403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-18.02.15.txt
 ## swap threshold exceeded
## server overview
2025-11-18.02.15 load[0] mem[45/78] mysql[4/11] httpd[4]
              total        used        free      shared  buff/cache   available
Mem:           2363        1002         221          77        1139        1119
Swap:          1999        1697         302
 02:15:01 up  7:27,  0 users,  load average: 0.25, 0.40, 0.42
## system overview
top - 02:15:01 up  7:27,  0 users,  load average: 0.25, 0.40, 0.42
Tasks: 194 total,   1 running, 192 sleeping,   0 stopped,   1 zombie
%Cpu(s): 68.8 us, 28.1 sy,  0.0 ni,  3.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   215104 free,  1038312 used,  1166884 buff/cache
KiB Swap:  2047996 total,   309756 free,  1738240 used.  1134604 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1881 mysql     20   0 1458600 261268   2796 S 106.2 10.8   6:15.56 /usr/sbin+
 19292 nigeria   20   0  404052  16140  10384 S  18.8  0.7   0:00.05 /opt/cpan+
   545 root      20   0   24624   1212    864 S   6.2  0.1   0:06.20 /usr/lib/+
 19380 cloudsms  20   0  404052  15348  10008 S   6.2  0.6   0:00.01 /opt/cpan+
 19387 cloudsms  20   0  404052  15612  10164 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44412   3380   1512 S   0.0  0.1   0:36.62 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.60 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.16 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:27.36 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.14 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.58 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:16.08 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   140 root      20   0       0      0      0 S   0.0  0.0   0:00.44 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.64 [kworker/+
   258 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   271 root       0 -20       0      0      0 S   0.0  0.0   0:01.93 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.53 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   361 root      20   0   39504   2704   2456 S   0.0  0.1   0:12.97 /usr/lib/+
   391 root      20   0   45424    184    180 S   0.0  0.0   0:00.37 /usr/lib/+
   413 root      16  -4   55532    544    416 S   0.0  0.0   0:01.83 /sbin/aud+
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   419 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   511 polkitd   20   0  612240    908    504 S   0.0  0.0   0:03.60 /usr/lib/+
   514 root      20   0  224148   3524   1024 S   0.0  0.1   0:00.33 queueproc+
   516 rpc       20   0   69256    204    144 S   0.0  0.0   0:00.03 /sbin/rpc+
   517 root      20   0   21540    416    328 S   0.0  0.0   0:00.61 /usr/sbin+
   521 root      20   0  152780    204    164 S   0.0  0.0   0:00.01 /usr/sbin+
   522 root      20   0   52852    352    244 S   0.0  0.0   0:00.01 /usr/sbin+
   523 dbus      20   0   58704   1400    668 S   0.0  0.1   0:14.08 /usr/bin/+
   532 root      20   0  195208     16     16 S   0.0  0.0   0:00.00 /usr/sbin+
   535 root      20   0    4388     68     64 S   0.0  0.0   0:00.00 /usr/sbin+
   556 root      20   0  126420    836    400 S   0.0  0.0   0:00.87 /usr/sbin+
   558 root      20   0   25908    160    140 S   0.0  0.0   0:00.00 /usr/sbin+
   572 nscd      20   0 1199308   1792    736 S   0.0  0.1   0:22.13 /usr/sbin+
   578 root      20   0  114704    108    108 S   0.0  0.0   0:00.03 /bin/bash
   579 root      20   0  108296    124    120 S   0.0  0.0   0:00.00 /sbin/age+
   628 mailnull  20   0   89112   4044    960 S   0.0  0.2   0:00.56 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   687 root       0 -20       0      0      0 S   0.0  0.0   0:02.56 [loop0]
   729 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   730 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1060 systuser  20   0  112268     72      0 S   0.0  0.0   0:00.01 /usr/loca+
  1061 root      20   0  153404    372    288 S   0.0  0.0   0:00.58 pure-ftpd+
  1062 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1063 systuser  20   0  114016  13328   2480 S   0.0  0.6   0:06.35 /usr/loca+
  1067 memcach+  20   0  342400    116    116 S   0.0  0.0   0:00.59 /usr/bin/+
  1068 root      20   0 1276356   8572    132 S   0.0  0.4   0:27.00 /usr/bin/+
  1069 telegraf  20   0 5654304  38616   6004 S   0.0  1.6   0:14.48 /usr/loca+
  1071 root      20   0  572372   1048    472 S   0.0  0.0   0:02.33 /usr/bin/+
  1072 root      20   0   51508    572    408 S   0.0  0.0   0:00.33 /usr/sbin+
  1076 root      20   0 1277056   5956    132 S   0.0  0.2   0:23.12 /usr/bin/+
  1085 systuser  20   0   12756     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1086 root      20   0  111304    476    376 S   0.0  0.0   0:02.48 /usr/sbin+
  1087 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.01 /usr/loca+
  1088 root      20   0  445028   1392   1280 S   0.0  0.1   0:01.13 sw-engine+
  1091 root      20   0  389508    572    472 S   0.0  0.0   0:00.76 php-fpm: +
  1098 named     20   0 1054792  42740   1768 S   0.0  1.8   0:14.91 /usr/sbin+
  1109 root      20   0  388892    608    396 S   0.0  0.0   0:00.71 php-fpm: +
  1113 root      20   0  290128   3572   2564 S   0.0  0.1   0:06.55 /usr/sbin+
  1117 root      20   0 1763304  76032    876 S   0.0  3.1   0:13.92 /usr/loca+
  1123 root      20   0  439788   1044    952 S   0.0  0.0   0:00.80 php-fpm: +
  1131 root      20   0  400740   2008    724 S   0.0  0.1   0:03.92 php-fpm: +
  1134 root      20   0  261284   6928   1780 S   0.0  0.3   0:02.90 cpsrvd (S+
  1139 cpanelc+  20   0   10608   3748   2376 S   0.0  0.2   0:21.48 /usr/loca+
  1149 root      20   0  396248    656    484 S   0.0  0.0   0:00.72 php-fpm: +
  1213 dovenull  20   0   46984   2412   1684 S   0.0  0.1   0:00.42 dovecot/p+
  1214 dovenull  20   0   47936   2932   1584 S   0.0  0.1   0:00.33 dovecot/i+
  1215 dovecot   20   0   10320    412    292 S   0.0  0.0   0:00.07 dovecot/a+
  1216 root      20   0   10452    644    448 S   0.0  0.0   0:00.33 dovecot/l+
  1217 dovenull  20   0   47056   2388   1568 S   0.0  0.1   0:00.59 dovecot/p+
  1218 dovenull  20   0   47752   3044   1708 S   0.0  0.1   0:00.23 dovecot/i+
  1226 root      20   0   24528   2232    360 S   0.0  0.1   0:00.16 dovecot/c+
  1227 dovecot   20   0   13568    460    256 S   0.0  0.0   0:00.05 dovecot/s+
  1292 systuser  20   0  157704   2944    892 S   0.0  0.1   0:00.12 SonarPush+
  1297 dovecot   20   0   41188   1576   1064 S   0.0  0.1   0:00.58 dovecot/a+
  1300 wp-tool+  20   0  412396  31152   1780 S   0.0  1.3   0:08.62 /usr/bin/+
  1301 wp-tool+  20   0  387556   4548   1776 S   0.0  0.2   0:00.27 /usr/bin/+
  1308 root      20   0  248116   4768    892 S   0.0  0.2   0:06.00 /usr/loca+
  1409 root      20   0  210184  10924   2404 S   0.0  0.5   0:03.50 tailwatchd
  1412 root      20   0  262224  19176   1248 S   0.0  0.8   0:01.38 cpdavd - +
  1413 root      20   0  167452   4200   2824 S   0.0  0.2   0:00.48 dnsadmin +
  1836 root      20   0  299272    788    408 S   0.0  0.0   0:00.73 php-fpm: +
  1853 root      38  18  130416   1432    756 S   0.0  0.1   0:00.07 cpanellog+
  1973 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
  2063 root      20   0  266984   7704    724 S   0.0  0.3   0:03.81 /usr/sbin+
  2067 root      20   0   12796    388    280 S   0.0  0.0   0:02.96 /usr/loca+
  2068 root      20   0   12732    352    276 S   0.0  0.0   0:02.57 /usr/loca+
  2069 root      20   0   12820    400    280 S   0.0  0.0   0:02.78 /usr/loca+
  2075 root      20   0   53252    176    176 S   0.0  0.0   0:00.04 /usr/loca+
  7506 root      20   0  266240  99028   3308 S   0.0  4.1   0:03.45 spamd chi+
  7507 root      20   0  248116   3476    468 S   0.0  0.1   0:00.01 spamd chi+
  9476 nobody    20   0  277888  19940   4812 S   0.0  0.8   0:01.15 /usr/sbin+
 10983 nobody    20   0  277624  19344   4560 S   0.0  0.8   0:01.18 /usr/sbin+
 10996 nobody    20   0  277624  19852   4776 S   0.0  0.8   0:01.12 /usr/sbin+
 11831 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 12626 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 13053 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 13057 oysipao+  20   0    3152     40      0 S   0.0  0.0   0:00.49 [kworker]
 13483 nobody    20   0  277692  19976   4552 S   0.0  0.8   0:00.82 /usr/sbin+
 14140 root      20   0  181920  28820   1240 S   0.0  1.2   0:08.11 lfd - sle+
 15977 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 16476 nobody    20   0  277744  19188   4264 S   0.0  0.8   0:00.36 /usr/sbin+
 16844 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 17385 nobody    20   0  277492  18572   3876 S   0.0  0.8   0:00.27 /usr/sbin+
 17502 nobody    20   0  277744  18808   3936 S   0.0  0.8   0:00.25 /usr/sbin+
 17750 nobody    20   0  277744  19064   4096 S   0.0  0.8   0:00.27 /usr/sbin+
 17917 nobody    20   0  277472  18548   3988 S   0.0  0.8   0:00.19 /usr/sbin+
 18205 mailnull  20   0   89308   5756   2504 S   0.0  0.2   0:00.00 /usr/sbin+
 18317 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 18340 nobody    20   0  277744  18724   3944 S   0.0  0.8   0:00.11 /usr/sbin+
 18673 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 18744 nobody    20   0  277744  18244   3512 S   0.0  0.8   0:00.08 /usr/sbin+
 18838 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 18901 nobody    20   0  277888  18204   3464 S   0.0  0.8   0:00.05 /usr/sbin+
 19017 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 19032 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 19155 nigeria   20   0  403488  11380   4024 S   0.0  0.5   0:00.22 php-fpm: +
 19207 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 19208 root      20   0  111304   4448   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 19209 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 19217 root      20   0  182864   2408   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 19218 root      20   0  182868   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 19219 root      20   0  182868   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 19220 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 19221 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 19222 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 19223 root      20   0  182864   2408   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 19224 root      20   0  182864   2408   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 19225 root      20   0  182864   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 19229 root      20   0  182864   2408   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 19230 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 19232 root      20   0  182864   2408   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 19248 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 19249 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 19253 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 19255 root      20   0   20164    984    788 S   0.0  0.0   0:00.00 jailshell+
 19256 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 19257 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 19258 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 19259 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 19261 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 19264 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 19265 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 19267 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 19271 root      20   0  188200  11080   5148 S   0.0  0.5   0:00.01 /usr/loca+
 19276 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 19280 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 19281 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 19285 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 19287 pactpay   20   0  480124  17316  11580 S   0.0  0.7   0:00.01 /opt/cpan+
 19345 root      20   0  160224   2336   1636 S   0.0  0.1   0:00.00 top -n 2 +
 19348 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 19375 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 19377 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 19378 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 19381 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 19386 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 38740 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 68263 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kworker/+
 85211 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov17   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov17   0:27  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov17   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov17   0:16  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov17   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [deferwq]
root        140  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov17   0:01  \_ [kworker/0:1H]
root        258  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ttm_swap]
root        271  0.0  0.0      0     0 ?        S<   Nov17   0:01  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    Nov17   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root        418  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [rpciod]
root        419  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [kvm-irqfd-clean]
root        687  0.0  0.0      0     0 ?        S<   Nov17   0:02  \_ [loop0]
root        729  0.0  0.0      0     0 ?        S    Nov17   0:00  \_ [jbd2/loop0-8]
root        730  0.0  0.0      0     0 ?        S<   Nov17   0:00  \_ [ext4-rsv-conver]
root      38740  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/u200:2]
root      68263  0.0  0.0      0     0 ?        S    01:06   0:00  \_ [kworker/0:2]
root      85211  0.0  0.0      0     0 ?        S    01:24   0:00  \_ [kworker/u200:1]
root       1973  0.0  0.0      0     0 ?        S    01:46   0:00  \_ [kworker/1:3]
root      11831  0.0  0.0      0     0 ?        S    02:02   0:00  \_ [kworker/1:1]
root      12626  0.0  0.0      0     0 ?        S    02:03   0:00  \_ [kworker/0:3]
root      15977  0.0  0.0      0     0 ?        S    02:08   0:00  \_ [kworker/1:2]
root      16844  0.0  0.0      0     0 ?        S    02:10   0:00  \_ [kworker/0:0]
root      18317  0.0  0.0      0     0 ?        S    02:13   0:00  \_ [kworker/1:0]
root      18838  0.0  0.0      0     0 ?        S    02:14   0:00  \_ [kworker/1:4]
root      19348  0.0  0.0      0     0 ?        S    02:15   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44412  3380 ?        Ss   Nov17   0:36 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        361  0.0  0.1  39504  2704 ?        Ss   Nov17   0:12 /usr/lib/systemd/systemd-journald
root        391  0.0  0.0  45424   184 ?        Ss   Nov17   0:00 /usr/lib/systemd/systemd-udevd
root        413  0.0  0.0  55532   544 ?        S<sl Nov17   0:01 /sbin/auditd
polkitd     511  0.0  0.0 612240   908 ?        Ssl  Nov17   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        514  0.0  0.1 224148  3524 ?        Ss   Nov17   0:00 queueprocd - waiting up to 60s to process a task
rpc         516  0.0  0.0  69256   204 ?        Ss   Nov17   0:00 /sbin/rpcbind -w
root        517  0.0  0.0  21540   416 ?        Ss   Nov17   0:00 /usr/sbin/irqbalance --foreground
root        521  0.0  0.0 152780   204 ?        Ss   Nov17   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        522  0.0  0.0  52852   352 ?        Ss   Nov17   0:00 /usr/sbin/smartd -n -q never
dbus        523  0.0  0.0  58704  1400 ?        Ss   Nov17   0:14 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        532  0.0  0.0 195208    16 ?        Ssl  Nov17   0:00 /usr/sbin/gssproxy -D
root        535  0.0  0.0   4388    68 ?        Ss   Nov17   0:00 /usr/sbin/acpid
root        545  0.0  0.0  24624  1212 ?        Ss   Nov17   0:06 /usr/lib/systemd/systemd-logind
root        556  0.0  0.0 126420   836 ?        Ss   Nov17   0:00 /usr/sbin/crond -n
root      19217  0.0  0.0 182864  2408 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      19259  0.0  0.0 113284  1212 ?        Ss   02:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      19276  0.0  0.0 108052   360 ?        S    02:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      19281  0.0  0.0 113288  1520 ?        S    02:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      19389  0.0  0.0 153840  2100 ?        R    02:15   0:00  |               \_ ps auxf
root      19218  0.0  0.0 182868  2408 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      19265  0.0  0.0  20164   808 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      19219  0.0  0.0 182868  2408 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      19257  0.0  0.0  20164   808 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      19220  0.0  0.0 182864  2412 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      19264  0.0  0.0  20164   804 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      19221  0.0  0.0 182864  2412 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      19255  0.0  0.0  20164   984 ?        Ss   02:15   0:00  |   \_ jailshell (cloudsms) [19381] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  19381  0.0  0.0      0     0 ?        D    02:15   0:00  |       \_ [jailshell]
root      19222  0.0  0.0 182864  2412 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      19261  0.0  0.0  20164   804 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      19223  0.0  0.0 182864  2408 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      19253  0.0  0.0  20164   988 ?        Ss   02:15   0:00  |   \_ jailshell (cloudsms) [19377] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  19377  0.0  0.0  20164   260 ?        S    02:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  19378  0.0  0.0 113284  1212 ?        S    02:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  19380  0.0  0.6 404052 15348 ?        S    02:15   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      19224  0.0  0.0 182864  2408 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      19267  0.0  0.0  20164   808 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      19225  0.0  0.0 182864  2412 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      19258  0.0  0.0  20164   804 ?        Ss   02:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      19229  0.0  0.0 182864  2408 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      19249  0.0  0.0 113284  1212 ?        Ss   02:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      19271  0.0  0.4 188200 11080 ?        S    02:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      19345  0.0  0.0 160224  2336 ?        S    02:15   0:00  |           \_ top -n 2 -b -c
root      19230  0.0  0.0 182864  2408 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      19248  0.0  0.0  20164   968 ?        Ss   02:15   0:00  |   \_ jailshell (pactpay) [19280] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   19280  0.0  0.0  20164   264 ?        S    02:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   19287  0.0  0.7 480124 17316 ?        S    02:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      19232  0.0  0.0 182864  2408 ?        S    02:15   0:00  \_ /usr/sbin/CROND -n
root      19256  0.0  0.0  20164   968 ?        Ss   02:15   0:00      \_ jailshell (nigeria) [19285] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   19285  0.0  0.0  20164   264 ?        S    02:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   19292  0.0  0.6 404052 16140 ?        S    02:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  25908   160 ?        Ss   Nov17   0:00 /usr/sbin/atd -f
nscd        572  0.0  0.0 1199308 1792 ?        Ssl  Nov17   0:22 /usr/sbin/nscd
root        578  0.0  0.0 114704   108 ttyS0    Ss+  Nov17   0:00 /bin/bash
root        579  0.0  0.0 108296   124 tty1     Ss+  Nov17   0:00 /sbin/agetty --noclear tty1 linux
mailnull    628  0.0  0.1  89112  4044 ?        Ss   Nov17   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  18205  0.0  0.2  89308  5756 ?        S    02:12   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser   1060  0.0  0.0 112268    72 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1061  0.0  0.0 153404   372 ?        Ss   Nov17   0:00 pure-ftpd (SERVER)
systuser   1062  0.0  0.0  11796    44 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser   1063  0.0  0.5 114016 13328 ?        Ssl  Nov17   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+   1067  0.0  0.0 342400   116 ?        Ssl  Nov17   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1068  0.1  0.3 1276356 8572 ?        Ssl  Nov17   0:27 /usr/bin/cspdaemon
telegraf   1069  0.0  1.5 5654304 38616 ?       SLsl Nov17   0:14 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1071  0.0  0.0 572372  1048 ?        Ssl  Nov17   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1072  0.0  0.0  51508   572 ?        Ss   Nov17   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1213  0.0  0.0  46984  2412 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1214  0.0  0.1  47936  2932 ?        S    Nov17   0:00  \_ dovecot/imap-login
dovecot    1215  0.0  0.0  10320   412 ?        S    Nov17   0:00  \_ dovecot/anvil
root       1216  0.0  0.0  10452   644 ?        S    Nov17   0:00  \_ dovecot/log
dovenull   1217  0.0  0.0  47056  2388 ?        S    Nov17   0:00  \_ dovecot/pop3-login
dovenull   1218  0.0  0.1  47752  3044 ?        S    Nov17   0:00  \_ dovecot/imap-login
root       1226  0.0  0.0  24528  2232 ?        S    Nov17   0:00  \_ dovecot/config
dovecot    1227  0.0  0.0  13568   460 ?        S    Nov17   0:00  \_ dovecot/stats
dovecot    1297  0.0  0.0  41188  1576 ?        S    Nov17   0:00  \_ dovecot/auth
root      18673  0.0  0.1  60820  4512 ?        S    02:13   0:00  \_ dovecot/lmtp
root      19017  0.0  0.1  41052  2728 ?        S    02:14   0:00  \_ dovecot/auth -w
root       1076  0.0  0.2 1277056 5956 ?        Ssl  Nov17   0:23 /usr/bin/checkstatus
systuser   1085  0.0  0.0  12756    48 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root       1086  0.0  0.0 111304   476 ?        Ss   Nov17   0:02 /usr/sbin/sshd -D
root      19208  0.0  0.1 111304  4448 ?        Ss   02:14   0:00  \_ sshd: [accepted]
sshd      19209  0.0  0.1 115644  2632 ?        S    02:14   0:00      \_ sshd: [net]
systuser   1087  0.0  0.0 111864    76 ?        Ssl  Nov17   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1088  0.0  0.0 445028  1392 ?        Ss   Nov17   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  19032  0.0  0.0 445028   320 ?        S    02:14   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root       1091  0.0  0.0 389508   572 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named      1098  0.0  1.7 1054792 42740 ?       Ssl  Nov17   0:14 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1109  0.0  0.0 388892   608 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1113  0.0  0.1 290128  3572 ?        Ssl  Nov17   0:06 /usr/sbin/rsyslogd -n
root       1117  0.0  3.1 1763304 76032 ?       Ssl  Nov17   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1123  0.0  0.0 439788  1044 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1131  0.0  0.0 400740  2008 ?        Ss   Nov17   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   19155  2.2  0.4 403488 11380 ?        S    02:14   0:00  \_ php-fpm: pool nigeriadecide_org
root       1134  0.0  0.2 261284  6928 ?        Ss   Nov17   0:02 cpsrvd (SSL) - waiting for connections                   
root      19207  0.0  0.0      0     0 ?        Z    02:14   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+   1139  0.0  0.1  10608  3748 ?        Ss   Nov17   0:21 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1149  0.0  0.0 396248   656 ?        Ss   Nov17   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1292  0.0  0.1 157704  2944 ?        S    Nov17   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1300  0.0  1.2 412396 31152 ?        Ss   Nov17   0:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1301  0.0  0.1 387556  4548 ?        Ss   Nov17   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1308  0.0  0.1 248116  4768 ?        Ss   Nov17   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7506  0.0  4.0 266240 99028 ?        S    Nov17   0:03  \_ spamd child
root       7507  0.0  0.1 248116  3476 ?        S    Nov17   0:00  \_ spamd child
root       1409  0.0  0.4 210184 10924 ?        Ss   Nov17   0:03 tailwatchd
root       1412  0.0  0.7 262224 19176 ?        Ss   Nov17   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1413  0.0  0.1 167452  4200 ?        Ss   Nov17   0:00 dnsadmin - dormant mode
root       1836  0.0  0.0 299272   788 ?        Ss   Nov17   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1853  0.0  0.0 130416  1432 ?        SN   Nov17   0:00 cpanellogd - sleeping for logs
mysql      1881  1.4 10.7 1458600 261268 ?      Sl   Nov17   6:15 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2063  0.0  0.3 266984  7704 ?        Ss   Nov17   0:03 /usr/sbin/httpd -k start
root       2067  0.0  0.0  12796   388 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2068  0.0  0.0  12732   352 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2069  0.0  0.0  12820   400 ?        S    Nov17   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2075  0.0  0.0  53252   176 ?        S    Nov17   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     9476  0.1  0.8 277888 19940 ?        S    01:59   0:01  \_ /usr/sbin/httpd -k start
nobody    10983  0.1  0.7 277624 19344 ?        S    02:00   0:01  \_ /usr/sbin/httpd -k start
nobody    10996  0.1  0.8 277624 19852 ?        S    02:00   0:01  \_ /usr/sbin/httpd -k start
nobody    13483  0.1  0.8 277692 19976 ?        S    02:04   0:00  \_ /usr/sbin/httpd -k start
nobody    16476  0.1  0.7 277744 19188 ?        S    02:09   0:00  \_ /usr/sbin/httpd -k start
nobody    17385  0.1  0.7 277492 18572 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    17502  0.1  0.7 277744 18808 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    17750  0.1  0.7 277744 19064 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    17917  0.1  0.7 277472 18548 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    18340  0.0  0.7 277744 18724 ?        S    02:13   0:00  \_ /usr/sbin/httpd -k start
nobody    18744  0.1  0.7 277744 18244 ?        S    02:13   0:00  \_ /usr/sbin/httpd -k start
nobody    18901  0.0  0.7 277888 18204 ?        S    02:14   0:00  \_ /usr/sbin/httpd -k start
oysipao+  13053  0.0  0.0   3148     8 ?        Ss   Nov17   0:00 [kworker]
oysipao+  13057  0.0  0.0   3152    40 ?        S    Nov17   0:00  \_ [kworker]
root      14140  0.1  1.1 181920 28820 ?        Ss   00:00   0:08 lfd - sleeping
## mysql stats
Uptime: 26815  Threads: 3  Questions: 2358229  Slow queries: 0  Opens: 8265  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.944
*************************** 1. row ***************************
     Id: 35624
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `13` WHERE `phone`='2348058748863' LIMIT 1
*************************** 2. row ***************************
     Id: 35625
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 35636
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.139.123 TIME_WAIT
      1 114.119.154.181 TIME_WAIT
      1 114.119.155.44 TIME_WAIT
      1 142.147.168.106 TIME_WAIT
      1 148.113.128.159 TIME_WAIT
      1 167.160.59.85 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 ::1 TIME_WAIT
      1 34.134.144.77 TIME_WAIT
      1 50.114.44.9 TIME_WAIT
      1 51.161.65.148 TIME_WAIT
      1 51.222.168.113 TIME_WAIT
      1 54.39.0.212 TIME_WAIT
      1 54.39.6.142 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 136.243.228.198 TIME_WAIT
      2 77.75.76.163 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 18-Nov-2025 02:15:02 WAT
   Restart Time: Monday, 17-Nov-2025 18:48:12 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 hours 26 minutes 49 seconds
   Server load: 0.25 0.40 0.42
   Total accesses: 136110 - Total Traffic: 3.3 GB - Total Duration: 69134942
   CPU Usage: u4.48 s5.18 cu1758.64 cs1384.92 - 11.8% CPU load
   5.08 requests/sec - 127.9 kB/second - 25.2 kB/request - 507.934 ms/request
   4 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

__WK___.KK_._................_..................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU  SS  Req   Dur   Conn Child  Slot     Client     Protocol         VHost                                      Request
   0-0  17385 0/47/6073  _ 1.13 0   0   3444658 0.0  1.17  143.07 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   1-0  10983 0/206/6308 _ 4.97 1   5   3084774 0.0  5.96  147.76 51.161.65.148 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?state=Gombe&lga=Yalmaltu/%20deba
   2-0  13483 0/161/5990 W 3.64 0   0   2952844 0.0  4.32  142.02 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   3-0  16476 1/70/5538  K 1.36 0   271 2864737 35.7 1.51  133.84 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=2412466636 HTTP/1.1
   4-0  17502 0/42/6022  _ 1.03 0   273 2897105 0.0  1.08  140.71 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=2198845737 HTTP/1.1
   5-0  18744 0/14/5897  _ 0.35 0   279 2897718 0.0  0.40  144.78 192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=1632045066 HTTP/1.1
   6-0  18901 0/12/5783  _ 0.16 1   1   2898117 0.0  0.24  143.09 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   7-0  -     0/0/5365   . 0.00 15  0   2603861 0.0  0.00  138.99 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   8-0  10996 1/198/5311 K 4.62 3   259 2507815 34.8 4.86  123.38 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=4101998400 HTTP/1.1
   9-0  18340 1/22/5218  K 0.40 3   263 2563322 33.6 0.45  128.16 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=1293431370 HTTP/1.1
   10-0 17750 0/48/5079  _ 1.10 0   0   2508299 0.0  1.20  125.79 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   11-0 -     0/0/5394   . 0.00 110 0   2579980 0.0  0.00  145.92 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   12-0 17917 0/38/4699  _ 0.99 1   1   2482688 0.0  0.76  115.65 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   13-0 -     0/0/4782   . 0.00 548 0   2266678 0.0  0.00  115.50 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-0 -     0/0/4663   . 0.00 836 0   2398334 0.0  0.00  112.08 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 -     0/0/4696   . 0.00 833 0   2358872 0.0  0.00  113.17 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 -     0/0/4367   . 0.00 845 0   2947771 0.0  0.00  118.54 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 -     0/0/4468   . 0.00 410 0   2156671 0.0  0.00  115.42 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 -     0/0/3672   . 0.00 720 0   1846617 0.0  0.00  82.35  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 -     0/0/3592   . 0.00 109 0   1723663 0.0  0.00  87.38  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -     0/0/3791   . 0.00 831 0   1868808 0.0  0.00  92.92  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/2606   . 0.00 794 0   1330721 0.0  0.00  62.49  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/2646   . 0.00 411 0   1263726 0.0  0.00  61.28  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/2683   . 0.00 422 0   1280872 0.0  0.00  60.68  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/2620   . 0.00 828 0   1427224 0.0  0.00  82.51  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/1822   . 0.00 72  0   988060  0.0  0.00  44.58  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/1470   . 0.00 835 0   829882  0.0  0.00  36.05  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/1640   . 0.00 840 4   917792  0.0  0.00  38.58  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/1502   . 0.00 843 0   804838  0.0  0.00  33.41  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 9476  0/221/1584 _ 4.95 1   297 850746  0.0  5.59  38.52  192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=3763000343 HTTP/1.1
   30-0 -     0/0/1142   . 0.00 842 0   645034  0.0  0.00  29.02  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/1240   . 0.00 834 0   555517  0.0  0.00  33.06  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/747    . 0.00 634 0   402640  0.0  0.00  20.61  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/1047   . 0.00 839 0   641345  0.0  0.00  29.13  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/639    . 0.00 593 0   329465  0.0  0.00  16.27  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/517    . 0.00 823 0   284168  0.0  0.00  13.47  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/698    . 0.00 426 0   340948  0.0  0.00  19.94  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/581    . 0.00 841 0   316089  0.0  0.00  17.51  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/560    . 0.00 71  0   281890  0.0  0.00  15.60  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/146    . 0.00 838 0   69846   0.0  0.00  3.12   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/639    . 0.00 547 0   332944  0.0  0.00  15.73  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/94     . 0.00 932 0   46768   0.0  0.00  2.03   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/135    . 0.00 931 0   70951   0.0  0.00  3.32   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/266    . 0.00 917 0   100462  0.0  0.00  3.98   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/210    . 0.00 918 0   111671  0.0  0.00  5.35   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/202    . 0.00 511 0   96196   0.0  0.00  5.80   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/290    . 0.00 929 0   151806  0.0  0.00  7.06   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/70     . 0.00 930 0   35217   0.0  0.00  1.50   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/408    . 0.00 448 0   193592  0.0  0.00  9.83   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/48     . 0.00 837 0   23887   0.0  0.00  1.01   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/61     . 0.00 926 0   37811   0.0  0.00  1.40   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/82     . 0.00 927 0   40275   0.0  0.00  1.78   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/41     . 0.00 919 0   14661   0.0  0.00  0.98   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/80     . 0.00 945 0   38738   0.0  0.00  2.05   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/179    . 0.00 911 0   93196   0.0  0.00  5.15   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/102    . 0.00 829 0   53549   0.0  0.00  2.46   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/120    . 0.00 948 0   56500   0.0  0.00  3.12   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/13     . 0.00 912 0   3559    0.0  0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/34     . 0.00 867 0   13539   0.0  0.00  1.38   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/8      . 0.00 922 0   103     0.0  0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/192    . 0.00 901 0   100024  0.0  0.00  5.06   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/12     . 0.00 949 0   5547    0.0  0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/50     . 0.00 830 0   22451   0.0  0.00  1.13   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/25     . 0.00 827 0   11908   0.0  0.00  0.43   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/9      . 0.00 898 0   4843    0.0  0.00  0.17   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/5      . 0.00 914 0   1793    0.0  0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/9      . 0.00 891 0   3592    0.0  0.00  0.14   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/1      . 0.00 946 0   0       0.0  0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/23     . 0.00 863 0   11930   0.0  0.00  0.49   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/6      . 0.00 910 0   2254    0.0  0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 928 0   27      0.0  0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/7      . 0.00 896 0   2309    0.0  0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/9      . 0.00 897 0   3554    0.0  0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/44     . 0.00 776 0   21261   0.0  0.00  0.90   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/1      . 0.00 944 0   0       0.0  0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/21     . 0.00 847 0   9134    0.0  0.00  0.44   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/8      . 0.00 900 0   4157    0.0  0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/1      . 0.00 947 0   0       0.0  0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/2      . 0.00 924 0   529     0.0  0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 943 0   0       0.0  0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 925 0   29      0.0  0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 803
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 18 seconds, (range: 1...74)
   index usage: 14%, cache usage: 19%
   total entries stored since starting: 98083
   total entries replaced since starting: 0
   total entries expired since starting: 97252
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 9 hit, 238 miss
   total removes since starting: 28 hit, 13 miss
Youez - 2016 - github.com/yon3zu
LinuXploit