403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-14.18.18.txt
 ## swap threshold exceeded
## server overview
2025-11-14.18.18 load[1] mem[54/84] mysql[6/26] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1173         223          80         966         933
Swap:          1999        1763         236
 18:18:02 up 11:17,  0 users,  load average: 1.41, 1.14, 0.80
## system overview
top - 18:18:02 up 11:17,  0 users,  load average: 1.41, 1.14, 0.80
Tasks: 190 total,   6 running, 182 sleeping,   0 stopped,   2 zombie
%Cpu(s): 84.4 us, 15.6 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   241116 free,  1189716 used,   989468 buff/cache
KiB Swap:  2047996 total,   242016 free,  1805980 used.   968116 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1748 mysql     20   0 1462560 292696   4352 S 143.8 12.1  10:30.89 /usr/sbin+
     1 root      20   0   44400   3364   1476 R   6.2  0.1   0:55.62 /usr/lib/+
   501 polkitd   20   0  610540    792    384 S   6.2  0.0   0:05.68 /usr/lib/+
 66263 nigeria   20   0  404052  16136  10384 S   6.2  0.7   0:00.05 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.95 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.57 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:48.82 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.47 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:09.81 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:34.80 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.10 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.87 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:03.57 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:03.98 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:02.39 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40244   5108   4856 S   0.0  0.2   0:22.44 /usr/lib/+
   383 root      20   0   45352      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    464    332 S   0.0  0.0   0:03.64 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   486 root      20   0   21540    348    260 S   0.0  0.0   0:00.90 /usr/sbin+
   487 root      20   0   52852    196    100 S   0.0  0.0   0:00.01 /usr/sbin+
   502 root      20   0   24668   1164    792 S   0.0  0.0   0:09.55 /usr/lib/+
   503 root      20   0  224288   4760   1004 S   0.0  0.2   0:00.58 queueproc+
   504 dbus      20   0   58728   1340    612 S   0.0  0.1   0:21.78 /usr/bin/+
   510 nscd      20   0 1338588   1980    696 S   0.0  0.1   0:44.99 /usr/sbin+
   514 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.04 /sbin/rpc+
   532 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   533 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0  152780     80     36 S   0.0  0.0   0:00.02 /usr/sbin+
   559 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   560 root      20   0  124480    428    296 S   0.0  0.0   0:01.15 /usr/sbin+
   572 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   573 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   599 mailnull  20   0   89116   3840    900 S   0.0  0.2   0:00.93 /usr/sbin+
   653 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:03.74 [loop0]
   680 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [jbd2/loo+
   681 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   922 root      20   0  439788    408    316 S   0.0  0.0   0:01.21 php-fpm: +
   924 root      20   0 1828136  88120    564 S   0.0  3.6   0:40.41 /usr/loca+
   927 named     20   0 1185864  38836   2132 S   0.0  1.6   0:28.30 /usr/sbin+
   930 root      20   0  111304    360    256 S   0.0  0.0   0:04.81 /usr/sbin+
   931 cpanelc+  20   0   10464   3500   2396 S   0.0  0.1   0:35.17 /usr/loca+
   932 root      20   0  396248    496    400 S   0.0  0.0   0:01.08 php-fpm: +
   934 systuser  20   0  113272     76      0 S   0.0  0.0   0:00.02 /usr/loca+
   937 root      20   0  153404    220    136 S   0.0  0.0   0:00.82 pure-ftpd+
   938 root      20   0  400740   1764    620 S   0.0  0.1   0:07.27 php-fpm: +
   939 root      20   0   51656    632    432 S   0.0  0.0   0:00.49 /usr/sbin+
   940 root      20   0  261428  27584   4856 S   0.0  1.1   0:09.01 cpsrvd (S+
   941 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   943 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.89 /usr/bin/+
   944 root      20   0  331088   6076   4964 S   0.0  0.3   0:11.11 /usr/sbin+
   946 root      20   0  388892    540    440 S   0.0  0.0   0:01.14 php-fpm: +
   947 root      20   0 1277312   4168      4 S   0.0  0.2   0:28.10 /usr/bin/+
   948 telegraf  20   0 5654304  35628   6056 S   0.0  1.5   0:22.49 /usr/loca+
   953 systuser  20   0   10132     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   954 root      20   0 1349832   5212      0 S   0.0  0.2   0:25.90 /usr/bin/+
   959 root      20   0  389508    512    416 S   0.0  0.0   0:01.08 php-fpm: +
   961 systuser  20   0   12660     56      0 S   0.0  0.0   0:00.02 /usr/loca+
   962 root      20   0  572372    580    116 S   0.0  0.0   0:03.47 /usr/bin/+
   967 systuser  20   0  114016  13032   2500 S   0.0  0.5   0:09.65 /usr/loca+
   969 systuser  20   0  112524     64      0 S   0.0  0.0   0:00.01 /usr/loca+
  1076 dovecot   20   0   10320    396    288 S   0.0  0.0   0:00.13 dovecot/a+
  1152 systuser  20   0  157708   2872    896 S   0.0  0.1   0:00.19 SonarPush+
