403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-15.02.48.txt
 ## swap threshold exceeded
## server overview
2025-11-15.02.48 load[0] mem[54/78] mysql[4/12] httpd[16]
              total        used        free      shared  buff/cache   available
Mem:           2363        1163         165          67        1034         947
Swap:          1999        1677         322
 02:48:02 up  7:52,  0 users,  load average: 0.45, 0.39, 0.33
## system overview
top - 02:48:03 up  7:52,  0 users,  load average: 0.45, 0.39, 0.33
Tasks: 195 total,   7 running, 187 sleeping,   0 stopped,   1 zombie
%Cpu(s): 70.6 us, 23.5 sy,  0.0 ni,  0.0 id,  2.9 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,   139144 free,  1194664 used,  1086492 buff/cache
KiB Swap:  2047996 total,   330744 free,  1717252 used.   967272 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1784 mysql     20   0 1458868 282624   3960 S  56.2 11.7   5:57.01 /usr/sbin+
 73640 healtho+  20   0  444580  52520   4020 R  56.2  2.2   0:00.65 php-fpm: +
 73747 root      20   0  132864  13932    996 R  25.0  0.6   0:00.11 find /tmp+
   662 root       0 -20       0      0      0 S   6.2  0.0   0:02.69 [loop0]
 65570 nobody    20   0  277548  35756   4240 S   6.2  1.5   0:00.79 /usr/sbin+
 73746 nigeria   20   0  404052  16136  10384 S   6.2  0.7   0:00.06 /opt/cpan+
     1 root      20   0   44388   3316   1492 S   0.0  0.1   0:39.07 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.81 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.39 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:29.15 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.29 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.68 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:23.66 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.61 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:02.81 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:03.12 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:01.51 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   2000   1736 S   0.0  0.1   0:16.05 /usr/lib/+
   383 root      20   0   45352    112    108 S   0.0  0.0   0:00.37 /usr/lib/+
   412 root      16  -4   55532    508    380 S   0.0  0.0   0:02.52 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   495 root      20   0  224276   6732   1712 S   0.0  0.3   0:00.38 queueproc+
   502 rpc       20   0   69256    116     56 S   0.0  0.0   0:00.03 /sbin/rpc+
   503 root      20   0  152780    144    100 S   0.0  0.0   0:00.01 /usr/sbin+
   507 root      20   0   21540    368    280 S   0.0  0.0   0:00.64 /usr/sbin+
   519 root      20   0   52852    372    272 S   0.0  0.0   0:00.01 /usr/sbin+
   520 root      20   0   24704   1196    824 S   0.0  0.0   0:06.62 /usr/lib/+
   521 polkitd   20   0  612240   1072    680 S   0.0  0.0   0:03.92 /usr/lib/+
   522 dbus      20   0   58728   1384    636 S   0.0  0.1   0:14.94 /usr/bin/+
   528 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   532 nscd      20   0 1264844   1868    828 S   0.0  0.1   0:23.14 /usr/sbin+
   545 root      20   0    4388     56     52 S   0.0  0.0   0:00.00 /usr/sbin+
   567 root      20   0  124480    448    316 S   0.0  0.0   0:00.82 /usr/sbin+
   569 root      20   0   24208     20      0 S   0.0  0.0   0:00.00 /usr/sbin+
   578 root      20   0  108296     64     60 S   0.0  0.0   0:00.00 /sbin/age+
   579 root      20   0  114704     48     48 S   0.0  0.0   0:00.02 /bin/bash
   615 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   627 mailnull  20   0   90824   3944    932 S   0.0  0.2   0:00.81 /usr/sbin+
   718 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   719 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0   12660     52      0 S   0.0  0.0   0:00.02 /usr/loca+
   913 root      20   0  111304    408    308 S   0.0  0.0   0:03.55 /usr/sbin+
   914 root      20   0 1350088   8448     44 S   0.0  0.3   0:24.59 /usr/bin/+
   916 root      20   0   51656   1200    808 S   0.0  0.0   0:00.36 /usr/sbin+
   918 root      20   0  261424   6720   1744 S   0.0  0.3   0:07.74 cpsrvd (S+
   922 root      20   0 1763124  62728    736 S   0.0  2.6   0:13.82 /usr/loca+
   923 root      20   0  306512   2832   1920 S   0.0  0.1   0:07.75 /usr/sbin+
   924 root      20   0  396248    456    368 S   0.0  0.0   0:00.74 php-fpm: +
   933 root      20   0  389508    428    340 S   0.0  0.0   0:00.78 php-fpm: +
   935 named     20   0 1054792  41116   2156 S   0.0  1.7   0:16.15 /usr/sbin+
   937 root      20   0  388892    576    480 S   0.0  0.0   0:00.84 php-fpm: +
