403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.48
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-12-25.08.39.txt
 ## mem threshold exceeded
 ## swap threshold exceeded
## server overview
2025-12-25.08.39 load[8] mem[86/39] mysql[10/47] httpd[64]
              total        used        free      shared  buff/cache   available
Mem:           2363        1955         100          55         307         173
Swap:          4047        1658        2389
 08:39:03 up 31 days, 11:27,  0 users,  load average: 8.22, 3.60, 2.02
## system overview
top - 08:39:03 up 31 days, 11:27,  0 users,  load average: 8.22, 3.60, 2.02
Tasks: 255 total,  11 running, 242 sleeping,   0 stopped,   2 zombie
%Cpu(s): 73.5 us, 26.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    70924 free,  2008536 used,   340840 buff/cache
KiB Swap:  4145144 total,  2446788 free,  1698356 used.   171048 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 13043 mysql     20   0 1490420 310564   1420 S  68.8 12.8 529:39.14 /usr/sbin+
    36 root      20   0       0      0      0 R  18.8  0.0  52:41.71 [kswapd0]
 45421 healtho+  20   0  476544  83460   3944 R  18.8  3.4   0:07.22 php-fpm: +
 45460 healtho+  20   0  484736  91296   3744 R  18.8  3.8   0:02.66 php-fpm: +
 45422 healtho+  20   0  473984  81364   3948 R  12.5  3.4   0:06.94 php-fpm: +
 45433 healtho+  20   0  486784  93692   3944 R  12.5  3.9   0:04.91 php-fpm: +
 45475 healtho+  20   0  476032  82972   3916 R  12.5  3.4   0:02.00 php-fpm: +
 45525 root      20   0  169872  16852   2880 D  12.5  0.7   0:00.11 /usr/loca+
 45574 cloudw    20   0  285996  14428   9392 R   6.2  0.6   0:00.02 /opt/cpan+
 45583 root      20   0  160220   2324   1588 R   6.2  0.1   0:00.01 top -bcn1
     1 root      20   0  192272   3408   1452 S   0.0  0.1  74:10.09 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.56 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   5:12.07 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   1:35.73 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0  47:57.70 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:07.78 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:07.72 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   1:49.36 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   7:02.76 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.97 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.20 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:05.22 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   0:49.03 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   6:25.76 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   5:24.64 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   3:02.25 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39500   5316   5060 S   0.0  0.2  23:23.51 /usr/lib/+
   383 root      20   0   45352      8      4 S   0.0  0.0   0:00.45 /usr/lib/+
   412 root      16  -4   55532    232    112 S   0.0  0.0   3:29.61 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    316    228 S   0.0  0.0   1:08.32 /usr/sbin+
   489 root      20   0   24896   1156    784 S   0.0  0.0  11:53.05 /usr/lib/+
   494 polkitd   20   0  610664    976    464 S   0.0  0.0   6:39.30 /usr/lib/+
   496 root      20   0   52852    228    136 S   0.0  0.0   0:00.42 /usr/sbin+
   497 root      20   0  152780     64     20 S   0.0  0.0   0:03.44 /usr/sbin+
   503 dbus      20   0   58748   1364    600 S   0.0  0.1  26:11.53 /usr/bin/+
   511 rpc       20   0   69256     60      0 S   0.0  0.0   0:02.80 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208     20      0 S   0.0  0.0   0:00.07 /usr/sbin+
   558 root      20   0  124508    424    292 S   0.0  0.0   1:26.89 /usr/sbin+
   576 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   2:47.24 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:13.00 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   927 root      20   0   51628    368    192 S   0.0  0.0   0:35.28 /usr/sbin+
   928 systuser  20   0   11540     52      0 S   0.0  0.0   0:01.51 /usr/loca+
   929 systuser  20   0   12756     60      0 S   0.0  0.0   0:01.47 /usr/loca+
   931 systuser  20   0  112524     68      0 S   0.0  0.0   0:01.43 /usr/loca+
   932 systuser  20   0  111608     68      0 S   0.0  0.0   0:01.38 /usr/loca+
   933 root      20   0  153404    144     60 S   0.0  0.0   1:08.76 pure-ftpd+
   935 root      20   0  572372    712    280 S   0.0  0.0   4:11.74 /usr/bin/+
   937 root      20   0  111304    284    176 S   0.0  0.0   5:07.08 /usr/sbin+
   939 root      20   0 1350728   6780      4 S   0.0  0.3   1:52.83 /usr/bin/+
   952 root      20   0  261164   5456    760 S   0.0  0.2   9:25.08 cpsrvd (S+
   953 root      20   0  331088   5996   5132 S   0.0  0.2  12:23.10 /usr/sbin+
   972 memcach+  20   0  342400      0      0 S   0.0  0.0   1:05.79 /usr/bin/+
   974 root      20   0 1277312   2484      4 S   0.0  0.1   0:34.87 /usr/bin/+
   980 systuser  20   0  114272   9312      0 S   0.0  0.4  13:26.63 /usr/loca+
  1055 dovecot   20   0   10320    404    284 S   0.0  0.0   0:10.54 dovecot/a+
  1144 systuser  20   0  157704   2124    132 S   0.0  0.1   0:14.33 SonarPush+
  1188 named     20   0 1185868  30872    656 S   0.0  1.3   7:03.24 /usr/sbin+
  1239 root      20   0  167452   1028    480 S   0.0  0.0   0:45.46 dnsadmin +
  1243 root      20   0  209296  18552   1052 S   0.0  0.8   5:53.73 tailwatchd
  1244 root      20   0  183900   3792    560 S   0.0  0.2   4:52.17 cpdavd - +
 15361 oysipao+  20   0    3148      4      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3156     36      0 S   0.0  0.0   1:08.89 [kworker]
 21255 nobody    20   0  278068  20320   3880 S   0.0  0.8   0:02.96 /usr/sbin+
 26395 root      30  10  132964      4      0 S   0.0  0.0   0:00.00 ConfigSer+
 26409 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 197+
 26701 nobody    20   0  277916  19800   3752 S   0.0  0.8   0:02.35 /usr/sbin+
 27569 nobody    20   0  277980  20312   4152 S   0.0  0.8   0:02.53 /usr/sbin+
 29287 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 32430 nobody    20   0  277948  19912   3992 S   0.0  0.8   0:01.89 /usr/sbin+
 32433 nobody    20   0  277956  19960   4200 S   0.0  0.8   0:01.92 /usr/sbin+
 33677 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 35862 root      20   0  182988  11024    996 S   0.0  0.5   0:33.48 lfd - sle+
 36680 nobody    20   0  277876  18608   3484 S   0.0  0.8   0:01.15 /usr/sbin+
 36681 nobody    20   0  278232  19016   3764 S   0.0  0.8   0:01.31 /usr/sbin+
 37379 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 38137 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 40587 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 41129 nobody    20   0  277988  18308   3304 S   0.0  0.8   0:00.52 /usr/sbin+
 41558 nobody    20   0  277904  18476   3188 S   0.0  0.8   0:00.49 /usr/sbin+
 42459 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 42468 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 42753 nobody    20   0  277804  18160   3844 S   0.0  0.8   0:00.36 /usr/sbin+
 42758 nobody    20   0  277924  18160   3412 S   0.0  0.8   0:00.36 /usr/sbin+
 42759 nobody    20   0  277860  18140   3272 S   0.0  0.7   0:00.36 /usr/sbin+
 43764 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 44460 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 44726 nobody    20   0  277780  17840   3376 S   0.0  0.7   0:00.07 /usr/sbin+
 44783 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 44912 root      20   0   60820   1272    284 S   0.0  0.1   0:00.00 dovecot/l+
