403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.16.15.txt
 ## swap threshold exceeded
## server overview
2025-11-07.16.15 load[0] mem[60/75] mysql[3/25] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1342         106          62         914         788
Swap:          1999        1581         418
 16:15:02 up  6:28,  0 users,  load average: 0.64, 0.69, 0.54
## system overview
top - 16:15:02 up  6:28,  0 users,  load average: 0.64, 0.69, 0.54
Tasks: 194 total,   3 running, 190 sleeping,   0 stopped,   1 zombie
%Cpu(s): 82.4 us, 14.7 sy,  0.0 ni,  2.9 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   112060 free,  1371540 used,   936700 buff/cache
KiB Swap:  2047996 total,   428912 free,  1619084 used.   810532 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1469608 264452   3724 S 152.9 10.9   7:18.34 /usr/sbin+
 80215 nigeria   20   0  400652  15940  10220 S  11.8  0.7   0:00.06 /opt/cpan+
 73308 root      20   0       0      0      0 R   5.9  0.0   0:00.02 [kworker/+
     1 root      20   0   44424   3660   1692 S   0.0  0.2   0:33.81 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.76 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.39 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:26.36 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.35 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.84 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:24.49 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.44 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.57 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.87 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.50 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40244   5480   5232 S   0.0  0.2   0:11.87 /usr/lib/+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    456    336 S   0.0  0.0   0:01.86 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0   24720   1224    788 S   0.0  0.1   0:05.30 /usr/lib/+
   493 root      20   0  224268   4536    952 S   0.0  0.2   0:00.40 queueproc+
   494 root      20   0  152780     76     36 S   0.0  0.0   0:00.01 /usr/sbin+
   499 nscd      20   0 1334484   1936    764 S   0.0  0.1   0:08.34 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   503 dbus      20   0   57032   1328    616 S   0.0  0.1   0:12.16 /usr/bin/+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    256    148 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    984    608 S   0.0  0.0   0:03.12 /usr/lib/+
   541 root      20   0   21540    388    280 S   0.0  0.0   0:00.54 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    428    296 S   0.0  0.0   0:00.65 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3904    960 S   0.0  0.2   0:00.38 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.28 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   959 systuser  20   0  114016  10360   2444 S   0.0  0.4   0:05.55 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   961 root      20   0  572372    624    164 S   0.0  0.0   0:02.06 /usr/bin/+
   963 telegraf  20   0 5654048  35084   5780 S   0.0  1.4   0:12.79 /usr/loca+
   964 root      20   0   51508    628    448 S   0.0  0.0   0:00.31 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   981 named     20   0  784388  36668   2316 S   0.0  1.5   0:15.45 /usr/sbin+
   982 root      20   0 1828076 122772    696 S   0.0  5.1   0:35.55 /usr/loca+
   984 root      20   0  386112    504    408 S   0.0  0.0   0:00.69 php-fpm: +
   992 root      20   0  397344   2420    612 S   0.0  0.1   0:04.95 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.51 /usr/bin/+
  1007 root      20   0  392856    380    296 S   0.0  0.0   0:00.66 php-fpm: +
  1012 root      20   0  385496    552    452 S   0.0  0.0   0:00.69 php-fpm: +
  1013 root      20   0  281936   5744   4824 S   0.0  0.2   0:06.15 /usr/sbin+
  1014 root      20   0  261164  27460   4980 S   0.0  1.1   0:07.45 cpsrvd (S+
  1017 root      20   0  436392    404    316 S   0.0  0.0   0:00.79 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.51 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:02.59 /usr/sbin+
  1026 cpanelc+  20   0   10540   3564   2304 S   0.0  0.1   0:17.73 /usr/loca+
  1096 dovenull  20   0   46912   2348   1784 S   0.0  0.1   0:00.34 dovecot/p+
  1097 dovenull  20   0   47852   3160   1920 S   0.0  0.1   0:00.17 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.05 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.29 dovecot/l+
  1100 dovenull  20   0   46912   2164   1596 S   0.0  0.1   0:00.47 dovecot/p+
  1101 dovenull  20   0   47996   3336   1816 S   0.0  0.1   0:00.27 dovecot/i+
