403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.12.03.txt
 ## swap threshold exceeded
## server overview
2025-11-17.12.03 load[0] mem[61/71] mysql[2/25] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1395          89          44         878         760
Swap:          1999        1507         492
 12:03:02 up  6:42,  0 users,  load average: 0.44, 0.42, 0.47
## system overview
top - 12:03:02 up  6:42,  0 users,  load average: 0.44, 0.42, 0.47
Tasks: 193 total,   2 running, 190 sleeping,   0 stopped,   1 zombie
%Cpu(s): 53.1 us, 18.8 sy,  0.0 ni, 28.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    90176 free,  1428484 used,   901640 buff/cache
KiB Swap:  2047996 total,   504672 free,  1543324 used.   778700 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1468028 252444   3284 S  75.0 10.4   5:39.99 /usr/sbin+
 52672 nigeria   20   0  404052  16140  10384 S  18.8  0.7   0:00.04 /opt/cpan+
 52656 pactpay   20   0  480124  17312  11580 S   6.2  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44400   3356   1460 S   0.0  0.1   0:32.28 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.64 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.37 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:26.65 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.34 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.87 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:53.36 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.51 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:05.09 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:04.07 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:01.57 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   5408   5164 S   0.0  0.2   0:13.85 /usr/lib/+
   376 root      20   0   45376      8      4 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    460    332 S   0.0  0.0   0:02.15 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     80     36 S   0.0  0.0   0:00.02 /usr/sbin+
   475 polkitd   20   0  612240    836    460 S   0.0  0.0   0:03.39 /usr/lib/+
   476 root      20   0   24716   1160    792 S   0.0  0.0   0:05.70 /usr/lib/+
   483 root      20   0   21540    348    260 S   0.0  0.0   0:00.53 /usr/sbin+
   484 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   485 root      20   0   52852    264    164 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1348    600 S   0.0  0.1   0:13.08 /usr/bin/+
   494 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  994492   1352    672 S   0.0  0.1   0:23.46 /usr/sbin+
   515 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   4872   1024 S   0.0  0.2   0:00.40 queueproc+
   545 root      20   0  124480    428    296 S   0.0  0.0   0:00.70 /usr/sbin+
   546 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   3924    984 S   0.0  0.2   0:00.45 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:03.78 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    356    256 S   0.0  0.0   0:03.08 /usr/sbin+
   912 systuser  20   0  113016     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  290128   5456   4744 S   0.0  0.2   0:07.00 /usr/sbin+
   918 named     20   0 1185864  36272   1772 S   0.0  1.5   0:16.58 /usr/sbin+
   919 root      20   0 1828136 316276    864 S   0.0 13.1   0:35.60 /usr/loca+
   924 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 root      20   0   51508    604    424 S   0.0  0.0   0:00.29 /usr/sbin+
   926 root      20   0  572372    764    300 S   0.0  0.0   0:02.15 /usr/bin/+
   928 root      20   0  445028    588    480 S   0.0  0.0   0:00.96 sw-engine+
   937 root      20   0  439788    408    316 S   0.0  0.0   0:00.92 php-fpm: +
   938 systuser  20   0  114016  13888   2564 S   0.0  0.6   0:05.93 /usr/loca+
   939 root      20   0  261296   6504   1736 S   0.0  0.3   0:05.34 cpsrvd (S+
   943 root      20   0 1277312   3688      8 S   0.0  0.2   0:20.31 /usr/bin/+
   944 root      20   0 1276356   6524      4 S   0.0  0.3   0:24.96 /usr/bin/+
   947 cpanelc+  20   0   10400   3324   2392 S   0.0  0.1   0:20.49 /usr/loca+
   952 root      20   0  396248    272    188 S   0.0  0.0   0:00.82 php-fpm: +
   957 root      20   0  388892    416    320 S   0.0  0.0   0:00.85 php-fpm: +
   962 systuser  20   0   14068     36      0 S   0.0  0.0   0:00.02 /usr/loca+
   963 telegraf  20   0 5654048  34928   5128 S   0.0  1.4   0:13.71 /usr/loca+
   964 root      20   0  153404    292    188 S   0.0  0.0   0:00.51 pure-ftpd+
   967 root      20   0  400740    776    604 S   0.0  0.0   0:04.07 php-fpm: +
   968 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.54 /usr/bin/+
   974 root      20   0  389508    376    288 S   0.0  0.0   0:00.78 php-fpm: +
  1080 dovenull  20   0   47332   2876   1772 S   0.0  0.1   0:00.40 dovecot/p+
  1081 dovenull  20   0   48020   3088   1732 S   0.0  0.1   0:00.22 dovecot/i+
  1082 dovecot   20   0   10320    456    344 S   0.0  0.0   0:00.05 dovecot/a+
  1083 root      20   0   10452    452    256 S   0.0  0.0   0:00.28 dovecot/l+
  1084 dovenull  20   0   47520   3388   2008 S   0.0  0.1   0:00.49 dovecot/p+
  1085 dovenull  20   0   47764   3144   1796 S   0.0  0.1   0:00.21 dovecot/i+
  1091 root      20   0   24528   2412    496 S   0.0  0.1   0:00.16 dovecot/c+
  1095 dovecot   20   0   13568    600    400 S   0.0  0.0   0:00.06 dovecot/s+
  1160 dovecot   20   0   41160   1488   1008 S   0.0  0.1   0:00.51 dovecot/a+
  1168 systuser  20   0  157704   2972   1004 S   0.0  0.1   0:00.12 SonarPush+
  1176 wp-tool+  20   0  387556   3536   1620 S   0.0  0.1   0:00.28 /usr/bin/+
  1177 wp-tool+  20   0  412368  10044   1648 S   0.0  0.4   0:07.93 /usr/bin/+
  1211 root      20   0  209332  19576   2148 S   0.0  0.8   0:03.08 tailwatchd
  1213 root      20   0  183900   6396   3168 S   0.0  0.3   0:01.32 cpdavd - +
  1216 root      20   0  167452   4148   2780 S   0.0  0.2   0:00.53 dnsadmin +
  1627 root      20   0  299272    496    332 S   0.0  0.0   0:00.66 php-fpm: +
  1673 root      38  18  130416   1360    692 S   0.0  0.1   0:00.06 cpanellog+
  1928 root      20   0  266984   4960    472 S   0.0  0.2   0:03.10 /usr/sbin+
  1932 root      20   0   12792    324    212 S   0.0  0.0   0:03.17 /usr/loca+
  1933 root      20   0   12732    288    208 S   0.0  0.0   0:02.76 /usr/loca+
  1934 root      20   0   12808    332    216 S   0.0  0.0   0:03.00 /usr/loca+
  1939 root      20   0   53256      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4438 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
  5994 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 10515 root      30  10  132964     44      0 S   0.0  0.0   0:00.00 ConfigSer+
 10528 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 161+
 24753 worencom  20   0   38444   3032   2016 S   0.0  0.1   0:00.00 dovecot/i+
 31437 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34076 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 40045 oysipao+  20   0    3148     16      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152     44      0 S   0.0  0.0   0:00.45 [kworker]
 40218 root      20   0  183592  11152   1100 S   0.0  0.5   0:22.07 lfd - sle+
 41574 nobody    20   0  277680  19696   4792 S   0.0  0.8   0:01.20 /usr/sbin+
 45978 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 45996 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 48236 nobody    20   0  277756  18716   4340 S   0.0  0.8   0:00.44 /usr/sbin+
 48323 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 48496 nobody    20   0  277472  18132   4104 S   0.0  0.7   0:00.16 /usr/sbin+
 48512 nobody    20   0  277580  18420   4220 S   0.0  0.8   0:00.33 /usr/sbin+
 48524 nobody    20   0  277876  18292   4116 S   0.0  0.8   0:00.38 /usr/sbin+
 48530 nobody    20   0  277752  18368   4132 S   0.0  0.8   0:00.46 /usr/sbin+
 48535 nobody    20   0  277752  18528   4268 S   0.0  0.8   0:00.21 /usr/sbin+
 48536 nobody    20   0  277876  18596   4156 S   0.0  0.8   0:00.39 /usr/sbin+
 48541 nobody    20   0  277892  18664   4256 S   0.0  0.8   0:00.27 /usr/sbin+
 48559 nobody    20   0  277888  18692   4284 S   0.0  0.8   0:00.33 /usr/sbin+
 48560 nobody    20   0  277744  18480   4236 S   0.0  0.8   0:00.33 /usr/sbin+
 48570 nobody    20   0  277744  18632   4348 S   0.0  0.8   0:00.41 /usr/sbin+
 48572 nobody    20   0  277480  18352   4216 S   0.0  0.8   0:00.33 /usr/sbin+
 48576 nobody    20   0  277744  18160   4204 S   0.0  0.8   0:00.48 /usr/sbin+
 48579 nobody    20   0  277680  18824   4244 S   0.0  0.8   0:00.38 /usr/sbin+
 50579 nobody    20   0  277476  17840   3892 S   0.0  0.7   0:00.22 /usr/sbin+
 50594 nobody    20   0  277744  18504   4144 S   0.0  0.8   0:00.19 /usr/sbin+
 50595 nobody    20   0  277744  18144   4036 S   0.0  0.7   0:00.20 /usr/sbin+
 51216 cloudsms  20   0   61456   5940   4436 S   0.0  0.2   0:00.00 dovecot/l+
 51760 nobody    20   0  277468  17584   3848 S   0.0  0.7   0:00.07 /usr/sbin+
 52273 wp-tool+  20   0  445880  22248  19280 S   0.0  0.9   0:00.03 sw-engine+
 52484 nigeria   20   0  400460   4424   2328 S   0.0  0.2   0:00.00 php-fpm: +
 52550 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 52587 robocal+  20   0  483252  18732   6108 S   0.0  0.8   0:00.08 php-fpm: +
 52589 cloudw    20   0  546304  82568   6972 S   0.0  3.4   0:00.88 php-fpm: +
 52593 root      20   0  157100   5080   3788 S   0.0  0.2   0:00.00 sshd: unk+
 52594 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: unk+
 52603 nobody    20   0  277600  16636   3156 S   0.0  0.7   0:00.00 /usr/sbin+
 52618 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 52620 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52621 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52622 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52623 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52624 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52625 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52627 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52628 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52630 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 52633 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52634 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52635 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52636 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52637 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 52638 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 52639 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 52642 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 52643 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 52644 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 52646 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 52650 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 52654 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 52658 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 52670 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.00 /opt/cpan+
 52693 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 52699 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 72858 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 81155 root      20   0       0      0      0 R   0.0  0.0   0:00.02 [kworker/+
 92278 root      20   0  248096 117672   1036 S   0.0  4.9   0:03.26 /usr/loca+
 98393 root      20   0  262088 128952   3392 S   0.0  5.3   0:02.16 spamd chi+
 98394 root      20   0  249240 119148   1452 S   0.0  4.9   0:00.04 spamd chi+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    05:20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    05:20   0:26  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    05:20   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    05:20   0:53  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   05:20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   05:20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   05:20   0:05  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   05:20   0:04  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   05:20   0:03  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ext4-rsv-conver]
root      72858  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/u200:0]
root      81155  0.0  0.0      0     0 ?        R    10:40   0:00  \_ [kworker/0:4]
root       4438  0.0  0.0      0     0 ?        S    11:04   0:00  \_ [kworker/u200:1]
root       5994  0.0  0.0      0     0 ?        S    11:06   0:00  \_ [kworker/1:4]
root      31437  0.0  0.0      0     0 ?        S    11:38   0:00  \_ [kworker/0:3]
root      34076  0.0  0.0      0     0 ?        S    11:41   0:00  \_ [kworker/1:2]
root      45978  0.0  0.0      0     0 ?        S    11:55   0:00  \_ [kworker/0:0]
root      45996  0.0  0.0      0     0 ?        S    11:55   0:00  \_ [kworker/1:0]
root      48323  0.0  0.0      0     0 ?        S    11:58   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44400  3356 ?        Ss   05:20   0:32 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  40244  5408 ?        Ss   05:20   0:13 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376     8 ?        Ss   05:20   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   460 ?        S<sl 05:20   0:02 /sbin/auditd
root        470  0.0  0.0 152780    80 ?        Ss   05:20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240   836 ?        Ssl  05:20   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1160 ?        Ss   05:20   0:05 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   348 ?        Ss   05:20   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256    60 ?        Ss   05:20   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   264 ?        Ss   05:20   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1348 ?        Ss   05:20   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208     0 ?        Ssl  05:20   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 994492  1352 ?        Ssl  05:20   0:23 /usr/sbin/nscd
root        515  0.0  0.0   4388     4 ?        Ss   05:20   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224148  4872 ?        Ss   05:20   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   428 ?        Ss   05:20   0:00 /usr/sbin/crond -n
root      52618  0.0  0.0 183048  2144 ?        S    12:03   0:00  \_ /usr/sbin/CROND -n
root      52638  0.0  0.0 113284  1212 ?        Ss   12:03   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      52646  0.0  0.0 108052   356 ?        S    12:03   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      52650  0.0  0.0 113288  1516 ?        S    12:03   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      52703  0.0  0.0 153840  2092 ?        R    12:03   0:00  |               \_ ps auxf
root      52620  0.0  0.0 183048  2148 ?        S    12:03   0:00  \_ /usr/sbin/CROND -n
root      52636  0.0  0.0  20164   804 ?        Ss   12:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      52621  0.0  0.0 183048  2148 ?        S    12:03   0:00  \_ /usr/sbin/CROND -n
root      52633  0.0  0.0  20164   808 ?        Ss   12:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      52622  0.0  0.0 183048  2148 ?        S    12:03   0:00  \_ /usr/sbin/CROND -n
root      52634  0.0  0.0  20164   808 ?        Ss   12:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      52623  0.0  0.0 183048  2148 ?        S    12:03   0:00  \_ /usr/sbin/CROND -n
root      52642  0.0  0.0  20164   804 ?        Ss   12:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      52624  0.0  0.0 183048  2148 ?        S    12:03   0:00  \_ /usr/sbin/CROND -n
root      52639  0.0  0.0  20164   808 ?        Ss   12:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      52625  0.0  0.0 183048  2148 ?        S    12:03   0:00  \_ /usr/sbin/CROND -n
root      52644  0.0  0.0  20164   984 ?        Rs   12:03   0:00  |   \_ jailshell (cloudsms) [52699] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  52699  0.0  0.0      0     0 ?        Z    12:03   0:00  |       \_ [jailshell] <defunct>
root      52627  0.0  0.0 183048  2148 ?        S    12:03   0:00  \_ /usr/sbin/CROND -n
root      52635  0.0  0.0  20164   804 ?        Ss   12:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      52628  0.0  0.0 183048  2148 ?        S    12:03   0:00  \_ /usr/sbin/CROND -n
root      52643  0.0  0.0  20164   964 ?        Ss   12:03   0:00  |   \_ jailshell (pactpay) [52654] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   52654  0.0  0.0  20164   260 ?        S    12:03   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   52656  0.0  0.7 480124 17312 ?        S    12:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      52630  0.0  0.0 183048  2148 ?        S    12:03   0:00  \_ /usr/sbin/CROND -n
root      52637  0.0  0.0  20164   964 ?        Ss   12:03   0:00      \_ jailshell (nigeria) [52658] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   52658  0.0  0.0  20164   260 ?        S    12:03   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   52672  0.0  0.6 404052 16140 ?        R    12:03   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208     4 ?        Ss   05:20   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704     0 ttyS0    Ss+  05:20   0:00 /bin/bash
root        556  0.0  0.0 108296     4 tty1     Ss+  05:20   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  3924 ?        Ss   05:20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   356 ?        Ss   05:20   0:03 /usr/sbin/sshd -D
root      52593  0.0  0.2 157100  5080 ?        Ss   12:02   0:00  \_ sshd: unknown [priv]
sshd      52594  0.0  0.1 115644  2632 ?        S    12:02   0:00      \_ sshd: unknown [net]
systuser    912  0.0  0.0 113016    76 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.2 290128  5456 ?        Ssl  05:20   0:07 /usr/sbin/rsyslogd -n
named       918  0.0  1.4 1185864 36272 ?       Ssl  05:20   0:16 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 13.0 1828136 316276 ?      Ssl  05:20   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    48 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   604 ?        Ss   05:20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.1  47332  2876 ?        S    05:20   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  48020  3088 ?        S    05:20   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   456 ?        S    05:20   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   452 ?        S    05:20   0:00  \_ dovecot/log
dovenull   1084  0.0  0.1  47520  3388 ?        S    05:20   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47764  3144 ?        S    05:20   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24528  2412 ?        S    05:20   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   600 ?        S    05:20   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1488 ?        S    05:20   0:00  \_ dovecot/auth
worencom  24753  0.0  0.1  38444  3032 ?        S    11:29   0:00  \_ dovecot/imap
cloudsms  51216  0.0  0.2  61456  5940 ?        S    12:01   0:00  \_ dovecot/lmtp
root        926  0.0  0.0 572372   764 ?        Ssl  05:20   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.0 445028   588 ?        Ss   05:20   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  52273  0.1  0.9 445880 22248 ?        S    12:02   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.0 439788   408 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13888 ?        Ssl  05:20   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.2 261296  6504 ?        Ss   05:20   0:05 cpsrvd (SSL) - waiting for connections                   
root      52550  0.0  0.0      0     0 ?        Z    12:02   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.0  0.1 1277312 3688 ?        Ssl  05:20   0:20 /usr/bin/checkstatus
root        944  0.1  0.2 1276356 6524 ?        Ssl  05:20   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10400  3324 ?        Ss   05:20   0:20 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   272 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   416 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    36 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.4 5654048 34928 ?       SLsl 05:20   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   292 ?        Ss   05:20   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740   776 ?        Ss   05:20   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   52484  0.0  0.1 400460  4424 ?        S    12:02   0:00  \_ php-fpm: pool nigeriadecide_org
robocal+  52587  2.6  0.7 483252 18732 ?        S    12:02   0:00  \_ php-fpm: pool robocalls_cloudsms_com_ng
cloudw    52589 29.3  3.4 546304 82568 ?        S    12:02   0:00  \_ php-fpm: pool cloudware_ng
systuser    968  0.0  0.0 112524    68 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400     0 ?        Ssl  05:20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   376 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1168  0.0  0.1 157704  2972 ?        S    05:20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.1 387556  3536 ?        Ss   05:20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  0.4 412368 10044 ?        Ss   05:20   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.8 209332 19576 ?        Ss   05:20   0:03 tailwatchd
root       1213  0.0  0.2 183900  6396 ?        Ss   05:20   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1216  0.0  0.1 167452  4148 ?        Ss   05:20   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   496 ?        Ss   05:20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1360 ?        SN   05:20   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.2 266984  4960 ?        Rs   05:20   0:03 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12792   324 ?        S    05:20   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   288 ?        S    05:20   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12808   332 ?        S    05:20   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256     4 ?        S    05:20   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    41574  0.1  0.8 277680 19696 ?        S    11:49   0:01  \_ /usr/sbin/httpd -k start
nobody    48236  0.1  0.7 277756 18716 ?        S    11:57   0:00  \_ /usr/sbin/httpd -k start
nobody    48496  0.0  0.7 277472 18132 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    48512  0.1  0.7 277580 18420 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    48524  0.1  0.7 277876 18292 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    48530  0.1  0.7 277752 18368 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    48535  0.0  0.7 277752 18528 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    48536  0.1  0.7 277876 18596 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    48541  0.0  0.7 277892 18664 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    48559  0.1  0.7 277888 18692 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
cloudw    52670  0.0  0.6 353712 15976 ?        S    12:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    48560  0.1  0.7 277744 18480 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    48570  0.1  0.7 277744 18632 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    48572  0.1  0.7 277480 18352 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    48576  0.1  0.7 277744 18160 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    48579  0.1  0.7 277680 18824 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    50579  0.1  0.7 277476 17840 ?        S    12:00   0:00  \_ /usr/sbin/httpd -k start
nobody    50594  0.1  0.7 277744 18504 ?        S    12:00   0:00  \_ /usr/sbin/httpd -k start
nobody    50595  0.1  0.7 277744 18144 ?        S    12:00   0:00  \_ /usr/sbin/httpd -k start
nobody    51760  0.1  0.7 277468 17584 ?        S    12:01   0:00  \_ /usr/sbin/httpd -k start
nobody    52603  0.0  0.6 277600 16636 ?        S    12:02   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.4 10.4 1468028 252444 ?      Sl   05:21   5:40 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148    16 ?        Ss   06:01   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152    44 ?        S    06:01   0:00  \_ [kworker]
root      40218  0.1  0.4 183592 11152 ?        Ss   06:01   0:22 lfd - sleeping
root      10515  0.0  0.0 132964    44 ?        SN   09:26   0:00 ConfigServer Version Check
root      10528  0.0  0.0 108056     0 ?        SN   09:26   0:00  \_ sleep 16186
root      92278  0.0  4.8 248096 117672 ?       Ss   10:49   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      98393  0.0  5.3 262088 128952 ?       S    10:55   0:02  \_ spamd child
root      98394  0.0  4.9 249240 119148 ?       S    10:55   0:00  \_ spamd child
## mysql stats
Uptime: 45808  Threads: 3  Questions: 1932887  Slow queries: 0  Opens: 10769  Flush tables: 1  Open tables: 2000  Queries per second avg: 42.195
*************************** 1. row ***************************
     Id: 27773
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 27778
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: starting
   Info: SELECT * FROM `22` WHERE `phone`='2348179092255' LIMIT 1
*************************** 3. row ***************************
     Id: 27783
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.157.111 TIME_WAIT
      1 142.44.228.132 TIME_WAIT
      1 15.235.27.5 TIME_WAIT
      1 162.142.125.112 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 ::1 TIME_WAIT
      1 201.46.112.136 TIME_WAIT
      1 43.130.57.46 TIME_WAIT
      1 43.157.180.116 TIME_WAIT
      1 45.227.253.15 TIME_WAIT
      1 47.128.22.213 TIME_WAIT
      1 54.39.0.94 TIME_WAIT
      1 54.39.89.28 TIME_WAIT
      1 66.249.70.3 TIME_WAIT
      1 68.183.25.188 TIME_WAIT
      1 87.236.176.115 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.236.139.190 TIME_WAIT
      2 193.181.210.95 TIME_WAIT
      2 217.131.14.2 TIME_WAIT
      2 43.130.60.195 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 12:03:02 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 12 hours 44 minutes 12 seconds
   Server load: 0.44 0.42 0.47
   Total accesses: 143178 - Total Traffic: 3.6 GB - Total Duration: 116675429
   CPU Usage: u5.19 s4.69 cu1956.83 cs1612.17 - 7.81% CPU load
   3.12 requests/sec - 81.4 kB/second - 26.1 kB/request - 814.898 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 9 idle workers

KRKCKKK.....R...._.........._..._....._W...._.......W_.........K
._..._.._.......................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU  SS  Req    Dur    Conn  Child  Slot      Client     Protocol            VHost                           Request
   0-0  41574 1/212/6164 K 5.36 4   275  3207317  33.7  5.58  155.67 192.178.4.103  http/1.1 team.cloudware.ng:443       GET /?l=3198932680 HTTP/1.1
   1-0  48236 0/74/5646  R 1.91 38  5    2993568  0.0   2.02  161.69 114.10.135.229 http/1.1
   2-0  50579 1/38/6047  K 0.93 3   299  2951177  34.6  1.00  149.30 192.178.4.103  http/1.1 team.cloudware.ng:443       GET /?l=2733138622 HTTP/1.1
   3-0  50594 1/36/5936  C 0.76 0   0    2973349  0.2   0.80  151.01 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   4-0  50595 4/36/5772  K 0.92 3   264  2836121  124.4 0.88  149.13 192.178.4.96   http/1.1 team.cloudware.ng:443       GET /?l=178454864 HTTP/1.1
   5-0  51760 7/14/5593  K 0.23 0   362  2817882  213.2 0.33  143.99 192.178.4.99   http/1.1 team.cloudware.ng:443       GET /?l=2217392761 HTTP/1.1
   6-0  52603 1/1/5723   K 0.00 1   294  2898703  35.9  0.04  149.91 192.178.4.97   http/1.1 team.cloudware.ng:443       GET /?l=3930937046 HTTP/1.1
   7-0  -     0/0/5499   . 0.00 225 0    2833410  0.0   0.00  141.19 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   8-0  -     0/0/5471   . 0.00 246 0    2670461  0.0   0.00  132.49 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   9-0  -     0/0/5431   . 0.00 241 0    2713528  0.0   0.00  136.34 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   10-0 -     0/0/5288   . 0.00 245 0    2687120  0.0   0.00  137.11 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   11-0 -     0/0/5034   . 0.00 247 0    2595307  0.0   0.00  126.57 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   12-0 48496 0/29/5082  R 0.57 23  297  2610483  0.0   0.65  130.02 105.113.26.140 http/1.1
   13-0 -     0/0/5124   . 0.00 269 0    2662967  0.0   0.00  132.50 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   14-0 -     0/0/5040   . 0.00 268 0    45969608 0.0   0.00  125.10 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   15-0 -     0/0/4450   . 0.00 267 0    2278730  0.0   0.00  114.40 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   16-0 -     0/0/5403   . 0.00 266 0    2701599  0.0   0.00  136.48 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   17-0 48512 0/58/4697  _ 1.39 1   790  2457585  0.0   2.20  122.57 201.46.112.136 http/1.1 cloudware.ng:443            POST /wp-login.php HTTP/1.1
   18-0 -     0/0/4362   . 0.00 226 4    2232757  0.0   0.00  112.31 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   19-0 -     0/0/3909   . 0.00 240 0    1951638  0.0   0.00  99.77  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   20-0 -     0/0/4064   . 0.00 239 0    2072915  0.0   0.00  99.70  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   21-0 -     0/0/3626   . 0.00 265 0    1936743  0.0   0.00  96.99  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   22-0 -     0/0/3281   . 0.00 144 0    1862726  0.0   0.00  79.85  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   23-0 -     0/0/3633   . 0.00 229 0    1753443  0.0   0.00  91.63  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   24-0 -     0/0/3087   . 0.00 263 0    1556816  0.0   0.00  78.56  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   25-0 -     0/0/2638   . 0.00 231 0    1528741  0.0   0.00  69.85  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   26-0 -     0/0/2309   . 0.00 262 0    1115415  0.0   0.00  54.40  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   27-0 -     0/0/1873   . 0.00 228 0    1192284  0.0   0.00  44.69  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   28-0 48524 0/64/1757  _ 1.72 1   24   911089   0.0   1.76  44.62  128.140.8.200  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue3.php HTTP/1.1
   29-0 -     0/0/949    . 0.00 261 0    491356   0.0   0.00  24.10  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-0 -     0/0/1912   . 0.00 21  0    970597   0.0   0.00  46.90  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   31-0 -     0/0/955    . 0.00 143 0    453755   0.0   0.00  22.08  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   32-0 48530 0/77/507   _ 2.00 1   20   228813   0.0   2.07  10.96  116.203.134.67 http/1.1 cloudsms.com.ng:443         GET /cron/process_queue4.php HTTP/1.1
   33-0 -     0/0/800    . 0.00 264 0    368533   0.0   0.00  19.69  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   34-0 -     0/0/625    . 0.00 258 0    307625   0.0   0.00  15.63  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   35-0 -     0/0/709    . 0.00 204 0    388523   0.0   0.00  19.27  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   36-0 -     0/0/375    . 0.00 124 0    193051   0.0   0.00  9.74   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 -     0/0/395    . 0.00 259 0    204447   0.0   0.00  9.76   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   38-0 48535 0/37/202   _ 0.93 0   1    110187   0.0   0.96  5.07   ::1            http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   39-0 48536 0/70/503   W 1.70 0   0    263669   0.0   1.78  13.23  ::1            http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   40-0 -     0/0/141    . 0.00 257 0    38905    0.0   0.00  2.52   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/96     . 0.00 242 0    51892    0.0   0.00  2.55   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/49     . 0.00 256 0    22501    0.0   0.00  1.00   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/130    . 0.00 222 0    58556    0.0   0.00  2.66   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 48541 0/47/716   _ 1.15 1   31   393948   0.0   1.07  18.98  45.227.253.15  http/1.1 wptraining.cloudware.ng:443 GET /index.php/jk HTTP/1.1
   45-0 -     0/0/77     . 0.00 255 0    37749    0.0   0.00  1.72   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   46-0 -     0/0/43     . 0.00 260 0    17057    0.0   0.00  0.78   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   47-0 -     0/0/129    . 0.00 230 0    57559    0.0   0.00  3.24   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   48-0 -     0/0/226    . 0.00 252 0    111984   0.0   0.00  6.03   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   49-0 -     0/0/166    . 0.00 253 0    88095    0.0   0.00  4.15   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   50-0 -     0/0/16     . 0.00 251 0    5693     0.0   0.00  0.19   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   51-0 -     0/0/16     . 0.00 277 0    5645     0.0   0.00  0.32   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   52-0 48559 5/60/67    W 1.41 0   0    45043    157.2 1.61  1.72   192.178.4.98   http/1.1 team.cloudware.ng:443       GET /?l=386453901 HTTP/1.1
   53-0 48560 0/58/127   _ 1.34 0   1015 70678    0.0   1.50  3.11   201.46.112.136 http/1.1
   54-0 -     0/0/233    . 0.00 103 0    124221   0.0   0.00  6.12   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   55-0 -     0/0/80     . 0.00 237 0    38998    0.0   0.00  1.88   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   56-0 -     0/0/192    . 0.00 278 0    98836    0.0   0.00  5.54   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   57-0 -     0/0/56     . 0.00 250 0    26444    0.0   0.00  1.32   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   58-0 -     0/0/9      . 0.00 233 0    3402     0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   59-0 -     0/0/11     . 0.00 235 0    5288     0.0   0.00  0.26   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   60-0 -     0/0/2      . 0.00 273 0    1        0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   61-0 -     0/0/147    . 0.00 234 0    85312    0.0   0.00  3.84   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   62-0 -     0/0/12     . 0.00 248 0    9904     0.0   0.00  0.29   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   63-0 48570 8/71/72    K 1.80 0   341  37115    249.3 1.90  1.90   192.178.4.103  http/1.1 team.cloudware.ng:443       GET /?l=644581245 HTTP/1.1
   64-0 -     0/0/41     . 0.00 223 0    22612    0.0   0.00  1.07   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   65-0 48572 0/59/60    _ 1.40 1   21   29322    0.0   1.40  1.40   116.203.129.16 http/1.1 cloudsms.com.ng:443         GET /cron/process_queue2.php HTTP/1.1
   66-0 -     0/0/33     . 0.00 236 0    18482    0.0   0.00  0.95   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   67-0 -     0/0/55     . 0.00 272 0    33511    0.0   0.00  1.51   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   68-0 -     0/0/2      . 0.00 275 0    1        0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   69-0 48576 0/80/84    _ 2.09 0   259  60303    0.0   2.24  2.30   192.178.4.101  http/1.1 team.cloudware.ng:443       GET /?l=3969402382 HTTP/1.1
   70-0 -     0/0/2      . 0.00 271 0    1        0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   71-0 -     0/0/22     . 0.00 270 0    13455    0.0   0.00  0.32   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   72-0 48579 0/65/68    _ 1.59 1   24   38752    0.0   1.90  1.96   116.203.129.16 http/1.1 cloudsms.com.ng:443         GET /cron/process_queue1.php HTTP/1.1
   73-0 -     0/0/15     . 0.00 227 0    6311     0.0   0.00  0.26   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   74-0 -     0/0/17     . 0.00 221 0    8423     0.0   0.00  0.27   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   75-0 -     0/0/5      . 0.00 232 0    4241     0.0   0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   76-0 -     0/0/4      . 0.00 276 0    2083     0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   77-0 -     0/0/72     . 0.00 249 0    42788    0.0   0.00  1.74   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   78-0 -     0/0/7      . 0.00 243 0    2788     0.0   0.00  0.09   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   79-0 -     0/0/5      . 0.00 274 0    1902     0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 254 0    1549     0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1124
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...19)
   index usage: 19%, cache usage: 26%
   total entries stored since starting: 106700
   total entries replaced since starting: 0
   total entries expired since starting: 105555
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 23 hit, 374 miss
   total removes since starting: 21 hit, 29 miss
Youez - 2016 - github.com/yon3zu
LinuXploit