  1197 wp-tool+  20   0  387528   3512   1656 S   0.0  0.1   0:00.38 /usr/bin/+
  1198 wp-tool+  20   0  410452  14736   1680 S   0.0  0.6   0:34.06 /usr/bin/+
  1263 root      20   0  167452   1200    652 S   0.0  0.0   0:00.65 dnsadmin +
  1264 root      20   0  209388  11068   2948 S   0.0  0.5   0:04.36 tailwatchd
  1265 root      20   0  183900   6100   2872 S   0.0  0.3   0:02.41 cpdavd - +
  1670 root      20   0  299272    496    332 S   0.0  0.0   0:01.08 php-fpm: +
  1711 root      38  18  130416   1372    692 S   0.0  0.1   0:00.10 cpanellog+
  1942 root      20   0  266980   5712    472 S   0.0  0.2   0:10.33 /usr/sbin+
  2005 root      20   0  185304  13444   1100 S   0.0  0.6   0:40.18 lfd - sle+
  2439 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  3023 oysipao+  20   0    3152     40      0 S   0.0  0.0   0:00.78 [kworker]
 31592 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 33363 dovenull  20   0   47180   3308   2304 S   0.0  0.1   0:00.73 dovecot/p+
 33364 dovenull  20   0   48380   3956   2480 S   0.0  0.2   0:00.36 dovecot/i+
 33365 root      20   0   10452    504    308 S   0.0  0.0   0:00.42 dovecot/l+
 33366 dovenull  20   0   47200   3492   2516 S   0.0  0.1   0:00.53 dovecot/p+
 33367 dovenull  20   0   48456   4172   2452 S   0.0  0.2   0:00.47 dovecot/i+
 33368 root      20   0   24564   2060    500 S   0.0  0.1   0:00.24 dovecot/c+
 33369 dovecot   20   0   13568    604    392 S   0.0  0.0   0:00.09 dovecot/s+
 33370 dovecot   20   0   41164   1488   1016 S   0.0  0.1   0:01.00 dovecot/a+
 33371 root      20   0   12816    320    212 S   0.0  0.0   0:05.85 /usr/loca+
 33372 root      20   0   12732    288    208 S   0.0  0.0   0:05.17 /usr/loca+
 33373 root      20   0   12844    344    216 S   0.0  0.0   0:05.64 /usr/loca+
 33374 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
 40955 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 46448 nobody    20   0  277656  19972   4460 S   0.0  0.8   0:01.94 /usr/sbin+
 49887 nobody    20   0  277720  19796   4392 S   0.0  0.8   0:01.58 /usr/sbin+
 49954 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 50350 nobody    20   0  277880  20080   4380 S   0.0  0.8   0:01.53 /usr/sbin+
 50923 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 54610 nobody    20   0  277736  19988   4512 S   0.0  0.8   0:01.34 /usr/sbin+
 55602 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 56569 root      20   0  248152  46952   2484 S   0.0  1.9   0:05.98 /usr/loca+
 60054 nobody    20   0  277872  18568   4180 S   0.0  0.8   0:00.87 /usr/sbin+
 60486 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 60493 nobody    20   0  277720  18696   3972 S   0.0  0.8   0:00.61 /usr/sbin+
 60507 nobody    20   0  277736  19228   4096 S   0.0  0.8   0:00.46 /usr/sbin+
 60534 nobody    20   0  277720  18836   4060 S   0.0  0.8   0:00.66 /usr/sbin+
 61856 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 61967 nobody    20   0  277888  19032   4084 S   0.0  0.8   0:00.43 /usr/sbin+
 61977 nobody    20   0  277728  18456   3744 S   0.0  0.8   0:00.50 /usr/sbin+
 61989 nobody    20   0  277720  18844   3992 R   0.0  0.8   0:00.54 /usr/sbin+
 61991 nobody    20   0  277720  18828   4092 S   0.0  0.8   0:00.45 /usr/sbin+
 62794 nobody    20   0  277744  18260   3916 S   0.0  0.8   0:00.45 /usr/sbin+
 64129 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64363 nobody    20   0  277876  18488   3812 S   0.0  0.8   0:00.24 /usr/sbin+
 65220 nobody    20   0  277744  17988   3704 S   0.0  0.7   0:00.10 /usr/sbin+
 65228 nobody    20   0  277736  17920   3664 S   0.0  0.7   0:00.14 /usr/sbin+
 65229 nobody    20   0  277720  18052   3908 S   0.0  0.7   0:00.11 /usr/sbin+
 65768 nobody    20   0  277744  17464   3392 S   0.0  0.7   0:00.06 /usr/sbin+
 65878 healtho+  20   0  462688  69424   4224 S   0.0  2.9   0:03.67 php-fpm: +
 66007 mailnull  20   0   89504   4924   1748 S   0.0  0.2   0:00.00 /usr/sbin+
 66095 healtho+  20   0  454496  61080   4216 S   0.0  2.5   0:01.03 php-fpm: +
 66143 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 66155 nigeria   20   0  400460   4348   2236 S   0.0  0.2   0:00.00 php-fpm: +
 66173 mailnull  20   0   89504   5692   2452 S   0.0  0.2   0:00.00 /usr/sbin+
 66179 root      20   0  162436   5832   4340 S   0.0  0.2   0:00.01 sshd: roo+
 66180 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: roo+
 66203 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66204 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 66205 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 66207 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 66208 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 66209 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 66211 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 66212 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 66215 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 66217 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66220 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 66221 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 66223 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 /usr/loca+
 66229 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 66230 root      20   0   20164    804    632 R   0.0  0.0   0:00.00 /usr/loca+
