403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.17.09.txt
 ## swap threshold exceeded
## server overview
2025-11-07.17.09 load[0] mem[65/76] mysql[6/25] httpd[21]
              total        used        free      shared  buff/cache   available
Mem:           2363        1462          94          95         806         625
Swap:          1999        1608         391
 17:09:02 up  7:22,  0 users,  load average: 0.84, 0.65, 0.61
## system overview
top - 17:09:03 up  7:22,  0 users,  load average: 0.84, 0.65, 0.61
Tasks: 193 total,   4 running, 188 sleeping,   0 stopped,   1 zombie
%Cpu(s): 84.4 us, 15.6 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    95100 free,  1513244 used,   811956 buff/cache
KiB Swap:  2047996 total,   401324 free,  1646672 used.   625596 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  5205 healtho+  20   0  472820  83960   4668 S  62.5  3.5   0:04.28 php-fpm: +
  1782 mysql     20   0 1484772 280208   3556 S  56.2 11.6   8:31.35 /usr/sbin+
  5258 healtho+  20   0  473256  83716   4280 R  25.0  3.5   0:02.90 php-fpm: +
  5452 cloudw    20   0  364868  18708  10552 S  12.5  0.8   0:00.02 /opt/cpan+
  5435 root      20   0  200724   8612   4416 R   6.2  0.4   0:00.03 /usr/bin/+
     1 root      20   0   44424   3664   1696 S   0.0  0.2   0:38.60 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.10 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.45 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:30.94 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.41 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.33 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:25.57 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.49 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.71 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:03.04 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.67 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40244   5872   5624 S   0.0  0.2   0:13.36 /usr/lib/+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    456    336 S   0.0  0.0   0:02.10 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0   24720   1224    788 S   0.0  0.1   0:06.04 /usr/lib/+
   493 root      20   0  224268   4532    948 S   0.0  0.2   0:00.43 queueproc+
   494 root      20   0  152780     76     36 S   0.0  0.0   0:00.01 /usr/sbin+
   499 nscd      20   0 1334484   1976    784 S   0.0  0.1   0:09.83 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   503 dbus      20   0   57032   1328    616 S   0.0  0.1   0:13.84 /usr/bin/+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    176     68 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    984    608 S   0.0  0.0   0:03.55 /usr/lib/+
   539 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   541 root      20   0   21540    388    280 S   0.0  0.0   0:00.62 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    428    296 S   0.0  0.0   0:00.74 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3848    904 S   0.0  0.2   0:00.42 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.31 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   940 root      20   0 1277312  11576    596 S   0.0  0.5   0:00.06 /usr/bin/+
   959 systuser  20   0  114016  10476   2500 S   0.0  0.4   0:06.28 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   961 root      20   0  572372    620    160 S   0.0  0.0   0:02.33 /usr/bin/+
   963 telegraf  20   0 5654048  35064   5840 S   0.0  1.4   0:14.51 /usr/loca+
   964 root      20   0   51508    608    428 S   0.0  0.0   0:00.34 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   979 root      20   0 1276100  10356    596 S   0.0  0.4   0:00.06 /usr/bin/+
   981 named     20   0  784388  36820   1908 S   0.0  1.5   0:17.50 /usr/sbin+
   982 root      20   0 1828076  89552    380 S   0.0  3.7   0:35.56 /usr/loca+
   984 root      20   0  386112    456    360 S   0.0  0.0   0:00.76 php-fpm: +
   992 root      20   0  397344   2420    612 S   0.0  0.1   0:05.81 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.57 /usr/bin/+
  1007 root      20   0  392856    328    244 S   0.0  0.0   0:00.72 php-fpm: +
  1012 root      20   0  385496    520    420 S   0.0  0.0   0:00.77 php-fpm: +
  1013 root      20   0  290128   6228   5232 S   0.0  0.3   0:07.00 /usr/sbin+
  1014 root      20   0  261164  27432   4896 S   0.0  1.1   0:08.46 cpsrvd (S+
  1017 root      20   0  436392    404    316 S   0.0  0.0   0:00.87 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.58 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:02.92 /usr/sbin+
  1026 cpanelc+  20   0   10540   3556   2296 S   0.0  0.1   0:20.41 /usr/loca+
  1096 dovenull  20   0   46912   2260   1696 S   0.0  0.1   0:00.38 dovecot/p+
  1097 dovenull  20   0   47936   3340   1928 S   0.0  0.1   0:00.20 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.07 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.33 dovecot/l+
  1100 dovenull  20   0   46912   2132   1564 S   0.0  0.1   0:00.52 dovecot/p+
  1101 dovenull  20   0   47996   3228   1708 S   0.0  0.1   0:00.32 dovecot/i+
  1108 root      20   0   24568   2524    512 S   0.0  0.1   0:00.21 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.07 dovecot/s+
  1182 dovecot   20   0   41268   1548   1016 S   0.0  0.1   0:00.55 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.13 SonarPush+
  1233 wp-tool+  20   0  410452  26032   1684 S   0.0  1.1   0:21.77 /usr/bin/+
  1234 wp-tool+  20   0  387528   3516   1660 S   0.0  0.1   0:00.29 /usr/bin/+
  1264 root      20   0  262224  24496   6768 S   0.0  1.0   0:02.08 cpdavd - +
  1265 root      20   0  209456  11028   2340 S   0.0  0.5   0:02.72 tailwatchd
  1267 root      20   0  167452   4164   2796 S   0.0  0.2   0:00.45 dnsadmin +
  1713 root      20   0  299272    632    448 S   0.0  0.0   0:00.72 php-fpm: +
  1728 root      38  18  130416   1376    692 S   0.0  0.1   0:00.06 cpanellog+
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:01.55 /usr/sbin+
  1970 root      20   0   12816    328    212 S   0.0  0.0   0:02.12 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:01.79 /usr/loca+
  1972 root      20   0   12856    340    216 S   0.0  0.0   0:01.94 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  183040  11552   1104 S   0.0  0.5   0:23.11 lfd - sle+
  2298 nobody    20   0  277516  17692   4044 S   0.0  0.7   0:00.13 /usr/sbin+
  3730 cloudw    20   0  471784   9264   4980 S   0.0  0.4   0:00.21 php-fpm: +
  3847 nobody    20   0  277796  18044   3860 S   0.0  0.7   0:00.25 /usr/sbin+
  3986 cloudw    20   0  471784   9260   4976 S   0.0  0.4   0:00.22 php-fpm: +
  4120 cloudw    20   0  471784   9260   4976 S   0.0  0.4   0:00.22 php-fpm: +
  4337 nobody    20   0  277452  17688   3808 S   0.0  0.7   0:00.12 /usr/sbin+
  4705 nobody    20   0  277852  17396   3660 S   0.0  0.7   0:00.08 /usr/sbin+
  4768 nobody    20   0  277844  17252   3568 S   0.0  0.7   0:00.02 /usr/sbin+
  4989 nigeria   20   0  397064   5272   2264 S   0.0  0.2   0:00.01 php-fpm: +
  5094 healtho+  20   0  472904  83976   4352 S   0.0  3.5   0:05.42 php-fpm: +
  5108 root      20   0   41052   2784   2124 S   0.0  0.1   0:00.00 dovecot/a+
  5170 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
  5298 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  5341 nobody    20   0  277040  14604   1736 S   0.0  0.6   0:00.00 /usr/sbin+
  5351 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  5354 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5356 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5357 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5361 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  5362 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5364 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5374 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5376 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5377 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  5378 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  5379 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5381 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
  5383 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  5386 root      20   0  169872  16848   2876 S   0.0  0.7   0:00.08 /usr/loca+
  5393 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  5396 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  5399 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  5402 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
  5403 nigeria   20   0  400652  15940  10220 R   0.0  0.7   0:00.06 /opt/cpan+
  5407 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  5425 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  5434 root      20   0  113496   1420   1232 S   0.0  0.1   0:00.00 bash /usr+
  5454 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.48 [kworker]
 28537 root      20   0  248100 118080   1388 S   0.0  4.9   0:05.40 /usr/loca+
 32709 root      20   0  269720 136080   2504 S   0.0  5.6   0:22.55 spamd chi+
 32710 root      20   0  258916 125432   2832 S   0.0  5.2   0:00.73 spamd chi+
 77244 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
 86097 nobody    20   0  277556  20376   4928 S   0.0  0.8   0:02.14 /usr/sbin+
 87152 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 87154 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 88029 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 90303 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 91703 nobody    20   0  277852  20404   4732 S   0.0  0.8   0:01.57 /usr/sbin+
 94615 nobody    20   0  277588  19248   4648 S   0.0  0.8   0:00.80 /usr/sbin+
 95391 nobody    20   0  277840  19972   4672 S   0.0  0.8   0:00.99 /usr/sbin+
 95789 cloudw    20   0  471840   9784   5332 S   0.0  0.4   0:01.33 php-fpm: +
 97698 nobody    20   0  277844  19520   4484 S   0.0  0.8   0:01.00 /usr/sbin+
 98078 nobody    20   0  277512  19248   4724 S   0.0  0.8   0:01.14 /usr/sbin+
 98566 cloudw    20   0  471840   9784   5332 S   0.0  0.4   0:00.90 php-fpm: +
 99027 nobody    20   0  277548  19164   4532 S   0.0  0.8   0:01.30 /usr/sbin+
 99039 nobody    20   0  277848  19312   4344 S   0.0  0.8   0:01.03 /usr/sbin+
 99040 nobody    20   0  277840  18776   4396 S   0.0  0.8   0:00.38 /usr/sbin+
100551 nobody    20   0  277844  19068   4492 S   0.0  0.8   0:00.47 /usr/sbin+
100807 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
100951 nobody    20   0  277512  18848   4516 S   0.0  0.8   0:00.66 /usr/sbin+
100989 nobody    20   0  277848  18392   4236 S   0.0  0.8   0:00.58 /usr/sbin+
100990 nobody    20   0  277860  19204   4436 S   0.0  0.8   0:00.86 /usr/sbin+
101257 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101394 nobody    20   0  277476  17688   3944 S   0.0  0.7   0:00.37 /usr/sbin+
101399 nobody    20   0  277780  19108   4384 S   0.0  0.8   0:00.75 /usr/sbin+
101595 nobody    20   0  277900  18872   4284 S   0.0  0.8   0:00.45 /usr/sbin+
101728 nobody    20   0  277452  18008   4156 S   0.0  0.7   0:00.83 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    09:46   0:30  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:46   0:25  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      77244  0.0  0.0      0     0 ?        S    16:09   0:00  \_ [kworker/1:3]
root      87152  0.0  0.0      0     0 ?        S    16:29   0:00  \_ [kworker/0:3]
root      87154  0.0  0.0      0     0 ?        S    16:29   0:00  \_ [kworker/0:4]
root      88029  0.0  0.0      0     0 ?        S    16:30   0:00  \_ [kworker/u200:1]
root      90303  0.0  0.0      0     0 ?        S    16:35   0:00  \_ [kworker/1:0]
root     100807  0.0  0.0      0     0 ?        S    16:57   0:00  \_ [kworker/u200:0]
root     101257  0.0  0.0      0     0 ?        S    16:58   0:00  \_ [kworker/1:2]
root        539  0.0  0.0      0     0 ?        S    17:00   0:00  \_ [kworker/0:2]
root       5425  0.0  0.0      0     0 ?        S    17:09   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44424  3664 ?        Ss   09:46   0:38 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.2  40244  5872 ?        Ss   09:46   0:13 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   456 ?        S<sl 09:46   0:02 /sbin/auditd
root        489  0.0  0.0  24720  1224 ?        Ss   09:46   0:06 /usr/lib/systemd/systemd-logind
root        493  0.0  0.1 224268  4532 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    76 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1976 ?        Ssl  09:46   0:09 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1328 ?        Ss   09:46   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   176 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   984 ?        Ssl  09:46   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   388 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   428 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root       5351  0.0  0.0 183048  2136 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       5377  0.0  0.0 113284  1212 ?        Ss   17:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       5393  0.0  0.0 108052   360 ?        S    17:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       5407  0.0  0.0 113288  1516 ?        S    17:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       5459  0.0  0.0 153672  1780 ?        R    17:09   0:00  |               \_ ps auxf
root       5354  0.0  0.0 183048  2140 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       5379  0.0  0.0  20164   988 ?        Ss   17:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       5460  0.0  0.0  20164   264 ?        R    17:09   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       5356  0.0  0.0 183048  2140 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       5376  0.0  0.0  20164   808 ?        Ss   17:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       5357  0.0  0.0 183048  2140 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       5374  0.0  0.0  20164   808 ?        Ss   17:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       5361  0.0  0.0 183048  2136 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       5381  0.0  0.0 113284  1208 ?        Ss   17:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root       5386  8.0  0.6 169872 16848 ?        S    17:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root       5434  0.0  0.0 113496  1420 ?        S    17:09   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root       5435  3.0  0.3 201556  9380 ?        R    17:09   0:00  |               \_ /usr/bin/python2.7 -c import yum
root       5362  0.0  0.0 183048  2144 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       5383  0.0  0.0  20164   964 ?        Ss   17:09   0:00  |   \_ jailshell (pactpay) [5396] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    5396  0.0  0.0  20164   260 ?        S    17:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    5402  2.0  0.7 476724 17484 ?        S    17:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       5364  0.0  0.0 183048  2144 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       5378  0.0  0.0  20164   964 ?        Ss   17:09   0:00      \_ jailshell (nigeria) [5399] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    5399  0.0  0.0  20164   260 ?        S    17:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    5403  6.0  0.6 400652 15940 ?        S    17:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3848 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 10476 ?        Ssl  09:46   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   620 ?        Ssl  09:46   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654048 35064 ?       SLsl 09:46   0:14 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   608 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.0  46912  2260 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  47936  3340 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  2132 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  47996  3228 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.1  24568  2524 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41268  1548 ?        S    09:46   0:00  \_ dovecot/auth
root       5108  0.0  0.1  41052  2784 ?        S    17:08   0:00  \_ dovecot/auth -w
root       5170  0.0  0.1  60820  4512 ?        S    17:08   0:00  \_ dovecot/lmtp
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.5 784388 36820 ?        Ssl  09:46   0:17 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.1  3.7 1828076 89552 ?       Ssl  09:46   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   456 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.0 397344  2420 ?        Ss   09:46   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    95789  0.0  0.4 471840  9784 ?        S    16:46   0:01  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    98566  0.0  0.4 471840  9784 ?        S    16:52   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw     3730  0.1  0.3 471784  9264 ?        S    17:05   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw     3986  0.1  0.3 471784  9260 ?        S    17:06   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw     4120  0.1  0.3 471784  9260 ?        S    17:06   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
nigeria    4989  0.0  0.2 397064  5272 ?        S    17:08   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+   5094 20.8  3.4 472904 83976 ?        S    17:08   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+   5205 22.5  3.4 472820 83960 ?        S    17:08   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+   5258 20.8  3.4 473256 83980 ?        R    17:08   0:02  \_ php-fpm: pool health_oyostate_gov_ng
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   328 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   520 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.2 290128  6228 ?        Ssl  09:46   0:07 /usr/sbin/rsyslogd -n
root       1014  0.0  1.1 261164 27432 ?        Ss   09:46   0:08 cpsrvd (SSL) - waiting for connections                   
root       5298  0.0  0.0      0     0 ?        Z    17:08   0:00  \_ [cpaneld - servi] <defunct>
root       1017  0.0  0.0 436392   404 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:02 /usr/sbin/sshd -D
cpanelc+   1026  0.0  0.1  10540  3556 ?        Ss   09:46   0:20 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  1.0 410452 26032 ?        Ss   09:46   0:21 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3516 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  1.0 262224 24496 ?        Ss   09:46   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1265  0.0  0.4 209456 11028 ?        Ss   09:46   0:02 tailwatchd
root       1267  0.0  0.1 167452  4164 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1713  0.0  0.0 299272   632 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.0 130416  1376 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  1.9 11.5 1484772 280208 ?      Sl   09:46   8:31 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:01 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12816   328 ?        S    09:46   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12856   340 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    86097  0.0  0.8 277556 20376 ?        S    16:26   0:02  \_ /usr/sbin/httpd -k start
nobody    91703  0.0  0.8 277852 20404 ?        S    16:37   0:01  \_ /usr/sbin/httpd -k start
nobody    94615  0.0  0.7 277588 19248 ?        S    16:44   0:00  \_ /usr/sbin/httpd -k start
nobody    95391  0.0  0.8 277840 19972 ?        S    16:45   0:00  \_ /usr/sbin/httpd -k start
nobody    97698  0.0  0.8 277844 19520 ?        S    16:50   0:01  \_ /usr/sbin/httpd -k start
nobody    98078  0.1  0.7 277512 19248 ?        S    16:51   0:01  \_ /usr/sbin/httpd -k start
nobody    99027  0.1  0.7 277548 19164 ?        S    16:53   0:01  \_ /usr/sbin/httpd -k start
nobody    99039  0.1  0.7 277848 19312 ?        S    16:53   0:01  \_ /usr/sbin/httpd -k start
nobody    99040  0.0  0.7 277840 18776 ?        S    16:53   0:00  \_ /usr/sbin/httpd -k start
nobody   100551  0.0  0.7 277844 19068 ?        S    16:56   0:00  \_ /usr/sbin/httpd -k start
nobody   100951  0.0  0.7 277512 18848 ?        S    16:57   0:00  \_ /usr/sbin/httpd -k start
nobody   100989  0.0  0.7 277848 18392 ?        S    16:57   0:00  \_ /usr/sbin/httpd -k start
nobody   100990  0.1  0.7 277860 19204 ?        S    16:57   0:00  \_ /usr/sbin/httpd -k start
nobody   101394  0.0  0.7 277476 17688 ?        S    16:58   0:00  \_ /usr/sbin/httpd -k start
nobody   101399  0.1  0.7 277780 19108 ?        S    16:58   0:00  \_ /usr/sbin/httpd -k start
nobody   101595  0.0  0.7 277900 18872 ?        S    16:58   0:00  \_ /usr/sbin/httpd -k start
nobody   101728  0.1  0.7 277452 18008 ?        S    16:58   0:00  \_ /usr/sbin/httpd -k start
cloudw     5452  0.0  0.7 364868 18708 ?        R    17:09   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     2298  0.0  0.7 277516 17692 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
nobody     3847  0.1  0.7 277796 18044 ?        S    17:05   0:00  \_ /usr/sbin/httpd -k start
nobody     4337  0.0  0.7 277452 17688 ?        S    17:06   0:00  \_ /usr/sbin/httpd -k start
nobody     4705  0.1  0.7 277852 17396 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody     4768  0.0  0.7 277844 17252 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody     5341  0.0  0.6 277040 14604 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.0  0.4 183040 11552 ?        Ss   09:46   0:23 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      28537  0.0  4.8 248100 118080 ?       Ss   10:50   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.1  5.6 269720 136080 ?       S    11:00   0:22  \_ spamd child
root      32710  0.0  5.1 258916 125432 ?       S    11:00   0:00  \_ spamd child
root        940  0.0  0.4 1277312 11576 ?       Ssl  17:00   0:00 /usr/bin/checkstatus
root        979  0.0  0.4 1276100 10356 ?       Ssl  17:00   0:00 /usr/bin/cspdaemon
## mysql stats
Uptime: 48268  Threads: 4  Questions: 3412634  Slow queries: 0  Opens: 10127  Flush tables: 1  Open tables: 2000  Queries per second avg: 70.701
*************************** 1. row ***************************
     Id: 51890
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 51893
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 51894
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 4. row ***************************
     Id: 51906
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.132.202 TIME_WAIT
      1 119.28.177.175 TIME_WAIT
      1 15.235.96.70 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.155.195.141 TIME_WAIT
      1 44.217.177.142 TIME_WAIT
      1 54.166.126.132 TIME_WAIT
      1 66.249.70.33 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 57.130.20.252 TIME_WAIT
     74 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 17:09:03 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 13 hours 24 minutes 21 seconds
   Server load: 0.84 0.65 0.61
   Total accesses: 89790 - Total Traffic: 1.4 GB - Total Duration: 204309167
   CPU Usage: u11.58 s5.88 cu740.29 cs526.92 - 2.66% CPU load
   1.86 requests/sec - 30.8 kB/second - 16.6 kB/request - 2275.41 ms/request
   22 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

WKWWKKWRKK_CRKKWKRRWWR...W......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc     M CPU   SS   Req    Dur     Conn  Child  Slot     Client      Protocol           VHost                                        Request
   0-0  100951 0/162/5360  W 2.20 140   0    10303955 0.0    2.51  77.83 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533353230332p2231223
   1-0  86097  2/552/5328  K 7.79 3     512  11414648 64.6   8.08  79.34 66.249.70.34    http/1.1 support.cloudware.ng:443   GET /?c=3925796648 HTTP/1.1
   2-0  94615  0/182/5513  W 2.96 200   0    7504380  0.0    3.17  95.18 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533353134332p2231223
   3-0  100989 0/149/5338  W 2.87 0     0    7651202  0.0    1.89  96.74 157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   4-0  99027  1/303/5520  K 5.07 2     356  6990737  35.0   5.44  84.95 66.249.70.33    http/1.1 support.cloudware.ng:443   GET /?c=2103961197 HTTP/1.1
   5-0  100990 1/250/6035  K 4.37 1     324  7179167  36.3   2.65  97.16 66.249.70.37    http/1.1 support.cloudware.ng:443   GET /?c=552367406 HTTP/1.1
   6-0  3847   0/55/4641   W 0.92 0     0    8429447  0.0    0.99  81.63 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   7-0  4337   0/42/4766   R 0.26 1     311  51590862 0.0    0.41  71.56 157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   8-0  101394 1/119/4420  K 1.04 0     984  9301813  24.6   1.30  65.07 45.41.175.251   http/1.1 health.oyostate.gov.ng:443 GET /omituntun-free-health-mission-physically-challenged-person
   9-0  4705   1/23/5051   K 0.19 0     612  8171392  36.0   0.29  99.31 66.249.70.36    http/1.1 support.cloudware.ng:443   GET /?c=1123026491 HTTP/1.1
   10-0 101399 0/188/4080  _ 2.42 0     0    9817530  0.0    2.80  55.60 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   11-0 91703  1/362/3590  C 6.68 0     1070 9919888  5.7    6.26  59.19 157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   12-0 2298   0/34/3888   R 0.35 107   1    5939052  0.0    0.46  66.00 105.112.121.157 http/1.1
   13-0 99039  97/402/4116 K 5.83 1     119  6842225  649.2  2.78  69.53 217.182.195.126 http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   14-0 97698  81/336/4411 K 4.86 0     120  6456830  543.9  3.26  65.36 217.182.195.126 http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   15-0 100551 0/132/3674  W 1.71 160   0    8103835  0.0    1.67  51.73 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533353138332p2231223
   16-0 95391  27/284/1706 K 3.65 0     833  8449692  1994.2 5.41  31.01 165.22.111.5    http/1.1 health.oyostate.gov.ng:443 GET /b2-img HTTP/1.1
   17-0 4768   0/3/2929    R 0.04 54    266  5856562  0.0    0.07  58.89 104.28.247.133  http/1.1
   18-0 101595 0/118/2910  R 1.37 108   281  1874397  0.0    5.20  47.49 105.112.121.157 http/1.1
   19-0 99040  0/122/1389  W 1.04 180   0    3820498  0.0    1.36  22.99 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533353136332p2231223
   20-0 101728 1/212/1249  W 4.67 0     0    1678625  36.9   2.59  15.81 66.249.70.35    http/1.1 support.cloudware.ng:443   GET /?c=1100919110 HTTP/1.1
   21-0 5341   0/0/443     R 0.00 2     0    2099040  0.0    0.00  6.90  57.130.20.252   http/1.1 cloudware.ng:443
   22-0 -      0/0/994     . 0.00 476   0    1244823  0.0    0.00  12.78 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -      0/0/38      . 0.00 706   0    523742   0.0    0.00  0.51  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -      0/0/97      . 0.00 1000  0    67823    0.0    0.00  1.60  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 98078  0/283/291   W 5.67 10    0    563123   0.0    3.90  4.13  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533353333332p2231223
   26-0 -      0/0/12      . 0.00 18552 0    24649    0.0    0.00  0.26  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -      0/0/31      . 0.00 18588 0    34716    0.0    0.00  0.61  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -      0/0/259     . 0.00 18601 0    143065   0.0    0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -      0/0/96      . 0.00 18618 0    59764    0.0    0.00  2.78  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -      0/0/13      . 0.00 18542 0    22779    0.0    0.00  9.52  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -      0/0/103     . 0.00 18343 0    179005   0.0    0.00  0.84  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -      0/0/2       . 0.00 18619 0    9851     0.0    0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -      0/0/7       . 0.00 18567 0    21858    0.0    0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -      0/0/2       . 0.00 18613 0    17699    0.0    0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -      0/0/5       . 0.00 18582 0    19399    0.0    0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -      0/0/4       . 0.00 18591 0    14235    0.0    0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -      0/0/2       . 0.00 18615 0    15595    0.0    0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -      0/0/156     . 0.00 18347 0    148319   0.0    0.00  0.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -      0/0/2       . 0.00 18616 0    15338    0.0    0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -      0/0/6       . 0.00 18570 0    21858    0.0    0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -      0/0/208     . 0.00 17747 0    243070   0.0    0.00  2.95  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -      0/0/2       . 0.00 18610 0    19835    0.0    0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -      0/0/2       . 0.00 18611 0    19620    0.0    0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -      0/0/6       . 0.00 18568 0    24371    0.0    0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -      0/0/5       . 0.00 18577 0    19070    0.0    0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -      0/0/6       . 0.00 18572 0    20569    0.0    0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -      0/0/4       . 0.00 18587 0    17777    0.0    0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -      0/0/4       . 0.00 18584 0    16933    0.0    0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -      0/0/2       . 0.00 18612 0    17743    0.0    0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -      0/0/3       . 0.00 18594 0    22693    0.0    0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -      0/0/4       . 0.00 18581 0    22016    0.0    0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -      0/0/4       . 0.00 18590 0    22448    0.0    0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -      0/0/3       . 0.00 18598 0    9096     0.0    0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -      0/0/6       . 0.00 18586 0    23840    0.0    0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -      0/0/17      . 0.00 18559 0    16331    0.0    0.00  0.47  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -      0/0/184     . 0.00 18380 0    130360   0.0    0.00  0.50  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -      0/0/3       . 0.00 18595 0    22445    0.0    0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -      0/0/3       . 0.00 18599 0    7899     0.0    0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -      0/0/5       . 0.00 18574 0    23139    0.0    0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -      0/0/139     . 0.00 18244 0    237404   0.0    0.00  1.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -      0/0/2       . 0.00 18608 0    2361     0.0    0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -      0/0/11      . 0.00 18557 0    9214     0.0    0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -      0/0/4       . 0.00 18583 0    8490     0.0    0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -      0/0/1       . 0.00 18625 0    0        0.0    0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -      0/0/1       . 0.00 18623 0    0        0.0    0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -      0/0/2       . 0.00 18606 0    8680     0.0    0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -      0/0/1       . 0.00 18622 0    0        0.0    0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -      0/0/3       . 0.00 18597 0    742      0.0    0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -      0/0/1       . 0.00 18624 11   22       0.0    0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -      0/0/2       . 0.00 18604 0    10366    0.0    0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -      0/0/65      . 0.00 18417 0    105003   0.0    0.00  1.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -      0/0/151     . 0.00 18245 0    218700   0.0    0.00  1.26  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -      0/0/2       . 0.00 18603 0    8818     0.0    0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -      0/0/4       . 0.00 18593 0    1447     0.0    0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -      0/0/2       . 0.00 18609 0    463      0.0    0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -      0/0/101     . 0.00 18329 0    159456   0.0    0.00  0.87  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -      0/0/6       . 0.00 18578 0    4997     0.0    0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -      0/0/338     . 0.00 16822 0    272159   0.0    0.00  5.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -      0/0/1       . 0.00 18621 0    0        0.0    0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -      0/0/2       . 0.00 18602 0    7766     0.0    0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -      0/0/3       . 0.00 18585 0    10368    0.0    0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 613
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 14 seconds, (range: 1...39)
   index usage: 10%, cache usage: 14%
   total entries stored since starting: 53720
   total entries replaced since starting: 0
   total entries expired since starting: 53070
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 157 miss
   total removes since starting: 37 hit, 145 miss
Youez - 2016 - github.com/yon3zu
LinuXploit