   938 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 telegraf  20   0 5654304  37188   5312 S   0.0  1.5   0:15.55 /usr/loca+
   940 root      20   0 1277056   6116     76 S   0.0  0.3   0:22.25 /usr/bin/+
   942 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  153404    308    224 S   0.0  0.0   0:00.59 pure-ftpd+
   953 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.63 /usr/bin/+
   954 cpanelc+  20   0   10576   3712   2356 R   0.0  0.2   0:23.27 /usr/loca+
   958 root      20   0  439788    952    852 S   0.0  0.0   0:00.82 php-fpm: +
   959 systuser  20   0  113016     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   960 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   966 root      20   0  400740   2660    652 S   0.0  0.1   0:03.93 php-fpm: +
   971 systuser  20   0  114016  13896   2624 S   0.0  0.6   0:06.70 /usr/loca+
   972 root      20   0  572372    968    428 S   0.0  0.0   0:02.47 /usr/bin/+
  1066 dovecot   20   0   10320    252    140 S   0.0  0.0   0:00.09 dovecot/a+
  1133 root      20   0  248092  11468    744 S   0.0  0.5   0:06.14 /usr/loca+
  1135 systuser  20   0  157704   2884    848 S   0.0  0.1   0:00.13 SonarPush+
  1173 wp-tool+  20   0  387556   4080   1796 S   0.0  0.2   0:00.30 /usr/bin/+
  1174 wp-tool+  20   0  410480  23124   1800 S   0.0  1.0   0:23.92 /usr/bin/+
  1253 root      20   0  167452   4164   2792 S   0.0  0.2   0:00.53 dnsadmin +
  1254 root      20   0  209336  10300   2304 S   0.0  0.4   0:03.07 tailwatchd
  1256 root      20   0  262224  22984   5128 S   0.0  0.9   0:02.89 cpdavd - +
  1643 root      20   0  299272    520    356 S   0.0  0.0   0:00.79 php-fpm: +
  1715 root      38  18  130416   1388    708 S   0.0  0.1   0:00.06 cpanellog+
  1942 root      20   0  267052  31112   5620 S   0.0  1.3   0:02.91 /usr/sbin+
  6941 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  6961 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.53 [kworker]
  8135 root      20   0  270332  96704   3280 S   0.0  4.0   0:04.30 spamd chi+
  8136 root      20   0  249228  32524    736 S   0.0  1.3   0:00.05 spamd chi+
 10032 dovenull  20   0   46912   3964   2960 S   0.0  0.2   0:00.07 dovecot/p+
 10033 dovenull  20   0   47280   4532   3248 S   0.0  0.2   0:00.04 dovecot/i+
 10034 root      20   0   10452   1224    856 S   0.0  0.1   0:00.05 dovecot/l+
 10035 dovenull  20   0   46912   4224   3184 S   0.0  0.2   0:00.07 dovecot/p+
 10036 dovenull  20   0   46924   4204   3180 S   0.0  0.2   0:00.01 dovecot/i+
 10037 root      20   0   24528  11924   1096 S   0.0  0.5   0:00.03 dovecot/c+
 10038 dovecot   20   0   13568   1232    964 S   0.0  0.1   0:00.00 dovecot/s+
 10039 root      20   0   12796   1408   1180 S   0.0  0.1   0:00.54 /usr/loca+
 10040 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.47 /usr/loca+
 10041 root      20   0   12832   1424   1180 S   0.0  0.1   0:00.51 /usr/loca+
 10042 dovecot   20   0   41188   2536   1736 S   0.0  0.1   0:00.15 dovecot/a+
 10043 root      20   0   53268  11872   2488 S   0.0  0.5   0:00.05 /usr/loca+
 10709 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 33590 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 44271 nobody    20   0  277904  36412   4656 S   0.0  1.5   0:02.96 /usr/sbin+
 46515 root      20   0  182280  29584   1544 S   0.0  1.2   0:10.60 lfd - sle+
 49275 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 55126 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 55856 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 57588 nobody    20   0  277620  36040   4544 S   0.0  1.5   0:01.68 /usr/sbin+
 57876 nobody    20   0  277608  35856   4272 S   0.0  1.5   0:01.67 /usr/sbin+
 59810 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 60582 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62296 nobody    20   0  277580  35988   4468 S   0.0  1.5   0:01.22 /usr/sbin+
 63035 nobody    20   0  277568  35612   4172 S   0.0  1.5   0:01.16 /usr/sbin+
 63059 nobody    20   0  277576  35796   4260 S   0.0  1.5   0:01.03 /usr/sbin+
 64912 nobody    20   0  277576  35768   4328 S   0.0  1.5   0:00.81 /usr/sbin+
 65121 nobody    20   0  277908  35660   4040 S   0.0  1.5   0:00.84 /usr/sbin+
 65610 nobody    20   0  277620  35760   4268 S   0.0  1.5   0:00.80 /usr/sbin+
 66181 nobody    20   0  277572  35528   4084 S   0.0  1.5   0:00.74 /usr/sbin+
 66349 nobody    20   0  277928  35708   4088 S   0.0  1.5   0:00.59 /usr/sbin+
 66778 nobody    20   0  277588  35572   4112 S   0.0  1.5   0:00.65 /usr/sbin+
 67169 nobody    20   0  277820  35848   4192 S   0.0  1.5   0:00.57 /usr/sbin+
 67214 nobody    20   0  277820  35716   4064 S   0.0  1.5   0:00.45 /usr/sbin+
 67280 nobody    20   0  277620  35868   4380 S   0.0  1.5   0:00.50 /usr/sbin+
 67281 nobody    20   0  277920  35872   4276 S   0.0  1.5   0:00.54 /usr/sbin+
 68126 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 68158 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 68891 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 72228 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72892 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 73176 nobody    20   0  277924  35012   3416 S   0.0  1.4   0:00.10 /usr/sbin+
 73200 nobody    20   0  277768  34996   3392 S   0.0  1.4   0:00.08 /usr/sbin+
 73201 nobody    20   0  277576  34856   3420 S   0.0  1.4   0:00.06 /usr/sbin+
 73647 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 73648 nigeria   20   0  400460   5200   2392 S   0.0  0.2   0:00.00 php-fpm: +
 73660 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 73663 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73667 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73669 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73672 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 73673 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73675 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73693 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 73698 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 73700 root      20   0  113284   1196   1020 S   0.0  0.0   0:00.00 /bin/sh /+
 73702 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 73703 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 73704 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 73705 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 73713 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 73714 root      20   0  129956   2320   1828 S   0.0  0.1   0:00.00 /usr/bin/+
 73715 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 73716 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 73722 pactpay   20   0  480124  17692  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 73740 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 73742 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 sh -c fin+
 73748 root      20   0  112812   1008    860 S   0.0  0.0   0:00.00 grep -Ef +
 73789 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 73791 cloudw    20   0  366088  16596  10892 S   0.0  0.7   0:00.00 /opt/cpan+
 73792 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 73796 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 73797 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 73799 cloudsms  20   0  250848   6288   4368 R   0.0  0.3   0:00.00 /opt/cpan+
 73800 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 73801 cloudsms  20   0  207892   4524   3152 R   0.0  0.2   0:00.00 /opt/cpan+
 90951 root      20   0  183052   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 91032 root      20   0  113284   1180   1004 S   0.0  0.0   0:00.00 /bin/sh -+
 91056 root      20   0  108056    336    264 S   0.0  0.0   0:00.00 sleep 4h +
 91172 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov14   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov14   0:29  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov14   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov14   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   Nov14   0:03  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [xprtiod]
root        615  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kvm-irqfd-clean]
root        662  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [loop0]
root        718  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [jbd2/loop0-8]
root        719  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root      91172  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/u200:2]
root      10709  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/0:3]
root      33590  0.0  0.0      0     0 ?        S    01:57   0:00  \_ [kworker/u200:1]
root      49275  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/1:2]
root      55126  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/0:0]
root      55856  0.0  0.0      0     0 ?        S    02:27   0:00  \_ [kworker/1:1]
root      59810  0.0  0.0      0     0 ?        S    02:32   0:00  \_ [kworker/1:3]
root      60582  0.0  0.0      0     0 ?        S    02:33   0:00  \_ [kworker/0:1]
root      68126  0.0  0.0      0     0 ?        S    02:43   0:00  \_ [kworker/0:2]
root      68158  0.0  0.0      0     0 ?        S    02:43   0:00  \_ [kworker/1:0]
root      68891  0.0  0.0      0     0 ?        S    02:44   0:00  \_ [kworker/1:4]
root      72228  0.0  0.0      0     0 ?        S    02:46   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44388  3316 ?        Ss   Nov14   0:39 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.0  40244  2000 ?        Ss   Nov14   0:16 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   112 ?        Ss   Nov14   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   508 ?        S<sl Nov14   0:02 /sbin/auditd
root        495  0.0  0.2 224276  6732 ?        Ss   Nov14   0:00 queueprocd - waiting up to 60s to process a task
rpc         502  0.0  0.0  69256   116 ?        Ss   Nov14   0:00 /sbin/rpcbind -w
root        503  0.0  0.0 152780   144 ?        Ss   Nov14   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        507  0.0  0.0  21540   368 ?        Ss   Nov14   0:00 /usr/sbin/irqbalance --foreground
root        519  0.0  0.0  52852   372 ?        Ss   Nov14   0:00 /usr/sbin/smartd -n -q never
root        520  0.0  0.0  24704  1196 ?        Ss   Nov14   0:06 /usr/lib/systemd/systemd-logind
polkitd     521  0.0  0.0 612240  1072 ?        Ssl  Nov14   0:03 /usr/lib/polkit-1/polkitd --no-debug
dbus        522  0.0  0.0  58728  1384 ?        Ss   Nov14   0:14 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        528  0.0  0.0 195208     0 ?        Ssl  Nov14   0:00 /usr/sbin/gssproxy -D
nscd        532  0.0  0.0 1264844 1868 ?        Ssl  Nov14   0:23 /usr/sbin/nscd
root        545  0.0  0.0   4388    56 ?        Ss   Nov14   0:00 /usr/sbin/acpid
root        567  0.0  0.0 124480   448 ?        Ss   Nov14   0:00 /usr/sbin/crond -n
root      90951  0.0  0.0 183052  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      91032  0.0  0.0 113284  1180 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      91056  0.0  0.0 108056   336 ?        S    01:00   0:00  |       \_ sleep 4h 4m
root      73660  0.0  0.0 183048  2144 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      73703  0.0  0.0 113284  1212 ?        Ss   02:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      73713  0.0  0.0 108052   356 ?        S    02:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      73715  0.0  0.0 113288  1520 ?        S    02:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      73802  0.0  0.0 153840  2096 ?        R    02:48   0:00  |               \_ ps auxf
root      73663  0.0  0.0 183048  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      73704  0.0  0.0  20164   988 ?        Ss   02:48   0:00  |   \_ jailshell (cloudsms) [73797] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  73797  0.0  0.0      0     0 ?        D    02:48   0:00  |       \_ [jailshell]
root      73667  0.0  0.0 183048  2144 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      73702  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      73669  0.0  0.0 183048  2140 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      73698  0.0  0.0  20164   988 ?        Ss   02:48   0:00  |   \_ jailshell (cloudsms) [73792] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  73792  0.0  0.0      0     0 ?        D    02:48   0:00  |       \_ [jailshell]
root      73672  0.0  0.0 183048  2136 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      73700  0.0  0.0 113284  1196 ?        Ss   02:48   0:00  |   \_ /bin/sh /usr/local/lp/apps/security/cronwrapper.sh
root      73714  0.0  0.0 129956  2320 ?        S    02:48   0:00  |       \_ /usr/bin/perl /usr/local/lp/apps/security/infected.pl
root      73742  0.0  0.0 113284  1212 ?        S    02:48   0:00  |           \_ sh -c find /tmp/ -type f | grep -Ef /usr/local/lp/apps/security/blacklists/tmp.list
root      73747 12.0  0.5 132864 13932 ?        R    02:48   0:00  |               \_ find /tmp/ -type f
root      73748  0.0  0.0 112812  1008 ?        S    02:48   0:00  |               \_ grep -Ef /usr/local/lp/apps/security/blacklists/tmp.list
root      73673  0.0  0.0 183048  2140 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      73693  0.0  0.0  20164   968 ?        Ss   02:48   0:00  |   \_ jailshell (pactpay) [73716] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   73716  0.0  0.0  20164   260 ?        S    02:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   73722  2.0  0.7 480124 17692 ?        S    02:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      73675  0.0  0.0 183048  2140 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      73705  0.0  0.0  20164   968 ?        Ss   02:48   0:00      \_ jailshell (nigeria) [73740] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   73740  0.0  0.0  20164   260 ?        S    02:48   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   73746  6.0  0.6 404052 16136 ?        S    02:48   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        569  0.0  0.0  24208    20 ?        Ss   Nov14   0:00 /usr/sbin/atd -f
root        578  0.0  0.0 108296    64 tty1     Ss+  Nov14   0:00 /sbin/agetty --noclear tty1 linux
root        579  0.0  0.0 114704    48 ttyS0    Ss+  Nov14   0:00 /bin/bash
mailnull    627  0.0  0.1  90824  3944 ?        Ss   Nov14   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.0  12660    52 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        913  0.0  0.0 111304   408 ?        Ss   Nov14   0:03 /usr/sbin/sshd -D
root        914  0.0  0.3 1350088 8448 ?        Ssl  Nov14   0:24 /usr/bin/cspdaemon
root        916  0.0  0.0  51656  1200 ?        Ss   Nov14   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1066  0.0  0.0  10320   252 ?        S    Nov14   0:00  \_ dovecot/anvil
dovenull  10032  0.0  0.1  46912  3964 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  10033  0.0  0.1  47280  4532 ?        S    01:26   0:00  \_ dovecot/imap-login
root      10034  0.0  0.0  10452  1224 ?        S    01:26   0:00  \_ dovecot/log
dovenull  10035  0.0  0.1  46912  4224 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  10036  0.0  0.1  46924  4204 ?        S    01:26   0:00  \_ dovecot/imap-login
root      10037  0.0  0.4  24528 11924 ?        S    01:26   0:00  \_ dovecot/config
dovecot   10038  0.0  0.0  13568  1232 ?        S    01:26   0:00  \_ dovecot/stats
dovecot   10042  0.0  0.1  41188  2536 ?        S    01:26   0:00  \_ dovecot/auth
root      72892  0.0  0.1  60820  4512 ?        S    02:46   0:00  \_ dovecot/lmtp
root        918  0.0  0.2 261424  6720 ?        Ss   Nov14   0:07 cpsrvd (SSL) - waiting for connections                   
root      73647  0.0  0.0      0     0 ?        Z    02:47   0:00  \_ [cpaneld - servi] <defunct>
root        922  0.0  2.5 1763124 62728 ?       Ssl  Nov14   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        923  0.0  0.1 306512  2832 ?        Ssl  Nov14   0:07 /usr/sbin/rsyslogd -n
root        924  0.0  0.0 396248   456 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        933  0.0  0.0 389508   428 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       935  0.0  1.6 1054792 41116 ?       Ssl  Nov14   0:16 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        937  0.0  0.0 388892   576 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    938  0.0  0.0  10388    48 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    939  0.0  1.5 5654304 37188 ?       SLsl Nov14   0:15 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        940  0.0  0.2 1277056 6116 ?        Ssl  Nov14   0:22 /usr/bin/checkstatus
systuser    942  0.0  0.0 113932    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 153404   308 ?        Ss   Nov14   0:00 pure-ftpd (SERVER)
memcach+    953  0.0  0.0 342400     0 ?        Ssl  Nov14   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    954  0.0  0.1  10576  3712 ?        Ss   Nov14   0:23 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        958  0.0  0.0 439788   952 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    959  0.0  0.0 113016    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        960  0.0  0.0 445028     0 ?        Ss   Nov14   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        966  0.0  0.1 400740  2660 ?        Ss   Nov14   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  73640 22.3  2.1 444580 52520 ?        R    02:47   0:00  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   73648  0.0  0.2 400460  5200 ?        S    02:48   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    971  0.0  0.5 114016 13896 ?        Ssl  Nov14   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        972  0.0  0.0 572372   968 ?        Ssl  Nov14   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1133  0.0  0.4 248092 11468 ?        Ss   Nov14   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8135  0.0  3.9 270332 96704 ?        S    Nov14   0:04  \_ spamd child
root       8136  0.0  1.3 249228 32524 ?        S    Nov14   0:00  \_ spamd child
systuser   1135  0.0  0.1 157704  2884 ?        S    Nov14   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1173  0.0  0.1 387556  4080 ?        Ss   Nov14   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.9 410480 23124 ?        Ss   Nov14   0:23 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1253  0.0  0.1 167452  4164 ?        Ss   Nov14   0:00 dnsadmin - dormant mode
root       1254  0.0  0.4 209336 10300 ?        Ss   Nov14   0:03 tailwatchd
root       1256  0.0  0.9 262224 22984 ?        Ss   Nov14   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1643  0.0  0.0 299272   520 ?        Ss   Nov14   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1715  0.0  0.0 130416  1388 ?        SN   Nov14   0:00 cpanellogd - sleeping for logs
mysql      1784  1.2 11.6 1458868 282624 ?      Sl   Nov14   5:57 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1942  0.0  1.2 267052 31112 ?        Ss   Nov14   0:02 /usr/sbin/httpd -k start
root      10039  0.0  0.0  12796  1408 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      10040  0.0  0.0  12732  1364 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      10041  0.0  0.0  12832  1424 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      10043  0.0  0.4  53268 11872 ?        S    01:26   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    44271  0.1  1.5 277904 36412 ?        S    02:11   0:02  \_ /usr/sbin/httpd -k start
nobody    57588  0.1  1.4 277620 36040 ?        S    02:29   0:01  \_ /usr/sbin/httpd -k start
nobody    57876  0.1  1.4 277608 35856 ?        S    02:29   0:01  \_ /usr/sbin/httpd -k start
cloudw    73791  0.0  0.6 366220 16596 ?        S    02:48   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    62296  0.1  1.4 277580 35988 ?        S    02:35   0:01  \_ /usr/sbin/httpd -k start
nobody    63035  0.1  1.4 277568 35612 ?        S    02:36   0:01  \_ /usr/sbin/httpd -k start
nobody    63059  0.1  1.4 277576 35796 ?        S    02:36   0:01  \_ /usr/sbin/httpd -k start
nobody    64912  0.1  1.4 277576 35768 ?        S    02:38   0:00  \_ /usr/sbin/httpd -k start
nobody    65121  0.1  1.4 277908 35660 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    65570  0.1  1.4 277548 35756 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    65610  0.1  1.4 277620 35760 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    66181  0.1  1.4 277572 35528 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    66349  0.1  1.4 277928 35708 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    66778  0.1  1.4 277588 35572 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    67169  0.1  1.4 277820 35848 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    67214  0.1  1.4 277820 35716 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    67280  0.1  1.4 277620 35868 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    67281  0.1  1.4 277920 35872 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    73176  0.2  1.4 277924 35012 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    73200  0.1  1.4 277768 34996 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    73201  0.1  1.4 277576 34856 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
oysipao+   6941  0.0  0.0   3148     8 ?        Ss   Nov14   0:00 [kworker]
oysipao+   6961  0.0  0.0   3152    36 ?        S    Nov14   0:00  \_ [kworker]
root      46515  0.1  1.2 182280 29584 ?        Ss   00:00   0:10 lfd - sleeping
## mysql stats
Uptime: 28361  Threads: 4  Questions: 2187472  Slow queries: 0  Opens: 8128  Flush tables: 1  Open tables: 2000  Queries per second avg: 77.129
*************************** 1. row ***************************
     Id: 30067
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 30072
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 30079
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 30084
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.155.44 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 34.206.66.139 TIME_WAIT
      1 45.134.225.250 TIME_WAIT
      1 66.249.70.195 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 45.227.253.15 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 02:48:03 WAT
   Restart Time: Friday, 14-Nov-2025 18:55:26 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 7 hours 52 minutes 37 seconds
   Server load: 0.45 0.39 0.33
   Total accesses: 147499 - Total Traffic: 3.5 GB - Total Duration: 80009073
   CPU Usage: u12.88 s7.27 cu1880.63 cs1539.68 - 12.1% CPU load
   5.2 requests/sec - 129.6 kB/second - 24.9 kB/request - 542.438 ms/request
   16 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KK__RK.KWKKK_WKKK.KKW.._........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-2  64912 1/178/7540  K 3.29  3     373 3954203 29.5  3.65  173.62 66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3162807463 HTTP/1.1
   1-2  63035 3/196/7310  K 5.05  1     279 3791980 90.4  5.13  172.06 66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2891747044 HTTP/1.1
   2-2  57588 0/300/7088  _ 7.49  0     0   3909256 0.0   7.50  177.89 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   3-2  63059 0/242/7422  _ 4.12  0     14  3818139 0.0   4.44  173.97 44.220.2.97    http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/blog/assets/css/blog/blog
   4-2  65121 0/146/6957  R 3.71  47    207 3696847 0.0   3.82  180.17 182.8.98.115   http/1.1
   5-2  65570 7/140/6237  K 3.34  0     361 3498507 213.8 3.52  155.05 66.249.70.196  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2455194213 HTTP/1.1
   6-2  -     0/0/6778    . 0.00  4     0   3712468 0.0   0.00  165.71 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-2  66181 2/129/6526  K 3.25  0     326 3539733 60.2  3.36  158.10 66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4122715336 HTTP/1.1
   8-2  57876 3/405/6754  W 7.76  0     0   3601159 90.5  7.29  164.38 66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1582826168 HTTP/1.1
   9-2  65610 8/142/5939  K 3.39  2     270 3160304 241.7 3.50  143.43 66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /?p=594697945 HTTP/1.1
   10-2 67169 37/130/6020 K 2.32  0     560 3144384 126.6 2.51  151.23 45.134.225.250 http/1.1 health.oyostate.gov.ng:443 GET /wp-login.php HTTP/1.1
   11-2 66349 11/148/6153 K 2.33  1     261 3405097 336.8 2.39  158.29 66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4173135033 HTTP/1.1
   12-2 66778 0/120/5512  _ 2.84  2     7   3152703 0.0   3.10  140.91 52.44.148.203  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/blog/2019elections/assets/c
   13-2 67214 25/106/6176 W 1.83  0     0   3233765 27.8  1.91  142.07 45.134.225.250 http/1.1 health.oyostate.gov.ng:80  GET /wp-admin/index.php HTTP/1.1
   14-2 73176 1/17/5770   K 0.40  3     351 3020470 30.5  0.41  130.52 66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2211080910 HTTP/1.1
   15-2 73200 3/15/5554   K 0.34  0     455 3003478 91.9  0.43  147.81 66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3636189779 HTTP/1.1
   16-2 73201 3/10/5183   K 0.23  2     348 2688684 90.9  0.27  114.28 66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1427081564 HTTP/1.1
   17-2 -     0/0/5218    . 0.00  361   0   2800424 0.0   0.00  126.24 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-2 67280 1/90/3556   K 2.36  3     375 2097907 29.3  2.44  84.21  66.249.70.199  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1163385160 HTTP/1.1
   19-2 44271 2/621/3959  K 12.80 3     392 2319088 64.1  13.75 103.89 66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2059655254 HTTP/1.1
   20-2 67281 0/100/3489  W 2.56  0     0   2045931 0.0   2.46  88.68  ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   21-2 -     0/0/2640    . 0.00  359   0   1537981 0.0   0.00  68.07  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-2 -     0/0/2514    . 0.00  651   0   1629649 0.0   0.00  67.85  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-2 62296 0/218/1841  _ 5.70  2     1   1092305 0.0   5.63  42.33  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   24-2 -     0/0/1819    . 0.00  758   0   1023693 0.0   0.00  42.93  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-2 -     0/0/999     . 0.00  1742  0   579221  0.0   0.00  23.60  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-2 -     0/0/1583    . 0.00  1649  0   934675  0.0   0.00  39.19  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-2 -     0/0/527     . 0.00  2195  0   370996  0.0   0.00  13.50  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-2 -     0/0/149     . 0.00  2108  0   132531  0.0   0.00  2.59   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-2 -     0/0/719     . 0.00  2187  0   391650  0.0   0.00  21.38  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-2 -     0/0/976     . 0.00  1086  0   524298  0.0   0.00  25.29  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-2 -     0/0/923     . 0.00  834   0   538947  0.0   0.00  25.31  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-2 -     0/0/611     . 0.00  2997  0   340766  0.0   0.00  16.92  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-1 -     0/0/88      . 0.00  4949  0   55802   0.0   0.00  2.25   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-1 -     0/0/312     . 0.00  4950  0   173940  0.0   0.00  8.57   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-1 -     0/0/106     . 0.00  4909  274 68641   0.0   0.00  2.42   66.249.70.199  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=285191
   36-1 -     0/0/45      . 0.00  4909  312 34406   0.0   0.00  0.88   66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1858531
   37-1 -     0/0/140     . 0.00  4969  0   94554   0.0   0.00  4.26   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-1 -     0/0/520     . 0.00  4939  0   298993  0.0   0.00  13.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-1 -     0/0/189     . 0.00  4952  0   82924   0.0   0.00  2.20   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-1 -     0/0/390     . 0.00  4936  0   215765  0.0   0.00  10.21  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-1 -     0/0/504     . 0.00  4947  0   232467  0.0   0.00  10.53  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-1 -     0/0/51      . 0.00  4946  0   32716   0.0   0.00  0.81   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-1 -     0/0/146     . 0.00  4968  0   86203   0.0   0.00  3.56   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-1 -     0/0/526     . 0.00  4909  344 290992  0.0   0.00  16.18  66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2359430
   45-1 -     0/0/172     . 0.00  4967  0   111014  0.0   0.00  4.74   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-1 -     0/0/732     . 0.00  4951  0   247872  0.0   0.00  10.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/5       . 0.00  6809  0   13937   0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/8       . 0.00  6835  0   4411    0.0   0.00  0.15   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/18      . 0.00  6791  0   9848    0.0   0.00  0.38   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/299     . 0.00  6833  0   158547  0.0   0.00  8.15   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/347     . 0.00  6777  0   161044  0.0   0.00  6.97   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/29      . 0.00  6765  0   15555   0.0   0.00  0.67   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/12      . 0.00  6787  0   18089   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/10      . 0.00  6811  0   4405    0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/4       . 0.00  6807  0   998     0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/2       . 0.00  6837  0   1       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/7       . 0.00  6815  0   1939    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/6       . 0.00  6836  0   3734    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/1053    . 0.00  6810  0   467065  0.0   0.00  23.46  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/4       . 0.00  6808  0   13426   0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/13      . 0.00  6832  0   7394    0.0   0.00  0.31   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/9       . 0.00  6834  0   7635    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/5       . 0.00  6812  0   739     0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/42      . 0.00  6775  0   22252   0.0   0.00  0.99   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/123     . 0.00  6535  0   72436   0.0   0.00  3.21   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/4       . 0.00  6831  0   160     0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/2       . 0.00  6830  0   1       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/5       . 0.00  6786  0   810     0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/84      . 0.00  6793  0   48852   0.0   0.00  2.20   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/15      . 0.00  6798  0   7942    0.0   0.00  0.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/3       . 0.00  6801  0   864     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/32      . 0.00  6804  0   18076   0.0   0.00  0.70   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/42      . 0.00  6794  0   23305   0.0   0.00  1.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/9       . 0.00  6829  0   4058    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/4       . 0.00  6790  0   49      0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/934     . 0.00  6828  0   199287  0.0   0.00  9.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/2       . 0.00  6827  0   1       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/3       . 0.00  6826  0   4640    0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/1       . 0.00  23196 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 326
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 28 seconds, (range: 2...118)
   index usage: 5%, cache usage: 7%
   total entries stored since starting: 5661
   total entries replaced since starting: 0
   total entries expired since starting: 5334
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 45 miss
   total removes since starting: 1 hit, 6 miss
Youez - 2016 - github.com/yon3zu
LinuXploit