  1108 root      20   0   24568   2524    512 S   0.0  0.1   0:00.19 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.06 dovecot/s+
  1182 dovecot   20   0   41136   1468   1012 S   0.0  0.1   0:00.51 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.12 SonarPush+
  1233 wp-tool+  20   0  410452  26032   1684 S   0.0  1.1   0:19.14 /usr/bin/+
  1234 wp-tool+  20   0  387528   3516   1660 S   0.0  0.1   0:00.26 /usr/bin/+
  1264 root      20   0  262224  24500   6768 S   0.0  1.0   0:01.99 cpdavd - +
  1265 root      20   0  209320  10932   2328 S   0.0  0.5   0:02.48 tailwatchd
  1267 root      20   0  167452   4268   2900 S   0.0  0.2   0:00.40 dnsadmin +
  1713 root      20   0  299272    632    448 S   0.0  0.0   0:00.63 php-fpm: +
  1728 root      38  18  130416   1376    692 S   0.0  0.1   0:00.06 cpanellog+
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:01.36 /usr/sbin+
  1970 root      20   0   12788    328    212 S   0.0  0.0   0:01.77 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:01.49 /usr/loca+
  1972 root      20   0   12804    340    216 S   0.0  0.0   0:01.63 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  182836  11208   1104 S   0.0  0.5   0:20.35 lfd - sle+
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.43 [kworker]
 19376 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
 28537 root      20   0  248100 118080   1388 S   0.0  4.9   0:05.03 /usr/loca+
 32709 root      20   0  269720 136616   3040 S   0.0  5.6   0:22.03 spamd chi+
 32710 root      20   0  258916 125492   2892 S   0.0  5.2   0:00.73 spamd chi+
 40212 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 49002 nobody    20   0  277588  21020   5096 S   0.0  0.9   0:03.07 /usr/sbin+
 50117 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 63551 nobody    20   0  277512  19472   4588 S   0.0  0.8   0:01.01 /usr/sbin+
 65547 nobody    20   0  277528  19500   4664 S   0.0  0.8   0:01.10 /usr/sbin+
 67373 nobody    20   0  277852  20368   4872 S   0.0  0.8   0:01.69 /usr/sbin+
 71770 nobody    20   0  277852  19480   4684 S   0.0  0.8   0:01.24 /usr/sbin+
 71901 cloudw    20   0  471808   9780   5328 S   0.0  0.4   0:00.89 php-fpm: +
 72906 root      20   0 1341636  10700    600 S   0.0  0.4   0:00.06 /usr/bin/+
 72945 root      20   0 1277312  11616    596 S   0.0  0.5   0:00.06 /usr/bin/+
 73782 nobody    20   0  277852  18932   4300 S   0.0  0.8   0:00.31 /usr/sbin+
 73842 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 74373 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 75231 nobody    20   0  277512  18636   4268 S   0.0  0.8   0:00.39 /usr/sbin+
 75701 nobody    20   0  277508  18652   4344 S   0.0  0.8   0:00.38 /usr/sbin+
 75871 nobody    20   0  277460  18056   4116 S   0.0  0.7   0:00.33 /usr/sbin+
 75877 nobody    20   0  277540  18336   4124 S   0.0  0.8   0:00.35 /usr/sbin+
 75878 nobody    20   0  277844  18872   4308 S   0.0  0.8   0:00.40 /usr/sbin+
 76809 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 77244 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 77310 cloudw    20   0  471808   9780   5328 S   0.0  0.4   0:00.45 php-fpm: +
 77392 nobody    20   0  277492  18716   4148 S   0.0  0.8   0:00.34 /usr/sbin+
 77671 nobody    20   0  277824  18560   4116 S   0.0  0.8   0:00.31 /usr/sbin+
 77696 nobody    20   0  277844  18852   4124 S   0.0  0.8   0:00.35 /usr/sbin+
 77810 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 77948 nobody    20   0  277516  18588   4140 S   0.0  0.8   0:00.30 /usr/sbin+
 79515 cloudw    20   0  471784   9264   4980 S   0.0  0.4   0:00.21 php-fpm: +
 79625 cloudw    20   0  471784   9260   4976 S   0.0  0.4   0:00.21 php-fpm: +
 79676 nobody    20   0  277844  17424   3696 S   0.0  0.7   0:00.10 /usr/sbin+
 79836 cloudw    20   0  471784   9264   4980 S   0.0  0.4   0:00.22 php-fpm: +
 79888 nobody    20   0  277656  17336   3556 S   0.0  0.7   0:00.08 /usr/sbin+
 80022 healtho+  20   0  459424  69476   4188 S   0.0  2.9   0:03.94 php-fpm: +
 80076 healtho+  20   0  457240  67380   4188 S   0.0  2.8   0:01.45 php-fpm: +
 80079 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 80092 root      20   0  111304   4448   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 80093 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 80096 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 80121 nobody    20   0  277368  16376   3104 S   0.0  0.7   0:00.00 /usr/sbin+
 80129 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 80130 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 80139 nigeria   20   0  397064   5272   2264 S   0.0  0.2   0:00.00 php-fpm: +