 45037 nobody    20   0  277648  16888   3028 S   0.0  0.7   0:00.08 /usr/sbin+
 45038 nobody    20   0  277800  17708   3628 S   0.0  0.7   0:00.03 /usr/sbin+
 45043 nobody    20   0  277648  16764   2964 S   0.0  0.7   0:00.01 /usr/sbin+
 45044 nobody    20   0  277704  17088   3200 S   0.0  0.7   0:00.02 /usr/sbin+
 45046 nobody    20   0  277648  16764   2936 S   0.0  0.7   0:00.01 /usr/sbin+
 45048 nobody    20   0  277704  17136   3240 S   0.0  0.7   0:00.02 /usr/sbin+
 45049 nobody    20   0  277648  16756   2936 S   0.0  0.7   0:00.02 /usr/sbin+
 45050 nobody    20   0  277704  17344   3452 S   0.0  0.7   0:00.02 /usr/sbin+
 45051 nobody    20   0  277776  17380   3392 S   0.0  0.7   0:00.02 /usr/sbin+
 45052 nobody    20   0  277832  17256   3224 S   0.0  0.7   0:00.03 /usr/sbin+
 45054 nobody    20   0  277704  17412   3516 S   0.0  0.7   0:00.02 /usr/sbin+
 45062 nobody    20   0  277832  17184   3144 S   0.0  0.7   0:00.02 /usr/sbin+
 45063 nobody    20   0  277704  17112   3104 S   0.0  0.7   0:00.03 /usr/sbin+
 45065 nobody    20   0  277648  17432   3220 S   0.0  0.7   0:00.03 /usr/sbin+
 45066 nobody    20   0  277832  17352   3280 S   0.0  0.7   0:00.02 /usr/sbin+
 45067 nobody    20   0  277648  16644   2820 S   0.0  0.7   0:00.01 /usr/sbin+
 45068 nobody    20   0  277636  16700   2988 S   0.0  0.7   0:00.01 /usr/sbin+
 45069 nobody    20   0  277772  17104   3200 S   0.0  0.7   0:00.02 /usr/sbin+
 45070 nobody    20   0  277704  17024   3120 S   0.0  0.7   0:00.02 /usr/sbin+
 45071 nobody    20   0  277704  16972   2948 S   0.0  0.7   0:00.03 /usr/sbin+
 45073 nobody    20   0  277784  17360   3336 S   0.0  0.7   0:00.04 /usr/sbin+
 45074 nobody    20   0  277648  16736   2864 S   0.0  0.7   0:00.10 /usr/sbin+
 45075 nobody    20   0  277784  16996   2936 S   0.0  0.7   0:00.04 /usr/sbin+
 45076 nobody    20   0  277648  16016   2092 S   0.0  0.7   0:00.07 /usr/sbin+
 45077 nobody    20   0  277648  16972   3188 S   0.0  0.7   0:00.02 /usr/sbin+
 45081 nobody    20   0  277832  17220   3216 S   0.0  0.7   0:00.02 /usr/sbin+
 45082 nobody    20   0  277648  16856   3060 S   0.0  0.7   0:00.02 /usr/sbin+
 45083 nobody    20   0  277648  16584   2808 S   0.0  0.7   0:00.02 /usr/sbin+
 45084 nobody    20   0  277704  17200   3284 S   0.0  0.7   0:00.02 /usr/sbin+
 45085 nobody    20   0  277832  17552   3508 S   0.0  0.7   0:00.02 /usr/sbin+
 45086 nobody    20   0  277704  17396   3488 S   0.0  0.7   0:00.02 /usr/sbin+
 45087 nobody    20   0  277648  16844   3048 S   0.0  0.7   0:00.01 /usr/sbin+
 45088 nobody    20   0  277704  17328   3420 S   0.0  0.7   0:00.03 /usr/sbin+
 45089 nobody    20   0  277648  16848   3048 S   0.0  0.7   0:00.01 /usr/sbin+
 45090 nobody    20   0  277780  17628   3584 S   0.0  0.7   0:00.03 /usr/sbin+
 45091 nobody    20   0  277648  16856   3064 S   0.0  0.7   0:00.03 /usr/sbin+
 45092 nobody    20   0  277704  17316   3428 S   0.0  0.7   0:00.02 /usr/sbin+
 45093 nobody    20   0  277664  17152   3228 S   0.0  0.7   0:00.02 /usr/sbin+
 45094 nobody    20   0  277648  16856   3056 S   0.0  0.7   0:00.02 /usr/sbin+
 45095 nobody    20   0  277648  16760   2984 S   0.0  0.7   0:00.02 /usr/sbin+
 45098 nobody    20   0  277780  17600   3504 S   0.0  0.7   0:00.03 /usr/sbin+
 45099 nobody    20   0  277648  17144   3212 S   0.0  0.7   0:00.02 /usr/sbin+
 45100 nobody    20   0  277704  17192   3276 S   0.0  0.7   0:00.02 /usr/sbin+
 45101 nobody    20   0  277700  17360   3464 S   0.0  0.7   0:00.02 /usr/sbin+
 45102 nobody    20   0  277648  17128   3200 S   0.0  0.7   0:00.02 /usr/sbin+
 45103 nobody    20   0  277648  17144   3216 S   0.0  0.7   0:00.02 /usr/sbin+
 45104 nobody    20   0  277792  15992   1896 S   0.0  0.7   0:00.02 /usr/sbin+
 45107 nobody    20   0  277648  16736   2956 S   0.0  0.7   0:00.03 /usr/sbin+
 45108 nobody    20   0  277664  15604   1736 S   0.0  0.6   0:00.02 /usr/sbin+
 45109 nobody    20   0  277652  17200   3328 S   0.0  0.7   0:00.03 /usr/sbin+
 45110 nobody    20   0  277648  16756   2976 S   0.0  0.7   0:00.02 /usr/sbin+
 45111 nobody    20   0  277648  16756   2988 S   0.0  0.7   0:00.02 /usr/sbin+
 45113 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 45290 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 45293 root      20   0   41052   1660   1004 S   0.0  0.1   0:00.00 dovecot/a+
 45364 nigeria   20   0  401512   8356   4660 S   0.0  0.3   0:00.06 php-fpm: +
 45448 root      20   0       0      0      0 Z   0.0  0.0   0:00.02 [webmaild+
 45452 wp-tool+  20   0  445028    200     68 S   0.0  0.0   0:00.00 sw-engine+
 45457 wp-tool+  20   0  445028    204     72 S   0.0  0.0   0:00.00 sw-engine+
 45458 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 45465 nigeria   20   0  400584   8276   4552 S   0.0  0.3   0:00.02 php-fpm: +
 45482 nobody    20   0  277512  16632   2980 S   0.0  0.7   0:00.00 /usr/sbin+
 45488 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45490 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45492 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45493 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45494 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45495 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45496 root      20   0  183076   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45498 root      20   0  183076   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45499 root      20   0  183076   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45501 root      20   0  183076   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45503 worencom  20   0  400460   2600   1404 S   0.0  0.1   0:00.00 php-fpm: +
 45506 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 45508 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 45510 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 45511 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 45513 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 45515 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 45516 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 45517 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 45518 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 45520 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 45522 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 45526 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 45538 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 45539 nigeria   20   0  404052  16092  10336 S   0.0  0.7   0:00.03 /opt/cpan+
 45541 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 45544 pactpay   20   0  480124  17632  11836 S   0.0  0.7   0:00.02 /opt/cpan+
 45568 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 45569 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 45570 cloudsms  20   0  404052  15612  10164 S   0.0  0.6   0:00.01 /opt/cpan+
 45587 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 45588 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 45589 cloudsms  20   0  164396   3920   2804 R   0.0  0.2   0:00.00 /opt/cpan+
 45590 root      20   0  169872  16852   2880 R   0.0  0.7   0:00.00 /usr/loca+
 59651 root      20   0  248744 117976    824 S   0.0  4.9   0:04.61 /usr/loca+
 63230 root      20   0  266560 130892    620 S   0.0  5.4   0:03.00 spamd chi+
 63231 root      20   0  248744 117500    392 S   0.0  4.9   0:00.01 spamd chi+
 72712 root      20   0  445028    528    412 S   0.0  0.0   1:39.37 sw-engine+
 72887 wp-tool+  20   0  412396   3312   1236 S   0.0  0.1   8:40.14 /usr/bin/+
 72891 wp-tool+  20   0  387556   1876      0 S   0.0  0.1   0:14.16 /usr/bin/+
 81125 root      20   0  400740   1340    604 S   0.0  0.1   1:32.72 php-fpm: +
 81130 root      20   0  388892    216    128 S   0.0  0.0   0:15.94 php-fpm: +
 81135 root      20   0  396248    184    100 S   0.0  0.0   0:15.95 php-fpm: +
 81140 root      20   0  389508    340    240 S   0.0  0.0   0:16.98 php-fpm: +
 81145 root      20   0  439788    232    140 S   0.0  0.0   0:16.67 php-fpm: +
 85330 telegraf  20   0 5654308  24316     72 S   0.0  1.0  17:04.34 /usr/loca+
 90141 dovenull  20   0   47292   1364    564 S   0.0  0.1   0:01.91 dovecot/p+
 90142 dovenull  20   0   49068   1572    200 S   0.0  0.1   0:01.98 dovecot/i+
 90143 root      20   0   10452    492    300 S   0.0  0.0   0:01.50 dovecot/l+
 90144 dovenull  20   0   47344   1356    532 S   0.0  0.1   0:02.77 dovecot/p+
 90145 dovenull  20   0   48916   1488    288 S   0.0  0.1   0:01.55 dovecot/i+
 90146 root      20   0   24564   1840    292 S   0.0  0.1   0:00.71 dovecot/c+
 90147 dovecot   20   0   13568    436    232 S   0.0  0.0   0:00.32 dovecot/s+
 90148 dovecot   20   0   41300   1056    528 S   0.0  0.0   0:03.75 dovecot/a+
 90150 root      20   0   12768    268    144 S   0.0  0.0   0:11.50 /usr/loca+
 90151 root      20   0   12732    192    112 S   0.0  0.0   0:09.45 /usr/loca+
 90152 root      20   0   12776    288    160 S   0.0  0.0   0:10.80 /usr/loca+
 90156 root      20   0   53340      4      4 S   0.0  0.0   0:00.04 /usr/loca+
 91745 root      20   0  224392   4192    456 S   0.0  0.2   0:06.08 queueproc+
 91974 mailnull  20   0   89116   3124    156 S   0.0  0.1   0:11.08 /usr/sbin+
 92390 cpanelc+  20   0   10748   3596   2128 S   0.0  0.1   5:41.57 /usr/loca+
 92394 root      38  18  130416   1200    504 S   0.0  0.0   0:01.31 cpanellog+
 92408 nscd      20   0 1353052   1620    112 S   0.0  0.1   1:49.13 /usr/sbin+
 92476 root      20   0  299272    316    132 S   0.0  0.0   0:17.05 php-fpm: +
 95329 root      20   0 1556324 157492     36 S   0.0  6.5  11:01.51 /usr/loca+
100237 root      20   0  267328   6316    364 S   0.0  0.3   1:18.96 /usr/sbin+
101822 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov23   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov23   5:12  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov23   1:35  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov23  47:57  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov23   0:07  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov23   0:07  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov23   1:49  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov23   7:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov23  52:41  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov23   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov23   0:05  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S    Nov23   0:49  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   Nov23   6:25  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov23   5:24  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    Nov23   3:02  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<   Nov23   2:47  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    Nov23   0:13  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root     101822  0.0  0.0      0     0 ?        S    06:37   0:00  \_ [kworker/u200:1]
root      29287  0.0  0.0      0     0 ?        S    07:55   0:00  \_ [kworker/0:4]
root      33677  0.0  0.0      0     0 ?        S    08:06   0:00  \_ [kworker/1:4]
root      37379  0.0  0.0      0     0 ?        S    08:16   0:00  \_ [kworker/1:3]
root      38137  0.0  0.0      0     0 ?        S    08:18   0:00  \_ [kworker/0:2]
root      40587  0.0  0.0      0     0 ?        S    08:25   0:00  \_ [kworker/1:0]
root      42459  0.0  0.0      0     0 ?        S    08:30   0:00  \_ [kworker/u200:2]
root      42468  0.0  0.0      0     0 ?        S    08:30   0:00  \_ [kworker/0:1]
root      43764  0.0  0.0      0     0 ?        S    08:34   0:00  \_ [kworker/0:3]
root      44460  0.0  0.0      0     0 ?        S    08:36   0:00  \_ [kworker/1:1]
root      44783  0.0  0.0      0     0 ?        S    08:37   0:00  \_ [kworker/1:2]
root      45113  0.0  0.0      0     0 ?        S    08:37   0:00  \_ [kworker/u200:0]
root      45290  0.0  0.0      0     0 ?        S    08:38   0:00  \_ [kworker/u200:3]
root          1  0.1  0.1 192272  3408 ?        Ss   Nov23  74:10 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  39500  5316 ?        Ss   Nov23  23:23 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352     8 ?        Ss   Nov23   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   232 ?        S<sl Nov23   3:29 /sbin/auditd
root        487  0.0  0.0  21540   316 ?        Ss   Nov23   1:08 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24896  1156 ?        Ss   Nov23  11:53 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610664   976 ?        Ssl  Nov23   6:39 /usr/lib/polkit-1/polkitd --no-debug
root        496  0.0  0.0  52852   228 ?        Ss   Nov23   0:00 /usr/sbin/smartd -n -q never
root        497  0.0  0.0 152780    64 ?        Ss   Nov23   0:03 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        503  0.0  0.0  58748  1364 ?        Ss   Nov23  26:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256    60 ?        Ss   Nov23   0:02 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov23   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208     0 ?        Ssl  Nov23   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208    20 ?        Ss   Nov23   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124508   424 ?        Ss   Nov23   1:26 /usr/sbin/crond -n
root      45488  0.0  0.0 183076  2144 ?        S    08:39   0:00  \_ /usr/sbin/CROND -n
root      45516  0.0  0.0 113284  1212 ?        Ss   08:39   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      45522  0.0  0.0 108052   360 ?        S    08:39   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      45526  0.0  0.0 113288  1520 ?        S    08:39   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      45591  0.0  0.0 153840  2092 ?        R    08:39   0:00  |               \_ ps auxf
root      45490  0.0  0.0 183076  2144 ?        S    08:39   0:00  \_ /usr/sbin/CROND -n
root      45515  0.0  0.0  20164   804 ?        Ss   08:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      45492  0.0  0.0 183076  2144 ?        S    08:39   0:00  \_ /usr/sbin/CROND -n
root      45518  0.0  0.0  20164   984 ?        Ss   08:39   0:00  |   \_ jailshell (cloudsms) [45568] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  45568  0.0  0.0  20164   260 ?        S    08:39   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  45569  0.0  0.0 113284  1208 ?        S    08:39   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  45570  0.0  0.6 404052 15612 ?        S    08:39   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      45493  0.0  0.0 183076  2144 ?        S    08:39   0:00  \_ /usr/sbin/CROND -n
root      45510  0.0  0.0  20164   984 ?        Ss   08:39   0:00  |   \_ jailshell (cloudsms) [45587] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  45587  0.0  0.0  20164   260 ?        S    08:39   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  45588  0.0  0.0 113284  1212 ?        S    08:39   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  45589  0.0  0.6 404052 15084 ?        R    08:39   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue.php
root      45494  0.0  0.0 183076  2144 ?        S    08:39   0:00  \_ /usr/sbin/CROND -n
root      45511  0.0  0.0  20164   808 ?        Ss   08:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      45495  0.0  0.0 183076  2144 ?        S    08:39   0:00  \_ /usr/sbin/CROND -n
root      45506  0.0  0.0  20164   808 ?        Ss   08:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      45496  0.0  0.0 183076  2140 ?        S    08:39   0:00  \_ /usr/sbin/CROND -n
root      45508  0.0  0.0  20164   988 ?        Ss   08:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      45498  0.0  0.0 183076  2140 ?        S    08:39   0:00  \_ /usr/sbin/CROND -n
root      45517  0.0  0.0 113284  1212 ?        Ss   08:39   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      45525 11.0  0.6 169872 16852 ?        S    08:39   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      45590  0.0  0.0 113496  1428 ?        S    08:39   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      45593  0.0  0.0  18276  2248 ?        R    08:39   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      45499  0.0  0.0 183076  2136 ?        S    08:39   0:00  \_ /usr/sbin/CROND -n
root      45520  0.0  0.0  20164   968 ?        Ss   08:39   0:00  |   \_ jailshell (pactpay) [45541] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   45541  0.0  0.0  20164   264 ?        S    08:39   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   45544  2.0  0.7 480124 17632 ?        S    08:39   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      45501  0.0  0.0 183076  2136 ?        S    08:39   0:00  \_ /usr/sbin/CROND -n
root      45513  0.0  0.0  20164   964 ?        Ss   08:39   0:00      \_ jailshell (nigeria) [45538] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   45538  0.0  0.0  20164   256 ?        S    08:39   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   45539  3.0  0.6 404052 16092 ?        S    08:39   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        576  0.0  0.0 108296     4 tty1     Ss+  Nov23   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704     0 ttyS0    Ss+  Nov23   0:00 /bin/bash
root        927  0.0  0.0  51628   368 ?        Ss   Nov23   0:35 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1055  0.0  0.0  10320   404 ?        S    Nov23   0:10  \_ dovecot/anvil
dovenull  90141  0.0  0.0  47292  1364 ?        S    Dec24   0:01  \_ dovecot/pop3-login
dovenull  90142  0.0  0.0  49068  1572 ?        S    Dec24   0:01  \_ dovecot/imap-login
root      90143  0.0  0.0  10452   492 ?        S    Dec24   0:01  \_ dovecot/log
dovenull  90144  0.0  0.0  47344  1356 ?        S    Dec24   0:02  \_ dovecot/pop3-login
dovenull  90145  0.0  0.0  48916  1488 ?        S    Dec24   0:01  \_ dovecot/imap-login
root      90146  0.0  0.0  24564  1840 ?        S    Dec24   0:00  \_ dovecot/config
dovecot   90147  0.0  0.0  13568   436 ?        S    Dec24   0:00  \_ dovecot/stats
dovecot   90148  0.0  0.0  41300  1056 ?        S    Dec24   0:03  \_ dovecot/auth
root      44912  0.0  0.0  60820  1272 ?        S    08:37   0:00  \_ dovecot/lmtp
root      45293  0.0  0.0  41052  1660 ?        S    08:38   0:00  \_ dovecot/auth -w
systuser    928  0.0  0.0  11540    52 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756    60 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524    68 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608    68 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        933  0.0  0.0 153404   144 ?        Ss   Nov23   1:08 pure-ftpd (SERVER)
root        935  0.0  0.0 572372   712 ?        Ssl  Nov23   4:11 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        937  0.0  0.0 111304   284 ?        Ss   Nov23   5:07 /usr/sbin/sshd -D
root        939  0.0  0.2 1350728 6780 ?        Ssl  Nov23   1:52 /usr/bin/cspdaemon
root        952  0.0  0.2 261164  5456 ?        Ss   Nov23   9:25 cpsrvd (SSL) - waiting for connections                   
root      45448  0.1  0.0      0     0 ?        Z    08:38   0:00  \_ [webmaild - serv] <defunct>
root      45458  0.0  0.0      0     0 ?        Z    08:38   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.2 331088  5996 ?        Ssl  Nov23  12:23 /usr/sbin/rsyslogd -n
memcach+    972  0.0  0.0 342400     0 ?        Ssl  Nov23   1:05 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.1 1277312 2484 ?        Ssl  Nov23   0:34 /usr/bin/checkstatus
systuser    980  0.0  0.3 114272  9312 ?        Ssl  Nov23  13:26 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser   1144  0.0  0.0 157704  2124 ?        S    Nov23   0:14 SonarPush 0.6.12 [sleeping]
root       1239  0.0  0.0 167452  1028 ?        Ss   Nov23   0:45 dnsadmin - dormant mode
root       1243  0.0  0.7 209296 18552 ?        Ss   Nov23   5:53 tailwatchd
root       1244  0.0  0.1 183900  3792 ?        Ss   Nov23   4:52 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
oysipao+  15361  0.0  0.0   3148     4 ?        Ss   Nov23   0:00 [kworker]
oysipao+  15368  0.0  0.0   3156    36 ?        S    Nov23   1:08  \_ [kworker]
mysql     13043  1.7 12.8 1490420 310528 ?      Sl   Dec04 529:39 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
telegraf  85330  0.0  1.0 5654308 24316 ?       SLsl Dec04  17:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root      95329  0.0  6.4 1556324 156604 ?      Ssl  Dec09  11:01 /usr/local/cpanel/3rdparty/bin/clamd -F
root      72712  0.0  0.0 445028   528 ?        Ss   Dec09   1:39 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  45452  0.0  0.0 445028   200 ?        S    08:38   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  45457  0.0  0.0 445028   204 ?        S    08:38   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  72887  0.0  0.1 412396  3312 ?        Ss   Dec09   8:40 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+  72891  0.0  0.0 387556  1876 ?        Ss   Dec09   0:14 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root     100237  0.0  0.2 267328  6316 ?        Ss   Dec09   1:18 /usr/sbin/httpd -k start
root      90150  0.0  0.0  12768   268 ?        S    Dec24   0:11  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      90151  0.0  0.0  12732   192 ?        S    Dec24   0:09  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      90152  0.0  0.0  12776   288 ?        S    Dec24   0:10  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      90156  0.0  0.0  53340     4 ?        S    Dec24   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    21255  0.0  0.8 278068 20320 ?        S    07:35   0:02  \_ /usr/sbin/httpd -k start
nobody    26701  0.0  0.8 277916 19800 ?        S    07:48   0:02  \_ /usr/sbin/httpd -k start
nobody    27569  0.0  0.8 277980 20312 ?        S    07:50   0:02  \_ /usr/sbin/httpd -k start
nobody    32430  0.0  0.8 277948 19912 ?        S    08:02   0:01  \_ /usr/sbin/httpd -k start
nobody    32433  0.0  0.8 277956 19960 ?        S    08:02   0:01  \_ /usr/sbin/httpd -k start
nobody    36680  0.0  0.7 277876 18872 ?        S    08:14   0:01  \_ /usr/sbin/httpd -k start
nobody    36681  0.0  0.7 278232 19016 ?        S    08:14   0:01  \_ /usr/sbin/httpd -k start
nobody    41129  0.0  0.7 277988 18308 ?        S    08:26   0:00  \_ /usr/sbin/httpd -k start
nobody    41558  0.0  0.7 277904 18476 ?        S    08:27   0:00  \_ /usr/sbin/httpd -k start
nobody    42753  0.0  0.7 277804 18160 ?        S    08:31   0:00  \_ /usr/sbin/httpd -k start
nobody    42758  0.0  0.7 277924 18160 ?        S    08:31   0:00  \_ /usr/sbin/httpd -k start
nobody    42759  0.0  0.7 277860 18140 ?        S    08:31   0:00  \_ /usr/sbin/httpd -k start
nobody    44726  0.0  0.7 277780 17840 ?        S    08:36   0:00  \_ /usr/sbin/httpd -k start
nobody    45037  0.1  0.6 277648 16888 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45038  0.0  0.7 277800 17708 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45043  0.0  0.6 277648 16764 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45044  0.0  0.7 277704 17088 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45046  0.0  0.6 277648 16764 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45048  0.0  0.7 277704 17136 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45049  0.0  0.6 277648 16756 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45050  0.0  0.7 277704 17344 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45051  0.0  0.7 277776 17380 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45052  0.0  0.7 277832 17256 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45054  0.0  0.7 277704 17412 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45062  0.0  0.7 277832 17184 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45063  0.0  0.7 277704 17112 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45065  0.0  0.7 277648 17432 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45066  0.0  0.7 277832 17352 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45067  0.0  0.6 277648 16644 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45068  0.0  0.6 277636 16700 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45069  0.0  0.7 277772 17104 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45070  0.0  0.7 277704 17024 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45071  0.0  0.7 277704 16972 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45073  0.0  0.7 277784 17360 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45074  0.1  0.6 277648 16736 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45075  0.0  0.7 277784 16996 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45076  0.0  0.6 277648 16016 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45077  0.0  0.7 277648 16972 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45081  0.0  0.7 277832 17220 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45082  0.0  0.6 277648 16856 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45083  0.0  0.6 277648 16584 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45084  0.0  0.7 277704 17200 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45085  0.0  0.7 277832 17552 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45086  0.0  0.7 277704 17396 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45087  0.0  0.6 277648 16844 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45088  0.0  0.7 277704 17328 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45089  0.0  0.6 277648 16848 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45090  0.0  0.7 277780 17628 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45091  0.0  0.6 277648 16856 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45092  0.0  0.7 277704 17316 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45093  0.0  0.7 277664 17152 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45094  0.0  0.6 277648 16856 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45095  0.0  0.6 277648 16760 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45098  0.0  0.7 277780 17600 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
cloudw    45574  0.0  0.6 353712 15972 ?        S    08:39   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    45099  0.0  0.7 277648 17144 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45100  0.0  0.7 277704 17192 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45101  0.0  0.7 277700 17360 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45102  0.0  0.7 277648 17128 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45103  0.0  0.7 277648 17144 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45104  0.0  0.6 277792 15992 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45107  0.0  0.6 277648 16736 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45108  0.0  0.6 277664 15604 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45109  0.0  0.7 277652 17200 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45110  0.0  0.6 277648 16756 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45111  0.0  0.6 277648 16756 ?        S    08:37   0:00  \_ /usr/sbin/httpd -k start
nobody    45482  0.0  0.6 277512 16632 ?        S    08:39   0:00  \_ /usr/sbin/httpd -k start
named      1188  0.0  1.2 1185868 30872 ?       Ssl  Dec17   7:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root      81125  0.0  0.0 400740  1340 ?        Ss   Dec19   1:32 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   45364  0.1  0.3 401512  8356 ?        S    08:38   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  45421 36.2  3.4 476544 83460 ?        R    08:38   0:07  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  45422 34.8  3.3 473984 81364 ?        D    08:38   0:06  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  45433 32.8  3.8 486784 93692 ?        R    08:38   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  45460 29.7  3.7 484736 91296 ?        R    08:38   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   45465  0.2  0.3 400584  8276 ?        S    08:38   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  45475 40.4  3.4 476032 82972 ?        R    08:38   0:02  \_ php-fpm: pool health_oyostate_gov_ng
worencom  45503  0.0  0.1 400460  2600 ?        S    08:39   0:00  \_ php-fpm: pool woren_com_ng
root      81130  0.0  0.0 388892   216 ?        Ss   Dec19   0:15 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root      81135  0.0  0.0 396248   184 ?        Ss   Dec19   0:15 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root      81140  0.0  0.0 389508   340 ?        Ss   Dec19   0:16 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root      81145  0.0  0.0 439788   232 ?        Ss   Dec19   0:16 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root      91745  0.0  0.1 224392  4192 ?        Ss   Dec20   0:06 queueprocd - waiting up to 60s to process a task
mailnull  91974  0.0  0.1  89116  3124 ?        Ss   Dec20   0:11 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
cpanelc+  92390  0.0  0.1  10748  3596 ?        Ss   Dec20   5:41 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root      92394  0.0  0.0 130416  1200 ?        SN   Dec20   0:01 cpanellogd - sleeping for logs
nscd      92408  0.0  0.0 1353052 1620 ?        Ssl  Dec20   1:49 /usr/sbin/nscd
root      92476  0.0  0.0 299272   316 ?        Ss   Dec20   0:17 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root      35862  0.1  0.4 182988 11024 ?        Ss   00:00   0:33 lfd - sleeping
root      26395  0.0  0.0 132964     4 ?        SN   03:35   0:00 ConfigServer Version Check
root      26409  0.0  0.0 108056     0 ?        SN   03:35   0:00  \_ sleep 19789
root      59651  0.0  4.8 248744 117976 ?       Ss   04:47   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      63230  0.0  5.4 266560 130892 ?       S    04:57   0:03  \_ spamd child
root      63231  0.0  4.8 248744 117500 ?       S    04:57   0:00  \_ spamd child
## mysql stats
Uptime: 1786437  Threads: 10  Questions: 196709733  Slow queries: 0  Opens: 442958  Flush tables: 1  Open tables: 2000  Queries per second avg: 110.112
*************************** 1. row ***************************
     Id: 3106735
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 3106736
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 3106738
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 3106744
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 3106750
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 3106751
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 7. row ***************************
     Id: 3106755
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 10.30.9.138 TIME_WAIT
      1 104.210.140.131 TIME_WAIT
      1 104.210.140.134 TIME_WAIT
      1 114.119.132.104 TIME_WAIT
      1 114.119.150.37 TIME_WAIT
      1 142.44.228.98 TIME_WAIT
      1 148.113.128.175 TIME_WAIT
      1 15.235.96.254 TIME_WAIT
      1 ::1 TIME_WAIT
      1 47.128.114.57 TIME_WAIT
      1 47.128.22.173 TIME_WAIT
      1 47.128.40.179 TIME_WAIT
      1 47.128.50.60 TIME_WAIT
      1 47.128.57.226 TIME_WAIT
      1 47.128.97.20 TIME_WAIT
      1 51.161.65.123 TIME_WAIT
      1 51.222.95.62 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 4.217.183.253 TIME_WAIT
      5 167.172.83.48 TIME_WAIT
     10 165.22.103.242 TIME_WAIT
    204 78.141.192.81 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.66 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Dec 8 2025 14:42:54
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 25-Dec-2025 08:39:04 WAT
   Restart Time: Tuesday, 09-Dec-2025 04:48:00 WAT
   Parent Server Config. Generation: 11
   Parent Server MPM Generation: 10
   Server uptime: 16 days 3 hours 51 minutes 3 seconds
   Server load: 8.92 3.82 2.10
   Total accesses: 3828116 - Total Traffic: 35.6 GB - Total Duration: 1451919683
   CPU Usage: u24.06 s72.32 cu25615.2 cs16489.6 - 3.02% CPU load
   2.74 requests/sec - 26.7 kB/second - 9.8 kB/request - 379.278 ms/request
   64 requests currently being processed, 0 workers gracefully restarting, 2 idle workers

W_WWWWKWWWWWWWWWWW.RWWWWW.W._W.WWWRWWR.WWWKW.WWWWWWWWRWWWWWW..KW
WWWWR..WRWWW....................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

    Srv   PID      Acc      M CPU    SS    Req     Dur    Conn Child   Slot      Client      Protocol            VHost                                         Request
   0-10  41558 0/159/275574 W 1.84 8      0     100066282 0.0  3.17  2701.34 78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /localhost.rar HTTP/1.1
   1-10  27569 0/898/261634 _ 5.48 0      11103 95645274  0.0  6.54  2454.86 165.22.103.242  http/1.1 health.oyostate.gov.ng:443   POST //xmlrpc.php HTTP/1.1
   2-10  21255 0/997/255417 W 6.72 8      0     92137759  0.0  7.68  2490.33 78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /localhost.7z HTTP/1.1
   3-10  42753 0/110/252422 W 1.26 8      0     91415358  0.0  0.98  2445.89 78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /local.rar HTTP/1.1
   4-10  41129 0/177/236418 W 1.50 2      11116 87128685  0.0  2.21  2168.16 103.59.160.46   http/1.1 health.oyostate.gov.ng:443   GET /wp-includes/Requests/ HTTP/1.1
   5-10  44726 0/20/235220  W 0.38 11     0     86207610  0.0  0.62  2336.69 78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /js.rar HTTP/1.1
   6-10  32430 2/612/224553 K 5.35 2      60    79743828  1.4  4.90  2256.76 66.249.73.1     http/1.1 woren.com.ng:80              GET / HTTP/1.1
   7-10  45482 0/0/214272   W 0.00 2      0     76759329  0.0  0.00  2024.79 78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /my.rar HTTP/1.1
   8-10  42758 0/111/207596 W 0.43 10     0     75952701  0.0  1.25  1979.39 78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /js.tar.gz HTTP/1.1
   9-10  45037 0/53/190658  W 0.08 8      0     70955819  0.0  0.34  1819.31 78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /local.zip HTTP/1.1
   10-10 36680 0/451/182500 W 2.68 0      0     67523498  0.0  3.35  1680.18 165.22.103.242  http/1.1 health.oyostate.gov.ng:443   POST //xmlrpc.php HTTP/1.1
   11-10 36681 0/502/161565 W 2.53 0      0     60173346  0.0  3.01  1506.25 167.172.83.48   http/1.1 health.oyostate.gov.ng:443   POST //xmlrpc.php HTTP/1.1
   12-10 26701 0/773/157335 W 7.42 1      0     59633466  0.0  6.23  1473.61 78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /mysql.7z HTTP/1.1
   13-10 42759 0/116/141694 W 1.03 12     0     53444455  0.0  1.23  1320.02 78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /joomla.tar HTTP/1.1
   14-10 32433 0/634/124677 W 4.91 8      0     49597362  0.0  4.50  1280.07 78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /local.tar.gz HTTP/1.1
   15-10 45038 0/10/100275  W 0.38 0      0     40052475  0.0  0.59  914.88  ::1             http/1.1 chs1.nescrow.com.ng:80       GET //whm-server-status HTTP/1.0
   16-10 45043 0/5/82808    W 0.01 9      0     32484347  0.0  0.53  728.64  78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /local.7z HTTP/1.1
   17-10 45044 0/6/71029    W 0.01 7      0     30074437  0.0  0.54  731.42  78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /localhost.tar HTTP/1.1
   18-10 -     0/0/55258    . 0.00 73     3688  24051463  0.0  0.00  504.26  78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /2016.7z HTTP/1.1
   19-10 45046 0/4/47979    R 0.01 21     10549 20390672  0.0  0.42  498.44  47.128.22.173   http/1.1
   20-10 45048 0/7/47906    W 0.02 5      0     19734061  0.0  0.44  447.48  78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /master.tar HTTP/1.1
   21-10 45049 0/6/29241    W 0.01 6      0     11433656  0.0  0.53  253.47  78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /log.tar HTTP/1.1
   22-10 45050 0/6/22635    W 0.02 1      0     9269614   0.0  0.53  204.10  165.22.103.242  http/1.1 health.oyostate.gov.ng:443   POST //xmlrpc.php HTTP/1.1
   23-10 45051 0/6/27668    W 0.02 10     0     12184208  0.0  0.43  265.81  78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /js.zip HTTP/1.1
   24-10 45052 0/8/19289    W 0.01 6      0     9000682   0.0  0.44  174.23  78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /log.tar.gz HTTP/1.1
   25-10 -     0/0/17251    . 0.00 66     5     8434186   0.0  0.00  159.76  ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   26-10 45054 0/6/14904    W 0.02 0      0     7289199   0.0  0.53  131.24  78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /mysql.tar HTTP/1.1
   27-10 -     0/0/11791    . 0.00 71     4642  5323450   0.0  0.00  91.38   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /2014.tar HTTP/1.1
   28-10 45062 0/6/9631     _ 0.02 0      10667 4459685   0.0  0.44  91.67   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /joomla.zip HTTP/1.1
   29-10 45063 0/7/11353    W 0.03 9      0     4416707   0.0  0.34  104.99  78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /jsp.zip HTTP/1.1
   30-10 -     0/0/7779     . 0.00 45     0     3726794   0.0  0.00  61.01   ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   31-10 45065 0/6/4966     W 0.02 9      0     2577461   0.0  0.33  52.01   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /jsp.tar.gz HTTP/1.1
   32-10 45066 0/7/5709     W 0.02 3      0     2836271   0.0  0.45  48.87   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /members.7z HTTP/1.1
   33-10 45067 0/4/4915     W 0.01 9      0     2355845   0.0  0.42  34.26   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /jsp.tar HTTP/1.1
   34-10 45068 0/3/3552     R 0.01 21     11154 2826512   0.0  0.22  28.28   47.128.57.226   http/1.1
   35-10 45069 0/5/5139     W 0.35 7      0     3132191   0.0  0.33  52.68   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /log.rar HTTP/1.1
   36-10 45070 0/5/7530     W 0.02 11     0     3428695   0.0  0.33  71.00   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /js.tar HTTP/1.1
   37-10 45071 0/5/4883     R 0.06 21     11005 1449048   0.0  0.33  57.45   47.128.57.226   http/1.1
   38-10 -     0/0/6428     . 0.00 58     2     2363989   0.0  0.00  57.86   ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   39-10 45073 0/6/6609     W 0.07 10     0     2398465   0.0  0.34  72.31   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /jsp.7z HTTP/1.1
   40-10 45074 0/52/8988    W 0.10 7      0     4290560   0.0  0.23  111.28  78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /localhost.tar.gz HTTP/1.1
   41-10 45075 0/7/2693     W 0.06 10     0     1347715   0.0  0.44  30.92   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /jsp.rar HTTP/1.1
   42-10 45076 16/17/2292   K 0.56 4      352   1271228   11.6 0.12  32.72   216.73.216.10   http/1.1 newwebsite.cloudware.ng:443  GET /2431595780.shtml HTTP/1.1
   43-10 45077 0/4/2489     W 0.02 11     0     1206966   0.0  0.32  25.75   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /joomla.tar.gz HTTP/1.1
   44-10 -     0/0/3881     . 0.00 72     23    1135730   0.0  0.00  28.38   52.3.127.170    http/1.1 nigeriadecide.org:443        GET /polling_unit_category.php/images/blog/images/blog/blog/ima
   45-10 45081 0/5/1620     W 0.02 5      0     893076    0.0  0.43  14.87   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /master.zip HTTP/1.1
   46-10 45082 0/4/3510     W 0.02 7      0     1436784   0.0  0.42  25.22   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /localhost.zip HTTP/1.1
   47-10 45083 0/4/1337     W 0.01 6      0     913080    0.0  0.42  14.56   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /log.zip HTTP/1.1
   48-10 45084 0/6/2013     W 0.02 3      0     873946    0.0  0.44  13.37   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /members.tar.gz HTTP/1.1
   49-10 45085 0/5/889      W 0.02 5      0     575404    0.0  0.43  7.41    78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /master.tar.gz HTTP/1.1
   50-10 45086 0/5/1892     W 0.01 4      0     956799    0.0  0.43  18.67   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /media.rar HTTP/1.1
   51-10 45087 0/4/2290     W 0.01 5      0     1246894   0.0  0.42  11.62   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /media.7z HTTP/1.1
   52-10 45088 0/5/2962     W 0.02 6      0     1254112   0.0  0.43  24.71   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /master.7z HTTP/1.1
   53-10 45089 0/4/2297     R 0.01 7      10611 1072162   0.0  0.42  23.42   47.128.114.57   http/1.1
   54-10 45090 0/7/551      W 0.02 1      0     459817    0.0  0.37  4.59    78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /mysql.rar HTTP/1.1
   55-10 45091 0/4/2471     W 0.02 6      0     870772    0.0  0.42  16.42   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /master.rar HTTP/1.1
   56-10 45092 0/5/654      W 0.02 2      0     662674    0.0  0.43  5.60    78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /my.tar HTTP/1.1
   57-10 45093 0/6/2137     W 0.02 3      0     1063253   0.0  0.43  17.30   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /media.tar.gz HTTP/1.1
   58-10 45094 0/4/1454     W 0.02 7      0     653757    0.0  0.42  8.50    78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /log.7z HTTP/1.1
   59-10 45095 0/4/724      W 0.02 3      0     624495    0.0  0.42  5.69    78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /media.zip HTTP/1.1
   60-10 -     0/0/1234     . 0.00 38     0     481196    0.0  0.00  7.19    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   61-10 -     0/0/1628     . 0.00 70     0     545821    0.0  0.00  15.68   ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   62-10 45098 2/8/1595     K 0.03 0      701   710350    5.8  0.34  15.01   216.73.216.10   http/1.1 ourprojects.cloudware.ng:443 GET /1855274325.shtml HTTP/1.1
   63-10 45099 0/5/1000     W 0.02 3      0     812712    0.0  0.43  8.33    78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /members.tar HTTP/1.1
   64-10 45100 0/5/361      W 0.01 4      0     453499    0.0  0.43  4.06    78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /media.tar HTTP/1.1
   65-10 45101 0/5/830      W 0.02 11     0     606413    0.0  0.32  8.98    78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /js.7z HTTP/1.1
   66-10 45102 0/5/1022     W 0.02 3      0     521669    0.0  0.43  6.71    78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /members.rar HTTP/1.1
   67-10 45103 0/5/1864     W 0.02 2      0     971307    0.0  0.43  20.82   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /my.7z HTTP/1.1
   68-10 45104 0/2/286      R 0.10 36     25356 378479    0.0  0.13  1.81    47.128.97.20    http/1.1
   69-10 -     0/0/1340     . 0.00 69     0     1037635   0.0  0.00  9.76    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   70-10 -     0/0/800      . 0.00 68     1     354937    0.0  0.00  5.77    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   71-10 45107 0/4/3604     W 0.02 3      0     1324632   0.0  0.42  30.19   78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /members.zip HTTP/1.1
   72-10 45108 0/2/1482     R 0.01 36     25083 714812    0.0  0.11  18.58   47.128.50.60    http/1.1
   73-10 45109 0/7/551      W 0.03 8      0     408200    0.0  0.34  3.48    78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /local.tar HTTP/1.1
   74-10 45110 0/4/297      W 0.02 2      0     370503    0.0  0.42  1.39    78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /my.tar.gz HTTP/1.1
   75-10 45111 0/4/433      W 0.02 2      0     303418    0.0  0.42  2.09    78.141.192.81   http/1.1 health.oyostate.gov.ng:443   GET /my.zip HTTP/1.1
   76-9  -     0/0/396      . 0.00 113601 0     190319    0.0  0.00  2.19    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   77-9  -     0/0/270      . 0.00 113555 0     428682    0.0  0.00  0.92    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   78-9  -     0/0/170      . 0.00 113603 0     84047     0.0  0.00  0.33    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   79-9  -     0/0/193      . 0.00 113552 0     87255     0.0  0.00  0.46    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   80-9  -     0/0/1222     . 0.00 113558 0     363220    0.0  0.00  8.63    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   81-9  -     0/0/344      . 0.00 113600 0     220614    0.0  0.00  1.91    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   82-9  -     0/0/139      . 0.00 113597 0     148192    0.0  0.00  0.51    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   83-9  -     0/0/794      . 0.00 113559 0     426406    0.0  0.00  4.61    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   84-9  -     0/0/224      . 0.00 113545 0     150302    0.0  0.00  1.14    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   85-9  -     0/0/370      . 0.00 112926 0     148219    0.0  0.00  3.79    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   86-9  -     0/0/248      . 0.00 113602 0     109889    0.0  0.00  1.93    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   87-9  -     0/0/908      . 0.00 113598 0     203989    0.0  0.00  4.43    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   88-9  -     0/0/288      . 0.00 113577 0     107861    0.0  0.00  0.99    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   89-9  -     0/0/699      . 0.00 113557 0     399629    0.0  0.00  17.74   ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   90-9  -     0/0/533      . 0.00 112934 0     189100    0.0  0.00  2.68    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   91-9  -     0/0/524      . 0.00 113599 0     202137    0.0  0.00  3.38    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   92-9  -     0/0/202      . 0.00 113604 0     143180    0.0  0.00  1.03    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   93-9  -     0/0/133      . 0.00 113640 0     96178     0.0  0.00  0.52    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   94-9  -     0/0/207      . 0.00 113643 0     138793    0.0  0.00  2.47    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   95-9  -     0/0/185      . 0.00 113580 0     153598    0.0  0.00  0.40    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   96-9  -     0/0/191      . 0.00 113575 0     55584     0.0  0.00  0.25    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   97-9  -     0/0/434      . 0.00 113578 0     113071    0.0  0.00  1.45    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   98-9  -     0/0/305      . 0.00 113579 0     108279    0.0  0.00  0.94    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   99-9  -     0/0/228      . 0.00 113606 0     158270    0.0  0.00  1.09    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   100-9 -     0/0/260      . 0.00 113553 0     60798     0.0  0.00  0.67    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   101-9 -     0/0/131      . 0.00 113556 0     139470    0.0  0.00  0.54    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   102-9 -     0/0/30       . 0.00 113576 4     55540     0.0  0.00  0.16    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   103-9 -     0/0/221      . 0.00 113567 0     87242     0.0  0.00  0.55    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   104-9 -     0/0/252      . 0.00 113608 0     45967     0.0  0.00  0.22    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   105-8 -     0/0/40       . 0.00 198764 4     48632     0.0  0.00  0.11    217.113.194.227 http/1.1 team.cloudware.ng:443        GET /var/cache/prod/pools/2wJoJAFabM/V/F/4PCeLMwG1wKTJRIoOuag H
   106-8 -     0/0/100      . 0.00 198792 0     74511     0.0  0.00  0.13    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   107-8 -     0/0/97       . 0.00 198764 620   63333     0.0  0.00  0.15    167.172.232.142 http/1.1 cloudware.ng:443             GET /info.php HTTP/1.1
   108-8 -     0/0/231      . 0.00 198764 1082  124807    0.0  0.00  0.93    167.172.232.142 http/1.1 cloudware.ng:443             GET /js/.DS_Store HTTP/1.1
   109-8 -     0/0/32       . 0.00 198764 1     72048     0.0  0.00  0.15    188.166.108.93  http/1.1 cloudware.ng:443             GET /font/.DS_Store HTTP/1.1
   110-8 -     0/0/182      . 0.00 198764 598   79080     0.0  0.00  0.68    188.166.108.93  http/1.1 cloudware.ng:443             GET /config.json HTTP/1.1
   111-8 -     0/0/23       . 0.00 198762 16    49619     0.0  0.00  0.06    185.34.33.2     http/1.1
   112-8 -     0/0/116      . 0.00 198794 0     39063     0.0  0.00  0.11    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   113-8 -     0/0/162      . 0.00 198764 0     59591     0.0  0.00  0.75    65.87.7.112     http/1.1 email.locationforms.net:80   POST /_next HTTP/1.1
   114-8 -     0/0/92       . 0.00 198764 26    67218     0.0  0.00  0.11    66.249.64.35    http/1.1 nigeriadecide.org:443        GET /polling_unit_category.php?state=Nasarawa&lga=Toto&ward=Gwa
   115-4 -     0/0/117      . 0.00 484945 6     65561     0.0  0.00  0.44    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   116-4 -     0/0/211      . 0.00 484973 0     79593     0.0  0.00  0.85    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   117-4 -     0/0/136      . 0.00 484938 0     48689     0.0  0.00  0.48    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   118-4 -     0/0/117      . 0.00 484883 0     86544     0.0  0.00  0.48    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   119-4 -     0/0/7        . 0.00 484897 0     242522    0.0  0.00  0.02    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   120-4 -     0/0/119      . 0.00 484959 0     59090     0.0  0.00  0.45    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   121-4 -     0/0/163      . 0.00 484909 0     67314     0.0  0.00  0.46    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   122-4 -     0/0/159      . 0.00 484895 0     33931     0.0  0.00  0.14    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   123-4 -     0/0/94       . 0.00 484906 0     96508     0.0  0.00  0.08    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   124-4 -     0/0/131      . 0.00 484929 0     49623     0.0  0.00  0.48    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   125-4 -     0/0/226      . 0.00 484951 0     46798     0.0  0.00  1.32    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   126-4 -     0/0/120      . 0.00 484856 0     61627     0.0  0.00  0.80    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   127-4 -     0/0/199      . 0.00 484919 0     44430     0.0  0.00  0.50    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   128-4 -     0/0/156      . 0.00 484918 0     91080     0.0  0.00  0.95    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   129-4 -     0/0/183      . 0.00 484952 0     14611     0.0  0.00  0.11    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   130-4 -     0/0/77       . 0.00 484936 0     30642     0.0  0.00  0.39    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   131-4 -     0/0/141      . 0.00 484916 0     63130     0.0  0.00  0.62    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   132-4 -     0/0/106      . 0.00 484949 0     61219     0.0  0.00  0.42    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   133-4 -     0/0/18       . 0.00 484953 0     597       0.0  0.00  0.01    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   134-4 -     0/0/114      . 0.00 484894 0     16133     0.0  0.00  0.11    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   135-4 -     0/0/10       . 0.00 484893 0     22940     0.0  0.00  0.07    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   136-4 -     0/0/5        . 0.00 484950 0     6057      0.0  0.00  0.00    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   137-2 -     0/0/222      . 0.00 805730 0     59782     0.0  0.00  0.83    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   138-2 -     0/0/109      . 0.00 805957 0     16220     0.0  0.00  0.07    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   139-2 -     0/0/160      . 0.00 805893 0     24902     0.0  0.00  0.24    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   140-2 -     0/0/9        . 0.00 805973 0     20410     0.0  0.00  0.03    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   141-2 -     0/0/104      . 0.00 805919 0     59137     0.0  0.00  0.42    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   142-2 -     0/0/107      . 0.00 805932 0     36089     0.0  0.00  0.41    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   143-2 -     0/0/86       . 0.00 805886 0     37015     0.0  0.00  0.55    ::1             http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 923
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 30 seconds, (range: 1...151)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 140412
   total entries replaced since starting: 0
   total entries expired since starting: 139241
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 5477 hit, 1960 miss
   total removes since starting: 248 hit, 353 miss
Youez - 2016 - github.com/yon3zu
LinuXploit