 66232 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 66233 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 66234 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 66235 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 66236 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 66239 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 66245 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 66246 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 66248 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 66250 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 66255 cloudw    20   0       0      0      0 Z   0.0  0.0   0:00.01 [php-cgi]+
 66280 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66299 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 66302 root      20   0   38648   6192   3028 R   0.0  0.3   0:00.00 /usr/loca+
 67723 root      20   0  273048 109204   3348 S   0.0  4.5   0:08.02 spamd chi+
 67724 root      20   0  248152  44376    724 S   0.0  1.8   0:00.01 spamd chi+
 81866 root      20   0       0      0      0 S   0.0  0.0   0:00.39 [kworker/+
 87890 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    07:00   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    07:00   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    07:00   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    07:00   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    07:00   0:48  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    07:00   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    07:00   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    07:00   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    07:00   0:09  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    07:00   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    07:00   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    07:00   0:34  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   07:00   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   07:00   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    07:00   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    07:00   0:00  \_ [scsi_eh_0]
root        245  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    07:00   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [scsi_tmf_1]
root        249  0.0  0.0      0     0 ?        S<   07:00   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   07:00   0:03  \_ [kworker/0:1H]
root        269  0.0  0.0      0     0 ?        S<   07:01   0:03  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    07:01   0:02  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   07:01   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   07:01   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   07:01   0:00  \_ [xprtiod]
root        653  0.0  0.0      0     0 ?        S<   07:01   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   07:01   0:03  \_ [loop0]
root        680  0.0  0.0      0     0 ?        S    07:01   0:00  \_ [jbd2/loop0-8]
root        681  0.0  0.0      0     0 ?        S<   07:01   0:00  \_ [ext4-rsv-conver]
root      81866  0.0  0.0      0     0 ?        S    16:38   0:00  \_ [kworker/0:4]
root      87890  0.0  0.0      0     0 ?        S    16:45   0:00  \_ [kworker/u200:1]
root      31592  0.0  0.0      0     0 ?        S    17:37   0:00  \_ [kworker/1:2]
root      40955  0.0  0.0      0     0 ?        S    17:48   0:00  \_ [kworker/u200:0]
root      49954  0.0  0.0      0     0 ?        S    17:58   0:00  \_ [kworker/0:3]
root      50923  0.0  0.0      0     0 ?        S    17:59   0:00  \_ [kworker/1:0]
root      55602  0.0  0.0      0     0 ?        S    18:04   0:00  \_ [kworker/0:1]
root      60486  0.0  0.0      0     0 ?        S    18:10   0:00  \_ [kworker/0:0]
root      61856  0.0  0.0      0     0 ?        S    18:12   0:00  \_ [kworker/1:4]
root      64129  0.0  0.0      0     0 ?        S    18:15   0:00  \_ [kworker/0:2]
root      66280  0.0  0.0      0     0 ?        S    18:18   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44400  3364 ?        Ss   07:00   0:55 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  40244  5108 ?        Ss   07:01   0:22 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352     8 ?        Ss   07:01   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   464 ?        S<sl 07:01   0:03 /sbin/auditd
root        486  0.0  0.0  21540   348 ?        Ss   07:01   0:00 /usr/sbin/irqbalance --foreground
root        487  0.0  0.0  52852   196 ?        Ss   07:01   0:00 /usr/sbin/smartd -n -q never
polkitd     501  0.0  0.0 610540   792 ?        Ssl  07:01   0:05 /usr/lib/polkit-1/polkitd --no-debug
root        502  0.0  0.0  24668  1164 ?        Ss   07:01   0:09 /usr/lib/systemd/systemd-logind
root        503  0.0  0.1 224288  4760 ?        Ss   07:01   0:00 queueprocd - waiting up to 60s to process a task
dbus        504  0.0  0.0  58728  1340 ?        Ss   07:01   0:21 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        510  0.1  0.0 1338588 1980 ?        Ssl  07:01   0:44 /usr/sbin/nscd
rpc         514  0.0  0.0  69256    60 ?        Ss   07:01   0:00 /sbin/rpcbind -w
root        532  0.0  0.0   4388     4 ?        Ss   07:01   0:00 /usr/sbin/acpid
root        533  0.0  0.0 195208     0 ?        Ssl  07:01   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0 152780    80 ?        Ss   07:01   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        559  0.0  0.0  24208     4 ?        Ss   07:01   0:00 /usr/sbin/atd -f
root        560  0.0  0.0 124480   428 ?        Ss   07:01   0:01 /usr/sbin/crond -n
root      66203  0.0  0.0 183048  2148 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      66229  0.0  0.0 113284  1212 ?        Ss   18:18   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      66232  0.0  0.0 108052   360 ?        S    18:18   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      66246  0.0  0.0 113288  1516 ?        S    18:18   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      66303  0.0  0.0 153840  2092 ?        R    18:18   0:00  |               \_ ps auxf
root      66204  0.0  0.0 183048  2152 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      66221  0.0  0.0  20164   988 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      66305  0.0  0.2  38648  6504 ?        R    18:18   0:00  |       \_ /usr/local/cpanel/bin/setupvirtfs 1014
root      66205  0.0  0.0 183048  2152 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      66230  0.0  0.0  20164   804 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      66207  0.0  0.0 183048  2152 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      66233  0.0  0.0  20164   804 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      66208  0.0  0.0 183048  2152 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      66223  0.0  0.0  20164   988 ?        Ss   18:18   0:00  |   \_ jailshell (cloudsms) [66304] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  66304  0.0  0.0  20164   264 ?        S    18:18   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  66306  0.0  0.0 113284  1212 ?        S    18:18   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      66209  0.0  0.0 183048  2152 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      66234  0.0  0.0  20164   808 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      66211  0.0  0.0 183048  2144 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      66235  0.0  0.0  20164   804 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      66212  0.0  0.0 183048  2144 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      66236  0.0  0.0  20164   804 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      66215  0.0  0.0 183048  2148 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      66220  0.0  0.0  20164   964 ?        Ss   18:18   0:00  |   \_ jailshell (pactpay) [66245] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   66245  0.0  0.0  20164   260 ?        S    18:18   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   66250  2.0  0.7 480124 17688 ?        S    18:18   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      66217  0.0  0.0 183048  2140 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      66239  0.0  0.0  20164   968 ?        Ss   18:18   0:00      \_ jailshell (nigeria) [66248] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   66248  0.0  0.0  20164   264 ?        S    18:18   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   66263  6.0  0.6 404052 16136 ?        S    18:18   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        572  0.0  0.0 114704     0 ttyS0    Ss+  07:01   0:00 /bin/bash
root        573  0.0  0.0 108296     4 tty1     Ss+  07:01   0:00 /sbin/agetty --noclear tty1 linux
mailnull    599  0.0  0.1  89116  3840 ?        Ss   07:01   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  66007  0.0  0.2  89504  4924 ?        S    18:17   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  66173  0.0  0.2  89504  5692 ?        S    18:17   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        922  0.0  0.0 439788   408 ?        Ss   07:01   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        924  0.0  3.6 1828136 88120 ?       Ssl  07:01   0:40 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.6 1185864 38836 ?       Ssl  07:01   0:28 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        930  0.0  0.0 111304   360 ?        Ss   07:01   0:04 /usr/sbin/sshd -D
root      66179  0.2  0.2 162436  5832 ?        Ss   18:17   0:00  \_ sshd: root [priv]
sshd      66180  0.0  0.1 115644  2624 ?        S    18:17   0:00      \_ sshd: root [net]
cpanelc+    931  0.0  0.1  10464  3500 ?        Ss   07:01   0:35 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        932  0.0  0.0 396248   496 ?        Ss   07:01   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser    934  0.0  0.0 113272    76 ?        Ssl  07:01   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        937  0.0  0.0 153404   220 ?        Ss   07:01   0:00 pure-ftpd (SERVER)
root        938  0.0  0.0 400740  1764 ?        Ss   07:01   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  65878 11.4  2.8 462688 69424 ?        S    18:17   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  66095  9.3  2.5 454496 61080 ?        S    18:17   0:01  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   66155  0.0  0.1 400460  4348 ?        S    18:17   0:00  \_ php-fpm: pool nigeriadecide_org
