403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.48
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-12-19.02.00.txt
 ## swap threshold exceeded
## server overview
2025-12-19.02.00 load[0] mem[63/36] mysql[7/47] httpd[6]
              total        used        free      shared  buff/cache   available
Mem:           2363        1423          80          32         859         726
Swap:          4047        1626        2421
 02:00:02 up 25 days,  4:48,  0 users,  load average: 0.41, 0.36, 0.43
## system overview
top - 02:00:02 up 25 days,  4:48,  0 users,  load average: 0.41, 0.36, 0.43
Tasks: 225 total,   8 running, 216 sleeping,   0 stopped,   1 zombie
%Cpu(s): 75.8 us, 21.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,    85540 free,  1446588 used,   888172 buff/cache
KiB Swap:  4145144 total,  2480004 free,  1665140 used.   755248 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 26290 healtho+  20   0  461148  67936   4192 S  56.2  2.8   0:01.46 php-fpm: +
 13043 mysql     20   0 1487024 272244   4800 S  37.5 11.2 371:51.87 /usr/sbin+
 26283 healtho+  20   0  461148  67148   4200 R  25.0  2.8   0:01.38 php-fpm: +
 26610 root      20   0  228428  30756   3912 R  12.5  1.3   0:00.17 /usr/loca+
 26797 cloudsms  20   0  404052  15880  10224 R  12.5  0.7   0:00.02 /opt/cpan+
   359 root      20   0   40240   6532   6276 S   6.2  0.3  19:16.07 /usr/lib/+
 26794 root      20   0  160220   2064   1580 R   6.2  0.1   0:00.01 top -bcn1
     1 root      20   0  191864   3452   1512 S   0.0  0.1  58:33.84 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.49 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   4:42.66 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   1:28.81 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0  40:06.20 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:06.25 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:06.17 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   1:42.62 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   6:21.42 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.77 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.18 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0  44:18.32 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:04.14 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   0:41.42 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   5:21.67 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   4:32.87 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   2:31.66 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   383 root      20   0   45352      8      4 S   0.0  0.0   0:00.45 /usr/lib/+
   412 root      16  -4   55532    236    144 S   0.0  0.0   2:57.01 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    348    260 S   0.0  0.0   0:53.86 /usr/sbin+
   489 root      20   0   24896   1172    792 S   0.0  0.0   9:27.76 /usr/lib/+
   494 polkitd   20   0  610664    928    480 S   0.0  0.0   5:18.75 /usr/lib/+
   495 root      20   0  224416   3108    756 S   0.0  0.1   0:25.86 queueproc+
   496 root      20   0   52852    196    100 S   0.0  0.0   0:00.32 /usr/sbin+
   497 root      20   0  152780     80     36 S   0.0  0.0   0:02.79 /usr/sbin+
   503 dbus      20   0   58748   1360    600 S   0.0  0.1  20:54.78 /usr/bin/+
   506 nscd      20   0 1377672   2564    680 S   0.0  0.1  45:03.32 /usr/sbin+
   511 rpc       20   0   69256     60      0 S   0.0  0.0   0:02.22 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208     24      0 S   0.0  0.0   0:00.06 /usr/sbin+
   558 root      20   0  124508    428    296 S   0.0  0.0   1:08.87 /usr/sbin+
   576 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   621 mailnull  20   0   89120   3828    860 S   0.0  0.2   0:55.28 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   2:17.84 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:11.20 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   927 root      20   0   51628    472    304 S   0.0  0.0   0:28.12 /usr/sbin+
   928 systuser  20   0   11540     44      0 S   0.0  0.0   0:01.19 /usr/loca+
   929 systuser  20   0   12756     56      0 S   0.0  0.0   0:01.17 /usr/loca+
   931 systuser  20   0  112524     64      0 S   0.0  0.0   0:01.14 /usr/loca+
   932 systuser  20   0  111608     64      0 S   0.0  0.0   0:01.11 /usr/loca+
   933 root      20   0  153404    236    152 S   0.0  0.0   0:54.40 pure-ftpd+
   935 root      20   0  572372    752    248 S   0.0  0.0   3:20.10 /usr/bin/+
   937 root      20   0  111304    364    256 S   0.0  0.0   4:21.21 /usr/sbin+
   939 root      20   0 1350728   6396      8 S   0.0  0.3   1:28.13 /usr/bin/+
   952 root      20   0  261692   6552   1736 S   0.0  0.3   7:19.68 cpsrvd (S+
   953 root      20   0  339280   6868   6336 S   0.0  0.3  10:09.52 /usr/sbin+
   969 cpanelc+  20   0   10764   3536   2320 S   0.0  0.1  29:21.04 /usr/loca+
   972 memcach+  20   0  342400      0      0 S   0.0  0.0   0:52.28 /usr/bin/+
   974 root      20   0 1277312   2340      4 S   0.0  0.1   0:32.50 /usr/bin/+
   980 systuser  20   0  114016  10808   2880 S   0.0  0.4  10:38.95 /usr/loca+
  1055 dovecot   20   0   10320    248    140 S   0.0  0.0   0:08.64 dovecot/a+
  1144 systuser  20   0  157704   2880    916 S   0.0  0.1   0:11.52 SonarPush+
  1188 named     20   0 1185868  29600   1960 S   0.0  1.2   1:41.60 /usr/sbin+
  1239 root      20   0  167452   4208   2832 S   0.0  0.2   0:36.28 dnsadmin +
  1243 root      20   0  211908   9368   1892 S   0.0  0.4   4:51.29 tailwatchd
  1244 root      20   0  262224  24684   6768 S   0.0  1.0   3:36.71 cpdavd - +
  1676 root      38  18  130416   1380    692 S   0.0  0.1   0:06.17 cpanellog+
  2140 root      20   0  262480  86884   1244 S   0.0  3.6   0:03.77 spamd chi+
  7936 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
  9241 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 10519 nobody    20   0  277840  20288   4704 S   0.0  0.8   0:00.50 /usr/sbin+
 11657 root      20   0  248660   1560    372 S   0.0  0.1   0:00.02 spamd chi+
 13755 nobody    20   0  277764  20356   4544 S   0.0  0.8   0:00.38 /usr/sbin+
 15361 oysipao+  20   0    3148      4      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3156     36      0 S   0.0  0.0   0:55.46 [kworker]
 18994 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 20340 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 23953 nobody    20   0  277684  18144   3968 S   0.0  0.7   0:00.11 /usr/sbin+
 24104 nobody    20   0  277644  18088   3892 S   0.0  0.7   0:00.08 /usr/sbin+
 25629 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 25864 wp-tool+  20   0  445028    328    196 S   0.0  0.0   0:00.00 sw-engine+
 25883 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 25901 nigeria   20   0  402048  11892   5748 S   0.0  0.5   0:00.24 php-fpm: +
 26155 nigeria   20   0  400460   4508   2228 S   0.0  0.2   0:00.01 php-fpm: +
 26214 mailnull  20   0   89460   5696   2424 S   0.0  0.2   0:00.00 /usr/sbin+
 26319 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 26563 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26564 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26565 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26567 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26569 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26570 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26571 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26572 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26573 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26574 root      20   0  183080   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26577 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26578 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26579 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26581 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26582 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26583 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26585 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26586 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26587 root      20   0  183076   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26590 root      20   0  183076   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26614 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 26623 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 26624 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 26627 root      20   0  188228  11100   5148 S   0.0  0.5   0:00.03 /usr/loca+
 26628 root      20   0 1276956  14684    596 S   0.0  0.6   0:00.06 /usr/bin/+
 26629 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 26630 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 26631 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 26634 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 26635 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 26636 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26637 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26638 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 26639 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26640 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 26641 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26642 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 26644 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 26645 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26646 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 26647 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 26654 root      20   0 1277356  11540    596 S   0.0  0.5   0:00.06 /usr/bin/+
 26655 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 26656 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 26657 root      35  15  113288   1432   1240 S   0.0  0.1   0:00.00 /bin/bash+
 26663 root      20   0  113284   1464   1256 S   0.0  0.1   0:00.00 bash /usr+
 26666 nigeria   20   0  404052  16136  10380 S   0.0  0.7   0:00.04 /opt/cpan+
 26667 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 26679 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 26681 cloudw    20   0  287616  14624   9628 S   0.0  0.6   0:00.02 /opt/cpan+
 26683 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 26687 pactpay   20   0  480124  17672  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 26697 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 26704 cloudsms  20   0  404052  15352  10008 S   0.0  0.6   0:00.02 /opt/cpan+
 26705 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26708 root      20   0  160224   2400   1636 S   0.0  0.1   0:00.01 top -n 2 +
 26746 cloudw    20   0  408264  14164   3040 S   0.0  0.6   0:00.05 php-fpm: +
 26787 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 26792 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 26813 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 26814 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 26816 root      35  15  113288    196      0 R   0.0  0.0   0:00.00 /bin/bash+
 26817 cloudsms  20   0  113284    180      0 R   0.0  0.0   0:00.00 /usr/loca+
 26818 root      20   0  113284    208      0 R   0.0  0.0   0:00.00 bash /usr+
 43480 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [kworker/+
 50622 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 50994 nobody    20   0  277888  21592   4972 S   0.0  0.9   0:02.17 /usr/sbin+
 51909 root      20   0  183080    752    196 S   0.0  0.0   0:00.00 /usr/sbin+
 51944 root      20   0  113284    208     32 S   0.0  0.0   0:00.00 /bin/sh -+
 51991 root      20   0  108056    224    136 S   0.0  0.0   0:00.00 sleep 4h +
 52081 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 52146 nobody    20   0  277796  21156   4992 S   0.0  0.9   0:02.40 /usr/sbin+
 67662 nobody    20   0  277772  21340   5140 S   0.0  0.9   0:01.87 /usr/sbin+
 67687 nobody    20   0  277792  21464   5152 S   0.0  0.9   0:01.72 /usr/sbin+
 67708 nobody    20   0  278020  21380   5132 S   0.0  0.9   0:01.81 /usr/sbin+
 72706 root      20   0  299272    496    332 S   0.0  0.0   0:38.88 php-fpm: +
 72712 root      20   0  445028    596    480 S   0.0  0.0   0:58.17 sw-engine+
 72887 wp-tool+  20   0  412396   3600   1388 S   0.0  0.1   5:24.19 /usr/bin/+
 72891 wp-tool+  20   0  387556   3376   1416 S   0.0  0.1   0:09.01 /usr/bin/+
 77791 root      20   0  181480   8040   1112 S   0.0  0.3   0:06.86 lfd - sle+
 85330 telegraf  20   0 5654308  27980   6128 S   0.0  1.2  11:54.98 /usr/loca+
 85488 dovenull  20   0   49388   2540   1612 S   0.0  0.1   0:28.60 dovecot/p+
 85489 dovenull  20   0   52160   2472   1548 S   0.0  0.1   0:14.47 dovecot/i+
 85490 root      20   0   10452    612    420 S   0.0  0.0   0:15.84 dovecot/l+
 85491 dovenull  20   0   49468   2504   1552 S   0.0  0.1   0:21.16 dovecot/p+
 85492 dovenull  20   0   50900   2760   1684 S   0.0  0.1   0:19.21 dovecot/i+
 85493 root      20   0   24700   1768    472 S   0.0  0.1   0:07.28 dovecot/c+
 85494 dovecot   20   0   13700    500    336 S   0.0  0.0   0:03.44 dovecot/s+
 85495 dovecot   20   0   43012   2804   1012 S   0.0  0.1   0:37.44 dovecot/a+
 94553 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 95329 root      20   0 1556048 349352    608 S   0.0 14.4   8:18.16 /usr/loca+
 95628 nobody    20   0  277956  15376   4904 S   0.0  0.6   0:04.68 /usr/sbin+
 95809 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 99436 nobody    20   0  277736  20388   4660 S   0.0  0.8   0:00.80 /usr/sbin+
 99456 nobody    20   0  277948  20800   4868 S   0.0  0.9   0:00.98 /usr/sbin+
 99663 root      20   0  400740   1640    604 S   0.0  0.1   0:26.59 php-fpm: +
 99668 root      20   0  388892    536    444 S   0.0  0.0   0:02.81 php-fpm: +
 99673 root      20   0  396248    276    200 S   0.0  0.0   0:02.88 php-fpm: +
 99678 root      20   0  389508    416    324 S   0.0  0.0   0:02.99 php-fpm: +
 99683 root      20   0  439788    404    312 S   0.0  0.0   0:03.09 php-fpm: +
 99686 root      20   0   12860    340    212 S   0.0  0.0   0:08.59 /usr/loca+
 99687 root      20   0   12732    284    208 S   0.0  0.0   0:07.01 /usr/loca+
 99688 root      20   0   12908    348    216 S   0.0  0.0   0:07.83 /usr/loca+
 99689 root      20   0   53252      4      4 S   0.0  0.0   0:00.05 /usr/loca+
100237 root      20   0  267196   4732    472 S   0.0  0.2   0:51.08 /usr/sbin+
100402 root      20   0  248660   2676    528 S   0.0  0.1   0:13.47 /usr/loca+
102323 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov23   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov23   4:42  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov23   1:28  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov23  40:06  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov23   0:06  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov23   0:06  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov23   1:42  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov23   6:21  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov23  44:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov23   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov23   0:04  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S    Nov23   0:41  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   Nov23   5:21  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov23   4:32  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    Nov23   2:31  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<   Nov23   2:17  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    Nov23   0:11  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root      43480  0.0  0.0      0     0 ?        S    00:53   0:00  \_ [kworker/u200:1]
root      50622  0.0  0.0      0     0 ?        S    00:58   0:00  \_ [kworker/u200:0]
root      52081  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/1:3]
root      94553  0.0  0.0      0     0 ?        S    01:33   0:00  \_ [kworker/1:0]
root      95809  0.0  0.0      0     0 ?        S    01:34   0:00  \_ [kworker/0:2]
root     102323  0.0  0.0      0     0 ?        S    01:39   0:00  \_ [kworker/0:0]
root       7936  0.0  0.0      0     0 ?        S    01:45   0:00  \_ [kworker/0:1]
root       9241  0.0  0.0      0     0 ?        S    01:46   0:00  \_ [kworker/0:3]
root      18994  0.0  0.0      0     0 ?        S    01:54   0:00  \_ [kworker/1:1]
root      20340  0.0  0.0      0     0 ?        S    01:55   0:00  \_ [kworker/0:4]
root      26705  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/1:2]
root          1  0.1  0.1 191864  3452 ?        Ss   Nov23  58:33 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  40240  6532 ?        Ss   Nov23  19:16 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352     8 ?        Ss   Nov23   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   236 ?        S<sl Nov23   2:57 /sbin/auditd
root        487  0.0  0.0  21540   348 ?        Ss   Nov23   0:53 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24896  1172 ?        Ss   Nov23   9:27 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610664   928 ?        Ssl  Nov23   5:18 /usr/lib/polkit-1/polkitd --no-debug
root        495  0.0  0.1 224416  3108 ?        Ss   Nov23   0:25 queueprocd - waiting up to 60s to process a task
root        496  0.0  0.0  52852   196 ?        Ss   Nov23   0:00 /usr/sbin/smartd -n -q never
root        497  0.0  0.0 152780    80 ?        Ss   Nov23   0:02 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        503  0.0  0.0  58748  1360 ?        Ss   Nov23  20:54 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        506  0.1  0.1 1377672 2564 ?        Ssl  Nov23  45:03 /usr/sbin/nscd
rpc         511  0.0  0.0  69256    60 ?        Ss   Nov23   0:02 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov23   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208     0 ?        Ssl  Nov23   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208    24 ?        Ss   Nov23   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124508   428 ?        Ss   Nov23   1:08 /usr/sbin/crond -n
root      51909  0.0  0.0 183080   752 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      51944  0.0  0.0 113284   208 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      51991  0.0  0.0 108056   224 ?        S    01:00   0:00  |       \_ sleep 4h 36m
root      26563  0.0  0.0 183080  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26642  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      26654  6.0  0.4 1277356 11540 ?       Sl   02:00   0:00  |       \_ /usr/bin/update_imunify
root      26564  0.0  0.0 183080  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26624  0.0  0.0 113284  1208 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      26628  6.0  0.6 1276956 14684 ?       Sl   02:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      26565  0.0  0.0 183080  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26647  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      26657  0.0  0.0 113288  1432 ?        SN   02:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      26816  0.0  0.0 113256   944 ?        RN   02:00   0:00  |           \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      26567  0.0  0.0 183080  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26635  0.0  0.0 113284  1208 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      26663  0.0  0.0 113284  1464 ?        S    02:00   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      26569  0.0  0.0 183080  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26644  0.0  0.0 113284  1208 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      26656  0.0  0.0 108052   360 ?        S    02:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      26667  0.0  0.0 113288  1512 ?        S    02:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      26819  0.0  0.0 153840  2096 ?        R    02:00   0:00  |               \_ ps auxf
root      26570  0.0  0.0 183080  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26637  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      26571  0.0  0.0 183080  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26634  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      26572  0.0  0.0 183080  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26640  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      26573  0.0  0.0 183080  2144 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26638  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      26574  0.0  0.0 183080  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26639  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      26577  0.0  0.0 183076  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26630  0.0  0.0  20164   984 ?        Ss   02:00   0:00  |   \_ jailshell (cloudsms) [26787] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  26787  0.0  0.0  20164   260 ?        S    02:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  26792  0.0  0.0 113284  1212 ?        S    02:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  26797  0.0  0.6 404052 15880 ?        S    02:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue.php
root      26578  0.0  0.0 183076  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26646  0.0  0.0  20164   964 ?        Ss   02:00   0:00  |   \_ jailshell (cloudsms) [26683] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  26683  0.0  0.0  20164   260 ?        S    02:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  26697  0.0  0.0 113284  1212 ?        S    02:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  26704  2.0  0.6 404052 15352 ?        S    02:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      26579  0.0  0.0 183076  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26641  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      26581  0.0  0.0 183076  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26645  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      26582  0.0  0.0 183076  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26631  0.0  0.0  20164   988 ?        Ss   02:00   0:00  |   \_ jailshell (cloudsms) [26813] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  26813  0.0  0.0  20164   264 ?        S    02:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  26814  0.0  0.0 113284  1212 ?        S    02:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  26817  0.0  0.4 356896  9768 ?        R    02:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue1.php
root      26583  0.0  0.0 183076  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26636  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root      26585  0.0  0.0 183076  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26623  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      26627  3.0  0.4 188228 11100 ?        S    02:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      26708  1.0  0.0 160224  2400 ?        S    02:00   0:00  |           \_ top -n 2 -b -c
root      26586  0.0  0.0 183076  2148 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26610 18.0  1.2 232312 31260 ?        Rs   02:00   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/backup
root      26587  0.0  0.0 183076  2140 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26629  0.0  0.0  20164   968 ?        Ss   02:00   0:00  |   \_ jailshell (pactpay) [26679] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   26679  0.0  0.0  20164   260 ?        S    02:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   26687  2.0  0.7 480124 17672 ?        S    02:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      26590  0.0  0.0 183076  2136 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      26614  0.0  0.0  20164   968 ?        Ss   02:00   0:00      \_ jailshell (nigeria) [26655] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   26655  0.0  0.0  20164   264 ?        S    02:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   26666  6.0  0.6 404052 16136 ?        S    02:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        576  0.0  0.0 108296     4 tty1     Ss+  Nov23   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704     0 ttyS0    Ss+  Nov23   0:00 /bin/bash
mailnull    621  0.0  0.1  89120  3828 ?        Ss   Nov23   0:55 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  26214  0.0  0.2  89460  5696 ?        S    01:59   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        927  0.0  0.0  51628   472 ?        Ss   Nov23   0:28 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1055  0.0  0.0  10320   248 ?        S    Nov23   0:08  \_ dovecot/anvil
dovenull  85488  0.0  0.1  49388  2540 ?        S    Dec05   0:28  \_ dovecot/pop3-login
dovenull  85489  0.0  0.1  52160  2472 ?        S    Dec05   0:14  \_ dovecot/imap-login
root      85490  0.0  0.0  10452   612 ?        S    Dec05   0:15  \_ dovecot/log
dovenull  85491  0.0  0.1  49468  2504 ?        S    Dec05   0:21  \_ dovecot/pop3-login
dovenull  85492  0.0  0.1  50900  2760 ?        S    Dec05   0:19  \_ dovecot/imap-login
root      85493  0.0  0.0  24700  1768 ?        S    Dec05   0:07  \_ dovecot/config
dovecot   85494  0.0  0.0  13700   500 ?        S    Dec05   0:03  \_ dovecot/stats
dovecot   85495  0.0  0.1  43012  2804 ?        S    Dec05   0:37  \_ dovecot/auth
root      25629  0.0  0.1  60820  4512 ?        S    01:59   0:00  \_ dovecot/lmtp
systuser    928  0.0  0.0  11540    44 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756    56 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524    64 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608    64 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        933  0.0  0.0 153404   236 ?        Ss   Nov23   0:54 pure-ftpd (SERVER)
root        935  0.0  0.0 572372   752 ?        Ssl  Nov23   3:20 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        937  0.0  0.0 111304   364 ?        Ss   Nov23   4:21 /usr/sbin/sshd -D
root        939  0.0  0.2 1350728 6396 ?        Ssl  Nov23   1:28 /usr/bin/cspdaemon
root        952  0.0  0.2 261692  6552 ?        Ss   Nov23   7:19 cpsrvd (SSL) - waiting for connections                   
root      26319  0.0  0.0      0     0 ?        Z    01:59   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.2 339280  6868 ?        Ssl  Nov23  10:09 /usr/sbin/rsyslogd -n
cpanelc+    969  0.0  0.1  10764  3536 ?        Ss   Nov23  29:21 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
memcach+    972  0.0  0.0 342400     0 ?        Ssl  Nov23   0:52 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 1277312 2340 ?        Ssl  Nov23   0:32 /usr/bin/checkstatus
systuser    980  0.0  0.4 114016 10808 ?        Ssl  Nov23  10:38 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser   1144  0.0  0.1 157704  2880 ?        S    Nov23   0:11 SonarPush 0.6.12 [sleeping]
root       1239  0.0  0.1 167452  4208 ?        Ss   Nov23   0:36 dnsadmin - dormant mode
root       1243  0.0  0.3 211908  9368 ?        Ss   Nov23   4:51 tailwatchd
root       1244  0.0  1.0 262224 24684 ?        Ss   Nov23   3:36 cpdavd - accepting connections on: 2091, 2077, 2078
root       1676  0.0  0.0 130416  1380 ?        SN   Nov23   0:06 cpanellogd - sleeping for logs
oysipao+  15361  0.0  0.0   3148     4 ?        Ss   Nov23   0:00 [kworker]
oysipao+  15368  0.0  0.0   3156    36 ?        S    Nov23   0:55  \_ [kworker]
mysql     13043  1.7 11.2 1487024 272244 ?      Sl   Dec04 371:51 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
telegraf  85330  0.0  1.1 5654308 27980 ?       SLsl Dec04  11:54 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root      95329  0.0 14.4 1556048 349352 ?      Ssl  Dec09   8:18 /usr/local/cpanel/3rdparty/bin/clamd -F
root      72706  0.0  0.0 299272   496 ?        Ss   Dec09   0:38 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root      72712  0.0  0.0 445028   596 ?        Ss   Dec09   0:58 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  25864  0.0  0.0 445028   328 ?        S    01:59   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  25883  0.0  0.0 445028   324 ?        S    01:59   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  72887  0.0  0.1 412396  3600 ?        Ss   Dec09   5:24 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+  72891  0.0  0.1 387556  3376 ?        Ss   Dec09   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root     100237  0.0  0.1 267196  4732 ?        Ss   Dec09   0:51 /usr/sbin/httpd -k start
root      99686  0.0  0.0  12860   340 ?        S    Dec18   0:08  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      99687  0.0  0.0  12732   284 ?        S    Dec18   0:07  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      99688  0.0  0.0  12908   348 ?        S    Dec18   0:07  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      99689  0.0  0.0  53252     4 ?        S    Dec18   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    95628  0.0  0.6 277956 15376 ?        S    00:13   0:04  \_ /usr/sbin/httpd -k start
nobody    50994  0.0  0.8 277888 21592 ?        S    00:59   0:02  \_ /usr/sbin/httpd -k start
nobody    52146  0.0  0.8 277796 21156 ?        S    01:00   0:02  \_ /usr/sbin/httpd -k start
nobody    67662  0.0  0.8 277772 21340 ?        S    01:12   0:01  \_ /usr/sbin/httpd -k start
nobody    67687  0.0  0.8 277792 21464 ?        S    01:12   0:01  \_ /usr/sbin/httpd -k start
nobody    67708  0.0  0.8 278020 21380 ?        S    01:12   0:01  \_ /usr/sbin/httpd -k start
nobody    99436  0.0  0.8 277736 20388 ?        S    01:36   0:00  \_ /usr/sbin/httpd -k start
nobody    99456  0.0  0.8 277948 20800 ?        S    01:37   0:00  \_ /usr/sbin/httpd -k start
nobody    10519  0.0  0.8 277840 20288 ?        S    01:47   0:00  \_ /usr/sbin/httpd -k start
nobody    13755  0.0  0.8 277764 20356 ?        S    01:49   0:00  \_ /usr/sbin/httpd -k start
nobody    23953  0.0  0.7 277684 18144 ?        S    01:58   0:00  \_ /usr/sbin/httpd -k start
nobody    24104  0.0  0.7 277644 18088 ?        S    01:58   0:00  \_ /usr/sbin/httpd -k start
named      1188  0.0  1.2 1185868 29600 ?       Ssl  Dec17   1:41 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root      99663  0.0  0.0 400740  1640 ?        Ss   Dec18   0:26 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   25901  0.8  0.4 402048 11892 ?        S    01:59   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   26155  0.0  0.1 400460  4508 ?        S    01:59   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  26283 19.7  2.7 461148 67148 ?        R    01:59   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  26290 21.1  2.9 465244 71896 ?        S    01:59   0:01  \_ php-fpm: pool health_oyostate_gov_ng
cloudw    26746  5.0  0.5 408264 14164 ?        S    02:00   0:00  \_ php-fpm: pool cloudware_ng
root      99668  0.0  0.0 388892   536 ?        Ss   Dec18   0:02 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root      99673  0.0  0.0 396248   276 ?        Ss   Dec18   0:02 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root      99678  0.0  0.0 389508   416 ?        Ss   Dec18   0:02 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root      99683  0.0  0.0 439788   404 ?        Ss   Dec18   0:03 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root     100402  0.0  0.1 248660  2676 ?        Ss   Dec18   0:13 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       2140  0.0  3.5 262480 86884 ?        S    Dec18   0:03  \_ spamd child
root      11657  0.0  0.0 248660  1560 ?        S    Dec18   0:00  \_ spamd child
root      77791  0.0  0.3 181480  8040 ?        Ss   00:00   0:06 lfd - sleeping
cloudw    26681  2.0  0.6 287616 14624 ?        S    02:00   0:00 /opt/cpanel/ea-php70/root/usr/bin/php -f /home/cloudw/wptraining.cloudware.ng/wp-includes/gxntjp.php
## mysql stats
Uptime: 1244096  Threads: 4  Questions: 137167706  Slow queries: 0  Opens: 316505  Flush tables: 1  Open tables: 2000  Queries per second avg: 110.254
*************************** 1. row ***************************
     Id: 2215074
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 2215075
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: query end
   Info: SELECT * FROM `32` WHERE `phone`='2348101091017' LIMIT 1
*************************** 3. row ***************************
     Id: 2215082
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 4. row ***************************
     Id: 2215092
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.252.247.30 TIME_WAIT
      1 114.119.133.34 TIME_WAIT
      1 142.147.165.140 TIME_WAIT
      1 144.76.19.157 TIME_WAIT
      1 148.113.128.247 TIME_WAIT
      1 15.235.98.27 TIME_WAIT
      1 154.29.237.66 TIME_WAIT
      1 159.138.150.51 TIME_WAIT
      1 170.23.1.91 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 194.55.229.40 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.73.216.174 TIME_WAIT
      1 40.77.167.48 TIME_WAIT
      1 40.77.167.5 TIME_WAIT
      1 51.161.65.47 TIME_WAIT
      1 54.39.210.7 TIME_WAIT
      1 54.39.89.152 TIME_WAIT
      1 54.39.89.234 TIME_WAIT
      1 84.37.226.94 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 43.155.26.193 TIME_WAIT
      3 216.73.216.10 TIME_WAIT
      5 136.243.228.180 TIME_WAIT
     92 152.42.224.246 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.66 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Dec 8 2025 14:42:54
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 19-Dec-2025 02:00:02 WAT
   Restart Time: Tuesday, 09-Dec-2025 04:48:00 WAT
   Parent Server Config. Generation: 5
   Parent Server MPM Generation: 4
   Server uptime: 9 days 21 hours 12 minutes 2 seconds
   Server load: 0.41 0.36 0.43
   Total accesses: 2517630 - Total Traffic: 24.3 GB - Total Duration: 992697059
   CPU Usage: u19.39 s49.19 cu17157 cs11248.1 - 3.33% CPU load
   2.95 requests/sec - 29.8 kB/second - 10.1 kB/request - 394.298 ms/request
   4 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

___.KW___.._._W...C.............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

    Srv   PID       Acc      M CPU     SS   Req   Dur    Conn Child   Slot      Client      Protocol              VHost                                          Request
   0-4   95628 0/1623/176881 _ 12.74 0      275 67391928 0.0  10.89 1912.01 136.243.228.180 http/1.1 cloudware.ng:80                 GET /wp-includes/revisions.php?l=30261337090 HTTP/1.1
   1-4   10519 0/251/165483  _ 1.36  0      188 63901384 0.0  1.42  1610.19 116.203.134.67  http/1.1 cloudsms.com.ng:443             GET /cron/process_queue4.php HTTP/1.1
   2-4   13755 0/130/162258  _ 1.54  0      0   62219675 0.0  0.70  1638.36 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   3-4   -     0/0/163537    . 0.00  107    0   61888661 0.0  0.00  1664.31 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   4-4   67662 2/793/153216  K 6.12  1      13  58134320 11.6 3.75  1443.62 144.76.19.157   http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?state=Katsina&lga=Kusada&ward=Ba
   5-4   23953 0/53/150073   W 0.18  0      0   58019828 0.0  0.55  1585.78 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   6-4   24104 0/41/146192   _ 0.08  1      35  54839899 0.0  0.48  1522.80 116.203.129.16  http/1.1 cloudsms.com.ng:443             GET /cron/process_queue5.php HTTP/1.1
   7-4   52146 0/886/136494  _ 10.13 1      0   52335594 0.0  4.85  1310.65 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80          GET /whm-server-status HTTP/1.0
   8-4   99436 0/307/133116  _ 2.18  1      30  51301076 0.0  1.85  1350.71 116.203.129.16  http/1.1 cloudsms.com.ng:443             GET /cron/process_queue1.php HTTP/1.1
   9-4   -     0/0/123568    . 0.00  1378   0   47963244 0.0  0.00  1247.33 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   10-4  -     0/0/122738    . 0.00  1358   0   47296172 0.0  0.00  1153.76 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   11-4  99456 0/506/106755  _ 4.03  0      241 41529072 0.0  1.94  1012.27 128.140.8.200   http/1.1 cloudsms.com.ng:443             GET /cron/process_queue3.php HTTP/1.1
   12-4  -     0/0/105699    . 0.00  1284   0   41968151 0.0  0.00  1006.98 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   13-4  67687 0/619/93282   _ 6.24  1      26  36693857 0.0  4.85  864.51  217.113.194.123 http/1.1 team.cloudware.ng:80            GET /var/cache/prod/pools/2wJoJAFabM/8/H/1TCmPhqc-XvHpimsV0gQ H
   14-4  50994 0/806/83063   W 8.32  1      0   34872678 0.0  7.15  920.22  152.42.224.246  http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   15-4  -     0/0/74857     . 0.00  2448   0   29211102 0.0  0.00  682.56  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   16-4  -     0/0/62089     . 0.00  2765   0   24965915 0.0  0.00  571.30  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-4  -     0/0/47903     . 0.00  1486   0   20251299 0.0  0.00  489.53  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-4  67708 1/671/42336   C 7.75  0      998 18966836 5.7  4.34  392.39  152.42.224.246  http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   19-4  -     0/0/28255     . 0.00  2834   0   12543022 0.0  0.00  305.29  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-4  -     0/0/34094     . 0.00  2828   0   14967610 0.0  0.00  325.70  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-4  -     0/0/17727     . 0.00  1015   0   7608228  0.0  0.00  159.10  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-4  -     0/0/16853     . 0.00  2825   0   6673626  0.0  0.00  156.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-4  -     0/0/20197     . 0.00  2823   0   8666478  0.0  0.00  207.82  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-4  -     0/0/14307     . 0.00  3617   0   6832779  0.0  0.00  131.51  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-4  -     0/0/13089     . 0.00  3627   0   6751433  0.0  0.00  118.86  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-4  -     0/0/12571     . 0.00  3604   0   5754554  0.0  0.00  104.50  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-4  -     0/0/8421      . 0.00  2833   0   3736380  0.0  0.00  70.75   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-4  -     0/0/7978      . 0.00  543    0   3085262  0.0  0.00  71.40   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-4  -     0/0/6198      . 0.00  3623   0   2506685  0.0  0.00  69.63   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-4  -     0/0/4838      . 0.00  3615   0   2103492  0.0  0.00  30.60   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-4  -     0/0/3941      . 0.00  18561  0   1793568  0.0  0.00  28.55   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-4  -     0/0/4025      . 0.00  19968  0   1446367  0.0  0.00  36.89   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-4  -     0/0/3094      . 0.00  18838  0   1084777  0.0  0.00  20.65   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-4  -     0/0/1503      . 0.00  24072  0   1616017  0.0  0.00  9.16    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-4  -     0/0/1817      . 0.00  24046  0   820435   0.0  0.00  16.63   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-4  -     0/0/4061      . 0.00  24083  0   1489499  0.0  0.00  30.92   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-4  -     0/0/2733      . 0.00  23848  0   727922   0.0  0.00  26.26   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-4  -     0/0/5944      . 0.00  24058  0   2105750  0.0  0.00  55.06   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-4  -     0/0/3161      . 0.00  23790  0   1163040  0.0  0.00  46.76   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-4  -     0/0/4250      . 0.00  24098  3   2875466  0.0  0.00  65.74   45.131.155.103  http/1.1 cybersynchs.cloudware.ng:80     GET / HTTP/1.1
   41-4  -     0/0/2277      . 0.00  24081  0   979265   0.0  0.00  28.19   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-4  -     0/0/1789      . 0.00  23628  0   847663   0.0  0.00  22.69   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-4  -     0/0/2219      . 0.00  24039  0   890357   0.0  0.00  23.58   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-4  -     0/0/3382      . 0.00  21696  0   997980   0.0  0.00  27.36   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-4  -     0/0/1308      . 0.00  24084  0   649586   0.0  0.00  13.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-4  -     0/0/1181      . 0.00  23639  0   487858   0.0  0.00  9.38    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-4  -     0/0/860       . 0.00  24048  0   444916   0.0  0.00  8.37    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-4  -     0/0/1735      . 0.00  24050  0   653358   0.0  0.00  12.22   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-4  -     0/0/830       . 0.00  24091  0   433804   0.0  0.00  6.48    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-4  -     0/0/1022      . 0.00  24077  0   405466   0.0  0.00  10.57   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-4  -     0/0/1041      . 0.00  24069  0   456641   0.0  0.00  4.93    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-4  -     0/0/1739      . 0.00  23890  0   693479   0.0  0.00  14.80   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-4  -     0/0/1930      . 0.00  23409  0   842894   0.0  0.00  19.46   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-4  -     0/0/409       . 0.00  24054  0   300350   0.0  0.00  2.73    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-4  -     0/0/1366      . 0.00  24057  0   482139   0.0  0.00  9.73    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-4  -     0/0/475       . 0.00  24029  0   385204   0.0  0.00  3.23    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-4  -     0/0/1368      . 0.00  23196  0   700009   0.0  0.00  9.93    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-4  -     0/0/1230      . 0.00  24090  0   419126   0.0  0.00  7.23    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-4  -     0/0/170       . 0.00  24068  0   321326   0.0  0.00  1.38    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-4  -     0/0/604       . 0.00  23625  0   284353   0.0  0.00  3.19    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-4  -     0/0/807       . 0.00  24047  0   352719   0.0  0.00  8.04    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-4  -     0/0/998       . 0.00  24089  0   437042   0.0  0.00  11.97   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-4  -     0/0/753       . 0.00  24079  0   500477   0.0  0.00  6.05    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-4  -     0/0/172       . 0.00  24078  0   228200   0.0  0.00  1.37    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-4  -     0/0/707       . 0.00  24092  0   437281   0.0  0.00  4.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-4  -     0/0/248       . 0.00  24071  0   155488   0.0  0.00  1.42    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-4  -     0/0/1317      . 0.00  24067  4   631744   0.0  0.00  13.19   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-4  -     0/0/229       . 0.00  24097  0   267294   0.0  0.00  1.35    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-4  -     0/0/767       . 0.00  23064  0   688887   0.0  0.00  6.19    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-4  -     0/0/755       . 0.00  23990  0   283745   0.0  0.00  5.62    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-4  -     0/0/1983      . 0.00  22023  0   763362   0.0  0.00  13.53   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-4  -     0/0/287       . 0.00  24074  0   297051   0.0  0.00  2.16    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-4  -     0/0/409       . 0.00  23643  243 271293   0.0  0.00  2.91    178.128.19.45   http/1.1 nigeriadecide.org:443           POST /blog//xmlrpc.php HTTP/1.1
   74-4  -     0/0/160       . 0.00  24063  0   186077   0.0  0.00  0.63    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-4  -     0/0/326       . 0.00  24062  0   139945   0.0  0.00  1.50    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-4  -     0/0/287       . 0.00  24097  0   125653   0.0  0.00  1.32    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-4  -     0/0/241       . 0.00  23851  4   378337   0.0  0.00  0.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-4  -     0/0/141       . 0.00  24038  0   35995    0.0  0.00  0.22    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   79-4  -     0/0/157       . 0.00  24061  0   13496    0.0  0.00  0.29    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   80-4  -     0/0/528       . 0.00  23496  0   158358   0.0  0.00  2.80    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   81-4  -     0/0/319       . 0.00  24088  0   170775   0.0  0.00  1.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   82-4  -     0/0/112       . 0.00  24095  0   120764   0.0  0.00  0.44    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   83-4  -     0/0/621       . 0.00  24053  0   373628   0.0  0.00  3.54    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   84-4  -     0/0/189       . 0.00  24055  0   105779   0.0  0.00  1.02    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   85-4  -     0/0/262       . 0.00  24094  0   74396    0.0  0.00  0.67    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   86-4  -     0/0/223       . 0.00  23560  0   84591    0.0  0.00  1.82    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   87-4  -     0/0/878       . 0.00  22710  0   171957   0.0  0.00  4.33    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   88-4  -     0/0/268       . 0.00  24066  0   80410    0.0  0.00  0.91    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   89-4  -     0/0/689       . 0.00  24052  0   340634   0.0  0.00  17.70   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   90-4  -     0/0/125       . 0.00  24056  0   90117    0.0  0.00  0.63    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   91-2  -     0/0/507       . 0.00  263026 0   174361   0.0  0.00  3.32    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   92-2  -     0/0/179       . 0.00  263561 0   116013   0.0  0.00  0.97    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   93-2  -     0/0/110       . 0.00  263597 0   65032    0.0  0.00  0.45    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   94-2  -     0/0/185       . 0.00  263619 82  114296   0.0  0.00  2.40    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   95-2  -     0/0/163       . 0.00  263524 0   122930   0.0  0.00  0.30    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   96-2  -     0/0/169       . 0.00  263605 0   21600    0.0  0.00  0.16    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   97-2  -     0/0/350       . 0.00  262903 0   77331    0.0  0.00  0.92    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   98-2  -     0/0/283       . 0.00  263562 0   86349    0.0  0.00  0.88    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   99-2  -     0/0/206       . 0.00  262829 0   127715   0.0  0.00  1.02    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   100-2 -     0/0/230       . 0.00  263055 0   45632    0.0  0.00  0.47    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   101-2 -     0/0/113       . 0.00  263584 0   111909   0.0  0.00  0.46    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   102-2 -     0/0/8         . 0.00  263641 86  8810     0.0  0.00  0.06    138.197.152.229 http/1.1 new-vegas-cash.staging.cloudwar GET /wp-2019.php HTTP/1.1
   103-2 -     0/0/193       . 0.00  263526 0   60761    0.0  0.00  0.48    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   104-2 -     0/0/227       . 0.00  263537 0   19228    0.0  0.00  0.14    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   105-2 -     0/0/19        . 0.00  263615 0   20494    0.0  0.00  0.03    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   106-2 -     0/0/89        . 0.00  263614 0   30342    0.0  0.00  0.09    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   107-2 -     0/0/75        . 0.00  263608 0   23965    0.0  0.00  0.05    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   108-2 -     0/0/207       . 0.00  263569 0   99496    0.0  0.00  0.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   109-2 -     0/0/11        . 0.00  263618 0   27094    0.0  0.00  0.01    138.197.152.229 http/1.1 proxy-subdomains-vhost.localhos GET /nf_tracking.php HTTP/1.1
   110-2 -     0/0/160       . 0.00  263534 0   55783    0.0  0.00  0.59    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   111-2 -     0/0/4         . 0.00  263538 0   1637     0.0  0.00  0.01    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   112-2 -     0/0/107       . 0.00  263628 0   16580    0.0  0.00  0.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   113-2 -     0/0/135       . 0.00  263027 0   43118    0.0  0.00  0.64    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   114-2 -     0/0/79        . 0.00  263601 0   35968    0.0  0.00  0.04    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   115-2 -     0/0/115       . 0.00  263554 0   51751    0.0  0.00  0.44    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   116-2 -     0/0/207       . 0.00  263564 0   79415    0.0  0.00  0.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   117-2 -     0/0/131       . 0.00  263567 0   48034    0.0  0.00  0.46    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   118-2 -     0/0/112       . 0.00  263551 0   67705    0.0  0.00  0.45    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   119-2 -     0/0/2         . 0.00  263519 0   241030   0.0  0.00  0.00    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   120-2 -     0/0/117       . 0.00  263574 0   58506    0.0  0.00  0.44    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   121-2 -     0/0/159       . 0.00  263565 0   48348    0.0  0.00  0.45    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   122-2 -     0/0/153       . 0.00  263557 0   30575    0.0  0.00  0.10    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   123-2 -     0/0/90        . 0.00  263541 0   69610    0.0  0.00  0.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   124-2 -     0/0/124       . 0.00  263516 0   48197    0.0  0.00  0.44    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   125-2 -     0/0/225       . 0.00  263550 0   46797    0.0  0.00  1.31    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   126-2 -     0/0/113       . 0.00  263522 0   60949    0.0  0.00  0.77    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   127-2 -     0/0/196       . 0.00  263580 0   43269    0.0  0.00  0.49    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   128-2 -     0/0/153       . 0.00  263521 0   89591    0.0  0.00  0.92    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   129-2 -     0/0/182       . 0.00  263544 0   14610    0.0  0.00  0.11    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   130-2 -     0/0/75        . 0.00  263566 0   29077    0.0  0.00  0.38    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   131-2 -     0/0/138       . 0.00  263396 0   61766    0.0  0.00  0.58    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   132-2 -     0/0/105       . 0.00  263594 0   61218    0.0  0.00  0.42    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   133-2 -     0/0/17        . 0.00  263619 0   596      0.0  0.00  0.01    138.197.152.229 http/1.1 proxy-subdomains-vhost.localhos GET /wp-includes/rest-api/about.php HTTP/1.1
   134-2 -     0/0/110       . 0.00  263617 0   13878    0.0  0.00  0.08    138.197.152.229 http/1.1 proxy-subdomains-vhost.localhos GET /wp-includes/IXR/about.php HTTP/1.1
   135-2 -     0/0/6         . 0.00  263630 0   21667    0.0  0.00  0.02    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   136-2 -     0/0/4         . 0.00  263632 0   6056     0.0  0.00  0.00    138.197.152.229 http/1.1 proxy-subdomains-vhost.localhos GET /as.php HTTP/1.1
   137-2 -     0/0/222       . 0.00  263389 0   59782    0.0  0.00  0.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   138-2 -     0/0/109       . 0.00  263616 0   16220    0.0  0.00  0.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   139-2 -     0/0/160       . 0.00  263552 0   24902    0.0  0.00  0.24    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   140-2 -     0/0/9         . 0.00  263632 0   20410    0.0  0.00  0.03    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   141-2 -     0/0/104       . 0.00  263578 0   59137    0.0  0.00  0.42    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   142-2 -     0/0/107       . 0.00  263591 0   36089    0.0  0.00  0.41    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   143-2 -     0/0/86        . 0.00  263545 0   37015    0.0  0.00  0.55    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 522
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 14 seconds, (range: 0...54)
   index usage: 9%, cache usage: 12%
   total entries stored since starting: 109351
   total entries replaced since starting: 0
   total entries expired since starting: 108715
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 12 hit, 890 miss
   total removes since starting: 114 hit, 413 miss
Youez - 2016 - github.com/yon3zu
LinuXploit