403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.11.51.txt
 ## swap threshold exceeded
## server overview
2025-11-08.11.51 load[0] mem[66/63] mysql[3/11] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1483          94          44         786         665
Swap:          1999        1359         640
 11:51:02 up  2:04,  0 users,  load average: 0.97, 0.84, 1.00
## system overview
top - 11:51:02 up  2:04,  0 users,  load average: 0.97, 0.84, 1.00
Tasks: 192 total,   3 running, 188 sleeping,   0 stopped,   1 zombie
%Cpu(s): 66.7 us, 15.2 sy,  0.0 ni, 18.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    99572 free,  1513364 used,   807364 buff/cache
KiB Swap:  2047996 total,   656124 free,  1391872 used.   686480 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1773 mysql     20   0 1458588 238372   3812 S  75.0  9.8   3:04.89 /usr/sbin+
 77529 healtho+  20   0  460520  72024   4336 R  56.2  3.0   0:03.54 php-fpm: +
 77758 nigeria   20   0  400652  15936  10220 S  18.8  0.7   0:00.04 /opt/cpan+
 77613 cloudw    20   0  470992   6696   3344 S   6.2  0.3   0:00.08 php-fpm: +
     1 root      20   0   44424   3488   1532 S   0.0  0.1   0:12.02 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.87 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.16 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:09.32 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.31 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:12.87 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   243 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   259 root       0 -20       0      0      0 S   0.0  0.0   0:01.35 [kworker/+
   268 root       0 -20       0      0      0 S   0.0  0.0   0:01.07 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.56 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39496   5112   4800 S   0.0  0.2   0:04.89 /usr/lib/+
   384 root      20   0   45352    372    216 S   0.0  0.0   0:00.35 /usr/lib/+
   407 root      16  -4   55532    488    360 S   0.0  0.0   0:00.84 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0  224280   7172   1044 S   0.0  0.3   0:00.23 queueproc+
   491 rpc       20   0   69256    212    108 S   0.0  0.0   0:00.01 /sbin/rpc+
   512 dbus      20   0   58768   1472    708 S   0.0  0.1   0:04.04 /usr/bin/+
   538 root      20   0   21540    432    324 S   0.0  0.0   0:00.17 /usr/sbin+
   539 root      20   0   52852    396    300 S   0.0  0.0   0:00.01 /usr/sbin+
   540 root      20   0   24896   1476    840 S   0.0  0.1   0:01.80 /usr/lib/+
   541 root      20   0  152780    220    176 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0    4388    128    124 S   0.0  0.0   0:00.00 /usr/sbin+
   544 polkitd   20   0  610540    968    512 S   0.0  0.0   0:01.07 /usr/lib/+
   547 nscd      20   0  928956   1468    772 S   0.0  0.1   0:03.93 /usr/sbin+
   566 root      20   0  195208     44     44 S   0.0  0.0   0:00.00 /usr/sbin+
   582 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   586 root      20   0  124472    488    360 S   0.0  0.0   0:00.21 /usr/sbin+
   588 root      20   0   24208    176    152 S   0.0  0.0   0:00.00 /usr/sbin+
   605 root      20   0  114704    136    136 S   0.0  0.0   0:00.02 /bin/bash
   606 root      20   0  108296    148    144 S   0.0  0.0   0:00.00 /sbin/age+
   616 mailnull  20   0   89116   3788    768 S   0.0  0.2   0:00.14 /usr/sbin+
   679 root       0 -20       0      0      0 S   0.0  0.0   0:02.45 [loop0]
   709 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   969 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   971 root      20   0 1763032 234900    672 S   0.0  9.7   0:13.52 /usr/loca+
   975 root      20   0  240976   7588   4188 S   0.0  0.3   0:02.38 /usr/sbin+
   976 named     20   0  637928  33188   1720 S   0.0  1.4   0:04.32 /usr/sbin+
   977 root      20   0  397344   3136    716 S   0.0  0.1   0:02.30 php-fpm: +
   982 systuser  20   0  114016  12928   2612 S   0.0  0.5   0:01.85 /usr/loca+
   983 root      20   0  572372    928    360 S   0.0  0.0   0:00.72 /usr/bin/+
   985 memcach+  20   0  342400      4      4 S   0.0  0.0   0:00.16 /usr/bin/+
   986 cpanelc+  20   0   10340   3508   2440 S   0.0  0.1   0:06.14 /usr/loca+
