403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.11.36.txt
 ## swap threshold exceeded
## server overview
2025-11-08.11.36 load[0] mem[60/61] mysql[1/11] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1396         257          44         709         748
Swap:          1999        1313         686
 11:36:02 up  1:49,  0 users,  load average: 0.48, 0.85, 1.26
## system overview
top - 11:36:02 up  1:49,  0 users,  load average: 0.48, 0.85, 1.26
Tasks: 192 total,   6 running, 185 sleeping,   0 stopped,   1 zombie
%Cpu(s): 83.9 us, 16.1 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   252132 free,  1441912 used,   726256 buff/cache
KiB Swap:  2047996 total,   703348 free,  1344648 used.   755516 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 69060 cloudw    20   0  442704  51272   3844 R  86.7  2.1   0:00.19 php-fpm: +
  1773 mysql     20   0 1458588 237932   4220 S  46.7  9.8   2:44.34 /usr/sbin+
 68910 healtho+  20   0  457376  67640   4216 R  26.7  2.8   0:02.39 php-fpm: +
     1 root      20   0   44424   3512   1556 S   6.7  0.1   0:10.80 /usr/lib/+
   512 dbus      20   0   58768   1472    708 S   6.7  0.1   0:03.58 /usr/bin/+
 69050 nigeria   20   0  400652  15936  10220 R   6.7  0.7   0:00.03 /opt/cpan+
 69057 pactpay   20   0  476724  17484  11728 S   6.7  0.7   0:00.02 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.78 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:08.09 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.12 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.17 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:12.25 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   243 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   259 root       0 -20       0      0      0 S   0.0  0.0   0:01.28 [kworker/+
   268 root       0 -20       0      0      0 S   0.0  0.0   0:01.01 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.52 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39496   2664   2352 S   0.0  0.1   0:04.39 /usr/lib/+
   384 root      20   0   45352    372    216 S   0.0  0.0   0:00.35 /usr/lib/+
   407 root      16  -4   55532    492    364 S   0.0  0.0   0:00.74 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0  224280   7256   1128 S   0.0  0.3   0:00.22 queueproc+
   491 rpc       20   0   69256    232    124 S   0.0  0.0   0:00.01 /sbin/rpc+
   538 root      20   0   21540    432    324 S   0.0  0.0   0:00.14 /usr/sbin+
   539 root      20   0   52852    436    340 S   0.0  0.0   0:00.01 /usr/sbin+
   540 root      20   0   24896   1480    844 S   0.0  0.1   0:01.60 /usr/lib/+
   541 root      20   0  152780    228    184 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0    4388    128    124 S   0.0  0.0   0:00.00 /usr/sbin+
   544 polkitd   20   0  610540    972    516 S   0.0  0.0   0:00.95 /usr/lib/+
   547 nscd      20   0  928956   1516    812 S   0.0  0.1   0:03.48 /usr/sbin+
   566 root      20   0  195208     44     44 S   0.0  0.0   0:00.00 /usr/sbin+
   582 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   586 root      20   0  124472    492    364 S   0.0  0.0   0:00.19 /usr/sbin+
   588 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   605 root      20   0  114704    136    136 S   0.0  0.0   0:00.02 /bin/bash
   606 root      20   0  108296    148    144 S   0.0  0.0   0:00.00 /sbin/age+
   616 mailnull  20   0   89116   3784    764 S   0.0  0.2   0:00.13 /usr/sbin+
   679 root       0 -20       0      0      0 S   0.0  0.0   0:02.44 [loop0]
   709 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   969 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   971 root      20   0 1763032 282856   1028 S   0.0 11.7   0:13.52 /usr/loca+
   975 root      20   0  240976   5476   2100 S   0.0  0.2   0:02.13 /usr/sbin+
   976 named     20   0  637928  32580   1496 S   0.0  1.3   0:03.82 /usr/sbin+
   977 root      20   0  397344   3128    712 S   0.0  0.1   0:02.02 php-fpm: +
   982 systuser  20   0  114016  12868   2644 S   0.0  0.5   0:01.64 /usr/loca+
   983 root      20   0  572372    928    360 S   0.0  0.0   0:00.65 /usr/bin/+
   985 memcach+  20   0  342400      4      4 S   0.0  0.0   0:00.14 /usr/bin/+
   986 cpanelc+  20   0   10340   3520   2452 S   0.0  0.1   0:05.40 /usr/loca+
   987 root      20   0  386112    888    676 S   0.0  0.0   0:00.22 php-fpm: +
   988 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   989 root      20   0  385496    804    596 S   0.0  0.0   0:00.22 php-fpm: +
   990 root      20   0  153404    376    296 S   0.0  0.0   0:00.14 pure-ftpd+
   992 systuser  20   0  111608   1560      0 S   0.0  0.1   0:00.00 /usr/loca+
   995 root      20   0  436392  11344  11132 S   0.0  0.5   0:00.28 php-fpm: +
   998 root      20   0  392856    268    188 S   0.0  0.0   0:00.21 php-fpm: +
  1006 telegraf  20   0 5654048  36376   5780 S   0.0  1.5   0:03.94 /usr/loca+
  1010 root      20   0   51508    576    412 S   0.0  0.0   0:00.11 /usr/sbin+
  1012 root      20   0  261292   7120   2024 S   0.0  0.3   0:01.02 cpsrvd (S+
  1024 root      20   0  445028   2648   2648 S   0.0  0.1   0:00.05 sw-engine+
  1025 systuser  20   0  112524   1984      0 S   0.0  0.1   0:00.01 /usr/loca+
  1031 root      20   0  111304    512    408 S   0.0  0.0   0:01.05 /usr/sbin+
  1129 dovenull  20   0   46912   2744   2128 S   0.0  0.1   0:00.11 dovecot/p+
  1130 dovenull  20   0   47460   3412   2280 S   0.0  0.1   0:00.07 dovecot/i+
  1131 dovecot   20   0   10320    420    304 S   0.0  0.0   0:00.02 dovecot/a+
  1132 root      20   0   10452    584    380 S   0.0  0.0   0:00.07 dovecot/l+
  1133 dovenull  20   0   47188   2948   2076 S   0.0  0.1   0:00.14 dovecot/p+
  1134 dovenull  20   0   47500   3220   2192 S   0.0  0.1   0:00.08 dovecot/i+
  1142 root      20   0   24528   2464    552 S   0.0  0.1   0:00.06 dovecot/c+
  1144 dovecot   20   0   13568    724    496 S   0.0  0.0   0:00.01 dovecot/s+
  1204 systuser  20   0  157704   2948    916 S   0.0  0.1   0:00.05 SonarPush+
  1217 wp-tool+  20   0  410452  35768   1748 S   0.0  1.5   0:05.60 /usr/bin/+
  1218 wp-tool+  20   0  387528  13148   1524 S   0.0  0.5   0:00.14 /usr/bin/+
  1221 dovecot   20   0   41168   1516   1068 S   0.0  0.1   0:00.16 dovecot/a+
  1264 root      20   0  209272  20548   3168 S   0.0  0.8   0:00.90 tailwatchd
  1266 root      20   0  167452   1464    860 S   0.0  0.1   0:00.13 dnsadmin +
  1268 root      20   0  262228  22592   4736 S   0.0  0.9   0:00.42 cpdavd - +
  1699 root      20   0  299272    964    584 S   0.0  0.0   0:00.17 php-fpm: +
  1717 root      38  18  130416   1444    720 S   0.0  0.1   0:00.01 cpanellog+
  1947 root      20   0  267032   8220    812 S   0.0  0.3   0:00.48 /usr/sbin+
  1952 root      20   0   12800    432    324 S   0.0  0.0   0:00.77 /usr/loca+
  1953 root      20   0   12732    400    320 S   0.0  0.0   0:00.64 /usr/loca+
  1954 root      20   0   12828    404    280 S   0.0  0.0   0:00.70 /usr/loca+
  1963 root      20   0   53268    196    196 S   0.0  0.0   0:00.05 /usr/loca+
  2286 root      20   0  181784  10788   1212 S   0.0  0.4   0:06.64 lfd - sle+
 10754 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10763 oysipao+  20   0    3152    528     36 S   0.0  0.0   0:00.10 [kworker]
 40228 root      20   0  248032 119780   3156 S   0.0  4.9   0:03.04 /usr/loca+
 42483 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 46911 root      20   0 1276100  10556    592 S   0.0  0.4   0:00.07 /usr/bin/+
 46948 root      20   0 1277056  11568    592 S   0.0  0.5   0:00.07 /usr/bin/+
 47195 root      20   0  258908 125840   3200 S   0.0  5.2   0:00.56 spamd chi+
 47196 root      20   0  248032 117192    608 S   0.0  4.8   0:00.00 spamd chi+
 47741 nobody    20   0  277584  20056   4764 S   0.0  0.8   0:02.18 /usr/sbin+
 48296 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 48878 nobody    20   0  277648  20024   4640 S   0.0  0.8   0:02.40 /usr/sbin+
 50503 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 52088 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 54240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 57329 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 61006 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 62022 nobody    20   0  277884  19388   4140 S   0.0  0.8   0:00.83 /usr/sbin+
 62143 worencom  20   0   38484   4040   3020 S   0.0  0.2   0:00.00 dovecot/i+
 62156 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 63050 nobody    20   0  277884  19304   4160 S   0.0  0.8   0:00.78 /usr/sbin+
 64389 nobody    20   0  277880  19432   3940 S   0.0  0.8   0:00.53 /usr/sbin+
 64403 nobody    20   0  277884  19352   4016 S   0.0  0.8   0:00.50 /usr/sbin+
 65159 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65704 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66275 nobody    20   0  277884  18992   3844 S   0.0  0.8   0:00.40 /usr/sbin+
 67838 nobody    20   0  277788  18808   3636 S   0.0  0.8   0:00.11 /usr/sbin+
 67846 nobody    20   0  277892  18800   3660 S   0.0  0.8   0:00.19 /usr/sbin+
 67847 nobody    20   0  277868  18764   3632 S   0.0  0.8   0:00.14 /usr/sbin+
 67852 nobody    20   0  277536  18600   3628 S   0.0  0.8   0:00.12 /usr/sbin+
 67853 nobody    20   0  277536  18632   3668 S   0.0  0.8   0:00.16 /usr/sbin+
 67855 nobody    20   0  277548  18676   3672 S   0.0  0.8   0:00.19 /usr/sbin+
 67977 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 68001 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 68412 nobody    20   0  277532  18596   3636 S   0.0  0.8   0:00.07 /usr/sbin+
 68815 nigeria   20   0  397064   5612   2372 S   0.0  0.2   0:00.01 php-fpm: +
 68899 healtho+  20   0  457240  67640   4220 S   0.0  2.8   0:02.72 php-fpm: +
 68937 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 68972 root      20   0  111304   4444   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 68973 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 68990 root      20   0  183040   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 68991 root      20   0  183040   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 68994 root      20   0  183040   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 68995 root      20   0  183040   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 68996 root      20   0  183040   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 68997 root      20   0  183040   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 68998 root      20   0  183040   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 68999 root      20   0  183040   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69000 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69001 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69002 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69003 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69005 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 69009 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 69010 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 69011 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 69023 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69024 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 69025 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69026 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 69027 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69028 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 69029 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69031 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 69032 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 69033 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 /usr/loca+
 69036 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 69037 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 69047 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 69054 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 69068 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 69072 root      20   0   37884   2056   1108 R   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:08  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    09:46   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:12  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        243  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        245  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        259  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/1:1H]
root        268  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        582  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        679  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [loop0]
root        709  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      42483  0.0  0.0      0     0 ?        S    10:54   0:00  \_ [kworker/0:3]
root      48296  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [kworker/1:1]
root      50503  0.0  0.0      0     0 ?        S    11:05   0:00  \_ [kworker/u200:2]
root      52088  0.0  0.0      0     0 ?        S    11:08   0:00  \_ [kworker/0:1]
root      54240  0.0  0.0      0     0 ?        S    11:11   0:00  \_ [kworker/1:0]
root      57329  0.0  0.0      0     0 ?        S    11:16   0:00  \_ [kworker/1:5]
root      61006  0.0  0.0      0     0 ?        S    11:22   0:00  \_ [kworker/0:2]
root      62156  0.0  0.0      0     0 ?        S    11:24   0:00  \_ [kworker/1:3]
root      65159  0.0  0.0      0     0 ?        S    11:29   0:00  \_ [kworker/0:5]
root      65704  0.0  0.0      0     0 ?        S    11:30   0:00  \_ [kworker/u200:1]
root      67977  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/1:2]
root      68001  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/0:0]
root          1  0.1  0.1  44424  3512 ?        Ss   09:46   0:10 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  39496  2664 ?        Ss   09:46   0:04 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   372 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   492 ?        S<sl 09:46   0:00 /sbin/auditd
root        489  0.0  0.2 224280  7256 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
rpc         491  0.0  0.0  69256   232 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        512  0.0  0.0  58768  1472 ?        Ss   09:46   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        538  0.0  0.0  21540   432 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        539  0.0  0.0  52852   436 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
root        540  0.0  0.0  24896  1480 ?        Ss   09:46   0:01 /usr/lib/systemd/systemd-logind
root        541  0.0  0.0 152780   228 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        542  0.0  0.0   4388   128 ?        Ss   09:46   0:00 /usr/sbin/acpid
polkitd     544  0.0  0.0 610540   972 ?        Ssl  09:46   0:00 /usr/lib/polkit-1/polkitd --no-debug
nscd        547  0.0  0.0 928956  1516 ?        Ssl  09:46   0:03 /usr/sbin/nscd
root        566  0.0  0.0 195208    44 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        586  0.0  0.0 124472   492 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      68990  0.0  0.0 183040  2148 ?        S    11:36   0:00  \_ /usr/sbin/CROND -n
root      69009  0.0  0.0 113284  1212 ?        Ss   11:36   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      69010  0.0  0.0 108052   356 ?        S    11:36   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      69011  0.0  0.0 113288  1512 ?        S    11:36   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      69073  0.0  0.0 153840  2096 ?        R    11:36   0:00  |               \_ ps auxf
root      68991  0.0  0.0 183040  2148 ?        S    11:36   0:00  \_ /usr/sbin/CROND -n
root      69037  0.0  0.0  20164   808 ?        Ss   11:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      68994  0.0  0.0 183040  2148 ?        S    11:36   0:00  \_ /usr/sbin/CROND -n
root      69024  0.0  0.0  20164   808 ?        Ss   11:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      68995  0.0  0.0 183040  2148 ?        S    11:36   0:00  \_ /usr/sbin/CROND -n
root      69033  0.0  0.0  20164   988 ?        Ss   11:36   0:00  |   \_ jailshell (cloudsms) [69074] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      68996  0.0  0.0 183040  2144 ?        S    11:36   0:00  \_ /usr/sbin/CROND -n
root      69032  0.0  0.0  20164   804 ?        Ss   11:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      68997  0.0  0.0 183040  2144 ?        S    11:36   0:00  \_ /usr/sbin/CROND -n
root      69029  0.0  0.0  20164   804 ?        Ss   11:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      68998  0.0  0.0 183040  2144 ?        S    11:36   0:00  \_ /usr/sbin/CROND -n
root      69023  0.0  0.0  20164   804 ?        Ss   11:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      68999  0.0  0.0 183040  2144 ?        S    11:36   0:00  \_ /usr/sbin/CROND -n
root      69025  0.0  0.0  20164   804 ?        Ss   11:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      69000  0.0  0.0 183040  2140 ?        S    11:36   0:00  \_ /usr/sbin/CROND -n
root      69026  0.0  0.0  20164   808 ?        Ss   11:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      69001  0.0  0.0 183040  2140 ?        S    11:36   0:00  \_ /usr/sbin/CROND -n
root      69031  0.0  0.0  20164   808 ?        Ss   11:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      69002  0.0  0.0 183040  2140 ?        S    11:36   0:00  \_ /usr/sbin/CROND -n
root      69027  0.0  0.0  20164   804 ?        Ss   11:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      69003  0.0  0.0 183040  2140 ?        S    11:36   0:00  \_ /usr/sbin/CROND -n
root      69028  0.0  0.0  20164   968 ?        Ss   11:36   0:00  |   \_ jailshell (pactpay) [69054] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   69054  0.0  0.0  20164   256 ?        S    11:36   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   69057  2.0  0.7 476724 17484 ?        S    11:36   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      69005  0.0  0.0 183040  2140 ?        S    11:36   0:00  \_ /usr/sbin/CROND -n
root      69036  0.0  0.0  20164   968 ?        Ss   11:36   0:00      \_ jailshell (nigeria) [69047] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   69047  0.0  0.0  20164   260 ?        S    11:36   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   69050  3.0  0.6 400652 15936 ?        S    11:36   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        588  0.0  0.0  24208     0 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        605  0.0  0.0 114704   136 ttyS0    Ss+  09:46   0:00 /bin/bash
root        606  0.0  0.0 108296   148 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    616  0.0  0.1  89116  3784 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    969  0.0  0.0  11796    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        971  0.2 11.6 1763032 282856 ?      Ssl  09:46   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        975  0.0  0.2 240976  5476 ?        Ssl  09:46   0:02 /usr/sbin/rsyslogd -n
named       976  0.0  1.3 637928 32580 ?        Ssl  09:46   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        977  0.0  0.1 397344  3128 ?        Ss   09:46   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   68815  0.0  0.2 397064  5612 ?        S    11:35   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  68899 20.9  2.7 457240 67640 ?        S    11:35   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  68910 21.8  2.7 457376 67640 ?        R    11:35   0:02  \_ php-fpm: pool health_oyostate_gov_ng
cloudw    69060  0.0  2.2 444752 54176 ?        R    11:36   0:00  \_ php-fpm: pool cloudware_ng
systuser    982  0.0  0.5 114016 12868 ?        Ssl  09:46   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        983  0.0  0.0 572372   928 ?        Ssl  09:46   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
memcach+    985  0.0  0.0 342400     4 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    986  0.0  0.1  10340  3520 ?        Rs   09:46   0:05 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        987  0.0  0.0 386112   888 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    988  0.0  0.0  11348    36 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        989  0.0  0.0 385496   804 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        990  0.0  0.0 153404   376 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
systuser    992  0.0  0.0 111608  1560 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        995  0.0  0.4 436392 11344 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        998  0.0  0.0 392856   268 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
telegraf   1006  0.0  1.5 5654048 36376 ?       SLsl 09:46   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1010  0.0  0.0  51508   576 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1129  0.0  0.1  46912  2744 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  47460  3412 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1131  0.0  0.0  10320   420 ?        S    09:46   0:00  \_ dovecot/anvil
root       1132  0.0  0.0  10452   584 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1133  0.0  0.1  47188  2948 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1134  0.0  0.1  47500  3220 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1142  0.0  0.1  24528  2464 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1144  0.0  0.0  13568   724 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1221  0.0  0.0  41168  1516 ?        S    09:46   0:00  \_ dovecot/auth
worencom  62143  0.0  0.1  38484  4040 ?        S    11:24   0:00  \_ dovecot/imap
root       1012  0.0  0.2 261292  7120 ?        Ss   09:46   0:01 cpsrvd (SSL) - waiting for connections                   
root      68937  0.0  0.0      0     0 ?        Z    11:35   0:00  \_ [cpaneld - servi] <defunct>
root       1024  0.0  0.1 445028  2648 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   1025  0.0  0.0 112524  1984 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1031  0.0  0.0 111304   512 ?        Ss   09:46   0:01 /usr/sbin/sshd -D
root      68972  0.0  0.1 111304  4444 ?        Ss   11:36   0:00  \_ sshd: [accepted]
sshd      68973  0.0  0.1 115644  2628 ?        S    11:36   0:00      \_ sshd: [net]
systuser   1204  0.0  0.1 157704  2948 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1217  0.0  1.4 410452 35768 ?        Ss   09:46   0:05 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1218  0.0  0.5 387528 13148 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.8 209272 20548 ?        Ss   09:46   0:00 tailwatchd
root       1266  0.0  0.0 167452  1464 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1268  0.0  0.9 262228 22592 ?        Ss   09:46   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1699  0.0  0.0 299272   964 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1444 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1773  2.5  9.8 1458588 237932 ?      Sl   09:46   2:44 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.3 267032  8220 ?        Ss   09:46   0:00 /usr/sbin/httpd -k start
root       1952  0.0  0.0  12800   432 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1953  0.0  0.0  12732   400 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1954  0.0  0.0  12828   404 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1963  0.0  0.0  53268   196 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    47741  0.1  0.8 277584 20056 ?        S    11:01   0:02  \_ /usr/sbin/httpd -k start
nobody    48878  0.1  0.8 277648 20024 ?        S    11:03   0:02  \_ /usr/sbin/httpd -k start
nobody    62022  0.1  0.8 277884 19388 ?        S    11:24   0:00  \_ /usr/sbin/httpd -k start
nobody    63050  0.1  0.7 277884 19304 ?        S    11:25   0:00  \_ /usr/sbin/httpd -k start
nobody    64389  0.1  0.8 277880 19432 ?        S    11:27   0:00  \_ /usr/sbin/httpd -k start
nobody    64403  0.1  0.7 277884 19352 ?        S    11:27   0:00  \_ /usr/sbin/httpd -k start
nobody    66275  0.1  0.7 277884 18992 ?        S    11:31   0:00  \_ /usr/sbin/httpd -k start
nobody    67838  0.0  0.7 277788 18808 ?        S    11:33   0:00  \_ /usr/sbin/httpd -k start
nobody    67846  0.1  0.7 277892 18800 ?        S    11:33   0:00  \_ /usr/sbin/httpd -k start
nobody    67847  0.1  0.7 277868 18764 ?        S    11:33   0:00  \_ /usr/sbin/httpd -k start
nobody    67852  0.0  0.7 277536 18600 ?        S    11:33   0:00  \_ /usr/sbin/httpd -k start
nobody    67853  0.1  0.7 277536 18632 ?        S    11:33   0:00  \_ /usr/sbin/httpd -k start
nobody    67855  0.1  0.7 277548 18676 ?        S    11:33   0:00  \_ /usr/sbin/httpd -k start
nobody    68412  0.1  0.7 277532 18596 ?        S    11:35   0:00  \_ /usr/sbin/httpd -k start
root       2286  0.1  0.4 181784 10788 ?        Ss   09:46   0:06 lfd - sleeping
oysipao+  10754  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+  10763  0.0  0.0   3152   528 ?        S    10:01   0:00  \_ [kworker]
root      40228  0.1  4.9 248032 119780 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      47195  0.0  5.1 258908 125840 ?       S    11:00   0:00  \_ spamd child
root      47196  0.0  4.8 248032 117192 ?       S    11:00   0:00  \_ spamd child
root      46911  0.0  0.4 1276100 10556 ?       Ssl  11:00   0:00 /usr/bin/cspdaemon
root      46948  0.0  0.4 1277056 11568 ?       Ssl  11:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 28268  Threads: 5  Questions: 1212449  Slow queries: 0  Opens: 3126  Flush tables: 1  Open tables: 1983  Queries per second avg: 42.891
*************************** 1. row ***************************
     Id: 17614
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-08' LIMIT 1
*************************** 2. row ***************************
     Id: 17615
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 17619
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 17620
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 17622
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
*************************** 6. row ***************************
     Id: 17623
   User: unauthenticated user
   Host: localhost
     db: NULL
Command: Connect
   Time: 0
  State: Receiving from client
   Info: NULL
## network stats
      1 ::1 TIME_WAIT
      1 66.249.70.198 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     32 103.253.27.139 TIME_WAIT
     35 103.253.27.28 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 11:36:02 WAT
   Restart Time: Saturday, 08-Nov-2025 03:45:00 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 hours 51 minutes 1 second
   Server load: 0.48 0.85 1.26
   Total accesses: 33672 - Total Traffic: 492.0 MB - Total Duration: 19215572
   CPU Usage: u6.62 s2.46 cu315.38 cs204.9 - 1.87% CPU load
   1.19 requests/sec - 17.8 kB/second - 15.0 kB/request - 570.669 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

RWK__..._.KKWW._K.W.K...........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn Child  Slot     Client      Protocol           VHost                                  Request
   0-0  68412 0/20/1902  R 0.23 1    22  1198757 0.0  0.30  31.99 103.253.27.139  http/1.1
   1-0  63050 0/178/1941 W 2.98 0    0   1061488 0.0  3.30  33.13 217.113.194.227 http/1.1 cloudware.ng:443           GET /project-management-software-solutions/ HTTP/1.1
   2-0  47741 3/549/1776 K 7.40 0    338 1143907 92.0 8.34  32.37 66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /?p=4246176551 HTTP/1.1
   3-0  48878 0/674/1943 _ 8.48 0    25  1037659 0.0  9.23  27.45 128.140.8.200   http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   4-0  66275 0/84/1898  _ 1.59 0    341 1093240 0.0  1.76  30.39 103.253.27.139  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   5-0  -     0/0/1778   . 0.00 110  0   985643  0.0  0.00  24.81 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-0  -     0/0/1880   . 0.00 122  0   1083220 0.0  0.00  27.23 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-0  -     0/0/1526   . 0.00 108  0   894398  0.0  0.00  22.46 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-0  67838 0/34/1829  _ 0.31 1    340 795288  0.0  0.58  22.76 103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   9-0  -     0/0/2044   . 0.00 111  0   1058189 0.0  0.00  26.41 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 67846 2/41/1284  K 0.74 0    399 792264  62.5 0.80  19.87 66.249.70.198   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1632532436 HTTP/1.1
   11-0 67847 1/34/1478  K 0.44 1    340 828935  30.1 0.52  22.52 66.249.70.197   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1935893768 HTTP/1.1
   12-0 62022 0/196/1484 W 3.00 0    0   817390  0.0  3.92  20.03 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   13-0 64389 0/128/1198 W 1.92 0    0   727999  0.0  2.15  18.83 103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   14-0 -     0/0/1304   . 0.00 125  0   672797  0.0  0.00  16.58 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 64403 0/134/916  _ 1.61 0    0   509409  0.0  2.01  13.82 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   16-0 67852 1/31/1070  K 0.35 2    361 614173  31.0 0.48  17.70 66.249.70.194   http/1.1 schoolplus.cloudware.ng:80 GET /?p=4075708842 HTTP/1.1
   17-0 -     0/0/990    . 0.00 121  4   509845  0.0  0.00  11.95 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 67853 3/36/1139  W 0.57 0    0   556166  90.9 0.66  14.95 66.249.70.196   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2294458878 HTTP/1.1
   19-0 -     0/0/912    . 0.00 123  0   466830  0.0  0.00  12.04 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 67855 1/41/372   K 0.69 3    361 251662  30.2 0.78  5.99  66.249.70.195   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2056406304 HTTP/1.1
   21-0 -     0/0/130    . 0.00 1667 0   121479  0.0  0.00  1.71  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1140   . 0.00 503  0   573870  0.0  0.00  16.71 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/728    . 0.00 605  0   455894  0.0  0.00  8.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/72     . 0.00 2376 0   33687   0.0  0.00  1.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/18     . 0.00 2335 0   7478    0.0  0.00  0.17  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/8      . 0.00 2370 0   2104    0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/3      . 0.00 2396 0   1155    0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/2      . 0.00 2402 0   5       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/16     . 0.00 2336 0   7009    0.0  0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/8      . 0.00 2378 0   2127    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/2      . 0.00 2398 0   13      0.0  0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/6      . 0.00 2384 0   2739    0.0  0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/2      . 0.00 2401 0   1       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/5      . 0.00 2379 0   2035    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/7      . 0.00 2373 0   2468    0.0  0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/78     . 0.00 2122 0   121446  0.0  0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/4      . 0.00 2383 0   2767    0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/193    . 0.00 1924 0   241489  0.0  0.00  1.67  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/3      . 0.00 2392 0   50      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/5      . 0.00 2382 0   2478    0.0  0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/21     . 0.00 2328 0   11757   0.0  0.00  0.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/8      . 0.00 2372 0   3645    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/3      . 0.00 2389 0   709     0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/3      . 0.00 2394 0   703     0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/2      . 0.00 2400 0   2       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/9      . 0.00 2359 0   2869    0.0  0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/172    . 0.00 1947 0   242408  0.0  0.00  3.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/8      . 0.00 2371 0   2838    0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/10     . 0.00 2374 0   5104    0.0  0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/160    . 0.00 2031 0   174079  0.0  0.00  1.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00 2375 0   2028    0.0  0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/175    . 0.00 2164 0   89852   0.0  0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 312
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 33 seconds, (range: 1...117)
   index usage: 5%, cache usage: 7%
   total entries stored since starting: 9229
   total entries replaced since starting: 0
   total entries expired since starting: 8912
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 25 miss
   total removes since starting: 5 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit