403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.03.36.txt
 ## swap threshold exceeded
## server overview
2025-11-08.03.36 load[0] mem[62/78] mysql[5/26] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1280          81          72        1001         825
Swap:          1999        1593         406
 03:36:01 up  8:46,  0 users,  load average: 0.78, 1.00, 1.08
## system overview
top - 03:36:01 up  8:46,  0 users,  load average: 0.78, 1.00, 1.08
Tasks: 191 total,   4 running, 186 sleeping,   0 stopped,   1 zombie
%Cpu(s): 87.5 us, 12.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    93916 free,  1300244 used,  1026140 buff/cache
KiB Swap:  2047996 total,   416252 free,  1631744 used.   856532 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1964 mysql     20   0 1462552 312712   3168 S 162.5 12.9  12:18.24 /usr/sbin+
  5182 nigeria   20   0  400652  15936  10220 S  18.8  0.7   0:00.04 /opt/cpan+
  1168 named     20   0  858124  41680   1548 S   6.2  1.7   0:18.24 /usr/sbin+
     1 root      20   0   44416   3464   1520 S   0.0  0.1   0:44.34 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:03.68 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.60 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:39.13 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.59 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.41 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:21.20 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.67 [kauditd]
   233 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   239 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:02.45 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.92 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.84 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39500   1384   1136 S   0.0  0.1   0:18.14 /usr/lib/+
   388 root      20   0   45356     88     84 S   0.0  0.0   0:00.33 /usr/lib/+
   412 root      16  -4   55532    424    292 S   0.0  0.0   0:03.07 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   484 polkitd   20   0  612240    980    576 S   0.0  0.0   0:04.23 /usr/lib/+
   486 root      20   0  152780    132     88 S   0.0  0.0   0:00.01 /usr/sbin+
   487 root      20   0   21540    376    292 S   0.0  0.0   0:00.71 /usr/sbin+
   495 root      20   0   52852    316    224 S   0.0  0.0   0:00.01 /usr/sbin+
   496 dbus      20   0   57040   1408    676 S   0.0  0.1   0:16.60 /usr/bin/+
   501 nscd      20   0  994492   3404    696 R   0.0  0.1   0:15.31 /usr/sbin+
   505 rpc       20   0   69256    136     76 S   0.0  0.0   0:00.03 /sbin/rpc+
   525 root      20   0    4388     40     36 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  224284   6092   1072 S   0.0  0.3   0:00.41 queueproc+
   536 root      20   0   24896   1404    820 S   0.0  0.1   0:07.30 /usr/lib/+
   551 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    860    428 S   0.0  0.0   0:00.89 /usr/sbin+
   587 root      20   0  108296     48     44 S   0.0  0.0   0:00.00 /sbin/age+
   588 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   630 mailnull  20   0   89112   3528    548 S   0.0  0.1   0:00.48 /usr/sbin+
   653 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   663 root       0 -20       0      0      0 S   0.0  0.0   0:04.55 [loop0]
   675 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1112 root      20   0  572372    936    392 S   0.0  0.0   0:02.70 /usr/bin/+
  1114 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1115 telegraf  20   0 5654048  35900   5624 S   0.0  1.5   0:17.14 /usr/loca+
  1118 systuser  20   0   13012     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1122 systuser  20   0  112268     60      0 S   0.0  0.0   0:00.01 /usr/loca+
  1123 root      20   0   51656   1012    620 S   0.0  0.0   0:00.39 /usr/sbin+
  1124 root      20   0  153404    304    220 S   0.0  0.0   0:00.69 pure-ftpd+
  1126 systuser  20   0  114016  13216   2704 S   0.0  0.5   0:07.09 /usr/loca+
  1127 root      20   0  111304    404    304 S   0.0  0.0   0:04.54 /usr/sbin+
  1128 memcach+  20   0  342400     36     36 S   0.0  0.0   0:00.66 /usr/bin/+
  1130 root      20   0  397344   6904   1652 S   0.0  0.3   0:08.01 php-fpm: +
  1134 root      20   0  436392  18988  11484 S   0.0  0.8   0:01.02 php-fpm: +
  1135 root      20   0  322896   2336   1460 S   0.0  0.1   0:09.41 /usr/sbin+
  1138 root      20   0 1763032 114088   1292 S   0.0  4.7   0:27.59 /usr/loca+
  1162 root      20   0  385496   5904    868 S   0.0  0.2   0:00.89 php-fpm: +
  1170 root      20   0  261820   8168   1284 S   0.0  0.3   0:07.87 cpsrvd (S+
  1179 root      20   0  386112   5492    868 S   0.0  0.2   0:00.86 php-fpm: +
  1191 root      20   0  392856   6256    660 S   0.0  0.3   0:00.85 php-fpm: +
  1192 systuser  20   0  111864     64      0 S   0.0  0.0   0:00.01 /usr/loca+
  1193 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
  1205 cpanelc+  20   0   11388   4396   2324 S   0.0  0.2   0:26.32 /usr/loca+
  1280 dovecot   20   0   10320    384    268 S   0.0  0.0   0:00.10 dovecot/a+
  1350 root      20   0  248084  46164    844 S   0.0  1.9   0:06.53 /usr/loca+
  1362 systuser  20   0  157708   2888    900 S   0.0  0.1   0:00.15 SonarPush+
  1392 nobody    20   0  277640  35480   3980 S   0.0  1.5   0:00.36 /usr/sbin+
  1402 nobody    20   0  277632  35296   3788 S   0.0  1.5   0:00.46 /usr/sbin+
  1413 wp-tool+  20   0  387556   3328   1432 S   0.0  0.1   0:00.32 /usr/bin/+
  1414 wp-tool+  20   0  410480  14932   1532 S   0.0  0.6   0:25.78 /usr/bin/+
  1430 root      20   0  262228  20484   2628 S   0.0  0.8   0:03.94 cpdavd - +
  1435 root      20   0  209992  10032   1640 S   0.0  0.4   0:03.16 tailwatchd
  1436 root      20   0  167452   3076   1708 S   0.0  0.1   0:00.56 dnsadmin +
  1844 root      20   0  299272    452    292 S   0.0  0.0   0:00.83 php-fpm: +
  1905 root      38  18  130416   1336    656 S   0.0  0.1   0:00.07 cpanellog+
  1937 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
  2132 root      20   0  267108  30020   4484 S   0.0  1.2   0:02.59 /usr/sbin+
  3518 nobody    20   0  277600  35272   3804 S   0.0  1.5   0:00.10 /usr/sbin+
  4008 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  4795 nobody    20   0  277956  35208   3576 S   0.0  1.5   0:00.07 /usr/sbin+
  4813 root      20   0  111304   4448   3416 S   0.0  0.2   0:00.00 sshd: [ac+
  4814 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
  4868 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
  5060 healtho+  20   0  457376  70028   4188 S   0.0  2.9   0:01.99 php-fpm: +
  5061 healtho+  20   0  464612  78252   4316 S   0.0  3.2   0:02.11 php-fpm: +
  5099 nigeria   20   0  397064   8124   2348 S   0.0  0.3   0:00.00 php-fpm: +
  5108 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  5110 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5111 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5112 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5113 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5114 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5116 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5118 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5120 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5122 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5124 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5135 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  5136 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5137 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  5139 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5141 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5142 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5143 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 /usr/loca+
  5144 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
  5145 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  5148 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  5149 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  5153 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
  5157 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  5160 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
  5181 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  5203 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
  5205 root      20   0    6516    416    336 S   0.0  0.0   0:00.00 /usr/sbin+
  5206 root      20   0   38516   5824   2932 R   0.0  0.2   0:00.00 /usr/loca+
  5902 root      20   0  269784  97884   1500 S   0.0  4.0   0:05.43 spamd chi+
  5903 root      20   0  261484  85924    628 S   0.0  3.6   0:00.25 spamd chi+
  8253 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  8272 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.58 [kworker]
 13861 root      20   0  183048   1000    504 S   0.0  0.0   0:00.00 /usr/sbin+
 13918 root      20   0  113284    396    216 S   0.0  0.0   0:00.00 /bin/sh -+
 13954 root      20   0  108056    116     44 S   0.0  0.0   0:00.00 sleep 2h +
 30837 root      20   0   12816   1388   1176 S   0.0  0.1   0:00.87 /usr/loca+
 30838 root      20   0   12732   1360   1176 S   0.0  0.1   0:00.75 /usr/loca+
 30839 root      20   0   12836   1396   1176 S   0.0  0.1   0:00.79 /usr/loca+
 30841 dovenull  20   0   46912   3040   1976 S   0.0  0.1   0:00.12 dovecot/p+
 30842 dovenull  20   0   47600   4428   2840 S   0.0  0.2   0:00.09 dovecot/i+
 30844 root      20   0   10452   1164    776 S   0.0  0.0   0:00.09 dovecot/l+
 30845 dovenull  20   0   46912   3104   2032 S   0.0  0.1   0:00.14 dovecot/p+
 30846 dovenull  20   0   47472   4280   2812 S   0.0  0.2   0:00.06 dovecot/i+
 30847 root      20   0   24556  11848    936 S   0.0  0.5   0:00.06 dovecot/c+
 30848 dovecot   20   0   13568   1048    688 S   0.0  0.0   0:00.01 dovecot/s+
 30849 dovecot   20   0   41056   1920   1148 S   0.0  0.1   0:00.16 dovecot/a+
 30851 root      20   0   53252  10700   1340 S   0.0  0.4   0:00.05 /usr/loca+
 56209 root      20   0       0      0      0 S   0.0  0.0   0:00.37 [kworker/+
 57912 root      20   0       0      0      0 S   0.0  0.0   0:00.26 [kworker/+
 74197 root      20   0       0      0      0 S   0.0  0.0   0:00.41 [kworker/+
 75823 root      20   0  182636  29712   1364 S   0.0  1.2   0:13.87 lfd - sle+
 76159 nobody    20   0  277980  36344   4472 S   0.0  1.5   0:03.84 /usr/sbin+
 85854 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 87167 root      20   0 1276100  10736    588 S   0.0  0.4   0:00.07 /usr/bin/+
 87201 root      20   0 1277312  11532    552 S   0.0  0.5   0:00.06 /usr/bin/+
 87606 root      20   0  123576    576    348 S   0.0  0.0   0:00.00 /usr/sbin+
 90443 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 90543 nobody    20   0  277944  36068   4268 S   0.0  1.5   0:02.26 /usr/sbin+
 91667 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 93851 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 95749 nobody    20   0  277652  35600   4108 S   0.0  1.5   0:01.39 /usr/sbin+
 96609 nobody    20   0  277632  35548   4032 S   0.0  1.5   0:01.32 /usr/sbin+
 97722 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 97898 nobody    20   0  277968  35752   3928 S   0.0  1.5   0:01.08 /usr/sbin+
 97906 nobody    20   0  277944  35856   4192 S   0.0  1.5   0:01.11 /usr/sbin+
 97907 nobody    20   0  277640  35636   4112 S   0.0  1.5   0:01.28 /usr/sbin+
 99439 root      30  10  132964   3932    396 S   0.0  0.2   0:00.00 ConfigSer+
 99450 root      30  10  108056    304    228 S   0.0  0.0   0:00.00 sleep 8223
100597 nobody    20   0  277616  35328   3916 S   0.0  1.5   0:00.67 /usr/sbin+
101980 nobody    20   0  277632  35224   3784 S   0.0  1.5   0:00.54 /usr/sbin+
101983 nobody    20   0  277612  35464   3976 S   0.0  1.5   0:00.65 /usr/sbin+
102285 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov07   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov07   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov07   0:39  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov07   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov07   0:21  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kauditd]
root        233  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ata_sff]
root        239  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   Nov07   0:02  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   Nov07   0:02  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    Nov07   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [xprtiod]
root        653  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kvm-irqfd-clean]
root        663  0.0  0.0      0     0 ?        S<   Nov07   0:04  \_ [loop0]
root        675  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root      56209  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/u200:1]
root      57912  0.0  0.0      0     0 ?        S    02:15   0:00  \_ [kworker/0:1]
root      74197  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/u200:2]
root      85854  0.0  0.0      0     0 ?        S    02:59   0:00  \_ [kworker/1:1]
root      90443  0.0  0.0      0     0 ?        S    03:06   0:00  \_ [kworker/0:3]
root      91667  0.0  0.0      0     0 ?        S    03:08   0:00  \_ [kworker/1:0]
root      93851  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/0:0]
root      97722  0.0  0.0      0     0 ?        S    03:19   0:00  \_ [kworker/1:3]
root     102285  0.0  0.0      0     0 ?        S    03:27   0:00  \_ [kworker/1:4]
root       1937  0.0  0.0      0     0 ?        S    03:30   0:00  \_ [kworker/0:4]
root       4008  0.0  0.0      0     0 ?        S    03:33   0:00  \_ [kworker/u200:0]
root          1  0.1  0.1  44416  3464 ?        Ss   Nov07   0:44 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.0  39500  1384 ?        Ss   Nov07   0:18 /usr/lib/systemd/systemd-journald
root        388  0.0  0.0  45356    88 ?        Ss   Nov07   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   424 ?        S<sl Nov07   0:03 /sbin/auditd
polkitd     484  0.0  0.0 612240   980 ?        Ssl  Nov07   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        486  0.0  0.0 152780   132 ?        Ss   Nov07   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.0  21540   376 ?        Ss   Nov07   0:00 /usr/sbin/irqbalance --foreground
root        495  0.0  0.0  52852   316 ?        Ss   Nov07   0:00 /usr/sbin/smartd -n -q never
dbus        496  0.0  0.0  57040  1408 ?        Ss   Nov07   0:16 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        501  0.0  0.1 994492  3404 ?        Ssl  Nov07   0:15 /usr/sbin/nscd
rpc         505  0.0  0.0  69256   136 ?        Ss   Nov07   0:00 /sbin/rpcbind -w
root        525  0.0  0.0   4388    40 ?        Ss   Nov07   0:00 /usr/sbin/acpid
root        530  0.0  0.2 224284  6092 ?        Ss   Nov07   0:00 queueprocd - waiting up to 60s to process a task
root        536  0.0  0.0  24896  1404 ?        Ss   Nov07   0:07 /usr/lib/systemd/systemd-logind
root        551  0.0  0.0 195208     0 ?        Ssl  Nov07   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0  24208    24 ?        Ss   Nov07   0:00 /usr/sbin/atd -f
root        575  0.0  0.0 124512   860 ?        Ss   Nov07   0:00 /usr/sbin/crond -n
root      13861  0.0  0.0 183048  1000 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      13918  0.0  0.0 113284   396 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      13954  0.0  0.0 108056   116 ?        S    01:00   0:00  |       \_ sleep 2h 41m
root       5110  0.0  0.1 183080  2424 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root       5137  0.0  0.0 113284  1212 ?        Ss   03:36   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       5149  0.0  0.0 108052   360 ?        S    03:36   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       5153  0.0  0.0 113288  1520 ?        S    03:36   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       5207  0.0  0.0 153672  1776 ?        R    03:36   0:00  |               \_ ps auxf
root       5111  0.0  0.1 183080  2428 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root       5136  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       5112  0.0  0.1 183080  2428 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root       5141  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root       5113  0.0  0.1 183080  2428 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root       5144  0.0  0.0  20164   812 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root       5114  0.0  0.1 183080  2428 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root       5139  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       5116  0.0  0.1 183080  2428 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root       5135  0.0  0.0  20164   804 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       5118  0.0  0.1 183080  2424 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root       5143  0.0  0.0  20164   988 ?        Ss   03:36   0:00  |   \_ jailshell (cloudsms) [5208] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms   5208  0.0  0.0  20164   260 ?        S    03:36   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms   5209  0.0  0.0  20164   260 ?        R    03:36   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       5120  0.0  0.0 183080  2420 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root       5142  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       5122  0.0  0.0 183080  2420 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root       5148  0.0  0.0  20164   968 ?        Ss   03:36   0:00  |   \_ jailshell (pactpay) [5157] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    5157  0.0  0.0  20164   260 ?        S    03:36   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    5160  0.0  0.7 476724 17484 ?        S    03:36   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       5124  0.0  0.0 183080  2420 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root       5145  0.0  0.0  20164   968 ?        Ss   03:36   0:00      \_ jailshell (nigeria) [5181] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    5181  0.0  0.0  20164   256 ?        S    03:36   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    5182  0.0  0.6 400652 15936 ?        S    03:36   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        587  0.0  0.0 108296    48 tty1     Ss+  Nov07   0:00 /sbin/agetty --noclear tty1 linux
root        588  0.0  0.0 114704    24 ttyS0    Ss+  Nov07   0:00 /bin/bash
mailnull    630  0.0  0.1  89112  3528 ?        Ss   Nov07   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root       1112  0.0  0.0 572372   936 ?        Ssl  Nov07   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1114  0.0  0.0  10132    44 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf   1115  0.0  1.4 5654048 35900 ?       SLsl Nov07   0:17 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser   1118  0.0  0.0  13012    48 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser   1122  0.0  0.0 112268    60 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1123  0.0  0.0  51656  1012 ?        Ss   Nov07   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1280  0.0  0.0  10320   384 ?        S    Nov07   0:00  \_ dovecot/anvil
dovenull  30841  0.0  0.1  46912  3040 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30842  0.0  0.1  47600  4428 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30844  0.0  0.0  10452  1164 ?        S    01:28   0:00  \_ dovecot/log
dovenull  30845  0.0  0.1  46912  3104 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30846  0.0  0.1  47472  4280 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30847  0.0  0.4  24556 11848 ?        S    01:28   0:00  \_ dovecot/config
dovecot   30848  0.0  0.0  13568  1048 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   30849  0.0  0.0  41056  1920 ?        S    01:28   0:00  \_ dovecot/auth
root       4868  0.0  0.1  41052  2724 ?        S    03:35   0:00  \_ dovecot/auth -w
root       1124  0.0  0.0 153404   304 ?        Ss   Nov07   0:00 pure-ftpd (SERVER)
systuser   1126  0.0  0.5 114016 13216 ?        Ssl  Nov07   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root       1127  0.0  0.0 111304   404 ?        Ss   Nov07   0:04 /usr/sbin/sshd -D
root       4813  0.0  0.1 111304  4448 ?        Ss   03:35   0:00  \_ sshd: [accepted]
sshd       4814  0.0  0.1 115644  2624 ?        S    03:35   0:00      \_ sshd: [net]
memcach+   1128  0.0  0.0 342400    36 ?        Ssl  Nov07   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1130  0.0  0.2 397344  6904 ?        Ss   Nov07   0:08 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+   5060 19.9  2.8 457376 70028 ?        S    03:35   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+   5061 21.1  3.2 464612 78252 ?        S    03:35   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria    5099  0.0  0.3 397064  8124 ?        S    03:35   0:00  \_ php-fpm: pool nigeriadecide_org
root       1134  0.0  0.7 436392 18988 ?        Ss   Nov07   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.0  0.0 322896  2336 ?        Ssl  Nov07   0:09 /usr/sbin/rsyslogd -n
root       1138  0.0  4.7 1763032 114088 ?      Ssl  Nov07   0:27 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1162  0.0  0.2 385496  5904 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named      1168  0.0  1.7 858124 41680 ?        Ssl  Nov07   0:18 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1170  0.0  0.3 261820  8168 ?        Ss   Nov07   0:07 cpsrvd (SSL) - waiting for connections                   
root       5108  0.0  0.0      0     0 ?        Z    03:35   0:00  \_ [cpaneld - servi] <defunct>
root       1179  0.0  0.2 386112  5492 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1191  0.0  0.2 392856  6256 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1192  0.0  0.0 111864    64 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1193  0.0  0.0 445028     0 ?        Ss   Nov07   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
cpanelc+   1205  0.0  0.1  11388  4396 ?        Ss   Nov07   0:26 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1350  0.0  1.9 248084 46164 ?        Ss   Nov07   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5902  0.0  4.0 269784 97884 ?        S    Nov07   0:05  \_ spamd child
root       5903  0.0  3.5 261484 85924 ?        S    Nov07   0:00  \_ spamd child
systuser   1362  0.0  0.1 157708  2888 ?        S    Nov07   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1413  0.0  0.1 387556  3328 ?        Ss   Nov07   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1414  0.0  0.6 410480 14932 ?        Ss   Nov07   0:25 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1430  0.0  0.8 262228 20484 ?        Ss   Nov07   0:03 cpdavd - accepting connections on: 2091, 2077, 2078
root       1435  0.0  0.4 209992 10032 ?        Ss   Nov07   0:03 tailwatchd
root       1436  0.0  0.1 167452  3076 ?        Ss   Nov07   0:00 dnsadmin - dormant mode
root       1844  0.0  0.0 299272   452 ?        Ss   Nov07   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1905  0.0  0.0 130416  1336 ?        SN   Nov07   0:00 cpanellogd - sleeping for logs
mysql      1964  2.3 12.9 1462552 312712 ?      Sl   Nov07  12:18 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2132  0.0  1.2 267108 30020 ?        Ss   Nov07   0:02 /usr/sbin/httpd -k start
root      30837  0.0  0.0  12816  1388 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      30838  0.0  0.0  12732  1360 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      30839  0.0  0.0  12836  1396 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      30851  0.0  0.4  53252 10700 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    76159  0.1  1.5 277980 36344 ?        S    02:44   0:03  \_ /usr/sbin/httpd -k start
nobody    90543  0.1  1.4 277944 36068 ?        S    03:06   0:02  \_ /usr/sbin/httpd -k start
nobody    95749  0.1  1.4 277652 35600 ?        S    03:15   0:01  \_ /usr/sbin/httpd -k start
nobody    96609  0.1  1.4 277632 35548 ?        S    03:17   0:01  \_ /usr/sbin/httpd -k start
nobody    97898  0.1  1.4 277968 35752 ?        S    03:19   0:01  \_ /usr/sbin/httpd -k start
nobody    97906  0.1  1.4 277944 35856 ?        S    03:19   0:01  \_ /usr/sbin/httpd -k start
nobody    97907  0.1  1.4 277640 35636 ?        S    03:19   0:01  \_ /usr/sbin/httpd -k start
cloudw     5205  0.0  0.6 286416 15204 ?        Rl   03:36   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody   100597  0.0  1.4 277616 35328 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
nobody   101980  0.0  1.4 277632 35224 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody   101983  0.1  1.4 277612 35464 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody     1392  0.0  1.4 277640 35480 ?        S    03:29   0:00  \_ /usr/sbin/httpd -k start
nobody     1402  0.1  1.4 277632 35296 ?        S    03:29   0:00  \_ /usr/sbin/httpd -k start
nobody     3518  0.0  1.4 277600 35272 ?        S    03:33   0:00  \_ /usr/sbin/httpd -k start
nobody     4795  0.1  1.4 277956 35208 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
oysipao+   8253  0.0  0.0   3148     8 ?        Ss   Nov07   0:00 [kworker]
oysipao+   8272  0.0  0.0   3152    36 ?        S    Nov07   0:00  \_ [kworker]
root      75823  0.1  1.2 182636 29712 ?        Ss   00:00   0:13 lfd - sleeping
root      87167  0.0  0.4 1276100 10736 ?       Ssl  03:00   0:00 /usr/bin/cspdaemon
root      87201  0.0  0.4 1277312 11532 ?       Ssl  03:00   0:00 /usr/bin/checkstatus
root      87606  0.0  0.0 123576   576 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
root      99439  0.0  0.1 132964  3932 ?        SN   03:22   0:00 ConfigServer Version Check
root      99450  0.0  0.0 108056   304 ?        SN   03:22   0:00  \_ sleep 8223
## mysql stats
Uptime: 31554  Threads: 3  Questions: 5810071  Slow queries: 0  Opens: 10950  Flush tables: 1  Open tables: 2000  Queries per second avg: 184.131
*************************** 1. row ***************************
     Id: 82874
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: query end
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 82880
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 82885
   User: unauthenticated user
   Host: localhost
     db: NULL
Command: Connect
   Time: 0
  State: Receiving from client
   Info: NULL
*************************** 4. row ***************************
     Id: 82886
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.210.140.129 TIME_WAIT
      1 104.210.140.133 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 66.249.70.198 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 94.103.90.150 TIME_WAIT
     33 103.253.27.139 TIME_WAIT
     34 103.253.27.28 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 03:36:01 WAT
   Restart Time: Friday, 07-Nov-2025 18:50:11 WAT
   Parent Server Config. Generation: 4
   Parent Server MPM Generation: 3
   Server uptime: 8 hours 45 minutes 49 seconds
   Server load: 0.78 1.00 1.08
   Total accesses: 157978 - Total Traffic: 2.6 GB - Total Duration: 81752965
   CPU Usage: u11.83 s5.89 cu1375.95 cs927.5 - 7.36% CPU load
   5.01 requests/sec - 87.3 kB/second - 17.4 kB/request - 517.496 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 0 idle workers

KK.KWRKK.K.K.W.K...RRW..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-3  95749  1/410/8601 K 4.92  0     448 4455773 30.5  7.60  155.83 66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4210761134 HTTP/1.1
   1-3  3518   1/28/8951  K 0.28  4     341 4617680 30.0  0.43  163.23 66.249.70.200 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3873570536 HTTP/1.1
   2-3  -      0/0/9065   . 0.00  41    0   4671489 0.0   0.00  165.67 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   3-3  1392   1/98/8111  K 1.39  1     284 4229932 30.7  1.52  138.16 66.249.70.196 http/1.1 schoolplus.cloudware.ng:80 GET /?p=806005530 HTTP/1.1
   4-3  76159  1/871/9154 W 15.98 0     1   4447002 26.9  15.20 141.09 102.89.84.227 http/1.1 health.oyostate.gov.ng:443 GET /wp-content/uploads/2025/10/MAMII-840x620-840x620.jpg HTTP/
   5-3  100597 0/176/8022 R 3.03  0     0   4215607 0.0   2.59  141.71 103.253.27.28 http/1.1 health.oyostate.gov.ng:443
   6-3  4795   5/16/8315  K 0.23  3     347 4422689 151.5 0.28  158.60 66.249.70.199 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2213057074 HTTP/1.1
   7-3  90543  2/611/8181 K 9.03  2     333 4090748 59.8  11.86 143.65 66.249.70.195 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1558605893 HTTP/1.1
   8-3  -      0/0/7306   . 0.00  150   0   4035448 0.0   0.00  133.88 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-3  101980 1/127/7504 K 2.04  1     301 3984413 31.0  2.32  126.03 66.249.70.198 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2530244877 HTTP/1.1
   10-3 -      0/0/7463   . 0.00  249   0   3702680 0.0   0.00  138.46 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-3 101983 1/164/7134 K 2.44  0     22  3545495 68.1  2.72  109.47 102.89.84.227 http/1.1 health.oyostate.gov.ng:443 GET /wp-content/uploads/2024/11/Saki-image-810x620-840x620.jpg
   12-3 -      0/0/6403   . 0.00  223   0   3243478 0.0   0.00  96.81  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-3 96609  0/319/5364 W 4.65  0     0   2899668 0.0   4.98  92.89  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   14-3 -      0/0/4690   . 0.00  40    0   2496149 0.0   0.00  74.94  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-3 1402   1/106/5161 K 2.89  2     262 2674870 33.6  1.73  82.82  66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=3280876328 HTTP/1.1
   16-3 -      0/0/5138   . 0.00  592   0   2633501 0.0   0.00  83.23  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-3 -      0/0/4493   . 0.00  704   0   2360137 0.0   0.00  71.70  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-3 -      0/0/3151   . 0.00  632   0   1820234 0.0   0.00  47.47  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-3 97898  0/255/3127 R 4.05  86    288 1902036 0.0   4.29  47.79  47.128.97.193 http/1.1
   20-3 97906  0/269/2553 R 4.09  1     386 1423541 0.0   4.27  39.71  102.89.84.227 http/1.1 health.oyostate.gov.ng:443
   21-3 97907  0/295/2870 W 5.23  0     0   1613296 0.0   5.89  45.65  66.249.70.194 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1304387790 HTTP/1.1
   22-3 -      0/0/2037   . 0.00  994   0   1214155 0.0   0.00  38.74  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-3 -      0/0/422    . 0.00  982   0   205510  0.0   0.00  7.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-3 -      0/0/1641   . 0.00  5496  0   883602  0.0   0.00  32.45  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-3 -      0/0/1711   . 0.00  5504  0   733768  0.0   0.00  26.26  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-3 -      0/0/949    . 0.00  5516  0   513824  0.0   0.00  19.58  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-3 -      0/0/348    . 0.00  5515  0   135791  0.0   0.00  3.77   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-3 -      0/0/772    . 0.00  5517  0   288804  0.0   0.00  11.10  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-3 -      0/0/736    . 0.00  3932  0   449336  0.0   0.00  10.09  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-3 -      0/0/127    . 0.00  5503  0   44598   0.0   0.00  1.93   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-3 -      0/0/615    . 0.00  5514  0   305307  0.0   0.00  14.56  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-3 -      0/0/186    . 0.00  5499  0   86066   0.0   0.00  2.58   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-3 -      0/0/45     . 0.00  5502  0   7032    0.0   0.00  0.21   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-3 -      0/0/280    . 0.00  5332  0   117255  0.0   0.00  4.08   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-3 -      0/0/34     . 0.00  5526  0   4925    0.0   0.00  0.23   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-3 -      0/0/271    . 0.00  5508  0   138957  0.0   0.00  4.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-3 -      0/0/180    . 0.00  5206  0   80106   0.0   0.00  2.49   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-3 -      0/0/70     . 0.00  5527  0   27450   0.0   0.00  0.64   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-3 -      0/0/55     . 0.00  5501  0   23711   0.0   0.00  0.69   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-3 -      0/0/120    . 0.00  5283  0   47805   0.0   0.00  1.27   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-3 -      0/0/41     . 0.00  5507  0   13053   0.0   0.00  0.37   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-3 -      0/0/343    . 0.00  5487  0   157003  0.0   0.00  4.56   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-3 -      0/0/1852   . 0.00  5511  0   792927  0.0   0.00  30.21  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-3 -      0/0/70     . 0.00  5524  0   19485   0.0   0.00  0.69   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-3 -      0/0/207    . 0.00  5512  0   100344  0.0   0.00  2.84   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-3 -      0/0/17     . 0.00  5513  0   3427    0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-3 -      0/0/61     . 0.00  5525  0   23416   0.0   0.00  0.56   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-3 -      0/0/373    . 0.00  5365  0   143685  0.0   0.00  4.45   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-2 -      0/0/16     . 0.00  7801  0   5601    0.0   0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-2 -      0/0/69     . 0.00  7775  0   32068   0.0   0.00  1.06   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-2 -      0/0/94     . 0.00  7787  0   46144   0.0   0.00  1.46   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-2 -      0/0/24     . 0.00  7785  0   7231    0.0   0.00  0.23   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-2 -      0/0/902    . 0.00  7665  356 427396  0.0   0.00  16.37  66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3995667990 HTTP/1.1
   54-2 -      0/0/220    . 0.00  7797  0   104301  0.0   0.00  4.12   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-2 -      0/0/20     . 0.00  7770  0   5450    0.0   0.00  0.14   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-2 -      0/0/53     . 0.00  7663  352 26129   0.0   0.00  0.72   66.249.70.32  http/1.1 support.cloudware.ng:443   GET /ctg/search/similarImageSearchResultView/?ctgItemCd=285079
   57-1 -      0/0/18     . 0.00  8646  0   7494    0.0   0.00  0.30   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-1 -      0/0/61     . 0.00  8481  0   26486   0.0   0.00  0.85   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-1 -      0/0/67     . 0.00  8705  0   37042   0.0   0.00  1.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-1 -      0/0/14     . 0.00  8663  0   4755    0.0   0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-1 -      0/0/18     . 0.00  8709  0   8011    0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-1 -      0/0/13     . 0.00  8685  0   3968    0.0   0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-1 -      0/0/234    . 0.00  8670  0   126089  0.0   0.00  4.12   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-1 -      0/0/570    . 0.00  8664  0   196325  0.0   0.00  9.92   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-1 -      0/0/249    . 0.00  7793  282 111456  0.0   0.00  3.97   102.90.98.148 http/1.1
   66-1 -      0/0/234    . 0.00  8672  0   130247  0.0   0.00  4.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-1 -      0/0/13     . 0.00  8704  0   4952    0.0   0.00  0.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-1 -      0/0/13     . 0.00  8658  0   5501    0.0   0.00  0.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-1 -      0/0/9      . 0.00  8675  0   4783    0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-1 -      0/0/16     . 0.00  8690  0   9834    0.0   0.00  0.45   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-1 -      0/0/10     . 0.00  8684  0   3804    0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-1 -      0/0/6      . 0.00  8692  0   1625    0.0   0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-1 -      0/0/11     . 0.00  8648  0   3678    0.0   0.00  0.08   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-1 -      0/0/10     . 0.00  8666  0   5547    0.0   0.00  0.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-1 -      0/0/7      . 0.00  8667  0   2381    0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-1 -      0/0/7      . 0.00  8693  0   3573    0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-1 -      0/0/675    . 0.00  8662  0   351530  0.0   0.00  15.04  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -      0/0/2      . 0.00  16276 0   641     0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -      0/0/3      . 0.00  16264 0   1675    0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 272
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 24 seconds, (range: 0...77)
   index usage: 4%, cache usage: 6%
   total entries stored since starting: 12489
   total entries replaced since starting: 0
   total entries expired since starting: 12214
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 43 miss
   total removes since starting: 3 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit