403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-10.21.27.txt
 ## swap threshold exceeded
## server overview
2025-11-10.21.27 load[0] mem[50/77] mysql[2/10] httpd[8]
              total        used        free      shared  buff/cache   available
Mem:           2363        1146         199         124        1017         910
Swap:          1999        1628         371
 21:27:01 up 11:42,  0 users,  load average: 0.20, 0.19, 0.24
## system overview
top - 21:27:02 up 11:42,  0 users,  load average: 0.20, 0.19, 0.24
Tasks: 192 total,   6 running, 185 sleeping,   0 stopped,   1 zombie
%Cpu(s): 72.2 us, 25.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  2.8 si,  0.0 st
KiB Mem :  2420300 total,   186964 free,  1191452 used,  1041884 buff/cache
KiB Swap:  2047996 total,   380156 free,  1667840 used.   915440 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1750 mysql     20   0 1478216 289536   3396 S  64.7 12.0   9:46.35 /usr/sbin+
 81020 healtho+  20   0  465948  69656   4452 R  58.8  2.9   0:00.29 php-fpm: +
 81077 nigeria   20   0  400652  15936  10220 S  11.8  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44392   3504   1540 S   5.9  0.1   1:01.55 /usr/lib/+
 81096 root      20   0  160220   2064   1580 R   5.9  0.1   0:00.01 top -bcn1
 81106 cloudsms  20   0  396264  10792   7504 R   5.9  0.4   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.13 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.19 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:44.83 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.14 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.25 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:16.88 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   110 root      20   0       0      0      0 S   0.0  0.0   0:00.87 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:02.29 [kworker/+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   252 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   265 root       0 -20       0      0      0 S   0.0  0.0   0:01.94 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:02.04 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   361 root      20   0   40240   5260   5000 S   0.0  0.2   0:21.98 /usr/lib/+
   387 root      20   0   45352    152    148 S   0.0  0.0   0:00.33 /usr/lib/+
   410 root      16  -4   55532    512    384 S   0.0  0.0   0:03.61 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   478 root      20   0   52852    396    284 S   0.0  0.0   0:00.01 /usr/sbin+
   479 root      20   0   21540    384    296 S   0.0  0.0   0:00.96 /usr/sbin+
   482 root      20   0   24692   1204    824 S   0.0  0.0   0:09.81 /usr/lib/+
   491 root      20   0  152780    160    116 S   0.0  0.0   0:00.02 /usr/sbin+
   492 dbus      20   0   58724   1480    724 S   0.0  0.1   0:22.31 /usr/bin/+
   496 nscd      20   0 1197256   1732    804 S   0.0  0.1   0:20.54 /usr/sbin+
   501 rpc       20   0   69256    168    108 S   0.0  0.0   0:00.04 /sbin/rpc+
   516 root      20   0    4388     84     80 S   0.0  0.0   0:00.00 /usr/sbin+
   518 polkitd   20   0  610540   1096    708 S   0.0  0.0   0:05.73 /usr/lib/+
   526 root      20   0  224148   5508   1156 S   0.0  0.2   0:00.46 queueproc+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   549 root      20   0  124476    460    328 S   0.0  0.0   0:01.21 /usr/sbin+
   550 root      20   0   24208     28      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  114704     80     80 S   0.0  0.0   0:00.02 /bin/bash
   565 root      20   0  108296     84     80 S   0.0  0.0   0:00.00 /sbin/age+
   566 mailnull  20   0   89116   3836    888 S   0.0  0.2   0:00.85 /usr/sbin+
   630 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   682 root       0 -20       0      0      0 S   0.0  0.0   0:02.53 [loop0]
   691 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   703 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   927 root      20   0  153404    340    256 S   0.0  0.0   0:00.93 pure-ftpd+
   928 root      20   0  572372    980    404 S   0.0  0.0   0:03.58 /usr/bin/+
   930 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   932 telegraf  20   0 5654048  35980   6120 S   0.0  1.5   0:22.52 /usr/loca+
   934 systuser  20   0   11348     40      0 S   0.0  0.0   0:00.02 /usr/loca+
   936 root      20   0   51508    540    376 S   0.0  0.0   0:00.50 /usr/sbin+
   937 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   938 root      20   0  111304    448    348 S   0.0  0.0   0:05.48 /usr/sbin+
   940 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.92 /usr/bin/+
   941 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   942 systuser  20   0  114016  14400   2652 S   0.0  0.6   0:09.97 /usr/loca+
   946 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   952 root      20   0  385496   1260    536 S   0.0  0.1   0:01.40 php-fpm: +
   971 root      20   0  436392   4200   3996 S   0.0  0.2   0:01.19 php-fpm: +
   979 root      20   0  386112    664    448 S   0.0  0.0   0:01.09 php-fpm: +
   985 root      20   0  392856    648    464 S   0.0  0.0   0:01.13 php-fpm: +
   986 root      20   0  261436   7152   1784 S   0.0  0.3   0:10.99 cpsrvd (S+
   988 root      20   0  397344   3240    676 S   0.0  0.1   0:06.19 php-fpm: +
   992 root      20   0 1763112  90824    696 S   0.0  3.8   0:14.55 /usr/loca+
   999 named     20   0  711664  39068   1624 S   0.0  1.6   0:21.48 /usr/sbin+
  1007 root      20   0  331088   6316   5008 S   0.0  0.3   0:11.16 /usr/sbin+
  1016 cpanelc+  20   0   10540   3620   2320 R   0.0  0.1   0:34.93 /usr/loca+
  1080 dovenull  20   0   47256   3520   2508 S   0.0  0.1   0:00.66 dovecot/p+
  1081 dovenull  20   0   48672   4596   2432 S   0.0  0.2   0:00.65 dovecot/i+
  1082 dovecot   20   0   10320    420    304 S   0.0  0.0   0:00.12 dovecot/a+
  1083 root      20   0   10452    444    268 S   0.0  0.0   0:00.54 dovecot/l+
  1084 dovenull  20   0   47396   3704   2540 S   0.0  0.2   0:00.98 dovecot/p+
  1085 dovenull  20   0   48740   4552   2496 S   0.0  0.2   0:00.49 dovecot/i+
  1091 root      20   0   24564   2596    456 S   0.0  0.1   0:00.26 dovecot/c+
  1092 dovecot   20   0   13568    616    404 S   0.0  0.0   0:00.10 dovecot/s+
  1154 dovecot   20   0   41172   1536   1044 S   0.0  0.1   0:01.01 dovecot/a+
  1155 wp-tool+  20   0  387528  13324   1720 S   0.0  0.6   0:00.37 /usr/bin/+
  1158 wp-tool+  20   0  410452  36980   1952 S   0.0  1.5   0:34.77 /usr/bin/+
  1175 root      20   0  248140  41172   1020 S   0.0  1.7   0:07.79 /usr/loca+
  1193 systuser  20   0  157700   2904    888 S   0.0  0.1   0:00.18 SonarPush+
  1260 root      20   0  209428  10560   2356 S   0.0  0.4   0:03.81 tailwatchd
  1266 root      20   0  183900   6448   3216 S   0.0  0.3   0:02.26 cpdavd - +
  1267 root      20   0  167452   1328    728 S   0.0  0.1   0:00.61 dnsadmin +
  1677 root      20   0  299272    768    388 S   0.0  0.0   0:01.15 php-fpm: +
  1706 root      38  18  130416   1396    712 S   0.0  0.1   0:00.11 cpanellog+
  1994 root      20   0  267016   8468    712 S   0.0  0.3   0:02.29 /usr/sbin+
  2017 root      20   0   12752    384    264 S   0.0  0.0   0:03.14 /usr/loca+
  2018 root      20   0   12732    324    244 S   0.0  0.0   0:02.74 /usr/loca+
  2019 root      20   0   12756    388    252 S   0.0  0.0   0:02.89 /usr/loca+
  2047 root      20   0   53268    128    128 S   0.0  0.0   0:00.04 /usr/loca+
  2243 root      20   0  184944  14152   1148 S   0.0  0.6   0:39.70 lfd - sle+
  6595 root      20   0  275092 104552   2320 S   0.0  4.3   0:05.62 spamd chi+
  6596 root      20   0  261032  87792   1936 S   0.0  3.6   0:00.22 spamd chi+
 11471 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 11472 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.78 [kworker]
 34597 nobody    20   0  277732  21472   5104 S   0.0  0.9   0:05.69 /usr/sbin+
 44873 nobody    20   0  277720  21332   5008 S   0.0  0.9   0:04.47 /usr/sbin+
 57606 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 58409 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 61924 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65522 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 65764 root      20   0 1275844  10332    600 S   0.0  0.4   0:00.07 /usr/bin/+
 65799 root      20   0 1277312  11712    600 S   0.0  0.5   0:00.06 /usr/bin/+
 68638 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 71641 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72246 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 72341 nobody    20   0  277808  20584   4720 S   0.0  0.9   0:00.89 /usr/sbin+
 72342 nobody    20   0  277940  20608   4656 S   0.0  0.9   0:01.06 /usr/sbin+
 72343 nobody    20   0  277808  20408   4504 S   0.0  0.8   0:00.97 /usr/sbin+
 72344 nobody    20   0  277940  20340   4512 S   0.0  0.8   0:01.07 /usr/sbin+
 72439 nobody    20   0  277932  20360   4608 R   0.0  0.8   0:00.88 /usr/sbin+
 73369 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 74637 nobody    20   0  277924  20208   4448 S   0.0  0.8   0:00.77 /usr/sbin+
 76841 nobody    20   0  277800  19820   4116 S   0.0  0.8   0:00.56 /usr/sbin+
 76898 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78066 nobody    20   0  277800  19868   4120 S   0.0  0.8   0:00.48 /usr/sbin+
 78530 nobody    20   0  277936  19704   4048 S   0.0  0.8   0:00.21 /usr/sbin+
 78531 nobody    20   0  277796  19740   4056 S   0.0  0.8   0:00.35 /usr/sbin+
 80162 nobody    20   0  277932  19460   3824 S   0.0  0.8   0:00.11 /usr/sbin+
 80583 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 80765 root      20   0  111304   4260   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 80903 nigeria   20   0  399832  10244   3892 S   0.0  0.4   0:00.18 php-fpm: +
 80994 root      20   0  162436   5828   4336 S   0.0  0.2   0:00.01 sshd: roo+
 80995 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: roo+
 80996 root      20   0  157100   5068   3784 S   0.0  0.2   0:00.00 sshd: unk+
 80997 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 81004 root      20   0  162436   5824   4336 S   0.0  0.2   0:00.02 sshd: roo+
 81005 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: roo+
 81012 oyotech+  20   0  385844   6572   2972 S   0.0  0.3   0:00.01 php-fpm: +
 81017 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 81021 root      20   0  183044   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 81022 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81023 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81025 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81026 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81028 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81029 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81030 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81031 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81033 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 81035 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 81036 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 81037 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 81051 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 81052 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 81053 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 81055 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 81056 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 81057 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 81058 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 81061 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 81062 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 81071 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 81080 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 81082 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 81085 cloudw    20   0  350316  16624  10324 R   0.0  0.7   0:00.01 /opt/cpan+
 81100 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 81102 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 81103 cloudsms  20   0  400652  15412  10000 S   0.0  0.6   0:00.00 /opt/cpan+
 81104 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 81105 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:44   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:44   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:44   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:44   0:44  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:44   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:44   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:44   0:16  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:44   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:44   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [deferwq]
root        110  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   09:44   0:02  \_ [kworker/1:1H]
root        251  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [scsi_tmf_0]
root        252  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [scsi_eh_1]
root        253  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ttm_swap]
root        265  0.0  0.0      0     0 ?        S<   09:44   0:01  \_ [kworker/0:1H]
root        279  0.0  0.0      0     0 ?        S    09:44   0:02  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [xprtiod]
root        630  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [kvm-irqfd-clean]
root        682  0.0  0.0      0     0 ?        S<   09:44   0:02  \_ [loop0]
root        691  0.0  0.0      0     0 ?        S    09:44   0:00  \_ [jbd2/loop0-8]
root        703  0.0  0.0      0     0 ?        S<   09:44   0:00  \_ [ext4-rsv-conver]
root      57606  0.0  0.0      0     0 ?        S    20:45   0:00  \_ [kworker/u200:0]
root      58409  0.0  0.0      0     0 ?        S    20:47   0:00  \_ [kworker/1:1]
root      61924  0.0  0.0      0     0 ?        S    20:54   0:00  \_ [kworker/1:0]
root      65522  0.0  0.0      0     0 ?        S    21:00   0:00  \_ [kworker/u200:1]
root      68638  0.0  0.0      0     0 ?        S    21:05   0:00  \_ [kworker/0:2]
root      71641  0.0  0.0      0     0 ?        S    21:10   0:00  \_ [kworker/1:2]
root      72246  0.0  0.0      0     0 ?        S    21:11   0:00  \_ [kworker/0:0]
root      73369  0.0  0.0      0     0 ?        S    21:13   0:00  \_ [kworker/0:1]
root      76898  0.0  0.0      0     0 ?        S    21:19   0:00  \_ [kworker/1:4]
root      80583  0.0  0.0      0     0 ?        S    21:26   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44392  3504 ?        Ss   09:44   1:01 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        361  0.0  0.2  40240  5260 ?        Ss   09:44   0:21 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   152 ?        Ss   09:44   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   512 ?        S<sl 09:44   0:03 /sbin/auditd
root        478  0.0  0.0  52852   396 ?        Ss   09:44   0:00 /usr/sbin/smartd -n -q never
root        479  0.0  0.0  21540   384 ?        Ss   09:44   0:00 /usr/sbin/irqbalance --foreground
root        482  0.0  0.0  24692  1204 ?        Ss   09:44   0:09 /usr/lib/systemd/systemd-logind
root        491  0.0  0.0 152780   160 ?        Ss   09:44   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        492  0.0  0.0  58724  1480 ?        Ss   09:44   0:22 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        496  0.0  0.0 1197256 1732 ?        Ssl  09:44   0:20 /usr/sbin/nscd
rpc         501  0.0  0.0  69256   168 ?        Ss   09:44   0:00 /sbin/rpcbind -w
root        516  0.0  0.0   4388    84 ?        Ss   09:44   0:00 /usr/sbin/acpid
polkitd     518  0.0  0.0 610540  1096 ?        Ssl  09:44   0:05 /usr/lib/polkit-1/polkitd --no-debug
root        526  0.0  0.2 224148  5508 ?        Ss   09:44   0:00 queueprocd - waiting up to 60s to process a task
root        530  0.0  0.0 195208     0 ?        Ssl  09:44   0:00 /usr/sbin/gssproxy -D
root        549  0.0  0.0 124476   460 ?        Ss   09:44   0:01 /usr/sbin/crond -n
root      81021  0.0  0.0 183044  2144 ?        S    21:27   0:00  \_ /usr/sbin/CROND -n
root      81035  0.0  0.0 113284  1212 ?        Ss   21:27   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      81036  0.0  0.0 108052   360 ?        S    21:27   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      81037  0.0  0.0 113288  1516 ?        S    21:27   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      81108  0.0  0.0 153840  2088 ?        R    21:27   0:00  |               \_ ps auxf
root      81022  0.0  0.0 183044  2148 ?        S    21:27   0:00  \_ /usr/sbin/CROND -n
root      81062  0.0  0.0  20164   984 ?        Ss   21:27   0:00  |   \_ jailshell (cloudsms) [81104] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  81104  0.0  0.0      0     0 ?        D    21:27   0:00  |       \_ [jailshell]
root      81023  0.0  0.0 183044  2148 ?        S    21:27   0:00  \_ /usr/sbin/CROND -n
root      81061  0.0  0.0  20164   804 ?        Ss   21:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      81025  0.0  0.0 183044  2148 ?        S    21:27   0:00  \_ /usr/sbin/CROND -n
root      81052  0.0  0.0  20164   988 ?        Ss   21:27   0:00  |   \_ jailshell (cloudsms) [81100] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  81100  0.0  0.0  20164   260 ?        S    21:27   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  81102  0.0  0.0 113284  1212 ?        S    21:27   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  81103  0.0  0.6 400652 15412 ?        S    21:27   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      81026  0.0  0.0 183044  2144 ?        S    21:27   0:00  \_ /usr/sbin/CROND -n
root      81053  0.0  0.0  20164   804 ?        Ss   21:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      81028  0.0  0.0 183044  2144 ?        S    21:27   0:00  \_ /usr/sbin/CROND -n
root      81058  0.0  0.0  20164   804 ?        Ss   21:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      81029  0.0  0.0 183044  2140 ?        S    21:27   0:00  \_ /usr/sbin/CROND -n
root      81051  0.0  0.0  20164   804 ?        Ss   21:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      81030  0.0  0.0 183044  2140 ?        S    21:27   0:00  \_ /usr/sbin/CROND -n
root      81057  0.0  0.0  20164   808 ?        Ss   21:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      81031  0.0  0.0 183044  2144 ?        S    21:27   0:00  \_ /usr/sbin/CROND -n
root      81056  0.0  0.0  20164   964 ?        Ss   21:27   0:00  |   \_ jailshell (pactpay) [81080] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   81080  0.0  0.0  20164   260 ?        S    21:27   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   81082  1.0  0.7 476724 17480 ?        S    21:27   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      81033  0.0  0.0 183044  2140 ?        S    21:27   0:00  \_ /usr/sbin/CROND -n
root      81055  0.0  0.0  20164   960 ?        Ss   21:27   0:00      \_ jailshell (nigeria) [81071] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   81071  0.0  0.0  20164   256 ?        S    21:27   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   81077  5.0  0.6 400652 15936 ?        S    21:27   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        550  0.0  0.0  24208    28 ?        Ss   09:44   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 114704    80 ttyS0    Ss+  09:44   0:00 /bin/bash
root        565  0.0  0.0 108296    84 tty1     Ss+  09:44   0:00 /sbin/agetty --noclear tty1 linux
mailnull    566  0.0  0.1  89116  3836 ?        Ss   09:44   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        927  0.0  0.0 153404   340 ?        Ss   09:44   0:00 pure-ftpd (SERVER)
root        928  0.0  0.0 572372   980 ?        Ssl  09:44   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    930  0.0  0.0  10132    48 ?        Ssl  09:44   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    932  0.0  1.4 5654048 35980 ?       SLsl 09:44   0:22 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    934  0.0  0.0  11348    40 ?        Ssl  09:44   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        936  0.0  0.0  51508   540 ?        Ss   09:44   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.1  47256  3520 ?        S    09:44   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  48672  4596 ?        S    09:44   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   420 ?        S    09:44   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   444 ?        S    09:44   0:00  \_ dovecot/log
dovenull   1084  0.0  0.1  47396  3704 ?        S    09:44   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  48740  4552 ?        S    09:44   0:00  \_ dovecot/imap-login
root       1091  0.0  0.1  24564  2596 ?        S    09:44   0:00  \_ dovecot/config
dovecot    1092  0.0  0.0  13568   616 ?        S    09:44   0:00  \_ dovecot/stats
dovecot    1154  0.0  0.0  41172  1536 ?        S    09:44   0:01  \_ dovecot/auth
systuser    937  0.0  0.0 113932    72 ?        Ssl  09:44   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        938  0.0  0.0 111304   448 ?        Ss   09:44   0:05 /usr/sbin/sshd -D
root      80765  0.0  0.1 111304  4260 ?        Ss   21:26   0:00  \_ sshd: [accepted]
root      80994  0.3  0.2 162436  5828 ?        Ss   21:26   0:00  \_ sshd: root [priv]
sshd      80995  0.0  0.1 115644  2632 ?        S    21:26   0:00  |   \_ sshd: root [net]
root      80996  0.0  0.2 157100  5068 ?        Ss   21:26   0:00  \_ sshd: unknown [priv]
sshd      80997  0.0  0.1 115644  2628 ?        S    21:26   0:00  |   \_ sshd: unknown [net]
root      81004  1.0  0.2 162436  5824 ?        Ss   21:26   0:00  \_ sshd: root [priv]
sshd      81005  0.0  0.1 115644  2624 ?        S    21:26   0:00      \_ sshd: root [net]
memcach+    940  0.0  0.0 342400     0 ?        Ssl  09:44   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        941  0.0  0.0 445028     0 ?        Ss   09:44   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    942  0.0  0.5 114016 14400 ?        Ssl  09:44   0:09 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    946  0.0  0.0 111864    76 ?        Ssl  09:44   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        952  0.0  0.0 385496  1260 ?        Ss   09:44   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
oyotech+  81012  0.5  0.2 385844  6572 ?        S    21:26   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
root        971  0.0  0.1 436392  4200 ?        Ss   09:44   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        979  0.0  0.0 386112   664 ?        Ss   09:44   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        985  0.0  0.0 392856   648 ?        Ss   09:44   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        986  0.0  0.2 261436  7152 ?        Ss   09:44   0:10 cpsrvd (SSL) - waiting for connections                   
root      81017  0.0  0.0      0     0 ?        Z    21:27   0:00  \_ [cpaneld - servi] <defunct>
root        988  0.0  0.1 397344  3240 ?        Ss   09:44   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   80903  0.9  0.4 399832 10244 ?        S    21:26   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  81020 29.0  2.9 531620 71208 ?        S    21:27   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        992  0.0  3.7 1763112 90824 ?       Ssl  09:44   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
named       999  0.0  1.6 711664 39068 ?        Ssl  09:44   0:21 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1007  0.0  0.2 331088  6316 ?        Ssl  09:44   0:11 /usr/sbin/rsyslogd -n
cpanelc+   1016  0.0  0.1  10540  3620 ?        Ss   09:44   0:34 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
wp-tool+   1155  0.0  0.5 387528 13324 ?        Ss   09:44   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1158  0.0  1.5 410452 36980 ?        Ss   09:44   0:34 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1175  0.0  1.7 248140 41172 ?        Ss   09:44   0:07 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6595  0.0  4.3 275092 104552 ?       S    09:51   0:05  \_ spamd child
root       6596  0.0  3.6 261032 87792 ?        S    09:51   0:00  \_ spamd child
systuser   1193  0.0  0.1 157700  2904 ?        S    09:44   0:00 SonarPush 0.6.12 [sleeping]
root       1260  0.0  0.4 209428 10560 ?        Ss   09:44   0:03 tailwatchd
root       1266  0.0  0.2 183900  6448 ?        Ss   09:44   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1267  0.0  0.0 167452  1328 ?        Ss   09:44   0:00 dnsadmin - dormant mode
root       1677  0.0  0.0 299272   768 ?        Ss   09:44   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1706  0.0  0.0 130416  1396 ?        SN   09:44   0:00 cpanellogd - sleeping for logs
mysql      1750  1.3 11.9 1478216 289536 ?      Sl   09:44   9:46 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1994  0.0  0.3 267016  8468 ?        Ss   09:45   0:02 /usr/sbin/httpd -k start
root       2017  0.0  0.0  12752   384 ?        S    09:45   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2018  0.0  0.0  12732   324 ?        S    09:45   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2019  0.0  0.0  12756   388 ?        S    09:45   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2047  0.0  0.0  53268   128 ?        S    09:45   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    34597  0.1  0.8 277732 21472 ?        S    19:58   0:05  \_ /usr/sbin/httpd -k start
nobody    44873  0.1  0.8 277720 21332 ?        S    20:19   0:04  \_ /usr/sbin/httpd -k start
nobody    72341  0.0  0.8 277808 20584 ?        S    21:11   0:00  \_ /usr/sbin/httpd -k start
nobody    72342  0.1  0.8 277940 20608 ?        S    21:11   0:01  \_ /usr/sbin/httpd -k start
nobody    72343  0.1  0.8 277808 20408 ?        S    21:11   0:00  \_ /usr/sbin/httpd -k start
nobody    72344  0.1  0.8 277940 20340 ?        S    21:11   0:01  \_ /usr/sbin/httpd -k start
nobody    72439  0.0  0.8 277932 20360 ?        S    21:11   0:00  \_ /usr/sbin/httpd -k start
nobody    74637  0.1  0.8 277924 20208 ?        S    21:15   0:00  \_ /usr/sbin/httpd -k start
nobody    76841  0.1  0.8 277800 19820 ?        S    21:19   0:00  \_ /usr/sbin/httpd -k start
nobody    78066  0.1  0.8 277800 19868 ?        S    21:21   0:00  \_ /usr/sbin/httpd -k start
nobody    78530  0.0  0.8 277936 19704 ?        S    21:22   0:00  \_ /usr/sbin/httpd -k start
nobody    78531  0.1  0.8 277796 19740 ?        S    21:22   0:00  \_ /usr/sbin/httpd -k start
nobody    80162  0.0  0.8 277932 19460 ?        S    21:25   0:00  \_ /usr/sbin/httpd -k start
root       2243  0.0  0.5 184944 14152 ?        Ss   09:45   0:39 lfd - sleeping
oysipao+  11471  0.0  0.0   3148   416 ?        Ss   10:00   0:00 [kworker]
oysipao+  11472  0.0  0.0   3152   492 ?        S    10:00   0:00  \_ [kworker]
root      65764  0.0  0.4 1275844 10332 ?       Ssl  21:00   0:00 /usr/bin/cspdaemon
root      65799  0.0  0.4 1277312 11712 ?       Ssl  21:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 42126  Threads: 4  Questions: 3298880  Slow queries: 0  Opens: 12727  Flush tables: 1  Open tables: 2000  Queries per second avg: 78.309
*************************** 1. row ***************************
     Id: 47657
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 47661
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `oyo_official_polling_unit` WHERE `pu_code`='30/02/05/002accreditationhasendedvotingab
*************************** 3. row ***************************
     Id: 47664
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 4. row ***************************
     Id: 47671
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Query
   Time: 0
  State: statistics
   Info: SELECT option_name, option_value FROM wpjt_options WHERE autoload IN ( 'yes', 'on', 'auto-on', 'auto
*************************** 5. row ***************************
     Id: 47672
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.222.174.57 TIME_WAIT
      1 114.119.154.41 TIME_WAIT
      1 138.226.99.107 TIME_WAIT
      1 15.235.96.224 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 173.252.82.17 TIME_WAIT
      1 192.110.213.58 TIME_WAIT
      1 ::1 TIME_WAIT
      1 66.249.70.33 TIME_WAIT
      1 66.249.70.39 TIME_WAIT
      1 84.37.24.157 TIME_WAIT
      1 84.37.242.182 TIME_WAIT
      1 98.84.1.175 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.172 TIME_WAIT
      2 20.186.232.151 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 10-Nov-2025 21:27:02 WAT
   Restart Time: Monday, 10-Nov-2025 09:45:02 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 11 hours 41 minutes 59 seconds
   Server load: 0.20 0.19 0.24
   Total accesses: 133122 - Total Traffic: 3.0 GB - Total Duration: 61449979
   CPU Usage: u13.08 s6.72 cu1628.39 cs1208.84 - 6.78% CPU load
   3.16 requests/sec - 75.0 kB/second - 23.7 kB/request - 461.607 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

_KWK.K..KW_._.._CK..W...........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur   Conn  Child  Slot      Client      Protocol            VHost                                        Request
   0-0  78066 0/85/8202   _ 2.16  0     0   3688968 0.0   2.07  195.09 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   1-0  80162 2/24/8435   K 0.41  3     274 3805087 65.4  0.46  190.49 66.249.70.35    http/1.1 support.cloudware.ng:443    GET /?c=2133809389 HTTP/1.1
   2-0  76841 0/96/8022   W 2.51  0     0   3621561 0.0   2.43  190.01 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   3-0  74637 1/149/8055  K 3.55  2     258 3562619 34.1  3.42  177.19 66.249.70.37    http/1.1 support.cloudware.ng:443    GET /?c=3466388426 HTTP/1.1
   4-0  -     0/0/8199    . 0.00  173   0   3794056 0.0   0.00  185.57 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   5-0  44873 3/803/7436  K 20.25 0     323 3418959 97.0  19.98 182.75 66.249.70.36    http/1.1 support.cloudware.ng:443    GET /?c=2399209854 HTTP/1.1
   6-0  -     0/0/7603    . 0.00  281   0   3510898 0.0   0.00  181.63 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   7-0  -     0/0/7067    . 0.00  272   0   3191703 0.0   0.00  158.75 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   8-0  34597 3/1119/7270 K 26.18 0     315 3744192 97.7  24.58 168.11 66.249.70.38    http/1.1 support.cloudware.ng:443    GET /?c=1624280357 HTTP/1.1
   9-0  78530 0/55/6717   W 0.69  0     0   2831246 0.0   0.78  153.03 62.146.238.82   http/1.1 covid-19.oyostate.gov.ng:80 GET /ALFA_DATA/alfacgiapi/c99.php HTTP/1.1
   10-0 78531 0/73/6607   _ 1.41  0     28  2932582 0.0   1.41  151.71 173.199.190.172 http/1.1 health.oyostate.gov.ng:443  POST /wp-cron.php?doing_wp_cron=1762806421.96812891960144042968
   11-0 -     0/0/5661    . 0.00  925   0   2621730 0.0   0.00  129.62 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   12-0 72439 0/168/5777  _ 3.49  0     17  2517615 0.0   4.89  134.89 62.146.238.82   http/1.1 covid-19.oyostate.gov.ng:80 GET /ALFA_DATA/alfacgiapi/alfa.php HTTP/1.1
   13-0 -     0/0/5509    . 0.00  900   0   2528190 0.0   0.00  125.95 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   14-0 -     0/0/4136    . 0.00  945   0   1919453 0.0   0.00  100.53 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   15-0 72341 0/175/4359  _ 3.83  0     11  1943546 0.0   4.78  98.05  62.146.238.82   http/1.1 covid-19.oyostate.gov.ng:80 GET /alfacgiapi/perl.alfa HTTP/1.1
   16-0 72342 1/194/4203  C 5.04  0     34  1961274 9.3   5.39  94.68  98.83.94.113    http/1.1 nigeriadecide.org:443       GET /polling_unit_category.php/images/blog/assets/css/blog/blog
   17-0 72343 9/180/2246  K 4.28  1     303 1132028 281.6 5.47  60.33  66.249.70.33    http/1.1 support.cloudware.ng:443    GET /?c=986586588 HTTP/1.1
   18-0 -     0/0/4275    . 0.00  944   0   2105333 0.0   0.00  107.97 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   19-0 -     0/0/2124    . 0.00  943   0   1063171 0.0   0.00  46.51  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   20-0 72344 0/203/1763  W 4.47  0     0   804275  0.0   5.38  40.04  45.39.85.161    http/1.1 health.oyostate.gov.ng:443  GET /portfolio/oysphcb-recruitment-about-16000-candidates-begin
   21-0 -     0/0/779     . 0.00  284   0   442730  0.0   0.00  18.05  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   22-0 -     0/0/1252    . 0.00  5820  0   573638  0.0   0.00  34.39  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   23-0 -     0/0/726     . 0.00  6229  0   316473  0.0   0.00  12.76  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   24-0 -     0/0/343     . 0.00  6233  0   214774  0.0   0.00  6.89   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   25-0 -     0/0/1056    . 0.00  6234  0   407697  0.0   0.00  22.00  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   26-0 -     0/0/1557    . 0.00  5259  0   638586  0.0   0.00  29.92  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   27-0 -     0/0/906     . 0.00  4222  0   505208  0.0   0.00  21.20  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   28-0 -     0/0/197     . 0.00  23008 0   103642  0.0   0.00  5.34   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   29-0 -     0/0/5       . 0.00  23912 0   7828    0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-0 -     0/0/6       . 0.00  23914 0   3214    0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   31-0 -     0/0/9       . 0.00  23916 0   9074    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   32-0 -     0/0/5       . 0.00  23930 0   12312   0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   33-0 -     0/0/7       . 0.00  23929 0   11260   0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   34-0 -     0/0/198     . 0.00  22976 0   107367  0.0   0.00  4.83   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   35-0 -     0/0/4       . 0.00  23928 0   11424   0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   36-0 -     0/0/7       . 0.00  23936 0   7452    0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 -     0/0/4       . 0.00  23931 0   9120    0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   38-0 -     0/0/761     . 0.00  20058 0   375432  0.0   0.00  22.14  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   39-0 -     0/0/5       . 0.00  23908 0   9470    0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   40-0 -     0/0/61      . 0.00  23926 0   36919   0.0   0.00  1.62   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/111     . 0.00  23924 0   54684   0.0   0.00  2.46   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/211     . 0.00  22921 0   108349  0.0   0.00  5.24   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/4       . 0.00  23927 0   9746    0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/491     . 0.00  23857 0   281109  0.0   0.00  9.62   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/7       . 0.00  39739 0   14062   0.0   0.00  0.16   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   46-0 -     0/0/3       . 0.00  39762 0   11309   0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   47-0 -     0/0/131     . 0.00  38871 0   184067  0.0   0.00  2.95   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   48-0 -     0/0/4       . 0.00  39749 0   12719   0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   49-0 -     0/0/1       . 0.00  39798 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   50-0 -     0/0/1       . 0.00  39791 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   51-0 -     0/0/1       . 0.00  39796 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   52-0 -     0/0/3       . 0.00  39759 0   33      0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   53-0 -     0/0/4       . 0.00  39757 4   4250    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   54-0 -     0/0/1       . 0.00  39793 0   1       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   55-0 -     0/0/3       . 0.00  39772 0   1257    0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   56-0 -     0/0/3       . 0.00  39761 0   962     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   57-0 -     0/0/2       . 0.00  39777 0   10772   0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   58-0 -     0/0/2       . 0.00  39771 0   615     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   59-0 -     0/0/1       . 0.00  39801 3   4       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   60-0 -     0/0/1       . 0.00  39797 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   61-0 -     0/0/52      . 0.00  39531 0   37149   0.0   0.00  1.24   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   62-0 -     0/0/2       . 0.00  39773 0   18      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   63-0 -     0/0/4       . 0.00  39750 0   1118    0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   64-0 -     0/0/1       . 0.00  39799 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   65-0 -     0/0/5       . 0.00  39746 0   1359    0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   66-0 -     0/0/1       . 0.00  39794 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   67-0 -     0/0/2       . 0.00  39787 0   1939    0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   68-0 -     0/0/6       . 0.00  39740 0   3137    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   69-0 -     0/0/1       . 0.00  39778 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   70-0 -     0/0/6       . 0.00  39755 0   4135    0.0   0.00  0.15   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   71-0 -     0/0/1       . 0.00  39792 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   72-0 -     0/0/2       . 0.00  39775 0   12402   0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   73-0 -     0/0/5       . 0.00  39737 0   693     0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   74-0 -     0/0/1       . 0.00  39800 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   75-0 -     0/0/1       . 0.00  39795 0   0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   76-0 -     0/0/8       . 0.00  39736 0   1269    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   77-0 -     0/0/441     . 0.00  38060 0   158222  0.0   0.00  9.02   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   78-0 -     0/0/44      . 0.00  39532 0   32451   0.0   0.00  0.96   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 645
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 5 seconds, (range: 0...68)
   index usage: 11%, cache usage: 15%
   total entries stored since starting: 97608
   total entries replaced since starting: 0
   total entries expired since starting: 96913
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 64 hit, 336 miss
   total removes since starting: 50 hit, 197 miss
Youez - 2016 - github.com/yon3zu
LinuXploit