   987 root      20   0  386112    868    656 S   0.0  0.0   0:00.25 php-fpm: +
   988 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   989 root      20   0  385496    744    536 S   0.0  0.0   0:00.25 php-fpm: +
   990 root      20   0  153404    376    296 S   0.0  0.0   0:00.16 pure-ftpd+
   992 systuser  20   0  111608   1560      0 S   0.0  0.1   0:00.00 /usr/loca+
   995 root      20   0  436392  11312  11100 S   0.0  0.5   0:00.30 php-fpm: +
   998 root      20   0  392856    668    500 S   0.0  0.0   0:00.23 php-fpm: +
  1006 telegraf  20   0 5654048  37628   5908 S   0.0  1.6   0:04.44 /usr/loca+
  1010 root      20   0   51508    576    412 S   0.0  0.0   0:00.11 /usr/sbin+
  1012 root      20   0  261292   7164   2000 S   0.0  0.3   0:01.16 cpsrvd (S+
  1024 root      20   0  445028   2648   2648 S   0.0  0.1   0:00.05 sw-engine+
  1025 systuser  20   0  112524   1984      0 S   0.0  0.1   0:00.01 /usr/loca+
  1031 root      20   0  111304    512    408 S   0.0  0.0   0:01.18 /usr/sbin+
  1129 dovenull  20   0   46984   2712   1932 S   0.0  0.1   0:00.12 dovecot/p+
  1130 dovenull  20   0   47460   3292   2132 S   0.0  0.1   0:00.09 dovecot/i+
  1131 dovecot   20   0   10320    404    288 S   0.0  0.0   0:00.02 dovecot/a+
  1132 root      20   0   10452    580    376 S   0.0  0.0   0:00.09 dovecot/l+
  1133 dovenull  20   0   47188   2644   1708 S   0.0  0.1   0:00.17 dovecot/p+
  1134 dovenull  20   0   47500   3172   2012 S   0.0  0.1   0:00.09 dovecot/i+
  1142 root      20   0   24528   2368    456 S   0.0  0.1   0:00.06 dovecot/c+
  1144 dovecot   20   0   13568    664    436 S   0.0  0.0   0:00.01 dovecot/s+
  1204 systuser  20   0  157704   2896    864 S   0.0  0.1   0:00.06 SonarPush+
  1217 wp-tool+  20   0  410452  35628   1608 S   0.0  1.5   0:06.33 /usr/bin/+
  1218 wp-tool+  20   0  387528  12992   1368 S   0.0  0.5   0:00.15 /usr/bin/+
  1221 dovecot   20   0   41168   1512   1064 S   0.0  0.1   0:00.18 dovecot/a+
  1264 root      20   0  209272  20344   2956 S   0.0  0.8   0:00.98 tailwatchd
  1266 root      20   0  167452   1460    856 S   0.0  0.1   0:00.15 dnsadmin +
  1268 root      20   0  262224  21616   3760 S   0.0  0.9   0:00.51 cpdavd - +
  1699 root      20   0  299272    892    512 S   0.0  0.0   0:00.19 php-fpm: +
  1717 root      38  18  130416   1436    712 S   0.0  0.1   0:00.02 cpanellog+
  1947 root      20   0  267032   8220    812 S   0.0  0.3   0:00.55 /usr/sbin+
  1952 root      20   0   12820    436    324 S   0.0  0.0   0:00.87 /usr/loca+
  1953 root      20   0   12732    400    320 S   0.0  0.0   0:00.72 /usr/loca+
  1954 root      20   0   12852    404    280 S   0.0  0.0   0:00.79 /usr/loca+
  1963 root      20   0   53268    196    196 S   0.0  0.0   0:00.05 /usr/loca+
  2286 root      20   0  181884  10924   1212 S   0.0  0.5   0:07.59 lfd - sle+
 10754 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10763 oysipao+  20   0    3152    520     28 S   0.0  0.0   0:00.12 [kworker]
 40228 root      20   0  248032 119724   3100 S   0.0  4.9   0:03.14 /usr/loca+
 42483 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 46911 root      20   0 1276100  10556    592 S   0.0  0.4   0:00.08 /usr/bin/+
 46948 root      20   0 1277056  11568    592 S   0.0  0.5   0:00.07 /usr/bin/+
 47195 root      20   0  258908 124960   2320 S   0.0  5.2   0:00.63 spamd chi+
 47196 root      20   0  248032 117188    604 S   0.0  4.8   0:00.00 spamd chi+
 50503 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 54240 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 62143 worencom  20   0   38484   2164   1144 S   0.0  0.1   0:00.00 dovecot/i+
 62156 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 65704 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 66275 nobody    20   0  277884  19840   4384 S   0.0  0.8   0:01.26 /usr/sbin+
 67838 nobody    20   0  277724  19584   4072 S   0.0  0.8   0:00.97 /usr/sbin+
 67846 nobody    20   0  277892  19624   4132 S   0.0  0.8   0:00.91 /usr/sbin+
 67853 nobody    20   0  277536  19632   4212 S   0.0  0.8   0:00.84 /usr/sbin+
 67977 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 68001 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 68412 nobody    20   0  277624  20156   4444 S   0.0  0.8   0:01.04 /usr/sbin+
 70537 nobody    20   0  277664  19724   4352 S   0.0  0.8   0:00.90 /usr/sbin+
 71252 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 71949 cloudw    20   0  471856   9444   5044 S   0.0  0.4   0:00.55 php-fpm: +
 72794 nobody    20   0  277536  18868   3796 S   0.0  0.8   0:00.13 /usr/sbin+
 72819 cloudw    20   0  471808   9512   5096 S   0.0  0.4   0:00.57 php-fpm: +
 72880 nobody    20   0  277876  19476   3996 S   0.0  0.8   0:00.74 /usr/sbin+
 73427 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 74568 nobody    20   0  277556  18848   3740 S   0.0  0.8   0:00.13 /usr/sbin+
 74583 nobody    20   0  277560  19180   3972 S   0.0  0.8   0:00.52 /usr/sbin+
 74638 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 74680 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 74758 nobody    20   0  277532  18964   3880 S   0.0  0.8   0:00.09 /usr/sbin+
 74760 nobody    20   0  277536  19236   3892 S   0.0  0.8   0:00.43 /usr/sbin+
 75008 root      20   0   84396   6396   3588 S   0.0  0.3   0:00.03 /usr/sbin+
 75274 nobody    20   0  277620  19316   4096 S   0.0  0.8   0:00.23 /usr/sbin+
 75663 nobody    20   0  277568  18964   3880 S   0.0  0.8   0:00.22 /usr/sbin+
 75742 nobody    20   0  277536  18672   3672 S   0.0  0.8   0:00.18 /usr/sbin+
 76930 worencom  20   0   38484   4032   3016 S   0.0  0.2   0:00.00 dovecot/i+
 77532 healtho+  20   0  459292  69772   4292 S   0.0  2.9   0:03.95 php-fpm: +
 77582 healtho+  20   0  458304  68696   4376 S   0.0  2.8   0:02.01 php-fpm: +
 77584 healtho+  20   0  458304  68616   4300 S   0.0  2.8   0:02.07 php-fpm: +
 77612 nigeria   20   0  397064   5612   2368 S   0.0  0.2   0:00.00 php-fpm: +
 77629 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 77656 root      20   0   88348  10392   3604 S   0.0  0.4   0:00.02 /usr/sbin+
 77664 mailnull  20   0   88560   8004   1152 S   0.0  0.3   0:00.00 /usr/sbin+
 77681 root      20   0  157100   5068   3784 S   0.0  0.2   0:00.00 sshd: unk+
 77682 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: unk+
 77705 root      20   0  183040   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 77709 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 77710 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 77711 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 77712 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 77713 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 77714 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 77715 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 77717 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 77724 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 77728 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 77729 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 77730 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 77732 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 77733 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 77735 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 77738 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 77739 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 77740 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 77741 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 77749 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 77757 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 77760 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 77787 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 77789 root      20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:09  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:12  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        243  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        245  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        259  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/1:1H]
root        268  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        582  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        679  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [loop0]
root        709  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      42483  0.0  0.0      0     0 ?        S    10:54   0:00  \_ [kworker/0:3]
root      50503  0.0  0.0      0     0 ?        S    11:05   0:00  \_ [kworker/u200:2]
root      54240  0.0  0.0      0     0 ?        S    11:11   0:00  \_ [kworker/1:0]
root      62156  0.0  0.0      0     0 ?        S    11:24   0:00  \_ [kworker/1:3]
root      65704  0.0  0.0      0     0 ?        S    11:30   0:00  \_ [kworker/u200:1]
root      67977  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/1:2]
root      68001  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/0:0]
root      71252  0.0  0.0      0     0 ?        S    11:40   0:00  \_ [kworker/1:1]
root      73427  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/0:2]
root      74638  0.0  0.0      0     0 ?        S    11:46   0:00  \_ [kworker/0:4]
root      74680  0.0  0.0      0     0 ?        S    11:46   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44424  3488 ?        Ss   09:46   0:12 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  39496  5112 ?        Ss   09:46   0:04 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   372 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   488 ?        S<sl 09:46   0:00 /sbin/auditd
root        489  0.0  0.2 224280  7172 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
rpc         491  0.0  0.0  69256   212 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        512  0.0  0.0  58768  1472 ?        Ss   09:46   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        538  0.0  0.0  21540   432 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        539  0.0  0.0  52852   396 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
root        540  0.0  0.0  24896  1476 ?        Ss   09:46   0:01 /usr/lib/systemd/systemd-logind
root        541  0.0  0.0 152780   220 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        542  0.0  0.0   4388   128 ?        Ss   09:46   0:00 /usr/sbin/acpid
polkitd     544  0.0  0.0 610540   968 ?        Ssl  09:46   0:01 /usr/lib/polkit-1/polkitd --no-debug
nscd        547  0.0  0.0 928956  1468 ?        Ssl  09:46   0:03 /usr/sbin/nscd
root        566  0.0  0.0 195208    44 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        586  0.0  0.0 124472   488 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      77705  0.0  0.0 183040  2140 ?        S    11:51   0:00  \_ /usr/sbin/CROND -n
root      77728  0.0  0.0 113284  1212 ?        Ss   11:51   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      77729  0.0  0.0 108052   356 ?        S    11:51   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      77741  0.0  0.0 113288  1516 ?        S    11:51   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      77790  0.0  0.0 153840  2092 ?        R    11:51   0:00  |               \_ ps auxf
root      77709  0.0  0.0 183040  2140 ?        S    11:51   0:00  \_ /usr/sbin/CROND -n
root      77738  0.0  0.0  20164   808 ?        Ss   11:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      77710  0.0  0.0 183040  2140 ?        S    11:51   0:00  \_ /usr/sbin/CROND -n
root      77739  0.0  0.0  20164   804 ?        Ss   11:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      77711  0.0  0.0 183040  2140 ?        S    11:51   0:00  \_ /usr/sbin/CROND -n
root      77730  0.0  0.0  20164   808 ?        Ss   11:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      77712  0.0  0.0 183040  2136 ?        S    11:51   0:00  \_ /usr/sbin/CROND -n
root      77740  0.0  0.0  20164   804 ?        Ss   11:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      77713  0.0  0.0 183040  2136 ?        S    11:51   0:00  \_ /usr/sbin/CROND -n
root      77732  0.0  0.0  20164   808 ?        Ss   11:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      77714  0.0  0.0 183040  2136 ?        S    11:51   0:00  \_ /usr/sbin/CROND -n
root      77724  0.0  0.0  20164   984 ?        Ss   11:51   0:00  |   \_ jailshell (cloudsms) [77789] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  77789  0.0  0.0  20164   260 ?        S    11:51   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  77791  0.0  0.0  20164   260 ?        R    11:51   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      77715  0.0  0.0 183040  2140 ?        S    11:51   0:00  \_ /usr/sbin/CROND -n
root      77735  0.0  0.0  20164   960 ?        Ss   11:51   0:00  |   \_ jailshell (pactpay) [77757] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   77757  0.0  0.0  20164   256 ?        S    11:51   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   77760  0.0  0.7 476724 17480 ?        S    11:51   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      77717  0.0  0.0 183040  2136 ?        S    11:51   0:00  \_ /usr/sbin/CROND -n
root      77733  0.0  0.0  20164   964 ?        Ss   11:51   0:00      \_ jailshell (nigeria) [77749] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   77749  0.0  0.0  20164   260 ?        S    11:51   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   77758  0.0  0.6 400652 15936 ?        S    11:51   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        588  0.0  0.0  24208   176 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        605  0.0  0.0 114704   136 ttyS0    Ss+  09:46   0:00 /bin/bash
root        606  0.0  0.0 108296   148 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    616  0.0  0.1  89116  3788 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root      75008  0.0  0.2  84396  6396 ?        S    11:46   0:00  \_ /usr/sbin/exim -q
root      77656  0.3  0.4  88348 10392 ?        S    11:50   0:00      \_ /usr/sbin/exim -q
mailnull  77664  0.0  0.3  88560  8004 ?        S    11:50   0:00          \_ /usr/sbin/exim -q
systuser    969  0.0  0.0  11796    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        971  0.1  9.7 1763032 234900 ?      Ssl  09:46   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        975  0.0  0.3 240976  7588 ?        Ssl  09:46   0:02 /usr/sbin/rsyslogd -n
named       976  0.0  1.3 637928 33188 ?        Ssl  09:46   0:04 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        977  0.0  0.1 397344  3136 ?        Ss   09:46   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    71949  0.0  0.3 471856  9444 ?        S    11:41   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    72819  0.1  0.3 471808  9512 ?        S    11:42   0:00  \_ php-fpm: pool edoocds_cloudware_ng
healtho+  77529 15.4  2.9 460520 72024 ?        R    11:50   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  77532 17.1  2.8 459292 69772 ?        S    11:50   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  77582 13.4  2.8 458304 68696 ?        S    11:50   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  77584 13.8  2.8 458304 68616 ?        S    11:50   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   77612  0.0  0.2 397064  5612 ?        S    11:50   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    77613  0.8  0.2 470992  6696 ?        S    11:50   0:00  \_ php-fpm: pool edoocds_cloudware_ng
systuser    982  0.0  0.5 114016 12928 ?        Ssl  09:46   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        983  0.0  0.0 572372   928 ?        Ssl  09:46   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
memcach+    985  0.0  0.0 342400     4 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    986  0.0  0.1  10340  3508 ?        Ss   09:46   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        987  0.0  0.0 386112   868 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    988  0.0  0.0  11348    36 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        989  0.0  0.0 385496   744 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        990  0.0  0.0 153404   376 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
systuser    992  0.0  0.0 111608  1560 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        995  0.0  0.4 436392 11312 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        998  0.0  0.0 392856   668 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
telegraf   1006  0.0  1.5 5654048 37628 ?       SLsl 09:46   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1010  0.0  0.0  51508   576 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1129  0.0  0.1  46984  2712 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  47460  3292 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1131  0.0  0.0  10320   404 ?        S    09:46   0:00  \_ dovecot/anvil
root       1132  0.0  0.0  10452   580 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1133  0.0  0.1  47188  2644 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1134  0.0  0.1  47500  3172 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1142  0.0  0.0  24528  2368 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1144  0.0  0.0  13568   664 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1221  0.0  0.0  41168  1512 ?        S    09:46   0:00  \_ dovecot/auth
worencom  62143  0.0  0.0  38484  2164 ?        S    11:24   0:00  \_ dovecot/imap
worencom  76930  0.0  0.1  38484  4032 ?        S    11:49   0:00  \_ dovecot/imap
root       1012  0.0  0.2 261292  7164 ?        Ss   09:46   0:01 cpsrvd (SSL) - waiting for connections                   
root      77629  0.0  0.0      0     0 ?        Z    11:50   0:00  \_ [cpaneld - servi] <defunct>
root       1024  0.0  0.1 445028  2648 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   1025  0.0  0.0 112524  1984 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1031  0.0  0.0 111304   512 ?        Ss   09:46   0:01 /usr/sbin/sshd -D
root      77681  0.0  0.2 157100  5068 ?        Ss   11:51   0:00  \_ sshd: unknown [priv]
sshd      77682  0.0  0.1 115644  2624 ?        S    11:51   0:00      \_ sshd: unknown [net]
systuser   1204  0.0  0.1 157704  2896 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1217  0.0  1.4 410452 35628 ?        Ss   09:46   0:06 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1218  0.0  0.5 387528 12992 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.8 209272 20344 ?        Ss   09:46   0:00 tailwatchd
root       1266  0.0  0.0 167452  1460 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1268  0.0  0.8 262224 21616 ?        Ss   09:46   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1699  0.0  0.0 299272   892 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1436 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1773  2.4  9.8 1458588 238372 ?      Sl   09:46   3:04 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.3 267032  8220 ?        Ss   09:46   0:00 /usr/sbin/httpd -k start
root       1952  0.0  0.0  12820   436 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1953  0.0  0.0  12732   400 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1954  0.0  0.0  12852   404 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1963  0.0  0.0  53268   196 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    66275  0.1  0.8 277884 19840 ?        S    11:31   0:01  \_ /usr/sbin/httpd -k start
nobody    67838  0.0  0.8 277724 19584 ?        S    11:33   0:00  \_ /usr/sbin/httpd -k start
nobody    67846  0.0  0.8 277892 19624 ?        S    11:33   0:00  \_ /usr/sbin/httpd -k start
nobody    67853  0.0  0.8 277536 19632 ?        S    11:33   0:00  \_ /usr/sbin/httpd -k start
nobody    68412  0.1  0.8 277624 20156 ?        S    11:35   0:01  \_ /usr/sbin/httpd -k start
nobody    70537  0.1  0.8 277664 19724 ?        S    11:39   0:00  \_ /usr/sbin/httpd -k start
nobody    72794  0.0  0.7 277536 18868 ?        S    11:42   0:00  \_ /usr/sbin/httpd -k start
nobody    72880  0.1  0.8 277876 19476 ?        S    11:43   0:00  \_ /usr/sbin/httpd -k start
nobody    74568  0.0  0.7 277556 18848 ?        S    11:45   0:00  \_ /usr/sbin/httpd -k start
nobody    74583  0.1  0.7 277560 19180 ?        S    11:46   0:00  \_ /usr/sbin/httpd -k start
nobody    74758  0.0  0.7 277532 18964 ?        S    11:46   0:00  \_ /usr/sbin/httpd -k start
nobody    74760  0.1  0.7 277536 19236 ?        S    11:46   0:00  \_ /usr/sbin/httpd -k start
nobody    75274  0.0  0.7 277620 19316 ?        S    11:47   0:00  \_ /usr/sbin/httpd -k start
nobody    75663  0.1  0.7 277568 18964 ?        S    11:47   0:00  \_ /usr/sbin/httpd -k start
nobody    75742  0.0  0.7 277536 18672 ?        S    11:47   0:00  \_ /usr/sbin/httpd -k start
root       2286  0.1  0.4 181884 10924 ?        Ss   09:46   0:07 lfd - sleeping
oysipao+  10754  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+  10763  0.0  0.0   3152   520 ?        S    10:01   0:00  \_ [kworker]
root      40228  0.0  4.9 248032 119724 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      47195  0.0  5.1 258908 124960 ?       S    11:00   0:00  \_ spamd child
root      47196  0.0  4.8 248032 117188 ?       S    11:00   0:00  \_ spamd child
root      46911  0.0  0.4 1276100 10556 ?       Ssl  11:00   0:00 /usr/bin/cspdaemon
root      46948  0.0  0.4 1277056 11568 ?       Ssl  11:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 29168  Threads: 4  Questions: 1361928  Slow queries: 0  Opens: 3270  Flush tables: 1  Open tables: 1985  Queries per second avg: 46.692
*************************** 1. row ***************************
     Id: 19733
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 19734
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 19737
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 19740
   User: unauthenticated user
   Host: localhost
     db: NULL
Command: Connect
   Time: 0
  State: Receiving from client
   Info: NULL
*************************** 5. row ***************************
     Id: 19741
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.48 TIME_WAIT
      1 142.44.233.148 TIME_WAIT
      1 172.213.11.144 TIME_WAIT
      1 172.213.11.154 TIME_WAIT
      1 ::1 TIME_WAIT
      1 3.233.6.172 TIME_WAIT
      1 46.138.172.91 TIME_WAIT
      1 66.249.70.38 TIME_WAIT
      1 74.7.228.31 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 91.232.238.153 TIME_WAIT
     37 103.253.27.139 TIME_WAIT
     41 103.253.27.28 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 11:51:02 WAT
   Restart Time: Saturday, 08-Nov-2025 03:45:00 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 6 minutes 1 second
   Server load: 0.97 0.84 1.00
   Total accesses: 37795 - Total Traffic: 568.2 MB - Total Duration: 26254300
   CPU Usage: u6.44 s2.7 cu351.3 cs230.29 - 2.03% CPU load
   1.3 requests/sec - 20.0 kB/second - 15.4 kB/request - 694.65 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

_W..W_W.KKWW...K.._K.._...._.W..................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req    Dur   Conn  Child  Slot     Client      Protocol           VHost                                        Request
   0-0  68412 0/259/2141 _ 3.60 0    345  1345073 0.0   5.09  36.78 103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   1-0  75274 0/54/2166  W 0.82 31   0    1189607 0.0   1.26  39.57 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630323633312p2231223
   2-0  -     0/0/1949   . 0.00 114  0    1681739 0.0   0.00  35.60 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   3-0  -     0/0/2067   . 0.00 18   0    2035215 0.0   0.00  29.25 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   4-0  66275 0/283/2097 W 4.72 9    0    1205768 0.0   7.40  36.03 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630323635332p2231223
   5-0  70537 0/269/2047 _ 3.14 1    338  1098976 0.0   3.66  28.48 103.253.27.139  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   6-0  75663 0/50/2018  W 0.81 0    0    1167385 0.0   1.40  29.97 103.253.27.139  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   7-0  -     0/0/1742   . 0.00 48   0    967812  0.0   0.00  24.58 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-0  67838 1/232/2027 K 3.55 4    388  1392930 31.1  4.49  26.68 66.249.70.34    http/1.1 wptraining.cloudware.ng:80 GET /?q=1192375300 HTTP/1.1
   9-0  72794 1/31/2078  K 0.34 0    427  1800375 32.2  0.41  26.83 66.249.70.35    http/1.1 wptraining.cloudware.ng:80 GET /?q=4002084877 HTTP/1.1
   10-0 67846 0/202/1445 W 3.51 0    0    1366327 0.0   4.40  23.46 103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   11-0 75742 0/46/1706  W 0.62 0    0    960402  0.0   0.70  26.69 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   12-0 -     0/0/1759   . 0.00 15   0    953932  0.0   0.00  24.67 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 -     0/0/1395   . 0.00 28   0    884747  0.0   0.00  22.04 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 -     0/0/1361   . 0.00 279  0    715575  0.0   0.00  17.68 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 72880 1/225/1223 K 3.03 4    310  636623  35.1  3.00  18.41 66.249.70.36    http/1.1 wptraining.cloudware.ng:80 GET /?q=2103268095 HTTP/1.1
   16-0 -     0/0/1265   . 0.00 31   0    1130171 0.0   0.00  21.31 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -     0/0/1025   . 0.00 284  0    536067  0.0   0.00  12.48 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 67853 0/210/1313 _ 3.10 1    24   1138721 0.0   3.16  17.45 116.203.134.67  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue4.php HTTP/1.1
   19-0 74568 12/25/937  K 0.53 0    407  965015  370.6 0.57  12.62 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2142346627 HTTP/1.1
   20-0 -     0/0/607    . 0.00 27   0    384033  0.0   0.00  11.70 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/185    . 0.00 108  0    150802  0.0   0.00  2.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 74583 0/233/1373 _ 2.23 1    24   622658  0.0   1.65  18.36 128.140.8.200   http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   23-0 -     0/0/731    . 0.00 287  0    466407  0.0   0.00  8.24  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/77     . 0.00 278  0    40454   0.0   0.00  1.25  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/19     . 0.00 290  2036 11550   0.0   0.00  0.17  98.80.4.112     http/1.1
   26-0 -     0/0/11     . 0.00 281  0    9391    0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 74758 0/22/25    _ 0.27 0    0    418956  0.0   0.28  0.29  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   28-0 -     0/0/5      . 0.00 283  0    4898    0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 74760 18/94/110  W 1.60 0    0    59057   550.6 4.26  4.39  66.249.70.194   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3027135029 HTTP/1.1
   30-0 -     0/0/8      . 0.00 3278 0    2127    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/2      . 0.00 3298 0    13      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/6      . 0.00 3284 0    2739    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/2      . 0.00 3301 0    1       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/5      . 0.00 3279 0    2035    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/7      . 0.00 3273 0    2468    0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/78     . 0.00 3022 0    121446  0.0   0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/4      . 0.00 3283 0    2767    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/193    . 0.00 2824 0    241489  0.0   0.00  1.67  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/3      . 0.00 3292 0    50      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/5      . 0.00 3282 0    2478    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/21     . 0.00 3228 0    11757   0.0   0.00  0.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/8      . 0.00 3272 0    3645    0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/3      . 0.00 3289 0    709     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/3      . 0.00 3294 0    703     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/2      . 0.00 3300 0    2       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/9      . 0.00 3260 0    2869    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/172    . 0.00 2847 0    242408  0.0   0.00  3.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/8      . 0.00 3271 0    2838    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/10     . 0.00 3274 0    5104    0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/160    . 0.00 2931 0    174079  0.0   0.00  1.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00 3275 0    2028    0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/175    . 0.00 3064 0    89852   0.0   0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 398
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 11 seconds, (range: 1...85)
   index usage: 7%, cache usage: 9%
   total entries stored since starting: 10341
   total entries replaced since starting: 0
   total entries expired since starting: 9938
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 30 miss
   total removes since starting: 7 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit