.0  0.1  89116  3748 ?        Ss   Nov06   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        933  0.0  0.0  51508   556 ?        Ss   Nov06   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47064  2212 ?        S    Nov06   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  47472  2640 ?        S    Nov06   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   380 ?        S    Nov06   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   624 ?        S    Nov06   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47048  2160 ?        S    Nov06   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47812  3164 ?        S    Nov06   0:00  \_ dovecot/imap-login
root       1087  0.0  0.0  24528  2116 ?        S    Nov06   0:00  \_ dovecot/config
dovecot    1090  0.0  0.0  13568   648 ?        S    Nov06   0:00  \_ dovecot/stats
dovecot    1175  0.0  0.0  41128  1472 ?        S    Nov06   0:00  \_ dovecot/auth
systuser    934  0.0  0.0 113932  2096 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.5 114016 13308 ?        Ssl  Nov06   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+    938  0.0  0.0 342400     0 ?        Ssl  Nov06   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   468 ?        Ss   Nov06   0:04 /usr/sbin/sshd -D
root      98983  0.0  0.1 111304  4268 ?        Ss   02:56   0:00  \_ sshd: [accepted]
sshd      98987  0.0  0.1 115644  2628 ?        S    02:56   0:00  |   \_ sshd: [net]
root      99053  0.3  0.2 162436  5828 ?        Ss   02:56   0:00  \_ sshd: root [priv]
sshd      99054  0.0  0.1 115644  2628 ?        S    02:56   0:00  |   \_ sshd: root [net]
root      99060  0.0  0.1 111304  4444 ?        Ss   02:56   0:00  \_ sshd: [accepted]
sshd      99070  0.0  0.1 115644  2624 ?        S    02:56   0:00      \_ sshd: [net]
root        941  0.0  0.0 445028     4 ?        Ss   Nov06   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    943  0.0  0.0  14068    48 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    945  0.0  0.0 111608    72 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    946  0.0  1.4 5654048 36196 ?       SLsl Nov06   0:15 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        947  0.0  0.0 572372   916 ?        Ssl  Nov06   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    948  0.0  0.0  10132    24 ?        Ssl  Nov06   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        951  0.0  0.0 153404   356 ?        Ss   Nov06   0:00 pure-ftpd (SERVER)
named       963  0.0  1.8 858120 44676 ?        Ssl  Nov06   0:16 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.5 397344 13304 ?        Ss   Nov06   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  98941 11.5  2.8 457240 70056 ?        S    02:56   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  98951 10.1  2.8 457376 70052 ?        S    02:56   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   98984  0.0  0.3 397064  8212 ?        S    02:56   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  99052 11.6  1.6 428568 41136 ?        S    02:56   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        970  0.0  0.9 436392 23972 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        983  0.0  0.3 306512  7428 ?        Ssl  Nov06   0:08 /usr/sbin/rsyslogd -n
root        992  0.0  0.4 392856 11032 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        994  0.0  0.2 261552  7240 ?        Ss   Nov06   0:08 cpsrvd (SSL) - waiting for connections                   
root      99158  0.0  0.0      0     0 ?        Z    02:57   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    995  0.0  0.1  10528  3448 ?        Ss   Nov06   0:22 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        999  0.0  0.4 386112 10560 ?        Ss   Nov06   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1000  0.0  4.6 1763064 112268 ?      Ssl  Nov06   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1009  0.0  0.4 385496 10992 ?        Ss   Nov06   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser   1143  0.0  0.1 157704  2848 ?        S    Nov06   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1150  0.0  0.5 387556 13264 ?        Ss   Nov06   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1151  0.0  1.4 410480 35644 ?        Ss   Nov06   0:24 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1182  0.0  4.8 248280 116576 ?       Ss   Nov06   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5242  0.0  5.3 262460 128384 ?       S    Nov06   0:03  \_ spamd child
root       5243  0.0  4.7 248280 116032 ?       S    Nov06   0:00  \_ spamd child
root       1235  0.0  0.1 167452  4156 ?        Ss   Nov06   0:00 dnsadmin - dormant mode
root       1238  0.0  1.0 262228 24616 ?        Ss   Nov06   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root      99062  0.0  0.8 262228 19392 ?        S    02:56   0:00  \_ cpdavd - accepting connections on: 2091, 2077, 2078
root       1239  0.0  0.4 209916 11740 ?        Ss   Nov06   0:02 tailwatchd
root       1684  0.0  0.0 130416  1396 ?        SN   Nov06   0:00 cpanellogd - sleeping for logs
mysql      1759  2.1 10.4 1458584 254064 ?      Sl   Nov06  10:41 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1953  0.0  1.2 266984 30416 ?        Ss   Nov06   0:01 /usr/sbin/httpd -k start
root      45429  0.0  0.0  12772  1388 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      45430  0.0  0.0  12732  1364 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      45431  0.0  0.0  12788  1400 ?        S    00:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      45432  0.0  0.4  53252 11720 ?        S    00:47   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    82289  0.0  1.4 277680 35936 ?        S    02:23   0:01  \_ /usr/sbin/httpd -k start
nobody    84815  0.0  1.4 277912 35936 ?        S    02:29   0:01  \_ /usr/sbin/httpd -k start
nobody    85064  0.0  1.4 277884 36040 ?        S    02:29   0:01  \_ /usr/sbin/httpd -k start
nobody    86262  0.1  1.4 277680 35888 ?        S    02:32   0:01  \_ /usr/sbin/httpd -k start
nobody    96553  0.0  1.4 277508 35348 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    96559  0.0  1.4 277576 35212 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    96665  0.0  1.4 277504 35424 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    96679  0.0  1.4 277820 35268 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    96683  0.0  1.4 277480 35260 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    96685  0.1  1.4 277744 35384 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    97988  0.0  1.4 277892 35272 ?        S    02:54   0:00  \_ /usr/sbin/httpd -k start
root       2038  0.0  0.0 299272   508 ?        Ss   Nov06   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
oysipao+   7033  0.0  0.0   3148   416 ?        Ss   Nov06   0:00 [kworker]
oysipao+   7053  0.0  0.0   3152   424 ?        S    Nov06   0:00  \_ [kworker]
root      28586  0.0  1.2 181968 29960 ?        Ss   00:00   0:10 lfd - sleeping
root      72908  0.0  0.4 1341636 10556 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      72948  0.0  0.4 1277312 11648 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 29246  Threads: 3  Questions: 4938504  Slow queries: 0  Opens: 8213  Flush tables: 1  Open tables: 2000  Queries per second avg: 168.860
*************************** 1. row ***************************
     Id: 72396
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 72397
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `28` WHERE `phone`='2348116810874' LIMIT 1
*************************** 3. row ***************************
     Id: 72405
   User: unauthenticated user
   Host: localhost
     db: NULL
Command: Connect
   Time: 0
  State: Receiving from client
   Info: NULL
*************************** 4. row ***************************
     Id: 72406
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.143 TIME_WAIT
      1 114.119.137.160 TIME_WAIT
      1 142.44.225.208 TIME_WAIT
      1 ::1 TIME_WAIT
      1 3.83.76.234 TIME_WAIT
      1 54.39.0.122 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 20.78.73.233 TIME_WAIT
     72 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 02:57:01 WAT
   Restart Time: Thursday, 06-Nov-2025 18:49:42 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 8 hours 7 minutes 19 seconds
   Server load: 0.55 0.62 0.80
   Total accesses: 92457 - Total Traffic: 1.1 GB - Total Duration: 44297328
   CPU Usage: u6.47 s3.34 cu525.11 cs275.63 - 2.77% CPU load
   3.16 requests/sec - 38.4 kB/second - 12.1 kB/request - 479.113 ms/request
   7 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

K.KW_.__K...R_.W..........K.....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur   Conn Child  Slot     Client     Protocol              VHost                              Request
   0-1  97988 1/42/6695   K 0.42 0     360 2977512 37.9 0.69  79.07 66.249.70.38   http/1.1 support.cloudware.ng:443        GET /?c=1747278564 HTTP/1.1
   1-1  -     0/0/6674    . 0.00 333   0   3006120 0.0  0.00  76.00 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   2-1  84815 1/499/7010  K 4.58 2     263 3079994 34.0 4.61  85.57 66.249.70.39   http/1.1 support.cloudware.ng:443        GET /?c=2548888642 HTTP/1.1
   3-1  86262 0/604/6294  W 5.46 0     0   2759045 0.0  4.73  68.20 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   4-1  96665 0/91/6178   _ 0.72 0     0   2886956 0.0  1.02  68.08 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   5-1  -     0/0/5768    . 0.00 358   0   2570669 0.0  0.00  68.89 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   6-1  96553 0/98/5712   _ 0.92 0     557 2625745 0.0  1.19  66.08 157.230.45.41  http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   7-1  85064 0/594/5904  _ 5.75 0     1   2527924 0.0  6.79  71.38 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80          GET / HTTP/1.1
   8-1  96559 1/92/5018   K 0.34 4     264 2376263 34.0 1.01  59.75 66.249.70.38   http/1.1 support.cloudware.ng:443        GET /?c=159581110 HTTP/1.1
   9-1  -     0/0/5286    . 0.00 345   0   2458808 0.0  0.00  63.90 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   10-1 -     0/0/4598    . 0.00 137   0   2341480 0.0  0.00  58.72 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   11-1 -     0/0/3884    . 0.00 189   0   2019966 0.0  0.00  54.30 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   12-1 96679 0/87/3769   R 0.76 1     288 1714266 0.0  0.95  54.50 157.230.45.41  http/1.1
   13-1 96683 0/93/2141   _ 0.74 0     1   1233221 0.0  1.04  29.47 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80          GET / HTTP/1.1
   14-1 -     0/0/2074    . 0.00 292   0   1183304 0.0  0.00  21.74 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-1 96685 15/199/2234 W 1.46 0     0   1373626 58.0 1.26  21.22 20.78.73.233   http/1.1 scorecard.staging.cloudware.ng: GET /cgi-sys/suspendedpage.cgi HTTP/1.1
   16-1 -     0/0/3144    . 0.00 343   0   1608036 0.0  0.00  34.26 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-1 -     0/0/1389    . 0.00 1535  0   975785  0.0  0.00  13.84 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-1 -     0/0/1237    . 0.00 976   0   851242  0.0  0.00  20.31 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-1 -     0/0/165     . 0.00 1930  4   161557  0.0  0.00  1.22  47.128.111.122 http/1.1
   20-1 -     0/0/1143    . 0.00 385   0   610407  0.0  0.00  11.12 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-1 -     0/0/937     . 0.00 1541  0   516242  0.0  0.00  12.17 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-1 -     0/0/1049    . 0.00 1896  0   501502  0.0  0.00  13.41 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-1 -     0/0/393     . 0.00 1515  0   198868  0.0  0.00  4.56  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-1 -     0/0/436     . 0.00 1307  0   228232  0.0  0.00  3.54  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-1 -     0/0/367     . 0.00 1909  0   132533  0.0  0.00  4.03  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-1 82289 1/485/767   K 6.72 1     307 355901  36.0 6.03  9.11  66.249.70.32   http/1.1 support.cloudware.ng:443        GET /?c=3405611495 HTTP/1.1
   27-1 -     0/0/513     . 0.00 1918  0   237087  0.0  0.00  3.99  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-1 -     0/0/208     . 0.00 1915  0   104363  0.0  0.00  2.45  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-1 -     0/0/175     . 0.00 1931  0   89634   0.0  0.00  1.53  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-1 -     0/0/15      . 0.00 1919  0   3618    0.0  0.00  0.14  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/300     . 0.00 15756 0   132085  0.0  0.00  2.48  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/8       . 0.00 16909 0   1509    0.0  0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/5       . 0.00 16930 0   1381    0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/106     . 0.00 16912 0   53900   0.0  0.00  1.65  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/5       . 0.00 16921 0   1494    0.0  0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/181     . 0.00 16268 0   68720   0.0  0.00  1.46  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/308     . 0.00 16934 0   157495  0.0  0.00  3.36  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/4       . 0.00 16931 4   712     0.0  0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/4       . 0.00 16924 0   1369    0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/116     . 0.00 16448 0   43685   0.0  0.00  1.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/1       . 0.00 16933 0   0       0.0  0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/4       . 0.00 16903 0   735     0.0  0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/2       . 0.00 16920 0   54      0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/236     . 0.00 15936 0   124261  0.0  0.00  2.80  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 444
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 14 seconds, (range: 1...64)
   index usage: 7%, cache usage: 10%
   total entries stored since starting: 15484
   total entries replaced since starting: 0
   total entries expired since starting: 15032
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 39 miss
   total removes since starting: 8 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit