403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.00.57.txt
 ## swap threshold exceeded
## server overview
2025-11-13.00.57 load[0] mem[62/65] mysql[1/8] httpd[23]
              total        used        free      shared  buff/cache   available
Mem:           2363        1421          88          50         853         724
Swap:          1999        1385         614
 00:57:01 up  4:54,  0 users,  load average: 0.11, 0.35, 0.38
## system overview
top - 00:57:02 up  4:54,  0 users,  load average: 0.11, 0.35, 0.38
Tasks: 197 total,   5 running, 191 sleeping,   0 stopped,   1 zombie
%Cpu(s): 68.8 us, 25.0 sy,  0.0 ni,  6.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   101956 free,  1446456 used,   871888 buff/cache
KiB Swap:  2047996 total,   629244 free,  1418752 used.   750488 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 247136   3288 S 118.8 10.2   4:03.36 /usr/sbin+
 20411 nigeria   20   0  400652  15936  10220 R  18.8  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44428   3516   1580 S   6.2  0.1   0:25.08 /usr/lib/+
 20422 root      20   0  160220   2068   1580 R   6.2  0.1   0:00.01 top -bcn1
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.14 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.82 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:17.81 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.77 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:03.23 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:14.88 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.38 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:01.68 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:01.62 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.82 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39500   7648   7416 S   0.0  0.3   0:10.19 /usr/lib/+
   382 root      20   0   45360    436    368 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    568    440 S   0.0  0.0   0:01.60 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1528    896 S   0.0  0.1   0:04.00 /usr/lib/+
   500 root      20   0   21540    468    380 S   0.0  0.0   0:00.39 /usr/sbin+
   501 polkitd   20   0  612240   1244    860 S   0.0  0.1   0:02.37 /usr/lib/+
   503 root      20   0  152780    280    236 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   5544   1004 S   0.0  0.2   0:00.25 queueproc+
   507 root      20   0   52852    464    360 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58728   1436    712 S   0.0  0.1   0:09.03 /usr/bin/+
   519 nscd      20   0 1062080   1592    828 S   0.0  0.1   0:14.09 /usr/sbin+
   521 rpc       20   0   69256    252    192 S   0.0  0.0   0:00.01 /sbin/rpc+
   529 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    112    112 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    552    420 S   0.0  0.0   0:00.49 /usr/sbin+
   577 root      20   0   24208    196    172 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704    216    216 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296    216    212 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3696    668 S   0.0  0.2   0:00.66 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.18 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068     52      0 S   0.0  0.0   0:00.00 /usr/loca+
   929 systuser  20   0  114016  14068   2432 S   0.0  0.6   0:04.31 /usr/loca+
   930 root      20   0  153404    440    356 S   0.0  0.0   0:00.37 pure-ftpd+
   931 root      20   0   51508    632    472 S   0.0  0.0   0:00.26 /usr/sbin+
   932 root      20   0  572372   1020    432 S   0.0  0.0   0:01.58 /usr/bin/+
   933 telegraf  20   0 5654048  37984   6116 S   0.0  1.6   0:09.81 /usr/loca+
   935 memcach+  20   0  342400     76     76 S   0.0  0.0   0:00.39 /usr/bin/+
   939 root      20   0  111304    560    460 S   0.0  0.0   0:02.25 /usr/sbin+
   940 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028    140    140 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    728    520 S   0.0  0.0   0:00.52 php-fpm: +
   961 named     20   0  637992  36048   1996 S   0.0  1.5   0:09.76 /usr/sbin+
   964 root      20   0  265552   7596   6732 S   0.0  0.3   0:04.74 /usr/sbin+
   981 root      20   0  436392   1288   1200 S   0.0  0.1   0:00.59 php-fpm: +
   984 root      20   0  385496    756    544 S   0.0  0.0   0:00.49 php-fpm: +
   985 root      20   0  261288   6860   1696 S   0.0  0.3   0:02.74 cpsrvd (S+
   989 root      20   0  392856    780    592 S   0.0  0.0   0:00.49 php-fpm: +
   992 root      20   0 1763048 252432    700 S   0.0 10.4   0:15.44 /usr/loca+
  1000 root      20   0  397344   2924    756 S   0.0  0.1   0:02.37 php-fpm: +
  1006 cpanelc+  20   0   10604   3648   2372 S   0.0  0.2   0:14.35 /usr/loca+
  1075 dovenull  20   0   46984   1952   1172 S   0.0  0.1   0:00.37 dovecot/p+
  1076 dovenull  20   0   48324   3596   1784 S   0.0  0.1   0:00.30 dovecot/i+
  1077 dovecot   20   0   10320    536    416 S   0.0  0.0   0:00.09 dovecot/a+
  1078 root      20   0   10452    616    424 S   0.0  0.0   0:00.21 dovecot/l+
  1079 dovenull  20   0   46984   1956   1144 S   0.0  0.1   0:00.26 dovecot/p+
  1080 dovenull  20   0   47940   3428   1976 S   0.0  0.1   0:00.21 dovecot/i+
  1084 root      20   0   24396   2528    584 S   0.0  0.1   0:00.12 dovecot/c+
  1088 dovecot   20   0   13568    512    296 S   0.0  0.0   0:00.04 dovecot/s+
  1121 systuser  20   0  157704   3100   1092 S   0.0  0.1   0:00.09 SonarPush+
  1166 dovecot   20   0   41260   1652   1080 S   0.0  0.1   0:00.67 dovecot/a+
  1172 root      20   0  248152 118200   1788 S   0.0  4.9   0:04.94 /usr/loca+
  1173 wp-tool+  20   0  387556   3616   1536 S   0.0  0.1   0:00.22 /usr/bin/+
  1174 wp-tool+  20   0  410616  28520   1540 S   0.0  1.2   0:14.62 /usr/bin/+
  1232 root      20   0  209372  11660   1912 S   0.0  0.5   0:02.25 tailwatchd
  1234 root      20   0  167452   4268   2900 S   0.0  0.2   0:00.32 dnsadmin +
  1237 root      20   0  262224  24504   6768 S   0.0  1.0   0:00.90 cpdavd - +
  1642 root      20   0  299272    896    524 S   0.0  0.0   0:00.47 php-fpm: +
  1702 root      38  18  130416   1532    800 S   0.0  0.1   0:00.04 cpanellog+
  2059 root      20   0  267036   8568    816 S   0.0  0.4   0:01.41 /usr/sbin+
  2063 root      20   0   12824    576    376 S   0.0  0.0   0:02.03 /usr/loca+
  2064 root      20   0   12732    444    364 S   0.0  0.0   0:01.73 /usr/loca+
  2065 root      20   0   12860    548    368 S   0.0  0.0   0:01.90 /usr/loca+
  2089 root      20   0   53268    264    264 S   0.0  0.0   0:00.05 /usr/loca+
  7810 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  7883 root      20   0  306476 168648   1704 S   0.0  7.0   0:02.51 spamd chi+
  7886 root      20   0  248152 116832    456 S   0.0  4.8   0:00.00 spamd chi+
  8905 nobody    20   0  277720  19932   4156 S   0.0  0.8   0:01.19 /usr/sbin+
 10212 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10227 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 11220 nobody    20   0  277908  19304   3864 S   0.0  0.8   0:01.18 /usr/sbin+
 11377 nobody    20   0  277720  19628   3724 S   0.0  0.8   0:00.76 /usr/sbin+
 12252 nobody    20   0  277636  19952   4168 S   0.0  0.8   0:00.64 /usr/sbin+
 12759 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 14349 nobody    20   0  277760  19516   3900 S   0.0  0.8   0:00.74 /usr/sbin+
 14387 nobody    20   0  277720  19712   3960 S   0.0  0.8   0:00.80 /usr/sbin+
 14390 nobody    20   0  277940  19576   3920 S   0.0  0.8   0:00.47 /usr/sbin+
 14393 nobody    20   0  277760  19884   4024 S   0.0  0.8   0:00.62 /usr/sbin+
 14974 nobody    20   0  277784  19928   4040 S   0.0  0.8   0:00.45 /usr/sbin+
 15233 nobody    20   0  277784  20000   4028 S   0.0  0.8   0:00.66 /usr/sbin+
 16898 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 16928 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 16988 nobody    20   0  277940  19464   3888 S   0.0  0.8   0:00.33 /usr/sbin+
 17677 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 17962 nobody    20   0  277724  19380   3892 S   0.0  0.8   0:00.34 /usr/sbin+
 18834 nobody    20   0  277720  19008   3604 S   0.0  0.8   0:00.23 /usr/sbin+
 19417 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 19591 nobody    20   0  277784  17432   2124 S   0.0  0.7   0:00.11 /usr/sbin+
 19593 nobody    20   0  277644  19220   3812 S   0.0  0.8   0:00.12 /usr/sbin+
 19611 nobody    20   0  277784  18928   3560 S   0.0  0.8   0:00.05 /usr/sbin+
 19614 nobody    20   0  277820  19096   3620 S   0.0  0.8   0:00.08 /usr/sbin+
 19639 root      20   0  157100   5072   3784 S   0.0  0.2   0:00.00 sshd: unk+
 19640 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 20194 nobody    20   0  277948  19132   3816 S   0.0  0.8   0:00.01 /usr/sbin+
 20239 mailnull  20   0   89500   5676   2452 S   0.0  0.2   0:00.00 /usr/sbin+
 20284 nobody    20   0  277784  17364   2120 S   0.0  0.7   0:00.01 /usr/sbin+
 20299 nigeria   20   0  397064   5364   2352 S   0.0  0.2   0:00.00 php-fpm: +
 20302 nobody    20   0  277640  17192   2116 S   0.0  0.7   0:00.00 /usr/sbin+
 20303 nobody    20   0  277640  17192   2116 S   0.0  0.7   0:00.00 /usr/sbin+
 20308 healtho+  20   0  460392  71704   4488 S   0.0  3.0   0:00.79 php-fpm: +
 20311 nobody    20   0  277640  17192   2116 S   0.0  0.7   0:00.00 /usr/sbin+
 20312 nobody    20   0  277640  17192   2116 S   0.0  0.7   0:00.00 /usr/sbin+
 20313 nobody    20   0  277640  17192   2116 S   0.0  0.7   0:00.00 /usr/sbin+
 20314 nobody    20   0  277640  17192   2116 S   0.0  0.7   0:00.00 /usr/sbin+
 20333 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 20340 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 20344 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 20345 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 20346 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 20347 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 20349 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 20350 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 20352 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 20354 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 20355 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 20356 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 20378 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 20384 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 20388 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 20390 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 20393 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 20394 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 20395 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 20397 pactpay   20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 20408 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 20423 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 20430 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 20432 cloudsms  20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
 20433 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 20434 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 20435 cloudsms  20   0   37184    392    244 R   0.0  0.0   0:00.00 /opt/cpan+
 36095 root      20   0       0      0      0 S   0.0  0.0   0:00.26 [kworker/+
 47111 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152    428      0 S   0.0  0.0   0:00.25 [kworker]
 76167 root      20   0  181464  28700   1612 S   0.0  1.2   0:03.36 lfd - sle+
 76469 root      20   0 1276100  10708    588 S   0.0  0.4   0:00.09 /usr/bin/+
 76506 root      20   0 1277312  11620    588 S   0.0  0.5   0:00.07 /usr/bin/+
 78808 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 96276 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kworker/+
 97236 nobody    20   0  277676  20672   4392 S   0.0  0.9   0:03.01 /usr/sbin+
100159 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
100219 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:17  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    Nov12   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov12   0:14  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:01  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:01  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      36095  0.0  0.0      0     0 ?        D    Nov12   0:00  \_ [kworker/u200:2]
root      78808  0.0  0.0      0     0 ?        D    00:03   0:00  \_ [kworker/0:3]
root      96276  0.0  0.0      0     0 ?        D    00:25   0:00  \_ [kworker/u200:0]
root     100159  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/1:0]
root     100219  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/0:0]
root       7810  0.0  0.0      0     0 ?        S    00:42   0:00  \_ [kworker/1:1]
root      10212  0.0  0.0      0     0 ?        S    00:45   0:00  \_ [kworker/0:2]
root      10227  0.0  0.0      0     0 ?        S    00:45   0:00  \_ [kworker/0:4]
root      12759  0.0  0.0      0     0 ?        S    00:48   0:00  \_ [kworker/1:3]
root      16898  0.0  0.0      0     0 ?        D    00:53   0:00  \_ [kworker/0:1]
root      16928  0.0  0.0      0     0 ?        S    00:53   0:00  \_ [kworker/1:2]
root      17677  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44432  3516 ?        Rs   Nov12   0:25 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.3  39500  7648 ?        Ss   Nov12   0:10 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360   436 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   568 ?        S<sl Nov12   0:01 /sbin/auditd
root        497  0.0  0.0  24896  1528 ?        Ds   Nov12   0:04 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   468 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240  1244 ?        Ssl  Nov12   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780   280 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.2 224148  5544 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   464 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58728  1436 ?        Ss   Nov12   0:09 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1592 ?        Ssl  Nov12   0:14 /usr/sbin/nscd
rpc         521  0.0  0.0  69256   252 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388   156 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   112 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   552 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      20340  0.0  0.0 183048  2144 ?        S    00:57   0:00  \_ /usr/sbin/CROND -n
root      20354  0.0  0.0 113284  1208 ?        Ss   00:57   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      20355  0.0  0.0 108052   356 ?        S    00:57   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      20356  0.0  0.0 113288  1516 ?        S    00:57   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      20436  0.0  0.0 153840  2092 ?        R    00:57   0:00  |               \_ ps auxf
root      20344  0.0  0.0 183048  2144 ?        S    00:57   0:00  \_ /usr/sbin/CROND -n
root      20393  0.0  0.0  20164   804 ?        Ss   00:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      20345  0.0  0.0 183048  2144 ?        S    00:57   0:00  \_ /usr/sbin/CROND -n
root      20384  0.0  0.0  20164   808 ?        Ss   00:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      20346  0.0  0.0 183048  2144 ?        S    00:57   0:00  \_ /usr/sbin/CROND -n
root      20378  0.0  0.0  20164   984 ?        Ss   00:57   0:00  |   \_ jailshell (cloudsms) [20430] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  20430  0.0  0.0  20164   260 ?        S    00:57   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  20432  0.0  0.0 113284  1212 ?        S    00:57   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  20437  0.0  0.0  51892  1800 ?        R    00:57   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue5.php
root      20347  0.0  0.0 183048  2144 ?        S    00:57   0:00  \_ /usr/sbin/CROND -n
root      20388  0.0  0.0  20164   988 ?        Ss   00:57   0:00  |   \_ jailshell (cloudsms) [20433] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  20433  0.0  0.0      0     0 ?        R    00:57   0:00  |       \_ [jailshell]
root      20349  0.0  0.0 183048  2144 ?        S    00:57   0:00  \_ /usr/sbin/CROND -n
root      20395  0.0  0.0  20164   808 ?        Ss   00:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      20352  0.0  0.0 183048  2140 ?        S    00:57   0:00  \_ /usr/sbin/CROND -n
root      20394  0.0  0.0  20164   968 ?        Ss   00:57   0:00      \_ jailshell (nigeria) [20408] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   20408  0.0  0.0  20164   264 ?        S    00:57   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   20411  0.0  0.6 400652 15936 ?        S    00:57   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208   196 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704   216 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296   216 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3696 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  20239  0.0  0.2  89500  5676 ?        S    00:56   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    76 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068    52 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 14068 ?        Ssl  Nov12   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   440 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   632 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  46984  1952 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48324  3596 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   536 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   616 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  46984  1956 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47940  3428 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.1  24396  2528 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   512 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1652 ?        S    Nov12   0:00  \_ dovecot/auth
root      19417  0.0  0.1  41052  2728 ?        S    00:55   0:00  \_ dovecot/auth -w
root        932  0.0  0.0 572372  1020 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.5 5654048 37984 ?       SLsl Nov12   0:09 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    76 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   560 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root      19639  0.0  0.2 157100  5072 ?        Ss   00:56   0:00  \_ sshd: unknown [priv]
sshd      19640  0.0  0.1 115644  2628 ?        S    00:56   0:00  |   \_ sshd: unknown [net]
root      20423  0.0  0.1 111304  4268 ?        Ss   00:57   0:00  \_ sshd: [accepted]
systuser    940  0.0  0.0  10132    48 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    72 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028   140 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   728 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.4 637992 36048 ?        Ssl  Nov12   0:09 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.3 265552  7596 ?        Ssl  Nov12   0:04 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392  1288 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   756 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6860 ?        Ss   Nov12   0:02 cpsrvd (SSL) - waiting for connections                   
root      20333  0.0  0.0      0     0 ?        Z    00:57   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   780 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.0 10.4 1763048 252432 ?      Ssl  Nov12   0:15 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.1 397344  2924 ?        Ss   Nov12   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   20299  0.0  0.2 397064  5364 ?        S    00:56   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  20308 26.3  2.9 460392 71704 ?        S    00:56   0:00  \_ php-fpm: pool health_oyostate_gov_ng
cpanelc+   1006  0.0  0.1  10604  3648 ?        Rs   Nov12   0:14 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  3100 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  4.8 248152 118200 ?       Ss   Nov12   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  6.9 306476 168648 ?       S    Nov12   0:02  \_ spamd child
root       7886  0.0  4.8 248152 116832 ?       S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3616 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  1.1 410616 28520 ?        Ss   Nov12   0:14 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.4 209372 11660 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.1 167452  4268 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  1.0 262224 24504 ?        Ss   Nov12   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1642  0.0  0.0 299272   896 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1532 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.3 10.2 1457796 247136 ?      Sl   Nov12   4:03 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.3 267036  8568 ?        Ss   Nov12   0:01 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12824   576 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   444 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12860   548 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268   264 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    97236  0.1  0.8 277676 20672 ?        S    00:26   0:03  \_ /usr/sbin/httpd -k start
nobody     8905  0.1  0.8 277720 19932 ?        S    00:43   0:01  \_ /usr/sbin/httpd -k start
nobody    11220  0.1  0.7 277908 19304 ?        S    00:46   0:01  \_ /usr/sbin/httpd -k start
nobody    11377  0.1  0.8 277720 19628 ?        S    00:46   0:00  \_ /usr/sbin/httpd -k start
nobody    12252  0.1  0.8 277636 19952 ?        S    00:47   0:00  \_ /usr/sbin/httpd -k start
nobody    14349  0.1  0.8 277760 19516 ?        S    00:49   0:00  \_ /usr/sbin/httpd -k start
nobody    14387  0.1  0.8 277720 19712 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    14390  0.1  0.8 277940 19576 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    14393  0.1  0.8 277760 19884 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    14974  0.1  0.8 277784 19928 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    15233  0.1  0.8 277784 20000 ?        S    00:50   0:00  \_ /usr/sbin/httpd -k start
nobody    16988  0.1  0.8 277940 19464 ?        S    00:53   0:00  \_ /usr/sbin/httpd -k start
nobody    17962  0.2  0.8 277724 19380 ?        S    00:54   0:00  \_ /usr/sbin/httpd -k start
nobody    18834  0.2  0.7 277720 19008 ?        S    00:55   0:00  \_ /usr/sbin/httpd -k start
