403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.02.51.txt
 ## swap threshold exceeded
## server overview
2025-11-08.02.51 load[0] mem[60/79] mysql[3/12] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1271          97          61         994         845
Swap:          1999        1621         378
 02:51:02 up  8:01,  0 users,  load average: 0.97, 1.05, 1.30
## system overview
top - 02:51:02 up  8:01,  0 users,  load average: 0.97, 1.05, 1.30
Tasks: 196 total,   4 running, 191 sleeping,   0 stopped,   1 zombie
%Cpu(s): 54.8 us, 19.4 sy,  0.0 ni, 25.8 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    98440 free,  1303620 used,  1018240 buff/cache
KiB Swap:  2047996 total,   387580 free,  1660416 used.   864188 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1964 mysql     20   0 1458856 253168   3576 S  86.7 10.5  11:14.82 /usr/sbin+
 81267 nigeria   20   0  400652  15936  10220 R  20.0  0.7   0:00.04 /opt/cpan+
    14 root      20   0       0      0      0 S   6.7  0.0   0:04.89 [ksoftirq+
 81295 cloudsms  20   0  396856  11680   8124 R   6.7  0.5   0:00.01 /opt/cpan+
     1 root      20   0   44416   3480   1540 S   0.0  0.1   0:40.79 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 R   0.0  0.0   0:03.34 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.54 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:35.67 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.54 [migratio+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:18.72 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.62 [kauditd]
   233 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   239 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.90 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.27 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.64 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   8028   7776 S   0.0  0.3   0:16.71 /usr/lib/+
   388 root      20   0   45356     88     84 S   0.0  0.0   0:00.33 /usr/lib/+
   412 root      16  -4   55532    492    364 S   0.0  0.0   0:02.83 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   484 polkitd   20   0  612240    864    488 S   0.0  0.0   0:03.86 /usr/lib/+
   486 root      20   0  152780    140     96 S   0.0  0.0   0:00.01 /usr/sbin+
   487 root      20   0   21540    376    292 S   0.0  0.0   0:00.65 /usr/sbin+
   495 root      20   0   52852    424    312 S   0.0  0.0   0:00.01 /usr/sbin+
   496 dbus      20   0   57040   1352    624 S   0.0  0.1   0:15.15 /usr/bin/+
   501 nscd      20   0  994492   3372    664 S   0.0  0.1   0:13.93 /usr/sbin+
   505 rpc       20   0   69256     56      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   525 root      20   0    4388     40     36 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  224284   6580   1548 S   0.0  0.3   0:00.38 queueproc+
   536 root      20   0   24896   1400    820 S   0.0  0.1   0:06.68 /usr/lib/+
   551 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    896    432 S   0.0  0.0   0:00.81 /usr/sbin+
   587 root      20   0  108296     48     44 S   0.0  0.0   0:00.00 /sbin/age+
   588 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   630 mailnull  20   0   89112   3884    880 S   0.0  0.2   0:00.44 /usr/sbin+
   653 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   663 root       0 -20       0      0      0 S   0.0  0.0   0:03.97 [loop0]
   675 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1112 root      20   0  572372    972    396 S   0.0  0.0   0:02.47 /usr/bin/+
  1114 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1115 telegraf  20   0 5654048  36728   5980 S   0.0  1.5   0:15.68 /usr/loca+
  1118 systuser  20   0   13012     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1122 systuser  20   0  112268     60      0 S   0.0  0.0   0:00.01 /usr/loca+
  1123 root      20   0   51656   1216    824 S   0.0  0.1   0:00.36 /usr/sbin+
  1124 root      20   0  153404    304    220 S   0.0  0.0   0:00.62 pure-ftpd+
  1126 systuser  20   0  114016  13060   2600 S   0.0  0.5   0:06.49 /usr/loca+
  1127 root      20   0  111304    404    304 S   0.0  0.0   0:04.22 /usr/sbin+
  1128 memcach+  20   0  342400     36     36 S   0.0  0.0   0:00.60 /usr/bin/+
  1130 root      20   0  397344   6908   1656 S   0.0  0.3   0:07.39 php-fpm: +
  1134 root      20   0  436392  19036  11532 S   0.0  0.8   0:00.94 php-fpm: +
  1135 root      20   0  306512   8184   7296 S   0.0  0.3   0:08.62 /usr/sbin+
  1138 root      20   0 1763032  76276    536 S   0.0  3.2   0:14.12 /usr/loca+
  1162 root      20   0  385496   5852    816 S   0.0  0.2   0:00.82 php-fpm: +