 80143 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 80144 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80146 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80149 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80150 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80152 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80155 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 80156 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 80158 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 80176 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 80177 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 80179 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 80180 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 80184 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 80186 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 80187 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 80188 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 80189 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 80192 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 80200 root      20   0  188228  11112   5152 S   0.0  0.5   0:00.01 /usr/loca+
 80207 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 80209 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 80220 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 80224 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 80228 cloudw    20   0  364868  18972  10792 R   0.0  0.8   0:00.02 /opt/cpan+
 80251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 80261 root      20   0  160224   2332   1632 S   0.0  0.1   0:00.00 top -n 2 +
 80302 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    09:46   0:26  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    09:46   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:24  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      19376  0.0  0.0      0     0 ?        S    14:12   0:00  \_ [kworker/u200:0]
root      40212  0.0  0.0      0     0 ?        S    14:56   0:00  \_ [kworker/0:1]
root      50117  0.0  0.0      0     0 ?        S    15:15   0:00  \_ [kworker/u200:2]
root      73308  0.0  0.0      0     0 ?        S    16:01   0:00  \_ [kworker/1:0]
root      73842  0.0  0.0      0     0 ?        S    16:02   0:00  \_ [kworker/0:2]
root      74373  0.0  0.0      0     0 ?        S    16:03   0:00  \_ [kworker/1:1]
root      76809  0.0  0.0      0     0 ?        S    16:08   0:00  \_ [kworker/1:2]
root      77244  0.0  0.0      0     0 ?        S    16:09   0:00  \_ [kworker/1:3]
root      77810  0.0  0.0      0     0 ?        S    16:10   0:00  \_ [kworker/0:3]
root      80251  0.0  0.0      0     0 ?        S    16:15   0:00  \_ [kworker/0:0]
root          1  0.1  0.1  44424  3660 ?        Ss   09:46   0:33 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.2  40244  5480 ?        Ss   09:46   0:11 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   456 ?        S<sl 09:46   0:01 /sbin/auditd
root        489  0.0  0.0  24720  1224 ?        Ss   09:46   0:05 /usr/lib/systemd/systemd-logind
root        493  0.0  0.1 224268  4536 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    76 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1936 ?        Ssl  09:46   0:08 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1328 ?        Ss   09:46   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   256 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   984 ?        Ssl  09:46   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   388 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   428 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      80143  0.0  0.0 183048  2136 ?        S    16:15   0:00  \_ /usr/sbin/CROND -n
root      80179  0.0  0.0 113284  1212 ?        Ss   16:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      80192  0.0  0.0 108052   356 ?        S    16:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      80207  0.0  0.0 113288  1516 ?        S    16:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      80308  0.0  0.0 153840  2088 ?        R    16:15   0:00  |               \_ ps auxf
root      80144  0.0  0.0 183048  2140 ?        S    16:15   0:00  \_ /usr/sbin/CROND -n
root      80188  0.0  0.0  20164   804 ?        Rs   16:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      80146  0.0  0.0 183048  2140 ?        S    16:15   0:00  \_ /usr/sbin/CROND -n
root      80184  0.0  0.0  20164   984 ?        Ss   16:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      80149  0.0  0.0 183048  2140 ?        S    16:15   0:00  \_ /usr/sbin/CROND -n
root      80189  0.0  0.0  20164   804 ?        Rs   16:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      80150  0.0  0.0 183048  2140 ?        S    16:15   0:00  \_ /usr/sbin/CROND -n
root      80177  0.0  0.0  20164   804 ?        Ss   16:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      80152  0.0  0.0 183048  2140 ?        S    16:15   0:00  \_ /usr/sbin/CROND -n
root      80176  0.0  0.0  20164   804 ?        Ss   16:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      80155  0.0  0.0 183048  2136 ?        S    16:15   0:00  \_ /usr/sbin/CROND -n
root      80187  0.0  0.0 113284  1208 ?        Ss   16:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      80200  0.0  0.4 188228 11112 ?        S    16:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      80261  0.0  0.0 160224  2332 ?        S    16:15   0:00  |           \_ top -n 2 -b -c
root      80156  0.0  0.0 183048  2144 ?        S    16:15   0:00  \_ /usr/sbin/CROND -n
root      80186  0.0  0.0  20164   964 ?        Ss   16:15   0:00  |   \_ jailshell (pactpay) [80220] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   80220  0.0  0.0  20164   260 ?        S    16:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   80224  0.0  0.7 476724 17484 ?        S    16:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      80158  0.0  0.0 183048  2140 ?        S    16:15   0:00  \_ /usr/sbin/CROND -n
root      80180  0.0  0.0  20164   964 ?        Ss   16:15   0:00      \_ jailshell (nigeria) [80209] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   80209  0.0  0.0  20164   260 ?        S    16:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   80215  0.0  0.6 400652 15940 ?        S    16:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3904 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 10360 ?        Ssl  09:46   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   624 ?        Ssl  09:46   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654048 35084 ?       SLsl 09:46   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   628 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.0  46912  2348 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  47852  3160 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  2164 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  47996  3336 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.1  24568  2524 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41136  1468 ?        S    09:46   0:00  \_ dovecot/auth
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.5 784388 36668 ?        Ssl  09:46   0:15 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.1  5.0 1828076 122772 ?      Ssl  09:46   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   504 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.0 397344  2420 ?        Ss   09:46   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    71901  0.0  0.4 471808  9780 ?        S    15:59   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    77310  0.1  0.4 471808  9780 ?        S    16:09   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    79515  0.2  0.3 471784  9264 ?        S    16:13   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    79625  0.2  0.3 471784  9260 ?        S    16:13   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    79836  0.4  0.3 471784  9264 ?        S    16:14   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
healtho+  80022 17.1  2.8 459424 69476 ?        S    16:14   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  80076 18.1  2.7 457240 67380 ?        S    16:14   0:01  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   80139  0.0  0.2 397064  5272 ?        S    16:15   0:00  \_ php-fpm: pool nigeriadecide_org
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   380 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   552 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.2 281936  5744 ?        Ssl  09:46   0:06 /usr/sbin/rsyslogd -n
root       1014  0.0  1.1 261164 27460 ?        Ss   09:46   0:07 cpsrvd (SSL) - waiting for connections                   
root      80079  0.0  0.0      0     0 ?        Z    16:14   0:00  \_ [cpaneld - servi] <defunct>
root       1017  0.0  0.0 436392   404 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:02 /usr/sbin/sshd -D
root      80092  0.0  0.1 111304  4448 ?        Ss   16:14   0:00  \_ sshd: [accepted]
sshd      80093  0.0  0.1 115644  2632 ?        S    16:14   0:00  |   \_ sshd: [net]
root      80096  0.0  0.1 111304  4272 ?        Ss   16:14   0:00  \_ sshd: [accepted]
root      80129  0.0  0.2 157100  5076 ?        Ss   16:14   0:00  \_ sshd: unknown [priv]
sshd      80130  0.0  0.1 115644  2628 ?        S    16:15   0:00      \_ sshd: unknown [net]
cpanelc+   1026  0.0  0.1  10540  3564 ?        Ss   09:46   0:17 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  1.0 410452 26032 ?        Ss   09:46   0:19 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3516 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  1.0 262224 24500 ?        Ss   09:46   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1265  0.0  0.4 209320 10932 ?        Ss   09:46   0:02 tailwatchd
root       1267  0.0  0.1 167452  4268 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1713  0.0  0.0 299272   632 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.0 130416  1376 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  1.8 10.9 1469608 264452 ?      Sl   09:46   7:18 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:01 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12788   328 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12804   340 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    49002  0.0  0.8 277588 21020 ?        S    15:12   0:03  \_ /usr/sbin/httpd -k start
nobody    63551  0.0  0.8 277512 19472 ?        S    15:42   0:01  \_ /usr/sbin/httpd -k start
nobody    65547  0.0  0.8 277528 19500 ?        S    15:45   0:01  \_ /usr/sbin/httpd -k start
nobody    67373  0.1  0.8 277852 20368 ?        S    15:49   0:01  \_ /usr/sbin/httpd -k start
nobody    71770  0.1  0.8 277852 19480 ?        S    15:58   0:01  \_ /usr/sbin/httpd -k start
nobody    73782  0.0  0.7 277852 18932 ?        S    16:01   0:00  \_ /usr/sbin/httpd -k start
nobody    75231  0.0  0.7 277512 18636 ?        S    16:04   0:00  \_ /usr/sbin/httpd -k start
nobody    75701  0.0  0.7 277508 18652 ?        S    16:05   0:00  \_ /usr/sbin/httpd -k start
nobody    75871  0.0  0.7 277460 18056 ?        S    16:06   0:00  \_ /usr/sbin/httpd -k start
nobody    75877  0.0  0.7 277540 18336 ?        S    16:06   0:00  \_ /usr/sbin/httpd -k start
nobody    75878  0.0  0.7 277844 18872 ?        S    16:06   0:00  \_ /usr/sbin/httpd -k start
nobody    77392  0.1  0.7 277492 18716 ?        S    16:09   0:00  \_ /usr/sbin/httpd -k start
nobody    77671  0.1  0.7 277824 18560 ?        S    16:09   0:00  \_ /usr/sbin/httpd -k start
nobody    77696  0.1  0.7 277844 18852 ?        S    16:10   0:00  \_ /usr/sbin/httpd -k start
nobody    77948  0.1  0.7 277516 18588 ?        S    16:10   0:00  \_ /usr/sbin/httpd -k start
nobody    79676  0.1  0.7 277844 17424 ?        S    16:13   0:00  \_ /usr/sbin/httpd -k start
nobody    79888  0.1  0.7 277656 17336 ?        S    16:14   0:00  \_ /usr/sbin/httpd -k start
nobody    80121  0.0  0.6 277368 16376 ?        S    16:14   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.0  0.4 182836 11208 ?        Ss   09:46   0:20 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      28537  0.0  4.8 248100 118080 ?       Ss   10:50   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.1  5.6 269720 136616 ?       S    11:00   0:22  \_ spamd child
root      32710  0.0  5.1 258916 125492 ?       S    11:00   0:00  \_ spamd child
root      72906  0.0  0.4 1341636 10700 ?       Ssl  16:00   0:00 /usr/bin/cspdaemon
root      72945  0.0  0.4 1277312 11616 ?       Ssl  16:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 45027  Threads: 3  Questions: 2882303  Slow queries: 0  Opens: 9019  Flush tables: 1  Open tables: 2000  Queries per second avg: 64.012
*************************** 1. row ***************************
     Id: 43528
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 43533
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 43539
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 100.28.34.95 TIME_WAIT
      1 114.119.137.160 TIME_WAIT
      1 114.119.140.113 TIME_WAIT
      1 114.119.145.187 TIME_WAIT
      1 128.199.157.207 TIME_WAIT
      1 135.119.97.71 TIME_WAIT
      1 142.44.225.234 TIME_WAIT
      1 172.69.130.103 TIME_WAIT
      1 172.70.80.80 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.130.14.245 TIME_WAIT
      1 52.167.144.186 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      9 31.173.81.159 TIME_WAIT
     73 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 16:15:02 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 12 hours 30 minutes 20 seconds
   Server load: 0.64 0.69 0.54
   Total accesses: 75152 - Total Traffic: 1.2 GB - Total Duration: 171699441
   CPU Usage: u8.81 s4.27 cu624.16 cs438.95 - 2.39% CPU load
   1.67 requests/sec - 28.2 kB/second - 16.9 kB/request - 2284.7 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

__K_WWKWWKWWK.._WKRW............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur    Conn Child  Slot     Client      Protocol           VHost                                        Request
   0-0  49002 0/785/4691 _ 12.22 0     0   8565220  0.0  14.13 68.35 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   1-0  77392 0/94/4550  _ 1.00  0     261 9279936  0.0  1.20  67.94 66.249.70.33    http/1.1 support.cloudware.ng:443   GET /?c=987962210 HTTP/1.1
   2-0  79676 1/18/4755  K 0.38  2     343 5903580  34.9 0.46  83.70 66.249.70.35    http/1.1 support.cloudware.ng:443   GET /?c=2154186102 HTTP/1.1
   3-0  79888 0/13/4676  _ 0.36  0     0   6490128  0.0  0.38  85.91 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   4-0  75231 0/93/4633  W 1.29  51    0   5741815  0.0  1.38  72.47 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533323035312p2231223
   5-0  75701 0/100/4869 W 1.13  0     0   6012138  0.0  1.93  85.58 157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   6-0  77671 1/91/3967  K 0.86  0     398 6937818  34.6 1.10  72.48 66.249.70.33    http/1.1 support.cloudware.ng:443   GET /?c=3578149837 HTTP/1.1
   7-0  63551 0/254/3934 W 3.62  71    0   49933460 0.0  3.83  60.65 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533323033312p2231223
   8-0  73782 0/65/3684  W 1.39  31    0   7726537  0.0  1.21  54.82 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533323037312p2231223
   9-0  80121 1/1/4451   K 0.00  1     294 6905738  34.5 0.03  89.65 66.249.70.37    http/1.1 support.cloudware.ng:443   GET /?c=2609380217 HTTP/1.1
   10-0 75871 0/94/3372  W 0.95  0     0   7744010  0.0  1.34  44.96 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   11-0 65547 0/294/3117 W 5.39  91    0   7436588  0.0  4.53  51.31 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533323031312p2231223
   12-0 75877 2/82/3302  K 1.16  0     402 5176074  69.2 1.51  53.80 66.249.70.36    http/1.1 support.cloudware.ng:443   GET /?c=3911076239 HTTP/1.1
   13-0 -     0/0/3144   . 0.00  212   0   5229648  0.0  0.00  56.13 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 -     0/0/3710   . 0.00  154   0   5463600  0.0  0.00  55.64 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 71770 0/272/3288 _ 5.24  0     277 5661382  0.0  5.09  45.58 66.249.70.39    http/1.1 support.cloudware.ng:443   GET /?c=1723132615 HTTP/1.1
   16-0 75878 0/111/1339 W 1.19  152   0   6553028  0.0  1.59  24.42 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533313935302p2231223
   17-0 77696 1/87/2360  K 1.15  3     330 4422481  35.7 1.60  51.07 66.249.70.38    http/1.1 support.cloudware.ng:443   GET /?c=1350163602 HTTP/1.1
   18-0 67373 0/452/2308 R 6.90  1     288 1608897  0.0  8.26  36.29 157.230.45.41   http/1.1 health.oyostate.gov.ng:443
   19-0 77948 0/76/910   W 0.94  0     0   1491526  0.0  1.12  16.29 66.249.70.34    http/1.1 support.cloudware.ng:443   GET /?c=1791125423 HTTP/1.1
   20-0 -     0/0/655    . 0.00  1451  0   1494474  0.0  0.00  9.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/338    . 0.00  1662  0   2046139  0.0  0.00  5.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/975    . 0.00  2096  0   1235766  0.0  0.00  12.52 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/16     . 0.00  2468  0   33259    0.0  0.00  0.20  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/87     . 0.00  2202  0   62551    0.0  0.00  1.41  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/8      . 0.00  15352 0   29769    0.0  0.00  0.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/12     . 0.00  15312 0   24649    0.0  0.00  0.26  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/31     . 0.00  15348 0   34716    0.0  0.00  0.61  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/259    . 0.00  15361 0   143065   0.0  0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/96     . 0.00  15377 0   59764    0.0  0.00  2.78  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/13     . 0.00  15302 0   22779    0.0  0.00  9.52  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/103    . 0.00  15103 0   179005   0.0  0.00  0.84  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/2      . 0.00  15378 0   9851     0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/7      . 0.00  15327 0   21858    0.0  0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/2      . 0.00  15373 0   17699    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00  15342 0   19399    0.0  0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/4      . 0.00  15351 0   14235    0.0  0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/2      . 0.00  15374 0   15595    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/156    . 0.00  15107 0   148319   0.0  0.00  0.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00  15375 0   15338    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/6      . 0.00  15330 0   21858    0.0  0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/208    . 0.00  14506 0   243070   0.0  0.00  2.95  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00  15370 0   19835    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00  15371 0   19620    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/6      . 0.00  15328 0   24371    0.0  0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00  15337 0   19070    0.0  0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00  15332 0   20569    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/4      . 0.00  15347 0   17777    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/4      . 0.00  15344 0   16933    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00  15372 0   17743    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00  15354 0   22693    0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00  15341 0   22016    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00  15350 0   22448    0.0  0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/3      . 0.00  15358 0   9096     0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/6      . 0.00  15346 0   23840    0.0  0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/17     . 0.00  15319 0   16331    0.0  0.00  0.47  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/184    . 0.00  15139 0   130360   0.0  0.00  0.50  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/3      . 0.00  15355 0   22445    0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/3      . 0.00  15359 0   7899     0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/5      . 0.00  15334 0   23139    0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/139    . 0.00  15003 0   237404   0.0  0.00  1.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/2      . 0.00  15368 0   2361     0.0  0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/11     . 0.00  15317 0   9214     0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/4      . 0.00  15343 0   8490     0.0  0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/1      . 0.00  15384 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00  15382 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/2      . 0.00  15366 0   8680     0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/1      . 0.00  15381 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/3      . 0.00  15357 0   742      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/1      . 0.00  15383 11  22       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00  15364 0   10366    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/65     . 0.00  15176 0   105003   0.0  0.00  1.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/151    . 0.00  15004 0   218700   0.0  0.00  1.26  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/2      . 0.00  15363 0   8818     0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/4      . 0.00  15353 0   1447     0.0  0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/2      . 0.00  15369 0   463      0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/101    . 0.00  15089 0   159456   0.0  0.00  0.87  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/6      . 0.00  15338 0   4997     0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/338    . 0.00  13581 0   272159   0.0  0.00  5.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00  15380 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00  15362 0   7766     0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -     0/0/3      . 0.00  15345 0   10368    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 654
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 14 seconds, (range: 0...58)
   index usage: 11%, cache usage: 15%
   total entries stored since starting: 46772
   total entries replaced since starting: 0
   total entries expired since starting: 46084
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 145 miss
   total removes since starting: 35 hit, 115 miss
Youez - 2016 - github.com/yon3zu
LinuXploit