root        939  0.0  0.0  51656   632 ?        Ss   07:01   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1076  0.0  0.0  10320   396 ?        S    07:01   0:00  \_ dovecot/anvil
dovenull  33363  0.0  0.1  47180  3308 ?        S    07:28   0:00  \_ dovecot/pop3-login
dovenull  33364  0.0  0.1  48380  3956 ?        S    07:28   0:00  \_ dovecot/imap-login
root      33365  0.0  0.0  10452   504 ?        S    07:28   0:00  \_ dovecot/log
dovenull  33366  0.0  0.1  47200  3492 ?        S    07:28   0:00  \_ dovecot/pop3-login
dovenull  33367  0.0  0.1  48456  4172 ?        S    07:28   0:00  \_ dovecot/imap-login
root      33368  0.0  0.0  24564  2060 ?        S    07:28   0:00  \_ dovecot/config
dovecot   33369  0.0  0.0  13568   604 ?        S    07:28   0:00  \_ dovecot/stats
dovecot   33370  0.0  0.0  41164  1488 ?        S    07:28   0:01  \_ dovecot/auth
root        940  0.0  1.1 261428 27584 ?        Ss   07:01   0:09 cpsrvd (SSL) - waiting for connections                   
root      66143  0.0  0.0      0     0 ?        Z    18:17   0:00  \_ [cpaneld - servi] <defunct>
root        941  0.0  0.0 445028     0 ?        Ss   07:01   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
memcach+    943  0.0  0.0 342400     0 ?        Ssl  07:01   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        944  0.0  0.2 331088  6076 ?        Ssl  07:01   0:11 /usr/sbin/rsyslogd -n
root        946  0.0  0.0 388892   540 ?        Ss   07:01   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        947  0.0  0.1 1277312 4168 ?        Ssl  07:01   0:28 /usr/bin/checkstatus
telegraf    948  0.0  1.4 5654304 35628 ?       SLsl 07:01   0:22 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    953  0.0  0.0  10132    40 ?        Ssl  07:01   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        954  0.0  0.2 1349832 5212 ?        Ssl  07:01   0:25 /usr/bin/cspdaemon
root        959  0.0  0.0 389508   512 ?        Ss   07:01   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    961  0.0  0.0  12660    56 ?        Ssl  07:01   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        962  0.0  0.0 572372   580 ?        Ssl  07:01   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    967  0.0  0.5 114016 13032 ?        Ssl  07:01   0:09 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    969  0.0  0.0 112524    64 ?        Ssl  07:01   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser   1152  0.0  0.1 157708  2872 ?        S    07:01   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1197  0.0  0.1 387528  3512 ?        Ss   07:01   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1198  0.0  0.6 410452 14736 ?        Ss   07:01   0:34 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1263  0.0  0.0 167452  1200 ?        Ss   07:01   0:00 dnsadmin - dormant mode
root       1264  0.0  0.4 209388 11068 ?        Ss   07:01   0:04 tailwatchd
root       1265  0.0  0.2 183900  6100 ?        Ss   07:01   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1670  0.0  0.0 299272   496 ?        Ss   07:01   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1711  0.0  0.0 130416  1372 ?        SN   07:01   0:00 cpanellogd - sleeping for logs
mysql      1748  1.5 12.0 1462560 292696 ?      Sl   07:01  10:30 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1942  0.0  0.2 266980  5712 ?        Ss   07:01   0:10 /usr/sbin/httpd -k start
root      33371  0.0  0.0  12816   320 ?        S    07:28   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      33372  0.0  0.0  12732   288 ?        S    07:28   0:05  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      33373  0.0  0.0  12844   344 ?        S    07:28   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      33374  0.0  0.0  53268     4 ?        S    07:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    46448  0.1  0.8 277656 19972 ?        S    17:53   0:01  \_ /usr/sbin/httpd -k start
nobody    49887  0.1  0.8 277720 19796 ?        S    17:58   0:01  \_ /usr/sbin/httpd -k start
nobody    50350  0.1  0.8 277880 20080 ?        S    17:58   0:01  \_ /usr/sbin/httpd -k start
nobody    54610  0.1  0.8 277736 19988 ?        S    18:03   0:01  \_ /usr/sbin/httpd -k start
nobody    60054  0.1  0.7 277872 18568 ?        S    18:09   0:00  \_ /usr/sbin/httpd -k start
nobody    60493  0.1  0.7 277720 18696 ?        S    18:10   0:00  \_ /usr/sbin/httpd -k start
nobody    60507  0.0  0.7 277736 19228 ?        S    18:10   0:00  \_ /usr/sbin/httpd -k start
nobody    60534  0.1  0.7 277720 18836 ?        S    18:10   0:00  \_ /usr/sbin/httpd -k start
nobody    61967  0.1  0.7 277888 19032 ?        S    18:12   0:00  \_ /usr/sbin/httpd -k start
nobody    61977  0.1  0.7 277728 18456 ?        S    18:12   0:00  \_ /usr/sbin/httpd -k start
nobody    61989  0.1  0.7 277720 18844 ?        S    18:12   0:00  \_ /usr/sbin/httpd -k start
nobody    61991  0.1  0.7 277720 18828 ?        S    18:12   0:00  \_ /usr/sbin/httpd -k start
nobody    62794  0.1  0.7 277744 18260 ?        S    18:13   0:00  \_ /usr/sbin/httpd -k start
nobody    64363  0.1  0.7 277876 18488 ?        S    18:15   0:00  \_ /usr/sbin/httpd -k start
nobody    65220  0.1  0.7 277744 17988 ?        S    18:16   0:00  \_ /usr/sbin/httpd -k start
nobody    65228  0.1  0.7 277736 17920 ?        S    18:16   0:00  \_ /usr/sbin/httpd -k start
nobody    65229  0.1  0.7 277720 18052 ?        S    18:16   0:00  \_ /usr/sbin/httpd -k start
nobody    65768  0.1  0.7 277744 17464 ?        S    18:17   0:00  \_ /usr/sbin/httpd -k start
root       2005  0.0  0.5 185304 13444 ?        Ss   07:01   0:40 lfd - sleeping
oysipao+   2439  0.0  0.0   3148     8 ?        Ss   07:01   0:00 [kworker]
oysipao+   3023  0.0  0.0   3152    40 ?        S    07:02   0:00  \_ [kworker]
root      56569  0.0  1.9 248152 46952 ?        Ss   10:49   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      67723  0.0  4.5 273048 109204 ?       S    11:00   0:08  \_ spamd child
root      67724  0.0  1.8 248152 44376 ?        S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 62327  Threads: 3  Questions: 3513692  Slow queries: 0  Opens: 16187  Flush tables: 1  Open tables: 2000  Queries per second avg: 56.375
*************************** 1. row ***************************
     Id: 50185
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 50187
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `21` WHERE `phone`='2347080105620' LIMIT 1
*************************** 3. row ***************************
     Id: 50196
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Opening tables
   Info: DELETE FROM `sms_queue` WHERE `owner`='joesmile280@gmail.com' or `owner`='' or `sender`='FlRSTBANK'
*************************** 4. row ***************************
     Id: 50197
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.143.119 TIME_WAIT
      1 185.250.37.224 TIME_WAIT
      1 ::1 TIME_WAIT
      1 40.77.167.41 TIME_WAIT
      1 52.167.144.205 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      1 66.249.70.199 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 27.254.134.98 TIME_WAIT
     40 124.248.184.195 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 14-Nov-2025 18:18:02 WAT
   Restart Time: Friday, 14-Nov-2025 00:59:21 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 17 hours 18 minutes 41 seconds
   Server load: 1.78 1.22 0.83
   Total accesses: 294896 - Total Traffic: 7.4 GB - Total Duration: 313806145
   CPU Usage: u9.21 s13.13 cu3827.12 cs3193.76 - 11.3% CPU load
   4.73 requests/sec - 124.9 kB/second - 26.4 kB/request - 1064.12 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

_.W._KKR__K__..._K.K.._........RK.W.............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

    Srv   PID      Acc     M CPU   SS   Req   Dur    Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-1   65768 0/14/9877   _ 0.28 0     599 8440263  0.0   0.31  243.48 124.248.184.195 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   1-1   -     0/0/10051   . 0.00 80    0   9990028  0.0   0.00  257.04 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-1   64363 1/46/9005   W 1.02 0     0   9075887  28.8  1.14  236.93 66.249.70.197   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1278384156 HTTP/1.1
   3-1   -     0/0/9351    . 0.00 76    0   8484566  0.0   0.00  230.17 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   4-1   54610 0/283/9496  _ 5.41 0     314 8604357  0.0   8.80  238.25 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2091092614 HTTP/1.1
   5-1   50350 7/321/9385  K 6.84 2     300 8983397  207.4 6.58  237.14 66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1872453540 HTTP/1.1
   6-1   60493 60/144/9329 K 3.36 0     76  9310929  399.9 2.36  241.75 51.75.118.97    http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   7-1   61967 0/101/9046  R 1.68 74    305 8792923  0.0   1.95  234.54 90.45.203.148   http/1.1
   8-1   62794 0/90/9260   _ 1.96 1     29  9538779  0.0   2.06  247.53 116.203.129.16  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue5.php HTTP/1.1
   9-1   65220 0/22/9291   _ 0.37 1     51  51782961 0.0   0.41  253.33 128.140.8.200   http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   10-1  65228 4/41/9081   K 0.50 1     354 8826986  122.1 0.53  238.00 66.249.70.192   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1686290750 HTTP/1.1
   11-1  60054 0/154/8579  _ 3.88 0     279 8313513  0.0   4.04  222.21 66.249.70.197   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2704998864 HTTP/1.1
   12-1  65229 0/22/8610   _ 0.50 0     0   6224187  0.0   0.53  224.58 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   13-1  -     0/0/8209    . 0.00 340   0   8240858  0.0   0.00  227.70 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-1  -     0/0/8063    . 0.00 318   0   7250562  0.0   0.00  226.80 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-1  -     0/0/7666    . 0.00 337   0   8256626  0.0   0.00  192.95 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-1  60507 0/93/8787   _ 1.81 1     53  8027749  0.0   2.08  221.61 116.203.134.67  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue4.php HTTP/1.1
   17-1  60534 8/143/8859  K 2.69 0     355 6317467  239.7 5.15  228.34 66.249.70.194   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3789249973 HTTP/1.1
   18-1  -     0/0/8071    . 0.00 249   0   6869226  0.0   0.00  208.67 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-1  61977 14/216/6959 K 1.56 1     282 7577334  427.0 11.55 188.71 66.249.70.198   http/1.1 schoolplus.cloudware.ng:80 GET /?p=330383171 HTTP/1.1
   20-1  -     0/0/7511    . 0.00 251   0   9289415  0.0   0.00  190.11 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-1  -     0/0/7348    . 0.00 29    0   7221531  0.0   0.00  198.91 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-1  46448 0/440/8053  _ 8.01 1     369 5888054  0.0   8.33  188.42 124.248.184.195 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   23-1  -     0/0/6844    . 0.00 248   0   6252504  0.0   0.00  196.66 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-1  -     0/0/6645    . 0.00 14    0   6386111  0.0   0.00  176.55 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-1  -     0/0/6026    . 0.00 295   0   5516754  0.0   0.00  149.06 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-1  -     0/0/6373    . 0.00 30    0   4495943  0.0   0.00  157.88 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-1  -     0/0/6434    . 0.00 296   0   6471982  0.0   0.00  169.41 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-1  -     0/0/5753    . 0.00 339   0   6153924  0.0   0.00  142.02 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-1  -     0/0/5228    . 0.00 342   0   4641774  0.0   0.00  132.07 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-1  -     0/0/4655    . 0.00 338   0   3806194  0.0   0.00  107.97 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-1  49887 0/305/5466  R 7.17 3     283 3322102  0.0   7.28  134.60 27.254.134.98   http/1.1 cloudware.ng:443
   32-1  61989 1/104/5218  K 2.30 0     463 3931989  33.9  2.48  132.23 66.249.70.195   http/1.1 schoolplus.cloudware.ng:80 GET /?p=31751069 HTTP/1.1
   33-1  -     0/0/3692    . 0.00 341   0   3728296  0.0   0.00  93.17  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-1  61991 0/91/5035   W 1.84 0     0   4309609  0.0   2.19  132.76 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   35-1  -     0/0/3605    . 0.00 343   0   2055198  0.0   0.00  100.98 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-1  -     0/0/2880    . 0.00 345   0   1800168  0.0   0.00  67.54  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-1  -     0/0/2941    . 0.00 1193  0   2979062  0.0   0.00  71.40  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-1  -     0/0/1955    . 0.00 1666  0   1530868  0.0   0.00  51.79  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-1  -     0/0/1742    . 0.00 2415  0   1213439  0.0   0.00  44.24  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-1  -     0/0/1730    . 0.00 3221  0   2062677  0.0   0.00  43.74  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-1  -     0/0/1772    . 0.00 5090  0   1209416  0.0   0.00  45.17  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-1  -     0/0/817     . 0.00 5213  0   587254   0.0   0.00  18.82  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-1  -     0/0/824     . 0.00 4990  0   650495   0.0   0.00  21.35  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-1  -     0/0/862     . 0.00 4880  0   761123   0.0   0.00  22.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-1  -     0/0/1108    . 0.00 4899  0   937586   0.0   0.00  28.62  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-1  -     0/0/662     . 0.00 5209  0   538575   0.0   0.00  16.84  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-1  -     0/0/864     . 0.00 5216  0   537048   0.0   0.00  18.33  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-1  -     0/0/411     . 0.00 5116  0   475990   0.0   0.00  10.47  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-1  -     0/0/426     . 0.00 5210  0   615830   0.0   0.00  13.54  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-1  -     0/0/742     . 0.00 4721  0   907695   0.0   0.00  12.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-1  -     0/0/393     . 0.00 5212  0   470496   0.0   0.00  11.24  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-1  -     0/0/429     . 0.00 4898  0   639408   0.0   0.00  8.44   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-1  -     0/0/111     . 0.00 22702 0   162092   0.0   0.00  2.75   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-1  -     0/0/254     . 0.00 22717 0   444025   0.0   0.00  6.98   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-1  -     0/0/131     . 0.00 22719 0   170347   0.0   0.00  3.28   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-1  -     0/0/318     . 0.00 22122 0   441176   0.0   0.00  8.37   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-1  -     0/0/198     . 0.00 22359 0   242787   0.0   0.00  5.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-1  -     0/0/101     . 0.00 22734 0   91919    0.0   0.00  2.66   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-1  -     0/0/104     . 0.00 22638 0   89285    0.0   0.00  2.88   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-1  -     0/0/232     . 0.00 22483 0   179974   0.0   0.00  6.40   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-1  -     0/0/197     . 0.00 22709 0   156394   0.0   0.00  5.17   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-1  -     0/0/48      . 0.00 22733 0   30880    0.0   0.00  1.21   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-1  -     0/0/31      . 0.00 22676 0   43956    0.0   0.00  0.78   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-1  -     0/0/142     . 0.00 22348 0   113258   0.0   0.00  3.63   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-1  -     0/0/105     . 0.00 22521 0   86149    0.0   0.00  3.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-1  -     0/0/121     . 0.00 22739 0   89818    0.0   0.00  3.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-1  -     0/0/48      . 0.00 22752 0   42652    0.0   0.00  1.17   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-1  -     0/0/37      . 0.00 22721 0   31196    0.0   0.00  0.97   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-1  -     0/0/70      . 0.00 22624 0   54385    0.0   0.00  1.48   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-1  -     0/0/40      . 0.00 22699 0   21535    0.0   0.00  0.85   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-1  -     0/0/21      . 0.00 22718 0   10676    0.0   0.00  0.54   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-1  -     0/0/161     . 0.00 22420 0   136192   0.0   0.00  4.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-1  -     0/0/14      . 0.00 22751 0   9428     0.0   0.00  0.27   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-1  -     0/0/26      . 0.00 55466 0   32113    0.0   0.00  0.60   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-1  -     0/0/19      . 0.00 55478 0   15438    0.0   0.00  0.42   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-1  -     0/0/28      . 0.00 55432 0   15690    0.0   0.00  0.65   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-1  -     0/0/12      . 0.00 55435 0   5887     0.0   0.00  0.24   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-1  -     0/0/57      . 0.00 55493 0   32100    0.0   0.00  1.53   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-1  -     0/0/65      . 0.00 55253 0   41835    0.0   0.00  1.79   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-1  -     0/0/41      . 0.00 55420 0   52454    0.0   0.00  0.97   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-1  -     0/0/11      . 0.00 55419 0   24394    0.0   0.00  0.19   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-1  -     0/0/36      . 0.00 55494 0   22337    0.0   0.00  0.97   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   83-1  -     0/0/27      . 0.00 55446 0   35882    0.0   0.00  0.54   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   84-1  -     0/0/170     . 0.00 55199 0   114552   0.0   0.00  4.49   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   85-1  -     0/0/8       . 0.00 55462 0   3798     0.0   0.00  0.15   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   86-1  -     0/0/9       . 0.00 55428 0   23564    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   87-1  -     0/0/6       . 0.00 55460 0   25502    0.0   0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   88-1  -     0/0/13      . 0.00 55430 0   28277    0.0   0.00  0.75   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   89-1  -     0/0/24      . 0.00 55458 0   15727    0.0   0.00  0.55   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   90-1  -     0/0/41      . 0.00 55416 0   20665    0.0   0.00  1.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   91-1  -     0/0/21      . 0.00 55421 0   37882    0.0   0.00  0.54   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   92-1  -     0/0/52      . 0.00 55492 0   58586    0.0   0.00  1.39   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   93-1  -     0/0/16      . 0.00 55450 0   24210    0.0   0.00  0.40   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   94-1  -     0/0/32      . 0.00 55358 0   28086    0.0   0.00  0.69   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   95-1  -     0/0/61      . 0.00 55491 0   36232    0.0   0.00  1.61   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   96-1  -     0/0/59      . 0.00 55252 0   56109    0.0   0.00  1.63   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   97-1  -     0/0/11      . 0.00 55457 0   6293     0.0   0.00  0.27   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   98-1  -     0/0/40      . 0.00 55461 0   28746    0.0   0.00  1.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   99-1  -     0/0/30      . 0.00 55459 0   16612    0.0   0.00  0.75   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   100-1 -     0/0/5       . 0.00 55489 0   1240     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   101-1 -     0/0/10      . 0.00 55439 0   18755    0.0   0.00  0.21   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   102-1 -     0/0/25      . 0.00 55463 0   13652    0.0   0.00  0.58   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   103-1 -     0/0/37      . 0.00 55414 0   24238    0.0   0.00  0.95   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   104-1 -     0/0/1       . 0.00 55490 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 348
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 19 seconds, (range: 0...74)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 57498
   total entries replaced since starting: 0
   total entries expired since starting: 57017
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 9 hit, 302 miss
   total removes since starting: 134 hit, 203 miss
Youez - 2016 - github.com/yon3zu
LinuXploit