nobody    19591  0.1  0.7 277784 17432 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody    19593  0.2  0.7 277644 19220 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody    19611  0.0  0.7 277784 18928 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody    19614  0.1  0.7 277820 19096 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody    20194  0.0  0.7 277948 19132 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody    20284  0.2  0.7 277784 17364 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody    20302  0.0  0.7 277640 17192 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody    20303  0.0  0.7 277640 17192 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody    20311  0.0  0.7 277640 17192 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody    20312  0.0  0.7 277640 17192 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody    20313  0.0  0.7 277640 17192 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody    20314  0.0  0.7 277640 17192 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148   416 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152   428 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  1.1 181464 28700 ?        Ss   00:00   0:03 lfd - sleeping
root      76469  0.0  0.4 1276100 10708 ?       Ssl  00:00   0:00 /usr/bin/cspdaemon
root      76506  0.0  0.4 1277312 11620 ?       Ssl  00:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 17643  Threads: 2  Questions: 1470140  Slow queries: 0  Opens: 5838  Flush tables: 1  Open tables: 2000  Queries per second avg: 83.327
*************************** 1. row ***************************
     Id: 20833
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `06` WHERE `phone`='2348062245945' LIMIT 1
*************************** 2. row ***************************
     Id: 20839
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 127.0.0.1 TIME_WAIT
      1 15.235.96.120 TIME_WAIT
      1 15.235.98.48 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 182.44.10.67 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.117.22.238 TIME_WAIT
      1 66.249.64.12 TIME_WAIT
      1 66.249.70.195 TIME_WAIT
      1 66.249.70.198 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 00:57:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 4 hours 53 minutes 58 seconds
   Server load: 0.11 0.35 0.38
   Total accesses: 90142 - Total Traffic: 2.4 GB - Total Duration: 44704624
   CPU Usage: u8.49 s4.72 cu1152.24 cs912.65 - 11.8% CPU load
   5.11 requests/sec - 143.5 kB/second - 28.1 kB/request - 495.936 ms/request
   22 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

K_KKK_KKKKKKKKKWK_KKK...K.K._.KK................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-0  11220 2/196/4564 K 5.26  4     299 2252567 66.0  5.43  116.18 66.249.64.128  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3294761094 HTTP/1.1
   1-0  20194 0/5/4527   _ 0.03  0     0   2056823 0.0   0.06  109.86 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   2-0  11377 1/129/4380 K 3.32  3     364 2269348 30.5  3.73  129.95 66.249.70.102  http/1.1 schoolplus.cloudware.ng:80 GET /?p=281087888 HTTP/1.1
   3-0  16988 1/61/4504  K 1.41  1     361 2364200 30.4  2.44  133.53 66.249.64.72   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3347132025 HTTP/1.1
   4-0  8905  1/210/4321 K 5.41  2     360 2101213 30.8  6.51  112.41 66.249.64.161  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3374365425 HTTP/1.1
   5-0  14974 0/80/4478  _ 1.91  0     4   2281308 0.0   2.03  143.96 18.213.240.226 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/images/blog/blog/blog/201
   6-0  18834 1/40/4222  K 1.02  4     253 2123810 29.4  1.30  114.00 192.178.4.100  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1746370997 HTTP/1.1
   7-0  14349 2/135/4901 K 3.44  1     343 2264641 59.2  3.40  130.79 192.178.4.99   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1203735730 HTTP/1.1
   8-0  15233 1/116/3729 K 3.49  0     419 1884560 30.1  3.08  96.95  66.249.70.4    http/1.1 schoolplus.cloudware.ng:80 GET /?p=1968008209 HTTP/1.1
   9-0  20284 2/2/3900   K 0.02  2     413 1953522 61.5  0.06  104.85 66.249.64.130  http/1.1 schoolplus.cloudware.ng:80 GET /?p=876588638 HTTP/1.1
   10-0 12252 1/118/4118 K 2.97  3     285 1990570 30.1  3.33  115.67 66.249.64.227  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2382705398 HTTP/1.1
   11-0 17962 1/58/4340  K 1.48  2     454 2190609 32.3  1.73  142.72 66.249.64.170  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2232997346 HTTP/1.1
   12-0 20302 1/1/3852   K 0.00  3     404 1831876 31.6  0.03  96.27  192.178.4.103  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2288135182 HTTP/1.1
   13-0 20303 1/1/3189   K 0.00  3     278 1461004 30.9  0.03  75.17  66.249.64.42   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2465541551 HTTP/1.1
   14-0 20311 1/1/3300   K 0.00  2     410 1683556 30.1  0.03  103.00 66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4098885317 HTTP/1.1
   15-0 19591 0/17/2708  W 0.48  0     0   1335145 0.0   0.51  69.69  ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   16-0 20312 1/1/3984   K 0.00  1     399 1949123 31.7  0.03  107.28 66.249.64.225  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2593470686 HTTP/1.1
   17-0 97236 0/581/4537 _ 14.72 0     364 2311896 0.0   13.93 126.30 66.249.64.8    http/1.1 schoolplus.cloudware.ng:80 GET /?p=2623051906 HTTP/1.1
   18-0 19593 1/21/1920  K 0.52  2     399 1042515 29.8  0.73  52.87  66.249.64.102  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2321557802 HTTP/1.1
   19-0 20313 1/1/2548   K 0.00  1     336 1329448 30.4  0.03  70.67  66.249.64.109  http/1.1 schoolplus.cloudware.ng:80 GET /?p=753848393 HTTP/1.1
   20-0 20314 1/1/1334   K 0.00  2     441 690024  31.8  0.03  34.31  66.249.70.7    http/1.1 schoolplus.cloudware.ng:80 GET /?p=2579828030 HTTP/1.1
   21-0 -     0/0/1440   . 0.00  52    0   760610  0.0   0.00  41.78  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1547   . 0.00  45    0   825545  0.0   0.00  50.96  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/955    . 0.00  41    0   473296  0.0   0.00  22.17  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 14387 1/135/1850 K 3.58  1     413 708910  24.0  3.87  39.58  198.232.5.176  http/1.1 health.oyostate.gov.ng:443 GET /download/ministry-of-health-grievance-redress-process/ HTT
   25-0 -     0/0/896    . 0.00  51    0   466005  0.0   0.00  25.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 19611 4/11/367   K 0.21  3     319 199279  122.7 0.26  9.72   66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1240368790 HTTP/1.1
   27-0 -     0/0/350    . 0.00  43    0   190749  0.0   0.00  10.36  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 14390 0/82/1237  _ 2.01  0     339 522796  0.0   2.32  27.75  66.249.64.40   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3601945055 HTTP/1.1
   29-0 -     0/0/182    . 0.00  53    0   99055   0.0   0.00  4.77   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 19614 1/16/415   K 0.35  0     411 193726  31.2  0.39  8.62   66.249.70.173  http/1.1 schoolplus.cloudware.ng:80 GET /?p=129837152 HTTP/1.1
   31-0 14393 1/113/161  K 2.69  2     472 90754   23.0  3.22  4.56   2.56.75.2      http/1.1 health.oyostate.gov.ng:443 GET /portfolio/human-resources/ HTTP/1.1
   32-0 -     0/0/23     . 0.00  245   0   11612   0.0   0.00  0.52   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/24     . 0.00  17017 0   12272   0.0   0.00  0.58   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/71     . 0.00  16812 0   43033   0.0   0.00  1.97   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/2      . 0.00  17093 305 1157    0.0   0.00  0.06   66.249.70.100  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3584359384 HTTP/1.1
   36-0 -     0/0/19     . 0.00  17023 0   12232   0.0   0.00  0.55   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/69     . 0.00  16814 0   41923   0.0   0.00  1.99   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/2      . 0.00  17096 0   993     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/3      . 0.00  17088 0   910     0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1107   . 0.00  13121 0   644340  0.0   0.00  31.91  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/3      . 0.00  17095 0   924     0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/4      . 0.00  17081 0   1967    0.0   0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/41     . 0.00  16965 0   25843   0.0   0.00  1.19   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/18     . 0.00  17022 0   8912    0.0   0.00  0.42   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 349
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 20 seconds, (range: 0...81)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 25737
   total entries replaced since starting: 0
   total entries expired since starting: 25379
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 142 miss
   total removes since starting: 9 hit, 8 miss
Youez - 2016 - github.com/yon3zu
LinuXploit