403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.02.42.txt
 ## swap threshold exceeded
## server overview
2025-11-22.02.42 load[0] mem[57/59] mysql[5/8] httpd[7]
              total        used        free      shared  buff/cache   available
Mem:           2363        1294         306          51         762         857
Swap:          1999        1297         702
 02:42:02 up  1:45,  0 users,  load average: 0.06, 0.20, 0.25
## system overview
top - 02:42:02 up  1:45,  0 users,  load average: 0.06, 0.20, 0.25
Tasks: 194 total,   6 running, 187 sleeping,   0 stopped,   1 zombie
%Cpu(s): 65.6 us, 18.8 sy,  0.0 ni, 15.6 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   309508 free,  1327320 used,   783472 buff/cache
KiB Swap:  2047996 total,   719868 free,  1328128 used.   876000 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1816 mysql     20   0 1457824 228468   2604 S 106.2  9.4   1:13.80 /usr/sbin+
 74225 nigeria   20   0  404052  16140  10380 S  25.0  0.7   0:00.05 /opt/cpan+
 74230 pactpay   20   0  480124  17672  11880 S   6.2  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44396   3296   1460 S   0.0  0.1   0:08.62 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.32 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.27 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:05.92 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.26 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.88 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:09.50 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kauditd]
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:00.91 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:00.79 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.32 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   40244   4260   3960 S   0.0  0.2   0:03.33 /usr/lib/+
   380 root      20   0   45352    244     72 S   0.0  0.0   0:00.33 /usr/lib/+
   406 root      16  -4   55532    488    360 S   0.0  0.0   0:00.49 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   483 root      20   0   21540    384    276 S   0.0  0.0   0:00.13 /usr/sbin+
   485 root      20   0   24712   1168    808 S   0.0  0.0   0:01.47 /usr/lib/+
   486 root      20   0  152780    124     84 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0  224148   5552    828 S   0.0  0.2   0:00.14 queueproc+
   488 root      20   0   52852    260    164 S   0.0  0.0   0:00.00 /usr/sbin+
   495 polkitd   20   0  612240    900    468 R   0.0  0.0   0:00.88 /usr/lib/+
   498 dbus      20   0   58748   1352    612 R   0.0  0.1   0:03.35 /usr/bin/+
   506 rpc       20   0   69256    152     44 S   0.0  0.0   0:00.01 /sbin/rpc+
   518 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   543 nscd      20   0  928956   1392    684 S   0.0  0.1   0:04.60 /usr/sbin+
   554 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124476    440    308 S   0.0  0.0   0:00.18 /usr/sbin+
   577 root      20   0  108296     44     40 S   0.0  0.0   0:00.00 /sbin/age+
   578 root      20   0  114704      8      8 S   0.0  0.0   0:00.02 /bin/bash
   595 mailnull  20   0   90824   3900    820 S   0.0  0.2   0:00.22 /usr/sbin+
   628 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:02.18 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  572372    748    164 S   0.0  0.0   0:00.63 /usr/bin/+
   920 root      20   0  232784   3752   3172 S   0.0  0.2   0:01.62 /usr/sbin+
   926 root      20   0 1689392 341664    284 S   0.0 14.1   0:13.50 /usr/loca+
   927 named     20   0 1054792  33952   1956 S   0.0  1.4   0:03.28 /usr/sbin+
   930 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.14 /usr/bin/+
   931 root      20   0  389508    572    364 S   0.0  0.0   0:00.23 php-fpm: +
   932 root      20   0  445028   3228   3116 S   0.0  0.1   0:00.31 sw-engine+
   939 root      20   0  439788  11380  11048 S   0.0  0.5   0:00.26 php-fpm: +
   941 systuser  20   0  113932   2064      0 S   0.0  0.1   0:00.00 /usr/loca+
   943 root      20   0  388892    596    392 S   0.0  0.0   0:00.22 php-fpm: +
   944 cpanelc+  20   0   10476   3276   2324 S   0.0  0.1   0:04.99 /usr/loca+
   946 systuser  20   0  114016  15924   2800 S   0.0  0.7   0:01.65 /usr/loca+
   949 systuser  20   0  113016   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   958 root      20   0  396248    504    328 S   0.0  0.0   0:00.23 php-fpm: +
   959 root      20   0  111304    392    292 S   0.0  0.0   0:00.66 /usr/sbin+
   960 root      20   0   51508    488    328 S   0.0  0.0   0:00.12 /usr/sbin+
   962 root      20   0  261024   6404   1580 S   0.0  0.3   0:00.88 cpsrvd (S+
   965 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   972 root      20   0  400740   2648    644 S   0.0  0.1   0:00.74 php-fpm: +
   973 root      20   0  153404    280    200 S   0.0  0.0   0:00.13 pure-ftpd+
   974 root      20   0 1277312  10444     40 S   0.0  0.4   0:28.01 /usr/bin/+
   975 root      20   0 1276356   9348      8 S   0.0  0.4   0:25.47 /usr/bin/+
   977 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 telegraf  20   0 5654304  36268   5596 S   0.0  1.5   0:03.67 /usr/loca+
  1079 dovenull  20   0   47136   3292   2308 S   0.0  0.1   0:00.18 dovecot/p+
  1080 dovenull  20   0   47392   3540   2440 S   0.0  0.1   0:00.14 dovecot/i+
  1081 dovecot   20   0   10320    372    260 S   0.0  0.0   0:00.05 dovecot/a+
  1082 root      20   0   10452    488    308 S   0.0  0.0   0:00.13 dovecot/l+
  1083 dovenull  20   0   47300   3356   2332 S   0.0  0.1   0:00.28 dovecot/p+
  1084 dovenull  20   0   47424   2896   1864 S   0.0  0.1   0:00.08 dovecot/i+
  1090 root      20   0   24396   2172    500 S   0.0  0.1   0:00.06 dovecot/c+
  1091 dovecot   20   0   13568    608    404 S   0.0  0.0   0:00.01 dovecot/s+
  1141 root      20   0  247944 117432    920 S   0.0  4.9   0:03.60 /usr/loca+
  1153 dovecot   20   0   41156   1496   1020 S   0.0  0.1   0:00.39 dovecot/a+
  1158 systuser  20   0  157704   2812    828 S   0.0  0.1   0:00.05 SonarPush+
  1177 wp-tool+  20   0  387528  13048   1420 S   0.0  0.5   0:00.13 /usr/bin/+
  1178 wp-tool+  20   0  412368  32156   1368 S   0.0  1.3   0:02.18 /usr/bin/+
  1261 root      20   0  183900   5212   1980 S   0.0  0.2   0:00.37 cpdavd - +
  1262 root      20   0  209248  11576   2112 S   0.0  0.5   0:00.95 tailwatchd
  1263 root      20   0  167452   2172    796 S   0.0  0.1   0:00.18 dnsadmin +
  1662 root      38  18  130416   1436    700 S   0.0  0.1   0:00.02 cpanellog+
  1690 root      20   0  299272    716    336 S   0.0  0.0   0:00.17 php-fpm: +
  1927 root      20   0  267052   8340    648 S   0.0  0.3   0:00.57 /usr/sbin+
  1929 root      20   0   12804    324    228 S   0.0  0.0   0:00.64 /usr/loca+
  1930 root      20   0   12732    300    224 S   0.0  0.0   0:00.56 /usr/loca+
  1931 root      20   0   12824    332    228 S   0.0  0.0   0:00.58 /usr/loca+
  1939 root      20   0   53268     60     60 S   0.0  0.0   0:00.04 /usr/loca+
  2021 root      20   0  181780  10536   1120 S   0.0  0.4   0:05.62 lfd - sle+
  4410 root      20   0  183048    572     32 S   0.0  0.0   0:00.00 /usr/sbin+
  4453 root      20   0  113284    180      0 S   0.0  0.0   0:00.00 /bin/sh -+
  4476 root      20   0  108056     76      0 S   0.0  0.0   0:00.00 sleep 4h +
  4531 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  4539 oysipao+  20   0    3152    512     24 S   0.0  0.0   0:00.11 [kworker]
  6717 root      20   0  249208 118848   1160 S   0.0  4.9   0:00.50 spamd chi+
  6719 root      20   0  247944 116768    288 S   0.0  4.8   0:00.00 spamd chi+
 27127 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 41828 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 57550 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 60213 nobody    20   0  277600  20416   4800 S   0.0  0.8   0:01.75 /usr/sbin+
 61773 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 63157 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 64549 nobody    20   0  277624  20560   4880 S   0.0  0.8   0:01.23 /usr/sbin+
 65121 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66402 nobody    20   0  277596  20280   4680 S   0.0  0.8   0:01.08 /usr/sbin+
 68512 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 69356 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 69703 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 69766 nobody    20   0  277928  20284   4484 S   0.0  0.8   0:00.54 /usr/sbin+
 69778 nobody    20   0  277588  20076   4508 S   0.0  0.8   0:00.59 /usr/sbin+
 69853 nobody    20   0  277920  20300   4584 S   0.0  0.8   0:00.37 /usr/sbin+
 70840 nobody    20   0  277544  19604   4192 S   0.0  0.8   0:00.30 /usr/sbin+
 70855 nobody    20   0  277944  20076   4408 S   0.0  0.8   0:00.45 /usr/sbin+
 70871 nobody    20   0  277560  19864   4288 S   0.0  0.8   0:00.43 /usr/sbin+
 70872 nobody    20   0  277932  19908   4272 S   0.0  0.8   0:00.44 /usr/sbin+
 71073 nobody    20   0  277908  20040   4416 S   0.0  0.8   0:00.36 /usr/sbin+
 71736 nobody    20   0  277584  19720   4232 S   0.0  0.8   0:00.27 /usr/sbin+
 72147 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72509 nobody    20   0  277520  19424   4140 S   0.0  0.8   0:00.26 /usr/sbin+
 72679 nobody    20   0  277520  19544   4124 S   0.0  0.8   0:00.20 /usr/sbin+
 72695 nobody    20   0  277584  19480   4036 S   0.0  0.8   0:00.17 /usr/sbin+
 73780 nobody    20   0  277908  19196   3720 S   0.0  0.8   0:00.04 /usr/sbin+
 73873 nigeria   20   0  401180   8968   3916 S   0.0  0.4   0:00.21 php-fpm: +
 73940 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 73941 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 73997 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 73998 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 74054 nobody    20   0  277908  19044   3612 S   0.0  0.8   0:00.01 /usr/sbin+
 74147 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 74159 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74164 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74165 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74166 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74167 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74168 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74169 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74170 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74171 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 74173 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74176 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 74179 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 74180 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 74187 cloudw    20   0  353712  15964  10484 S   0.0  0.7   0:00.00 /opt/cpan+
 74193 root      20   0   20164    980    784 S   0.0  0.0   0:00.00 jailshell+
 74194 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 74195 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 74196 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 74197 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 74201 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 74202 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 74203 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 74205 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 74222 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 74227 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 74239 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 74248 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 74249 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 74250 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 74256 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 74257 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 74259 cloudsms  20   0  131852   3324   2388 R   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:56   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    00:56   0:05  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:56   0:09  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kauditd]
root        244  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:1H]
root        270  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [xprtiod]
root        628  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   00:56   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root      27127  0.0  0.0      0     0 ?        S    01:33   0:00  \_ [kworker/u200:1]
root      41828  0.0  0.0      0     0 ?        S    01:55   0:00  \_ [kworker/0:4]
root      57550  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/1:3]
root      61773  0.0  0.0      0     0 ?        S    02:24   0:00  \_ [kworker/1:0]
root      63157  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/0:3]
root      65121  0.0  0.0      0     0 ?        S    02:29   0:00  \_ [kworker/1:4]
root      68512  0.0  0.0      0     0 ?        S    02:34   0:00  \_ [kworker/0:2]
root      69356  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/1:1]
root      69703  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/u200:0]
root      72147  0.0  0.0      0     0 ?        S    02:39   0:00  \_ [kworker/0:0]
root      74239  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44396  3296 ?        Ss   00:56   0:08 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.1  40244  4260 ?        Ss   00:56   0:03 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352   244 ?        Ss   00:56   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   488 ?        S<sl 00:56   0:00 /sbin/auditd
root        483  0.0  0.0  21540   384 ?        Ss   00:56   0:00 /usr/sbin/irqbalance --foreground
root        485  0.0  0.0  24712  1168 ?        Ss   00:56   0:01 /usr/lib/systemd/systemd-logind
root        486  0.0  0.0 152780   124 ?        Ss   00:56   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.2 224148  5552 ?        Ss   00:56   0:00 queueprocd - waiting up to 60s to process a task
root        488  0.0  0.0  52852   260 ?        Ss   00:56   0:00 /usr/sbin/smartd -n -q never
polkitd     495  0.0  0.0 612240   900 ?        Ssl  00:56   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        498  0.0  0.0  58748  1352 ?        Ss   00:56   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         506  0.0  0.0  69256   152 ?        Ss   00:56   0:00 /sbin/rpcbind -w
root        518  0.0  0.0   4388    36 ?        Ss   00:56   0:00 /usr/sbin/acpid
root        520  0.0  0.0 195208     0 ?        Ssl  00:56   0:00 /usr/sbin/gssproxy -D
nscd        543  0.0  0.0 928956  1392 ?        Ssl  00:56   0:04 /usr/sbin/nscd
root        554  0.0  0.0  24208     0 ?        Ss   00:56   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 124476   440 ?        Ss   00:56   0:00 /usr/sbin/crond -n
root       4410  0.0  0.0 183048   572 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       4453  0.0  0.0 113284   180 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       4476  0.0  0.0 108056    76 ?        S    01:00   0:00  |       \_ sleep 4h 19m
root      74159  0.0  0.0 183044  2148 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      74176  0.0  0.0 113284  1212 ?        Ss   02:42   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      74179  0.0  0.0 108052   356 ?        S    02:42   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      74180  0.0  0.0 113288  1516 ?        S    02:42   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      74260  0.0  0.0 153840  2096 ?        R    02:42   0:00  |               \_ ps auxf
root      74164  0.0  0.0 183044  2144 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      74196  0.0  0.0  20164   808 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      74165  0.0  0.0 183044  2144 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      74203  0.0  0.0  20164   804 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      74166  0.0  0.0 183044  2144 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      74195  0.0  0.0  20164   808 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      74167  0.0  0.0 183044  2144 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      74205  0.0  0.0  20164   808 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      74168  0.0  0.0 183044  2140 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      74193  0.0  0.0  20164   980 ?        Ss   02:42   0:00  |   \_ jailshell (cloudsms) [74256] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  74256  0.0  0.0  20164   256 ?        S    02:42   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  74257  0.0  0.0 113284  1212 ?        R    02:42   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  74259  0.0  0.0      0     0 ?        Z    02:42   0:00  |               \_ [php-cgi] <defunct>
root      74169  0.0  0.0 183044  2140 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      74202  0.0  0.0  20164   804 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      74170  0.0  0.0 183044  2140 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      74194  0.0  0.0  20164   808 ?        Ss   02:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      74171  0.0  0.0 183044  2144 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      74201  0.0  0.0  20164   964 ?        Ss   02:42   0:00  |   \_ jailshell (pactpay) [74227] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   74227  0.0  0.0  20164   256 ?        S    02:42   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   74230  0.0  0.7 480124 17672 ?        S    02:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      74173  0.0  0.0 183044  2140 ?        S    02:42   0:00  \_ /usr/sbin/CROND -n
root      74197  0.0  0.0  20164   964 ?        Ss   02:42   0:00      \_ jailshell (nigeria) [74222] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   74222  0.0  0.0  20164   256 ?        S    02:42   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   74225  0.0  0.6 404052 16140 ?        S    02:42   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0 108296    44 tty1     Ss+  00:56   0:00 /sbin/agetty --noclear tty1 linux
root        578  0.0  0.0 114704     8 ttyS0    Ss+  00:56   0:00 /bin/bash
mailnull    595  0.0  0.1  90824  3900 ?        Ss   00:56   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 572372   748 ?        Ssl  00:56   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        920  0.0  0.1 232784  3752 ?        Ssl  00:56   0:01 /usr/sbin/rsyslogd -n
root        926  0.2 14.1 1689392 341664 ?      Ssl  00:56   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.4 1054792 33952 ?       Ssl  00:56   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    930  0.0  0.0 342400     0 ?        Ssl  00:56   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        931  0.0  0.0 389508   572 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        932  0.0  0.1 445028  3228 ?        Ss   00:56   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  73941  0.0  0.0 445028   320 ?        S    02:41   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        939  0.0  0.4 439788 11380 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    941  0.0  0.0 113932  2064 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 388892   596 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    944  0.0  0.1  10476  3276 ?        Ss   00:56   0:04 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    946  0.0  0.6 114016 15924 ?        Ssl  00:56   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    949  0.0  0.0 113016  1600 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        958  0.0  0.0 396248   504 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        959  0.0  0.0 111304   392 ?        Ss   00:56   0:00 /usr/sbin/sshd -D
root      73940  0.0  0.1 111304  4268 ?        Ss   02:41   0:00  \_ sshd: [accepted]
root      73997  0.0  0.1 111304  4268 ?        Ss   02:41   0:00  \_ sshd: [accepted]
sshd      73998  0.0  0.1 115644  2632 ?        S    02:41   0:00  |   \_ sshd: [net]
root      74249  0.0  0.1 111304  4264 ?        Ss   02:42   0:00  \_ sshd: [accepted]
sshd      74250  0.0  0.1 115644  2628 ?        S    02:42   0:00      \_ sshd: [net]
root        960  0.0  0.0  51508   488 ?        Ss   00:56   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1079  0.0  0.1  47136  3292 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47392  3540 ?        S    00:56   0:00  \_ dovecot/imap-login
dovecot    1081  0.0  0.0  10320   372 ?        S    00:56   0:00  \_ dovecot/anvil
root       1082  0.0  0.0  10452   488 ?        S    00:56   0:00  \_ dovecot/log
dovenull   1083  0.0  0.1  47300  3356 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  47424  2896 ?        S    00:56   0:00  \_ dovecot/imap-login
root       1090  0.0  0.0  24396  2172 ?        S    00:56   0:00  \_ dovecot/config
dovecot    1091  0.0  0.0  13568   608 ?        S    00:56   0:00  \_ dovecot/stats
dovecot    1153  0.0  0.0  41156  1496 ?        S    00:56   0:00  \_ dovecot/auth
root        962  0.0  0.2 261024  6404 ?        Ss   00:56   0:00 cpsrvd (SSL) - waiting for connections                   
root      74147  0.0  0.0      0     0 ?        Z    02:41   0:00  \_ [cpaneld - servi] <defunct>
systuser    965  0.0  0.0  14068    48 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        972  0.0  0.1 400740  2648 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   73873  0.6  0.3 401180  8968 ?        S    02:41   0:00  \_ php-fpm: pool nigeriadecide_org
root        973  0.0  0.0 153404   280 ?        Ss   00:56   0:00 pure-ftpd (SERVER)
root        974  0.4  0.4 1277312 10444 ?       Ssl  00:56   0:28 /usr/bin/checkstatus
root        975  0.4  0.3 1276356 9348 ?        Ssl  00:56   0:25 /usr/bin/cspdaemon
systuser    977  0.0  0.0  10132    44 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    992  0.0  1.4 5654304 36268 ?       SLsl 00:56   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1141  0.0  4.8 247944 117432 ?       Ss   00:56   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6717  0.0  4.9 249208 118848 ?       S    01:02   0:00  \_ spamd child
root       6719  0.0  4.8 247944 116768 ?       S    01:02   0:00  \_ spamd child
systuser   1158  0.0  0.1 157704  2812 ?        S    00:56   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.5 387528 13048 ?        Ss   00:56   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  1.3 412368 32156 ?        Ss   00:56   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1261  0.0  0.2 183900  5212 ?        Ss   00:56   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1262  0.0  0.4 209248 11576 ?        Ss   00:56   0:00 tailwatchd
root       1263  0.0  0.0 167452  2172 ?        Ss   00:56   0:00 dnsadmin - dormant mode
root       1662  0.0  0.0 130416  1436 ?        SN   00:56   0:00 cpanellogd - sleeping for logs
root       1690  0.0  0.0 299272   716 ?        Ss   00:56   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1816  1.1  9.4 1457824 228468 ?      Sl   00:56   1:13 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1927  0.0  0.3 267052  8340 ?        Ss   00:56   0:00 /usr/sbin/httpd -k start
root       1929  0.0  0.0  12804   324 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1930  0.0  0.0  12732   300 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1931  0.0  0.0  12824   332 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53268    60 ?        S    00:56   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    60213  0.1  0.8 277600 20416 ?        S    02:21   0:01  \_ /usr/sbin/httpd -k start
nobody    64549  0.1  0.8 277624 20560 ?        S    02:28   0:01  \_ /usr/sbin/httpd -k start
nobody    66402  0.1  0.8 277596 20280 ?        S    02:30   0:01  \_ /usr/sbin/httpd -k start
nobody    69766  0.1  0.8 277928 20284 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
nobody    69778  0.1  0.8 277588 20076 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
nobody    69853  0.0  0.8 277920 20300 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
cloudw    74187  0.0  0.6 353712 16228 ?        S    02:42   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    70840  0.1  0.8 277544 19604 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    70855  0.1  0.8 277944 20076 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    70871  0.1  0.8 277560 19864 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    70872  0.1  0.8 277932 19908 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    71073  0.1  0.8 277908 20040 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    71736  0.1  0.8 277584 19720 ?        S    02:38   0:00  \_ /usr/sbin/httpd -k start
nobody    72509  0.1  0.8 277520 19424 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    72679  0.1  0.8 277520 19544 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    72695  0.1  0.8 277584 19480 ?        S    02:39   0:00  \_ /usr/sbin/httpd -k start
nobody    73780  0.0  0.7 277908 19196 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    74054  0.0  0.7 277908 19044 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
root       2021  0.0  0.4 181780 10536 ?        Ss   00:56   0:05 lfd - sleeping
oysipao+   4531  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   4539  0.0  0.0   3152   512 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 6311  Threads: 3  Questions: 404548  Slow queries: 0  Opens: 2410  Flush tables: 1  Open tables: 1997  Queries per second avg: 64.102
*************************** 1. row ***************************
     Id: 7540
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 7542
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 7547
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.134.212 TIME_WAIT
      1 114.119.156.84 TIME_WAIT
      1 154.30.13.8 TIME_WAIT
      1 157.230.24.207 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.96 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.39.106.58 TIME_WAIT
      1 52.167.144.186 TIME_WAIT
      1 54.39.89.56 TIME_WAIT
      1 93.174.93.12 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 20.102.40.205 TIME_WAIT
     29 172.161.73.78 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 02:42:02 WAT
   Restart Time: Saturday, 22-Nov-2025 00:56:55 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 45 minutes 7 seconds
   Server load: 0.06 0.20 0.25
   Total accesses: 28402 - Total Traffic: 701.5 MB - Total Duration: 13365105
   CPU Usage: u6.33 s2.73 cu351.67 cs282.56 - 10.2% CPU load
   4.5 requests/sec - 113.9 kB/second - 25.3 kB/request - 470.569 ms/request
   8 requests currently being processed, 0 workers gracefully restarting, 9 idle workers

W__.K.K.__C__._KK.K..__K........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req  Dur   Conn  Child  Slot     Client     Protocol              VHost                                          Request
   0-0  73780 0/10/1316  W 0.16 0    0   651447 0.0   0.19  31.33 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   1-0  71073 0/76/1482  _ 1.53 0    282 645947 0.0   1.91  38.34 192.178.4.105  http/1.1 team.cloudware.ng:443           GET /?l=1898526086 HTTP/1.1
   2-0  74054 0/4/1398   _ 0.03 1    263 673789 0.0   0.07  38.48 192.178.4.96   http/1.1 team.cloudware.ng:443           GET /?l=890518932 HTTP/1.1
   3-0  -     0/0/1376   . 0.00 124  0   787839 0.0   0.00  34.38 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   4-0  70840 2/60/1390  K 1.20 4    299 659402 63.2  1.30  33.46 192.178.4.103  http/1.1 team.cloudware.ng:443           GET /?l=4237464520 HTTP/1.1
   5-0  -     0/0/1343   . 0.00 118  0   584960 0.0   0.00  29.57 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   6-0  64549 1/223/1581 K 5.14 2    314 669784 34.6  5.96  35.54 192.178.4.105  http/1.1 team.cloudware.ng:443           GET /?l=983446512 HTTP/1.1
   7-0  -     0/0/1667   . 0.00 121  0   708324 0.0   0.00  36.90 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   8-0  71736 0/51/1438  _ 1.06 1    0   597118 0.0   1.15  35.22 172.161.73.78  http/1.1 proxy-subdomains-vhost.localhos GET /wp-includes/block-patterns/about.php HTTP/1.1
   9-0  72509 0/44/971   _ 1.11 0    347 481953 0.0   1.17  24.70 192.178.4.97   http/1.1 team.cloudware.ng:443           GET /?l=2987442171 HTTP/1.1
   10-0 69766 1/105/1059 C 2.25 0    0   514305 0.2   2.48  25.69 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   11-0 66402 0/186/1280 _ 4.55 0    0   602299 0.0   7.63  34.93 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   12-0 72679 0/37/925   _ 0.83 0    4   369815 0.0   0.86  20.35 172.161.73.78  http/1.1 proxy-subdomains-vhost.localhos GET /wp-includes/css/alfa-rex.php HTTP/1.1
   13-0 -     0/0/1319   . 0.00 6    0   763925 0.0   0.00  35.13 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   14-0 70855 0/90/1193  _ 1.78 1    325 593373 0.0   2.11  30.40 192.178.4.102  http/1.1 team.cloudware.ng:443           GET /?l=1788096828 HTTP/1.1
   15-0 72695 2/33/625   K 0.64 1    345 305973 63.1  0.73  15.96 192.178.4.101  http/1.1 team.cloudware.ng:443           GET /?l=216731454 HTTP/1.1
   16-0 69778 8/120/907  K 2.36 1    342 424885 248.8 3.20  21.88 192.178.4.104  http/1.1 team.cloudware.ng:443           GET /?l=3740128852 HTTP/1.1
   17-0 -     0/0/625    . 0.00 171  0   310465 0.0   0.00  15.56 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 69853 3/69/1347  K 1.51 0    445 492022 99.3  1.61  42.43 192.178.4.102  http/1.1 team.cloudware.ng:443           GET /?l=2760304609 HTTP/1.1
   19-0 -     0/0/332    . 0.00 190  0   159610 0.0   0.00  7.69  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-0 -     0/0/453    . 0.00 263  0   187237 0.0   0.00  9.93  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 70871 0/76/646   _ 1.84 1    259 339199 0.0   1.95  16.61 192.178.4.99   http/1.1 team.cloudware.ng:443           GET /?l=1455653054 HTTP/1.1
   22-0 60213 0/313/920  _ 7.31 1    2   460758 0.0   7.92  22.16 18.215.112.101 http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/images/blog/images/2019elections
   23-0 70872 9/82/574   K 1.93 0    349 420361 278.7 2.03  13.54 192.178.4.100  http/1.1 team.cloudware.ng:443           GET /?l=2735105035 HTTP/1.1
   24-0 -     0/0/243    . 0.00 384  0   115317 0.0   0.00  5.86  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/7      . 0.00 4072 0   3826   0.0   0.00  0.18  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/3      . 0.00 4099 0   753    0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/3      . 0.00 4096 0   57     0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/4      . 0.00 4084 0   743    0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/8      . 0.00 4078 0   4677   0.0   0.00  0.21  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/3      . 0.00 4100 0   14     0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/503    . 0.00 1941 0   236742 0.0   0.00  12.77 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/2      . 0.00 4126 0   7      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/5      . 0.00 4081 0   1824   0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/2      . 0.00 4123 0   21     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/145    . 0.00 3683 0   57340  0.0   0.00  3.26  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/234    . 0.00 3234 0   102124 0.0   0.00  5.53  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/2      . 0.00 4107 0   4587   0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/3      . 0.00 4102 0   34     0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00 4125 0   8      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/3      . 0.00 4088 0   4408   0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/5      . 0.00 4082 0   2050   0.0   0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/9      . 0.00 4089 0   4574   0.0   0.00  0.23  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 4122 0   12     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/31     . 0.00 3989 0   20604  0.0   0.00  0.82  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/458    . 0.00 2667 0   169465 0.0   0.00  9.10  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/2      . 0.00 4130 0   4      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/3      . 0.00 4097 0   766    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00 4124 0   48     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00 4095 0   10     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00 4080 0   695    0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00 4073 0   3150   0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00 4076 0   538    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/13     . 0.00 4074 0   8196   0.0   0.00  0.36  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00 4087 0   519    0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/1      . 0.00 4111 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/110    . 0.00 3681 0   48080  0.0   0.00  2.48  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00 3965 0   13507  0.0   0.00  0.78  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -     0/0/12     . 0.00 4083 0   7269   0.0   0.00  0.33  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-0 -     0/0/6      . 0.00 4067 0   1848   0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -     0/0/1      . 0.00 4120 0   1      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -     0/0/48     . 0.00 3958 0   10684  0.0   0.00  0.71  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-0 -     0/0/2      . 0.00 4092 0   7      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-0 -     0/0/1      . 0.00 4118 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-0 -     0/0/5      . 0.00 4079 0   1750   0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00 4116 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-0 -     0/0/1      . 0.00 4117 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00 4094 0   6      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-0 -     0/0/5      . 0.00 4068 0   859    0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-0 -     0/0/74     . 0.00 3836 0   36843  0.0   0.00  1.92  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-0 -     0/0/149    . 0.00 3472 0   74918  0.0   0.00  4.57  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-0 -     0/0/1      . 0.00 4112 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-0 -     0/0/1      . 0.00 4115 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-0 -     0/0/6      . 0.00 4071 0   3305   0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   74-0 -     0/0/6      . 0.00 4066 0   2230   0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-0 -     0/0/1      . 0.00 4114 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-0 -     0/0/1      . 0.00 4113 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-0 -     0/0/40     . 0.00 3975 0   15854  0.0   0.00  0.86  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-0 -     0/0/1      . 0.00 4119 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 4110 0   0      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1210
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 4 seconds, (range: 1...24)
   index usage: 21%, cache usage: 28%
   total entries stored since starting: 20233
   total entries replaced since starting: 0
   total entries expired since starting: 19019
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 16 miss
   total removes since starting: 5 hit, 7 miss
Youez - 2016 - github.com/yon3zu
LinuXploit