  1168 named     20   0  858124  44784   1668 S   0.0  1.9   0:16.31 /usr/sbin+
  1170 root      20   0  261688   7056   1824 S   0.0  0.3   0:07.52 cpsrvd (S+
  1179 root      20   0  386112   5520    896 S   0.0  0.2   0:00.80 php-fpm: +
  1191 root      20   0  392856   6332    736 S   0.0  0.3   0:00.79 php-fpm: +
  1192 systuser  20   0  111864     64      0 S   0.0  0.0   0:00.01 /usr/loca+
  1193 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
  1205 cpanelc+  20   0   10596   3416   2196 S   0.0  0.1   0:23.82 /usr/loca+
  1280 dovecot   20   0   10320    340    224 S   0.0  0.0   0:00.09 dovecot/a+
  1350 root      20   0  248084  46212    892 S   0.0  1.9   0:06.21 /usr/loca+
  1362 systuser  20   0  157708   2956    968 S   0.0  0.1   0:00.13 SonarPush+
  1413 wp-tool+  20   0  387556   3472   1576 S   0.0  0.1   0:00.29 /usr/bin/+
  1414 wp-tool+  20   0  410480  16652   1652 S   0.0  0.7   0:23.59 /usr/bin/+
  1430 root      20   0  262224  24304   6380 S   0.0  1.0   0:03.75 cpdavd - +
  1435 root      20   0  209816  10724   2404 S   0.0  0.4   0:02.86 tailwatchd
  1436 root      20   0  167452   4104   2736 S   0.0  0.2   0:00.53 dnsadmin +
  1844 root      20   0  299272    516    356 S   0.0  0.0   0:00.76 php-fpm: +
  1905 root      38  18  130416   1376    696 S   0.0  0.1   0:00.07 cpanellog+
  2132 root      20   0  267108  30916   5380 S   0.0  1.3   0:02.43 /usr/sbin+
  5902 root      20   0  269784  96408   2484 S   0.0  4.0   0:04.72 spamd chi+
  5903 root      20   0  261484  94404    652 S   0.0  3.9   0:00.25 spamd chi+
  8253 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  8272 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.53 [kworker]
 13861 root      20   0  183048   1056    504 S   0.0  0.0   0:00.00 /usr/sbin+
 13918 root      20   0  113284    400    220 S   0.0  0.0   0:00.00 /bin/sh -+
 13954 root      20   0  108056    116     44 S   0.0  0.0   0:00.00 sleep 2h +
 30837 root      20   0   12848   1392   1180 S   0.0  0.1   0:00.58 /usr/loca+
 30838 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.49 /usr/loca+
 30839 root      20   0   12876   1400   1180 S   0.0  0.1   0:00.53 /usr/loca+
 30841 dovenull  20   0   46912   4012   3024 S   0.0  0.2   0:00.08 dovecot/p+
 30842 dovenull  20   0   47600   5184   3596 S   0.0  0.2   0:00.07 dovecot/i+
 30844 root      20   0   10452   1508   1136 S   0.0  0.1   0:00.05 dovecot/l+
 30845 dovenull  20   0   46912   4512   3444 S   0.0  0.2   0:00.08 dovecot/p+
 30846 dovenull  20   0   47376   4900   3548 S   0.0  0.2   0:00.04 dovecot/i+
 30847 root      20   0   24556  12276   1388 S   0.0  0.5   0:00.05 dovecot/c+
 30848 dovecot   20   0   13568   1500   1232 S   0.0  0.1   0:00.00 dovecot/s+
 30849 dovecot   20   0   41056   2848   2076 S   0.0  0.1   0:00.10 dovecot/a+
 30851 root      20   0   53252  11792   2432 S   0.0  0.5   0:00.05 /usr/loca+
 48985 root      20   0 1349832  10708    600 S   0.0  0.4   0:00.08 /usr/bin/+
 49024 root      20   0 1277056  11704    596 S   0.0  0.5   0:00.07 /usr/bin/+
 56209 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 57912 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 59882 nobody    20   0  277692  36320   4756 S   0.0  1.5   0:02.44 /usr/sbin+
 61060 nobody    20   0  277732  36308   4764 S   0.0  1.5   0:02.43 /usr/sbin+
 62044 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 64822 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65473 nobody    20   0  277840  36124   4472 S   0.0  1.5   0:01.58 /usr/sbin+
 69396 nobody    20   0  277784  36084   4408 S   0.0  1.5   0:01.38 /usr/sbin+
 69416 nobody    20   0  277628  35712   4288 S   0.0  1.5   0:01.24 /usr/sbin+
 69419 nobody    20   0  277620  35836   4344 S   0.0  1.5   0:01.18 /usr/sbin+
 70394 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70455 nobody    20   0  277668  35708   4168 S   0.0  1.5   0:01.05 /usr/sbin+
 71141 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 71604 nobody    20   0  277968  35908   4228 S   0.0  1.5   0:00.79 /usr/sbin+
 72832 nobody    20   0  277952  35572   3928 S   0.0  1.5   0:00.87 /usr/sbin+
 74172 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 74197 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 74204 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 74756 nobody    20   0  277952  35796   4164 S   0.0  1.5   0:00.59 /usr/sbin+
 75823 root      20   0  182436  29468   1368 S   0.0  1.2   0:10.96 lfd - sle+
 76158 nobody    20   0  277604  35780   4304 S   0.0  1.5   0:00.47 /usr/sbin+
 76159 nobody    20   0  277980  35844   4024 S   0.0  1.5   0:00.52 /usr/sbin+
 77792 nobody    20   0  277652  35396   3956 S   0.0  1.5   0:00.43 /usr/sbin+
 78351 nobody    20   0  277976  35836   4252 S   0.0  1.5   0:00.32 /usr/sbin+
 78535 root      20   0   41052   2704   2040 S   0.0  0.1   0:00.00 dovecot/a+
 78888 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 80052 nobody    20   0  277984  35392   3716 S   0.0  1.5   0:00.06 /usr/sbin+
 80879 nobody    20   0  277636  35196   3688 S   0.0  1.5   0:00.10 /usr/sbin+
 80912 healtho+  20   0  459624  72344   4224 S   0.0  3.0   0:05.34 php-fpm: +
 80951 healtho+  20   0  459944  74104   4360 S   0.0  3.1   0:04.64 php-fpm: +
 81052 healtho+  20   0  459288  72076   4188 S   0.0  3.0   0:03.11 php-fpm: +
 81109 nigeria   20   0  397064   8124   2348 S   0.0  0.3   0:00.00 php-fpm: +
 81205 root      20   0  111304   4440   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 81206 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 81209 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 81216 root      20   0  183080   2420   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 81217 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81218 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81219 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81220 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81222 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81223 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81224 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81225 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81226 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81228 root      20   0  183080   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81230 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 81232 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 81233 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 81234 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 81235 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 81236 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 81237 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 81239 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 81241 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 81242 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 81243 root      20   0  108052    352    284 S   0.0  0.0   0:00.00 /usr/bin/+
 81244 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 81250 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 81256 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 81259 pactpay   20   0  476724  17488  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 81266 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 81289 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 81290 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 81292 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 81293 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 81294 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 81297 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov07   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov07   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov07   0:35  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov07   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov07   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kauditd]
root        233  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ata_sff]
root        239  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   Nov07   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   Nov07   0:02  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    Nov07   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [xprtiod]
root        653  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kvm-irqfd-clean]
root        663  0.0  0.0      0     0 ?        S<   Nov07   0:03  \_ [loop0]
root        675  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root      56209  0.0  0.0      0     0 ?        D    02:12   0:00  \_ [kworker/u200:1]
root      57912  0.0  0.0      0     0 ?        R    02:15   0:00  \_ [kworker/0:1]
root      62044  0.0  0.0      0     0 ?        D    02:21   0:00  \_ [kworker/0:2]
root      64822  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/1:2]
root      70394  0.0  0.0      0     0 ?        S    02:36   0:00  \_ [kworker/1:1]
root      71141  0.0  0.0      0     0 ?        S    02:37   0:00  \_ [kworker/0:3]
root      74172  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/1:0]
root      74197  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/u200:2]
root      74204  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/0:4]
root      78888  0.0  0.0      0     0 ?        S    02:47   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44416  3480 ?        Ss   Nov07   0:40 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.3  40244  8028 ?        Ss   Nov07   0:16 /usr/lib/systemd/systemd-journald
root        388  0.0  0.0  45356    88 ?        Ss   Nov07   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   492 ?        S<sl Nov07   0:02 /sbin/auditd
polkitd     484  0.0  0.0 612240   864 ?        Ssl  Nov07   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        486  0.0  0.0 152780   140 ?        Ss   Nov07   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.0  21540   376 ?        Ss   Nov07   0:00 /usr/sbin/irqbalance --foreground
root        495  0.0  0.0  52852   424 ?        Ss   Nov07   0:00 /usr/sbin/smartd -n -q never
dbus        496  0.0  0.0  57040  1352 ?        Ss   Nov07   0:15 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        501  0.0  0.1 994492  3372 ?        Ssl  Nov07   0:13 /usr/sbin/nscd
rpc         505  0.0  0.0  69256    56 ?        Ss   Nov07   0:00 /sbin/rpcbind -w
root        525  0.0  0.0   4388    40 ?        Ss   Nov07   0:00 /usr/sbin/acpid
root        530  0.0  0.2 224284  6580 ?        Ss   Nov07   0:00 queueprocd - waiting up to 60s to process a task
root        536  0.0  0.0  24896  1400 ?        Ss   Nov07   0:06 /usr/lib/systemd/systemd-logind
root        551  0.0  0.0 195208     0 ?        Ssl  Nov07   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0  24208    24 ?        Ss   Nov07   0:00 /usr/sbin/atd -f
root        575  0.0  0.0 124512   896 ?        Ss   Nov07   0:00 /usr/sbin/crond -n
root      13861  0.0  0.0 183048  1056 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      13918  0.0  0.0 113284   400 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      13954  0.0  0.0 108056   116 ?        S    01:00   0:00  |       \_ sleep 2h 41m
root      81216  0.0  0.0 183080  2420 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      81230  0.0  0.0 113284  1212 ?        Ss   02:51   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      81243  0.0  0.0 108052   352 ?        S    02:51   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      81250  0.0  0.0 113288  1520 ?        S    02:51   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      81300  0.0  0.0 153840  2100 ?        R    02:51   0:00  |               \_ ps auxf
root      81217  0.0  0.1 183080  2424 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      81236  0.0  0.0  20164   804 ?        Ss   02:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      81220  0.0  0.1 183080  2424 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      81237  0.0  0.0  20164   804 ?        Ss   02:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      81222  0.0  0.0 183080  2420 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      81234  0.0  0.0  20164   804 ?        Ss   02:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      81223  0.0  0.0 183080  2420 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      81239  0.0  0.0  20164   804 ?        Ss   02:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      81224  0.0  0.0 183080  2416 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      81242  0.0  0.0  20164   808 ?        Ss   02:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      81225  0.0  0.0 183080  2416 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      81244  0.0  0.0  20164   804 ?        Ss   02:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      81226  0.0  0.0 183080  2420 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      81232  0.0  0.0  20164   964 ?        Ss   02:51   0:00  |   \_ jailshell (pactpay) [81256] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   81256  0.0  0.0  20164   256 ?        S    02:51   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   81259  0.0  0.7 476724 17488 ?        S    02:51   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      81228  0.0  0.0 183080  2416 ?        S    02:51   0:00  \_ /usr/sbin/CROND -n
root      81233  0.0  0.0  20164   964 ?        Ss   02:51   0:00      \_ jailshell (nigeria) [81266] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   81266  0.0  0.0  20164   260 ?        S    02:51   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   81267  0.0  0.6 400652 15936 ?        S    02:51   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        587  0.0  0.0 108296    48 tty1     Ss+  Nov07   0:00 /sbin/agetty --noclear tty1 linux
root        588  0.0  0.0 114704    24 ttyS0    Ss+  Nov07   0:00 /bin/bash
mailnull    630  0.0  0.1  89112  3884 ?        Ss   Nov07   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root       1112  0.0  0.0 572372   972 ?        Ssl  Nov07   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1114  0.0  0.0  10132    44 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf   1115  0.0  1.5 5654048 36728 ?       SLsl Nov07   0:15 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser   1118  0.0  0.0  13012    48 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser   1122  0.0  0.0 112268    60 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1123  0.0  0.0  51656  1216 ?        Ss   Nov07   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1280  0.0  0.0  10320   340 ?        S    Nov07   0:00  \_ dovecot/anvil
dovenull  30841  0.0  0.1  46912  4012 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30842  0.0  0.2  47600  5184 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30844  0.0  0.0  10452  1508 ?        S    01:28   0:00  \_ dovecot/log
dovenull  30845  0.0  0.1  46912  4512 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30846  0.0  0.2  47376  4900 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30847  0.0  0.5  24556 12276 ?        S    01:28   0:00  \_ dovecot/config
dovecot   30848  0.0  0.0  13568  1500 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   30849  0.0  0.1  41056  2848 ?        S    01:28   0:00  \_ dovecot/auth
root      78535  0.0  0.1  41052  2704 ?        S    02:46   0:00  \_ dovecot/auth -w
root       1124  0.0  0.0 153404   304 ?        Ss   Nov07   0:00 pure-ftpd (SERVER)
systuser   1126  0.0  0.5 114016 13060 ?        Ssl  Nov07   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root       1127  0.0  0.0 111304   404 ?        Ss   Nov07   0:04 /usr/sbin/sshd -D
root      81205  0.0  0.1 111304  4440 ?        Ss   02:50   0:00  \_ sshd: [accepted]
sshd      81206  0.0  0.1 115644  2628 ?        S    02:50   0:00  |   \_ sshd: [net]
root      81290  0.0  0.1 111304  4268 ?        Ss   02:51   0:00  \_ sshd: [accepted]
sshd      81292  0.0  0.1 115644  2632 ?        S    02:51   0:00      \_ sshd: [net]
memcach+   1128  0.0  0.0 342400    36 ?        Ssl  Nov07   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1130  0.0  0.2 397344  6908 ?        Ss   Nov07   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  80912 11.8  2.9 459624 72344 ?        S    02:50   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  80951 12.2  3.0 459944 74104 ?        S    02:50   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  81052 12.9  2.9 459288 72076 ?        S    02:50   0:03  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   81109  0.0  0.3 397064  8124 ?        S    02:50   0:00  \_ php-fpm: pool nigeriadecide_org
root       1134  0.0  0.7 436392 19036 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.0  0.3 306512  8184 ?        Ssl  Nov07   0:08 /usr/sbin/rsyslogd -n
root       1138  0.0  3.1 1763032 76276 ?       Ssl  Nov07   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1162  0.0  0.2 385496  5852 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named      1168  0.0  1.8 858124 44784 ?        Ssl  Nov07   0:16 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1170  0.0  0.2 261688  7056 ?        Ss   Nov07   0:07 cpsrvd (SSL) - waiting for connections                   
root      81209  0.0  0.0      0     0 ?        Z    02:50   0:00  \_ [cpaneld - servi] <defunct>
root       1179  0.0  0.2 386112  5520 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1191  0.0  0.2 392856  6332 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1192  0.0  0.0 111864    64 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1193  0.0  0.0 445028     0 ?        Ss   Nov07   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
cpanelc+   1205  0.0  0.1  10596  3416 ?        Ss   Nov07   0:23 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1350  0.0  1.9 248084 46212 ?        Ss   Nov07   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5902  0.0  3.9 269784 96408 ?        S    Nov07   0:04  \_ spamd child
root       5903  0.0  3.9 261484 94404 ?        S    Nov07   0:00  \_ spamd child
systuser   1362  0.0  0.1 157708  2956 ?        S    Nov07   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1413  0.0  0.1 387556  3472 ?        Ss   Nov07   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1414  0.0  0.6 410480 16652 ?        Ss   Nov07   0:23 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1430  0.0  1.0 262224 24304 ?        Ss   Nov07   0:03 cpdavd - accepting connections on: 2091, 2077, 2078
root       1435  0.0  0.4 209816 10724 ?        Ss   Nov07   0:02 tailwatchd
root       1436  0.0  0.1 167452  4104 ?        Ss   Nov07   0:00 dnsadmin - dormant mode
root       1844  0.0  0.0 299272   516 ?        Ss   Nov07   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1905  0.0  0.0 130416  1376 ?        SN   Nov07   0:00 cpanellogd - sleeping for logs
mysql      1964  2.3 10.4 1458856 253168 ?      Sl   Nov07  11:14 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2132  0.0  1.2 267108 30916 ?        Ss   Nov07   0:02 /usr/sbin/httpd -k start
root      30837  0.0  0.0  12848  1392 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      30838  0.0  0.0  12732  1364 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      30839  0.0  0.0  12876  1400 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      30851  0.0  0.4  53252 11792 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    59882  0.1  1.5 277692 36320 ?        S    02:17   0:02  \_ /usr/sbin/httpd -k start
nobody    61060  0.1  1.5 277732 36308 ?        S    02:19   0:02  \_ /usr/sbin/httpd -k start
nobody    65473  0.1  1.4 277840 36124 ?        S    02:27   0:01  \_ /usr/sbin/httpd -k start
nobody    69396  0.1  1.4 277784 36084 ?        S    02:34   0:01  \_ /usr/sbin/httpd -k start
nobody    69416  0.1  1.4 277628 35712 ?        S    02:34   0:01  \_ /usr/sbin/httpd -k start
nobody    69419  0.1  1.4 277620 35836 ?        S    02:34   0:01  \_ /usr/sbin/httpd -k start
nobody    70455  0.1  1.4 277668 35708 ?        S    02:36   0:01  \_ /usr/sbin/httpd -k start
nobody    71604  0.0  1.4 277968 35908 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    72832  0.1  1.4 277952 35572 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    74756  0.1  1.4 277952 35796 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    76158  0.1  1.4 277604 35780 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    76159  0.1  1.4 277980 35844 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    77792  0.1  1.4 277652 35396 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    78351  0.1  1.4 277976 35836 ?        S    02:46   0:00  \_ /usr/sbin/httpd -k start
nobody    80052  0.0  1.4 277984 35392 ?        S    02:49   0:00  \_ /usr/sbin/httpd -k start
nobody    80879  0.2  1.4 277636 35196 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
oysipao+   8253  0.0  0.0   3148     8 ?        Ss   Nov07   0:00 [kworker]
oysipao+   8272  0.0  0.0   3152    36 ?        S    Nov07   0:00  \_ [kworker]
root      75823  0.1  1.2 182436 29468 ?        Ss   00:00   0:10 lfd - sleeping
root      48985  0.0  0.4 1349832 10708 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      49024  0.0  0.4 1277056 11704 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 28855  Threads: 3  Questions: 5344330  Slow queries: 0  Opens: 9050  Flush tables: 1  Open tables: 2000  Queries per second avg: 185.213
*************************** 1. row ***************************
     Id: 76056
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 76059
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 76065
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 167.71.120.178 TIME_WAIT
      1 18.235.110.182 TIME_WAIT
      1 ::1 TIME_WAIT
      1 52.167.144.145 TIME_WAIT
      1 66.249.70.34 TIME_WAIT
      1 74.7.35.125 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      6 216.10.250.218 TIME_WAIT
     36 103.253.27.139 TIME_WAIT
     37 103.253.27.28 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 02:51:02 WAT
   Restart Time: Friday, 07-Nov-2025 18:50:11 WAT
   Parent Server Config. Generation: 4
   Parent Server MPM Generation: 3
   Server uptime: 8 hours 50 seconds
   Server load: 0.97 1.05 1.30
   Total accesses: 145983 - Total Traffic: 2.4 GB - Total Duration: 75840792
   CPU Usage: u12.19 s5.69 cu1245.61 cs847.7 - 7.32% CPU load
   5.06 requests/sec - 87.8 kB/second - 17.4 kB/request - 519.518 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

W_RKKKKKRK_K.__..R.W............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-3  70455 0/337/7836 W 3.25 0     0   4115694 0.0   3.73  141.98 66.249.70.34   http/1.1 wptraining.cloudware.ng:80 GET /?q=410883442 HTTP/1.1
   1-3  74756 0/129/8433 _ 2.43 1     292 4365949 0.0   2.37  155.18 103.253.27.139 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   2-3  78351 0/68/8310  R 1.20 56    22  4324998 0.0   1.30  153.87 102.90.98.148  http/1.1
   3-3  76158 2/117/7527 K 1.74 1     342 3920074 64.5  1.82  128.38 66.249.70.33   http/1.1 wptraining.cloudware.ng:80 GET /?q=4244483998 HTTP/1.1
   4-3  76159 4/113/8396 K 1.87 4     295 4075833 123.3 2.46  128.35 66.249.70.35   http/1.1 wptraining.cloudware.ng:80 GET /?q=1398318229 HTTP/1.1
   5-3  72832 1/182/7412 K 3.45 3     254 3915487 30.3  3.65  130.76 66.249.70.37   http/1.1 wptraining.cloudware.ng:80 GET /?q=3339785910 HTTP/1.1
   6-3  77792 1/91/7612  K 1.64 1     403 4104439 35.6  2.16  149.01 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /ctg/search/similarImageSearchResultView/?ctgItemCd=285477
   7-3  65473 1/391/7351 K 5.64 0     423 3728233 216.1 6.52  127.90 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /var/cache/dev/pools/AcsHjSlfaz/W/Y/ HTTP/1.1
   8-3  80052 0/19/6751  R 0.15 46    283 3749922 0.0   0.20  123.04 102.90.96.248  http/1.1
   9-3  80879 6/54/6935  K 0.24 0     356 3686390 187.0 0.69  115.53 66.249.70.38   http/1.1 wptraining.cloudware.ng:80 GET /?q=4104299661 HTTP/1.1
   10-3 61060 0/728/6868 _ 8.35 0     0   3467415 0.0   13.68 130.46 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   11-3 71604 1/188/6738 K 2.73 2     343 3332083 30.2  3.09  102.57 66.249.70.36   http/1.1 wptraining.cloudware.ng:80 GET /?q=3780467969 HTTP/1.1
   12-3 -     0/0/5987   . 0.00 334   0   3012223 0.0   0.00  90.63  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-3 69396 0/379/4654 _ 5.71 0     284 2524609 0.0   6.28  75.88  103.253.27.139 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   14-3 69416 0/270/4293 _ 4.58 0     294 2290982 0.0   5.31  68.09  66.249.70.39   http/1.1 wptraining.cloudware.ng:80 GET /odr/order/apiGetCartItems/ HTTP/1.1
   15-3 -     0/0/4608   . 0.00 276   0   2386131 0.0   0.00  73.74  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-3 -     0/0/4816   . 0.00 280   0   2477289 0.0   0.00  74.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-3 69419 0/262/4360 R 4.41 56    408 2291265 0.0   4.80  69.60  102.90.98.148  http/1.1
   18-3 -     0/0/2577   . 0.00 661   0   1512441 0.0   0.00  38.84  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-3 59882 0/713/2746 W 8.41 0     0   1707999 0.0   9.52  40.99  ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   20-3 -     0/0/2271   . 0.00 413   0   1283269 0.0   0.00  35.20  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-3 -     0/0/2559   . 0.00 788   0   1455029 0.0   0.00  39.34  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-3 -     0/0/1765   . 0.00 1749  0   1065934 0.0   0.00  28.70  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-3 -     0/0/416    . 0.00 2793  0   199668  0.0   0.00  6.99   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-3 -     0/0/1641   . 0.00 2797  0   883602  0.0   0.00  32.45  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-3 -     0/0/1711   . 0.00 2805  0   733768  0.0   0.00  26.26  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-3 -     0/0/949    . 0.00 2817  0   513824  0.0   0.00  19.58  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-3 -     0/0/348    . 0.00 2816  0   135791  0.0   0.00  3.77   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-3 -     0/0/772    . 0.00 2818  0   288804  0.0   0.00  11.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-3 -     0/0/736    . 0.00 1233  0   449336  0.0   0.00  10.09  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-3 -     0/0/127    . 0.00 2804  0   44598   0.0   0.00  1.93   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-3 -     0/0/615    . 0.00 2815  0   305307  0.0   0.00  14.56  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-3 -     0/0/186    . 0.00 2800  0   86066   0.0   0.00  2.58   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-3 -     0/0/45     . 0.00 2803  0   7032    0.0   0.00  0.21   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-3 -     0/0/280    . 0.00 2633  0   117255  0.0   0.00  4.08   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-3 -     0/0/34     . 0.00 2827  0   4925    0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-3 -     0/0/271    . 0.00 2809  0   138957  0.0   0.00  4.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-3 -     0/0/180    . 0.00 2507  0   80106   0.0   0.00  2.49   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-3 -     0/0/70     . 0.00 2828  0   27450   0.0   0.00  0.64   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-3 -     0/0/55     . 0.00 2802  0   23711   0.0   0.00  0.69   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-3 -     0/0/120    . 0.00 2584  0   47805   0.0   0.00  1.27   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-3 -     0/0/41     . 0.00 2808  0   13053   0.0   0.00  0.37   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-3 -     0/0/343    . 0.00 2788  0   157003  0.0   0.00  4.56   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-3 -     0/0/1852   . 0.00 2812  0   792927  0.0   0.00  30.21  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-3 -     0/0/70     . 0.00 2825  0   19485   0.0   0.00  0.69   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-3 -     0/0/207    . 0.00 2813  0   100344  0.0   0.00  2.84   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-3 -     0/0/17     . 0.00 2814  0   3427    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-3 -     0/0/61     . 0.00 2826  0   23416   0.0   0.00  0.56   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-3 -     0/0/373    . 0.00 2666  0   143685  0.0   0.00  4.45   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-2 -     0/0/16     . 0.00 5101  0   5601    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-2 -     0/0/69     . 0.00 5075  0   32068   0.0   0.00  1.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-2 -     0/0/94     . 0.00 5087  0   46144   0.0   0.00  1.46   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-2 -     0/0/24     . 0.00 5085  0   7231    0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-2 -     0/0/902    . 0.00 4966  356 427396  0.0   0.00  16.37  66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3995667990 HTTP/1.1
   54-2 -     0/0/220    . 0.00 5097  0   104301  0.0   0.00  4.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-2 -     0/0/20     . 0.00 5070  0   5450    0.0   0.00  0.14   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-2 -     0/0/53     . 0.00 4964  352 26129   0.0   0.00  0.72   66.249.70.32   http/1.1 support.cloudware.ng:443   GET /ctg/search/similarImageSearchResultView/?ctgItemCd=285079
   57-1 -     0/0/18     . 0.00 5946  0   7494    0.0   0.00  0.30   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-1 -     0/0/61     . 0.00 5782  0   26486   0.0   0.00  0.85   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-1 -     0/0/67     . 0.00 6005  0   37042   0.0   0.00  1.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-1 -     0/0/14     . 0.00 5963  0   4755    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-1 -     0/0/18     . 0.00 6009  0   8011    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-1 -     0/0/13     . 0.00 5985  0   3968    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-1 -     0/0/234    . 0.00 5970  0   126089  0.0   0.00  4.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-1 -     0/0/570    . 0.00 5964  0   196325  0.0   0.00  9.92   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-1 -     0/0/249    . 0.00 5093  282 111456  0.0   0.00  3.97   102.90.98.148  http/1.1
   66-1 -     0/0/234    . 0.00 5972  0   130247  0.0   0.00  4.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-1 -     0/0/13     . 0.00 6004  0   4952    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-1 -     0/0/13     . 0.00 5958  0   5501    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-1 -     0/0/9      . 0.00 5975  0   4783    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-1 -     0/0/16     . 0.00 5990  0   9834    0.0   0.00  0.45   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-1 -     0/0/10     . 0.00 5984  0   3804    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-1 -     0/0/6      . 0.00 5992  0   1625    0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-1 -     0/0/11     . 0.00 5948  0   3678    0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-1 -     0/0/10     . 0.00 5966  0   5547    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-1 -     0/0/7      . 0.00 5967  0   2381    0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-1 -     0/0/7      . 0.00 5993  0   3573    0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-1 -     0/0/675    . 0.00 5962  0   351530  0.0   0.00  15.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/2      . 0.00 13577 0   641     0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/3      . 0.00 13565 0   1675    0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 605
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 11 seconds, (range: 0...59)
   index usage: 10%, cache usage: 14%
   total entries stored since starting: 9475
   total entries replaced since starting: 0
   total entries expired since starting: 8869
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 32 miss
   total removes since starting: 1 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit