403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.48
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-12-19.03.42.txt
 ## load threshold exceeded
 ## mem threshold exceeded
 ## swap threshold exceeded
## server overview
2025-12-19.03.42 load[18] mem[90/47] mysql[6/47] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1976          74          36         312         177
Swap:          4047        2022        2025
 03:42:13 up 25 days,  6:30,  0 users,  load average: 20.72, 5.88, 2.32
## system overview
top - 03:42:13 up 25 days,  6:30,  0 users,  load average: 20.72, 5.88, 2.32
Tasks: 237 total,   1 running, 234 sleeping,   0 stopped,   2 zombie
%Cpu(s): 13.9 us, 16.7 sy,  0.0 ni,  0.0 id, 69.4 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    73052 free,  2032108 used,   315140 buff/cache
KiB Swap:  4145144 total,  2072980 free,  2072164 used.   174140 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
    36 root      20   0       0      0      0 S  11.1  0.0  44:27.24 [kswapd0]
 13043 mysql     20   0 1487024 194768   1676 S   5.6  8.0 374:14.33 /usr/sbin+
 62728 root      39  19  108856   1320    312 D   5.6  0.1   0:00.32 /usr/bin/+
 63102 root      20   0  160220   2324   1592 R   5.6  0.1   0:00.01 top -bcn1
     1 root      20   0  191864   3236   1324 S   0.0  0.1  58:46.43 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.49 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   4:43.47 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   1:29.20 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0  40:13.27 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:06.27 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:06.19 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   1:43.02 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   6:22.33 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.77 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.18 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:04.16 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   0:41.56 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   5:22.45 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   4:33.62 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   2:32.11 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40240   2788   2536 S   0.0  0.1  19:20.01 /usr/lib/+
   383 root      20   0   45352      8      4 S   0.0  0.0   0:00.45 /usr/lib/+
   412 root      16  -4   55532    120      4 S   0.0  0.0   2:57.65 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    304    216 S   0.0  0.0   0:54.00 /usr/sbin+
   489 root      20   0   24896   1060    732 S   0.0  0.0   9:29.51 /usr/lib/+
   494 polkitd   20   0  610664   1008    524 S   0.0  0.0   5:19.76 /usr/lib/+
   495 root      20   0  224416   1432    224 S   0.0  0.1   0:25.94 queueproc+
   496 root      20   0   52852     96      0 S   0.0  0.0   0:00.33 /usr/sbin+
   497 root      20   0  152780     32      8 S   0.0  0.0   0:02.80 /usr/sbin+
   503 dbus      20   0   58748   1344    600 S   0.0  0.1  20:58.60 /usr/bin/+
   506 nscd      20   0 1377672   1680      0 S   0.0  0.1  45:12.66 /usr/sbin+
   511 rpc       20   0   69256     64     16 S   0.0  0.0   0:02.23 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208     24      0 S   0.0  0.0   0:00.06 /usr/sbin+
   558 root      20   0  124508    312    180 S   0.0  0.0   1:09.07 /usr/sbin+
   576 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   621 mailnull  20   0   89120   3080    136 S   0.0  0.1   0:55.58 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   2:18.67 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:11.23 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   927 root      20   0   51628    140      0 S   0.0  0.0   0:28.22 /usr/sbin+
   928 systuser  20   0   11540      0      0 S   0.0  0.0   0:01.20 /usr/loca+
   929 systuser  20   0   12756      0      0 S   0.0  0.0   0:01.19 /usr/loca+
   931 systuser  20   0  112524      0      0 S   0.0  0.0   0:01.15 /usr/loca+
   932 systuser  20   0  111608      0      0 S   0.0  0.0   0:01.11 /usr/loca+
   933 root      20   0  153404     88      4 S   0.0  0.0   0:54.54 pure-ftpd+
   935 root      20   0  572372    740    236 S   0.0  0.0   3:20.77 /usr/bin/+
   937 root      20   0  111304    212    104 S   0.0  0.0   4:22.07 /usr/sbin+
   939 root      20   0 1350728   6216      4 S   0.0  0.3   1:28.41 /usr/bin/+
   952 root      20   0  261692   4176    492 S   0.0  0.2   7:20.72 cpsrvd (S+
   953 root      20   0  331088   3364   2736 S   0.0  0.1  10:11.54 /usr/sbin+
   969 cpanelc+  20   0   10764   3420   2312 S   0.0  0.1  29:26.48 /usr/loca+
   972 memcach+  20   0  342400      0      0 S   0.0  0.0   0:52.44 /usr/bin/+
   974 root      20   0 1277312   1960      4 S   0.0  0.1   0:32.54 /usr/bin/+
   980 systuser  20   0  114016  12008   1564 S   0.0  0.5  10:40.76 /usr/loca+
  1055 dovecot   20   0   10320    100      0 S   0.0  0.0   0:08.69 dovecot/a+
  1144 systuser  20   0  157704    512      0 S   0.0  0.0   0:11.57 SonarPush+
  1188 named     20   0 1185868  21876      0 S   0.0  0.9   1:46.67 /usr/sbin+
  1239 root      20   0  167452   1788    468 S   0.0  0.1   0:36.38 dnsadmin +
  1243 root      20   0  211908   7828    564 S   0.0  0.3   4:52.12 tailwatchd
  1244 root      20   0  262224  17968    104 S   0.0  0.7   3:37.04 cpdavd - +
  1676 root      38  18  130416    708     40 S   0.0  0.0   0:06.20 cpanellog+
  2140 root      20   0  262480  13848   1084 D   0.0  0.6   0:04.78 spamd chi+
  7543 root      20   0  123576    228      0 S   0.0  0.0   0:00.00 /usr/sbin+
 11657 root      20   0  248660    596      0 S   0.0  0.0   0:00.02 spamd chi+
 15361 oysipao+  20   0    3148      4      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3156     36      0 S   0.0  0.0   0:55.61 [kworker]
 18692 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 33726 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 44244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 49611 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 50622 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 51909 root      20   0  183080     56     44 S   0.0  0.0   0:00.00 /usr/sbin+
 51944 root      20   0  113284      8      0 S   0.0  0.0   0:00.00 /bin/sh -+
 51991 root      20   0  108056     48     44 S   0.0  0.0   0:00.00 sleep 4h +
 54433 nobody    20   0  277716  15772   1212 S   0.0  0.7   0:00.18 /usr/sbin+
 54739 nobody    20   0  277656  16124   1708 S   0.0  0.7   0:00.15 /usr/sbin+
 54761 nobody    20   0  277960  16056   1212 S   0.0  0.7   0:00.19 /usr/sbin+
 54979 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 56454 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 57448 nobody    20   0  277588  15248    876 S   0.0  0.6   0:00.16 /usr/sbin+
 57761 root      30  10  113284    284     76 S   0.0  0.0   0:00.00 /bin/bash+
 57771 root      30  10  132964   3580     44 S   0.0  0.1   0:00.00 ConfigSer+
 57783 root      30  10  108056     72      0 S   0.0  0.0   0:00.00 sleep 1502
 58153 nobody    20   0  277680  15120    632 S   0.0  0.6   0:00.15 /usr/sbin+
 58154 nobody    20   0  277888  17476   2844 S   0.0  0.7   0:00.16 /usr/sbin+
 58156 nobody    20   0  277708  15088    484 S   0.0  0.6   0:00.13 /usr/sbin+
 59341 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62617 root      30  10  114360   1368     76 S   0.0  0.1   0:00.00 bash /usr+
 62715 root      39  19  120348    628    200 D   0.0  0.0   0:00.50 /bin/find+
 62716 root      30  10  112812    204     60 S   0.0  0.0   0:00.00 grep -E -+
 62722 root      39  19  113284    244     60 S   0.0  0.0   0:00.00 /bin/sh /+
 62723 root      30  10  113644    168     20 S   0.0  0.0   0:00.00 awk -v pr+
 62753 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62775 agradio   20   0  420196  27412   1824 S   0.0  1.1   0:00.43 php-fpm: +
 62802 nobody    20   0  277496  14560    908 S   0.0  0.6   0:00.03 /usr/sbin+
 62803 nobody    20   0  277672  16664   2556 S   0.0  0.7   0:00.04 /usr/sbin+
 62820 root      20   0  223780  17240    760 S   0.0  0.7   0:00.15 tailwatch+
 62823 nobody    20   0  277524  13612    440 S   0.0  0.6   0:00.01 /usr/sbin+
 62824 nobody    20   0  277496  14424   1016 S   0.0  0.6   0:00.01 /usr/sbin+
 62828 wp-tool+  20   0  376476   8964   4212 D   0.0  0.4   0:00.02 sw-engine+
 62831 cloudsms  20   0  335504  43684   2076 D   0.0  1.8   0:00.39 /opt/cpan+
 62836 nobody    20   0  277528  15384   2020 S   0.0  0.6   0:00.04 /usr/sbin+
 62837 nobody    20   0  277496  13808    248 S   0.0  0.6   0:00.01 /usr/sbin+
 62839 nobody    20   0  277496  13844    328 S   0.0  0.6   0:00.01 /usr/sbin+
 62842 agradio   20   0  420196  28300   2684 S   0.0  1.2   0:00.40 php-fpm: +
 62863 nobody    20   0  277592  14164    528 S   0.0  0.6   0:00.03 /usr/sbin+
 62865 agradio   20   0  420196  28316   2708 S   0.0  1.2   0:00.37 php-fpm: +
 62866 agradio   20   0  420196  27424   1856 S   0.0  1.1   0:00.34 php-fpm: +
 62880 root      20   0  111304   1688    668 S   0.0  0.1   0:00.01 sshd: [ac+
 62881 nobody    20   0  277384  13380    360 S   0.0  0.6   0:00.01 /usr/sbin+
 62887 nobody    20   0  277496  13996    556 S   0.0  0.6   0:00.01 /usr/sbin+
 62888 nobody    20   0  277496  14628   1056 S   0.0  0.6   0:00.04 /usr/sbin+
 62894 nobody    20   0  277656  15740   2192 S   0.0  0.7   0:00.02 /usr/sbin+
 62895 nobody    20   0  277772  16272   2824 S   0.0  0.7   0:00.01 /usr/sbin+
 62896 nobody    20   0       0      0      0 Z   0.0  0.0   0:00.01 [httpd] <+
 62898 nigeria   20   0  400460   3836   1592 S   0.0  0.2   0:00.01 php-fpm: +
 62899 nigeria   20   0  400460   3952   1704 S   0.0  0.2   0:00.00 php-fpm: +
 62901 sshd      20   0  115644   1644    572 S   0.0  0.1   0:00.00 sshd: [ne+
 62954 root      20   0  183076   1128    568 S   0.0  0.0   0:00.00 /usr/sbin+
 62957 root      20   0  183076   1128    568 S   0.0  0.0   0:00.00 /usr/sbin+
 62958 root      20   0  183076   1128    568 S   0.0  0.0   0:00.00 /usr/sbin+
 62959 root      20   0  183076   1128    568 S   0.0  0.0   0:00.00 /usr/sbin+
 62960 root      20   0  183076   1128    568 S   0.0  0.0   0:00.00 /usr/sbin+
 62961 root      20   0  183076   1128    568 S   0.0  0.0   0:00.00 /usr/sbin+
 62962 root      20   0  183076   1128    568 S   0.0  0.0   0:00.00 /usr/sbin+
 62965 root      20   0  183076   1124    568 S   0.0  0.0   0:00.00 /usr/sbin+
 62966 root      20   0  183076   1120    568 S   0.0  0.0   0:00.00 /usr/sbin+
 62968 root      20   0  183076   1120    568 S   0.0  0.0   0:00.00 /usr/sbin+
 62969 root      20   0  183076   1120    568 S   0.0  0.0   0:00.00 /usr/sbin+
 62971 cloudw    20   0  420684  26560   2624 D   0.0  1.1   0:00.20 php-fpm: +
 62976 wp-tool+  20   0  445028    316    156 S   0.0  0.0   0:00.00 sw-engine+
 62981 root      20   0   20164    552    380 S   0.0  0.0   0:00.00 /usr/loca+
 62983 root      20   0   20164    552    380 S   0.0  0.0   0:00.00 /usr/loca+
 62985 root      20   0  113284    568    388 S   0.0  0.0   0:00.00 /bin/sh -+
 62986 root      20   0   20164    552    380 S   0.0  0.0   0:00.00 /usr/loca+
 62987 root      20   0   20164    688    484 S   0.0  0.0   0:00.00 jailshell+
 62989 root      20   0   20164    684    484 S   0.0  0.0   0:00.00 jailshell+
 62991 root      20   0   20164    556    380 S   0.0  0.0   0:00.00 /usr/loca+
 62992 root      20   0   20164    752    552 S   0.0  0.0   0:00.00 /usr/loca+
 62993 root      20   0   20164    556    380 S   0.0  0.0   0:00.00 /usr/loca+
 62996 root      20   0   20164    720    520 S   0.0  0.0   0:00.00 jailshell+
 62997 root      20   0   20164    684    484 S   0.0  0.0   0:00.00 jailshell+
 62998 cloudw    20   0  287616  10328   5328 S   0.0  0.4   0:00.09 /opt/cpan+
 62999 root      20   0  108052    224    152 S   0.0  0.0   0:00.00 /usr/bin/+
 63006 root      20   0  113288   1180    960 S   0.0  0.0   0:00.00 /bin/bash+
 63019 cloudw    20   0  353712  12240   6748 S   0.0  0.5   0:00.07 /opt/cpan+
 63029 root      20   0       0      0      0 Z   0.0  0.0   0:00.02 [cpaneld +
 63031 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 63032 saboakin  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 63039 pactpay   20   0  480124  10812   5016 S   0.0  0.4   0:00.05 /opt/cpan+
 63041 saboakin  20   0  404052   7940   2504 S   0.0  0.3   0:00.03 /opt/cpan+
 63048 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 63049 nigeria   20   0  404052   8440   2688 S   0.0  0.3   0:00.04 /opt/cpan+
 63050 root      20   0  166832   9280   1120 S   0.0  0.4   0:00.05 /usr/loca+
 63065 root      20   0  157312   3064   1780 S   0.0  0.1   0:00.01 sshd: roo+
 63078 root      20   0   39112    996    508 S   0.0  0.0   0:00.00 /usr/loca+
 63079 cloudw    20   0  281948  10104   6992 D   0.0  0.4   0:00.03 /opt/cpan+
 63081 root      20   0  111304   4360   3324 S   0.0  0.2   0:00.00 sshd: [ac+
 63082 root      20   0  182228  12048    768 D   0.0  0.5   0:00.01 lfd - (ch+
 63083 sshd      20   0  115644   2620   1548 S   0.0  0.1   0:00.00 sshd: roo+
 63086 root      20   0  157100   4904   3632 S   0.0  0.2   0:00.00 sshd: unk+
 63087 nigeria   20   0  400460   4368   2204 D   0.0  0.2   0:00.00 php-fpm: +
 63088 cloudsms  20   0  300484  17568  10164 D   0.0  0.7   0:00.03 /opt/cpan+
 63091 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 63092 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 63093 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 63094 cloudsms  20   0  113284   1208   1028 S   0.0  0.0   0:00.00 /usr/loca+
 63095 root      20   0   38648   6496   3032 D   0.0  0.3   0:00.01 /usr/loca+
 63096 cloudsms  20   0  345400   9232   6536 D   0.0  0.4   0:00.01 /opt/cpan+
 63099 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 63117 root      20   0   36896   2568   1840 D   0.0  0.1   0:00.00 /usr/loca+
 63118 root      20   0   36896   2568   1836 D   0.0  0.1   0:00.00 /usr/loca+
 63126 root      20   0     172      4      0 D   0.0  0.0   0:00.00 [systemd-+
 72706 root      20   0  299272    336    172 S   0.0  0.0   0:39.17 php-fpm: +
 72712 root      20   0  445028    356    240 S   0.0  0.0   0:58.63 sw-engine+
 72887 wp-tool+  20   0  412396   3240   1200 S   0.0  0.1   5:26.72 /usr/bin/+
 72891 wp-tool+  20   0  387556   1868      0 S   0.0  0.1   0:09.09 /usr/bin/+
 77791 root      20   0  182228   7684    772 S   0.0  0.3   0:13.48 lfd - sle+
 78540 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 85330 telegraf  20   0 5654308  19632    260 S   0.0  0.8  11:58.79 /usr/loca+
 85488 dovenull  20   0   49388    584      0 S   0.0  0.0   0:28.73 dovecot/p+
 85489 dovenull  20   0   52160    624      0 S   0.0  0.0   0:14.55 dovecot/i+
 85490 root      20   0   10452    180      0 S   0.0  0.0   0:15.92 dovecot/l+
 85491 dovenull  20   0   49468    640      8 S   0.0  0.0   0:21.26 dovecot/p+
 85492 dovenull  20   0   50900    284     28 S   0.0  0.0   0:19.26 dovecot/i+
 85493 root      20   0   24700   1208      0 S   0.0  0.0   0:07.31 dovecot/c+
 85494 dovecot   20   0   13700     80      8 S   0.0  0.0   0:03.45 dovecot/s+
 85495 dovecot   20   0   43012   1008      0 S   0.0  0.0   0:37.71 dovecot/a+
 91263 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kworker/+
 95329 root      20   0 2573500   1.0g    164 S   0.0 43.5   8:25.70 /usr/loca+
 96668 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 99663 root      20   0  400740   1332    412 S   0.0  0.1   0:28.33 php-fpm: +
 99668 root      20   0  388892    168     76 S   0.0  0.0   0:03.05 php-fpm: +
 99673 root      20   0  396248    228    144 S   0.0  0.0   0:03.15 php-fpm: +
 99678 root      20   0  389508    120     24 S   0.0  0.0   0:03.21 php-fpm: +
 99683 root      20   0  439788    280    188 S   0.0  0.0   0:03.31 php-fpm: +
 99686 root      20   0   12852    328     92 S   0.0  0.0   0:09.10 /usr/loca+
 99687 root      20   0   12732     84      0 S   0.0  0.0   0:07.41 /usr/loca+
 99688 root      20   0   12908    332     24 S   0.0  0.0   0:08.29 /usr/loca+
 99689 root      20   0   53252      4      4 S   0.0  0.0   0:00.05 /usr/loca+
100237 root      20   0  267196   4632    376 S   0.0  0.2   0:51.50 /usr/sbin+
100402 root      20   0  248660   2348    604 S   0.0  0.1   0:14.35 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov23   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov23   4:43  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov23   1:29  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov23  40:13  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov23   0:06  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov23   0:06  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov23   1:43  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov23   6:22  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        R    Nov23  44:27  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov23   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov23   0:04  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S    Nov23   0:41  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   Nov23   5:22  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov23   4:33  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    Nov23   2:32  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<   Nov23   2:18  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    Nov23   0:11  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root      50622  0.0  0.0      0     0 ?        S    00:58   0:00  \_ [kworker/u200:0]
root      78540  0.0  0.0      0     0 ?        S    02:40   0:00  \_ [kworker/1:0]
root      91263  0.0  0.0      0     0 ?        S    02:48   0:00  \_ [kworker/u200:1]
root      96668  0.0  0.0      0     0 ?        S    02:52   0:00  \_ [kworker/0:3]
root      18692  0.0  0.0      0     0 ?        S    03:09   0:00  \_ [kworker/0:0]
root      33726  0.0  0.0      0     0 ?        S    03:20   0:00  \_ [kworker/1:3]
root      44244  0.0  0.0      0     0 ?        S    03:28   0:00  \_ [kworker/0:2]
root      49611  0.0  0.0      0     0 ?        S    03:32   0:00  \_ [kworker/1:4]
root      54979  0.0  0.0      0     0 ?        S    03:36   0:00  \_ [kworker/0:4]
root      56454  0.0  0.0      0     0 ?        S    03:37   0:00  \_ [kworker/1:1]
root      59341  0.0  0.0      0     0 ?        S    03:39   0:00  \_ [kworker/1:2]
root      62753  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [kworker/u200:2]
root      63099  0.0  0.0      0     0 ?        S    03:42   0:00  \_ [kworker/u200:3]
root          1  0.1  0.1 191864  3236 ?        Ss   Nov23  58:46 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  40240  2796 ?        Ss   Nov23  19:20 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352     8 ?        Ss   Nov23   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   120 ?        S<sl Nov23   2:57 /sbin/auditd
root        487  0.0  0.0  21540   304 ?        Ss   Nov23   0:54 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24896  1060 ?        Ss   Nov23   9:29 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610664  1008 ?        Ssl  Nov23   5:19 /usr/lib/polkit-1/polkitd --no-debug
root        495  0.0  0.0 224416  1432 ?        Ss   Nov23   0:25 queueprocd - waiting up to 60s to process a task
root        496  0.0  0.0  52852    96 ?        Ss   Nov23   0:00 /usr/sbin/smartd -n -q never
root        497  0.0  0.0 152780    32 ?        Ss   Nov23   0:02 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        503  0.0  0.0  58748  1344 ?        Ss   Nov23  20:58 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        506  0.1  0.0 1377672 1680 ?        Ssl  Nov23  45:12 /usr/sbin/nscd
rpc         511  0.0  0.0  69256    64 ?        Ss   Nov23   0:02 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov23   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208     0 ?        Ssl  Nov23   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208    24 ?        Ss   Nov23   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124508   312 ?        Ss   Nov23   1:09 /usr/sbin/crond -n
root      51909  0.0  0.0 183080    56 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      51944  0.0  0.0 113284     8 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      51991  0.0  0.0 108056    48 ?        S    01:00   0:00  |       \_ sleep 4h 36m
root      62954  0.0  0.0 183076  1128 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      62985  0.0  0.0 113284   568 ?        Ss   03:42   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      62999  0.0  0.0 108052   224 ?        S    03:42   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      63006  0.0  0.0 113288  1180 ?        S    03:42   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      63127  1.0  0.0 153840  2100 ?        R    03:42   0:00  |               \_ ps auxf
root      62957  0.0  0.0 183076  1128 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      62983  0.0  0.0  20164   552 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      62958  0.0  0.0 183076  1128 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      62981  0.0  0.0  20164   748 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      63132  0.0  0.0  20164   256 ?        R    03:42   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      62959  0.0  0.0 183076  1128 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      62993  0.0  0.0  20164   556 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      62960  0.0  0.0 183076  1128 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      62992  0.0  0.0  20164   752 ?        Ss   03:42   0:00  |   \_ jailshell (cloudsms) [63128] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  63128  0.0  0.0  20164   256 ?        S    03:42   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  63129  0.0  0.0   3512   176 ?        R    03:42   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      62961  0.0  0.0 183076  1128 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      62986  0.0  0.0  20164   552 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      62962  0.0  0.0 183076  1128 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      62996  0.0  0.0  20164   720 ?        Ss   03:42   0:00  |   \_ jailshell (cloudsms) [63093] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  63093  0.0  0.0  20164   260 ?        S    03:42   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  63094  0.0  0.0 113284  1208 ?        S    03:42   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  63096  1.0  0.5 400940 13480 ?        R    03:42   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue5.php
root      62965  0.0  0.0 183076  1124 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      62991  0.0  0.0  20164   556 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      62966  0.0  0.0 183076  1120 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      62987  0.0  0.0  20164   688 ?        Ss   03:42   0:00  |   \_ jailshell (pactpay) [63031] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   63031  0.0  0.0  20164   264 ?        S    03:42   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   63039  0.5  0.4 480124 10812 ?        S    03:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      62968  0.0  0.0 183076  1120 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      62997  0.0  0.0  20164   684 ?        Ss   03:42   0:00  |   \_ jailshell (nigeria) [63048] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   63048  0.0  0.0  20164   260 ?        S    03:42   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   63049  0.4  0.3 404052  8440 ?        S    03:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      62969  0.0  0.0 183076  1120 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      62989  0.0  0.0  20164   684 ?        Ss   03:42   0:00      \_ jailshell (saboakin) [63032] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  63032  0.0  0.0  20164   256 ?        S    03:42   0:00          \_ jailshell (saboakin) [init] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  63041  0.3  0.3 404052  7940 ?        S    03:42   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/saboakin/public_html/massmailer/cron.php
root        576  0.0  0.0 108296     4 tty1     Ss+  Nov23   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704     0 ttyS0    Ss+  Nov23   0:00 /bin/bash
mailnull    621  0.0  0.1  89120  3080 ?        Ss   Nov23   0:55 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        927  0.0  0.0  51628   140 ?        Ss   Nov23   0:28 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1055  0.0  0.0  10320   100 ?        S    Nov23   0:08  \_ dovecot/anvil
dovenull  85488  0.0  0.0  49388   584 ?        S    Dec05   0:28  \_ dovecot/pop3-login
dovenull  85489  0.0  0.0  52160   624 ?        S    Dec05   0:14  \_ dovecot/imap-login
root      85490  0.0  0.0  10452   180 ?        S    Dec05   0:15  \_ dovecot/log
dovenull  85491  0.0  0.0  49468   640 ?        S    Dec05   0:21  \_ dovecot/pop3-login
dovenull  85492  0.0  0.0  50900   284 ?        S    Dec05   0:19  \_ dovecot/imap-login
root      85493  0.0  0.0  24700  1208 ?        S    Dec05   0:07  \_ dovecot/config
dovecot   85494  0.0  0.0  13700    80 ?        S    Dec05   0:03  \_ dovecot/stats
dovecot   85495  0.0  0.0  43012  1008 ?        S    Dec05   0:37  \_ dovecot/auth
systuser    928  0.0  0.0  11540     0 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756     0 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524     0 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608     0 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        933  0.0  0.0 153404    88 ?        Ss   Nov23   0:54 pure-ftpd (SERVER)
root        935  0.0  0.0 572372   740 ?        Ssl  Nov23   3:20 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        937  0.0  0.0 111304   212 ?        Ss   Nov23   4:22 /usr/sbin/sshd -D
root      62880  0.0  0.0 111304  1688 ?        Ss   03:41   0:00  \_ sshd: [accepted]
sshd      62901  0.0  0.0 115644  1644 ?        S    03:41   0:00  |   \_ sshd: [net]
root      63065  0.2  0.1 162436  3744 ?        Rs   03:42   0:00  \_ sshd: root [priv]
sshd      63083  0.0  0.1 115644  2620 ?        S    03:42   0:00  |   \_ sshd: root [net]
root      63081  0.0  0.1 111304  4312 ?        Ss   03:42   0:00  \_ sshd: [accepted]
sshd      63092  0.0  0.1 115644  2624 ?        S    03:42   0:00  |   \_ sshd: [net]
root      63086  0.0  0.2 157100  4936 ?        Ss   03:42   0:00  \_ sshd: unknown [priv]
sshd      63091  0.0  0.1 115644  2628 ?        S    03:42   0:00      \_ sshd: unknown [net]
root        939  0.0  0.2 1350728 6216 ?        Ssl  Nov23   1:28 /usr/bin/cspdaemon
root        952  0.0  0.1 261692  4168 ?        Ss   Nov23   7:20 cpsrvd (SSL) - waiting for connections                   
root      63029  0.2  0.0      0     0 ?        Z    03:42   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.1 331088  3400 ?        Ssl  Nov23  10:11 /usr/sbin/rsyslogd -n
cpanelc+    969  0.0  0.1  10764  3420 ?        Ss   Nov23  29:26 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
memcach+    972  0.0  0.0 342400     0 ?        Ssl  Nov23   0:52 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 1277312 1960 ?        Ssl  Nov23   0:32 /usr/bin/checkstatus
systuser    980  0.0  0.4 114016 11916 ?        Ssl  Nov23  10:40 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser   1144  0.0  0.0 157704   512 ?        S    Nov23   0:11 SonarPush 0.6.12 [sleeping]
root       1239  0.0  0.0 167452  1572 ?        Ss   Nov23   0:36 dnsadmin - dormant mode
root       1243  0.0  0.3 211908  7816 ?        Ss   Nov23   4:52 tailwatchd
root      62820  0.4  0.7 223780 17240 ?        S    03:41   0:00  \_ tailwatchd - chkservd - spamd check
root      63050  0.6  0.3 166832  9280 ?        S    03:42   0:00      \_ /usr/local/cpanel/scripts/restartsrv_spamd --check --notconfigured-ok
root      63078  0.0  0.0  39112   996 ?        S    03:42   0:00          \_ /usr/local/cpanel/3rdparty/perl/536/bin/spamc -K -u cpanel
root       1244  0.0  0.7 262224 17968 ?        Ss   Nov23   3:37 cpdavd - accepting connections on: 2091, 2077, 2078
root       1676  0.0  0.0 130416   708 ?        SN   Nov23   0:06 cpanellogd - sleeping for logs
oysipao+  15361  0.0  0.0   3148     4 ?        Ss   Nov23   0:00 [kworker]
oysipao+  15368  0.0  0.0   3156    36 ?        S    Nov23   0:55  \_ [kworker]
mysql     13043  1.7  8.0 1487024 195356 ?      Sl   Dec04 374:14 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
telegraf  85330  0.0  0.8 5654308 19568 ?       SLsl Dec04  11:58 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root      95329  0.0 43.4 2573500 1052180 ?     Ssl  Dec09   8:25 /usr/local/cpanel/3rdparty/bin/clamd -F
root      72706  0.0  0.0 299272   336 ?        Ss   Dec09   0:39 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root      72712  0.0  0.0 445028   356 ?        Ss   Dec09   0:58 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  62976  0.0  0.0 445028   316 ?        S    03:42   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root      63131  0.0  0.0 445028   116 ?        R    03:42   0:00  \_ sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  72887  0.0  0.1 412396  3240 ?        Ss   Dec09   5:26 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+  72891  0.0  0.0 387556  1868 ?        Ss   Dec09   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root     100237  0.0  0.1 267196  4632 ?        Ss   Dec09   0:51 /usr/sbin/httpd -k start
root      99686  0.0  0.0  12852   328 ?        S    Dec18   0:09  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      99687  0.0  0.0  12732    84 ?        S    Dec18   0:07  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      99688  0.0  0.0  12908   332 ?        S    Dec18   0:08  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      99689  0.0  0.0  53252     4 ?        S    Dec18   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    54433  0.0  0.6 277716 15728 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody    54739  0.0  0.6 277656 16108 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody    54761  0.0  0.6 277960 16000 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody    57448  0.0  0.6 277588 15220 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
nobody    58153  0.0  0.6 277680 15112 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    58154  0.0  0.7 277696 17484 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    58156  0.0  0.6 277708 15064 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
cloudsms  62831  1.1  1.9 338064 46588 ?        R    03:41   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    62802  0.0  0.6 277496 14560 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    62803  0.0  0.6 277672 16664 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
cloudsms  63088  2.0  0.7 302596 18880 ?        R    03:42   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    62823  0.0  0.5 277524 13612 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    62824  0.0  0.5 277496 14424 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    62836  0.1  0.6 277528 15384 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    62837  0.0  0.5 277496 13808 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    62839  0.0  0.5 277496 13840 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    62863  0.1  0.5 277592 14164 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    62881  0.0  0.5 277384 13380 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    62887  0.0  0.5 277496 13996 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
cloudw    63019  0.7  0.5 353712 12240 ?        S    03:42   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    62888  0.2  0.6 277496 14628 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
cloudw    63079  0.7  0.6 288176 15916 ?        Sl   03:42   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    62894  0.1  0.6 277656 15740 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    62895  0.0  0.6 277492 16340 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    62896  0.0  0.0      0     0 ?        Z    03:41   0:00  \_ [httpd] <defunct>
named      1188  0.0  0.9 1185868 21864 ?       Ssl  Dec17   1:46 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root      99663  0.0  0.0 400740  1332 ?        Ss   Dec18   0:28 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   62898  0.0  0.1 400460  3828 ?        S    03:41   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   62899  0.0  0.1 400460  3944 ?        S    03:41   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    62971  2.0  1.2 424780 29728 ?        R    03:42   0:00  \_ php-fpm: pool cloudware_ng
nigeria   63087  0.0  0.1 400460  4360 ?        S    03:42   0:00  \_ php-fpm: pool nigeriadecide_org
root      99668  0.0  0.0 388892   168 ?        Ss   Dec18   0:03 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root      99673  0.0  0.0 396248   228 ?        Ss   Dec18   0:03 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root      99678  0.0  0.0 389508   120 ?        Ss   Dec18   0:03 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
agradio   62775  0.8  1.1 420196 27412 ?        S    03:41   0:00  \_ php-fpm: pool agradio_ng
agradio   62842  1.2  1.1 420428 28388 ?        R    03:41   0:00  \_ php-fpm: pool agradio_ng
agradio   62865  1.3  1.1 420332 28404 ?        R    03:41   0:00  \_ php-fpm: pool agradio_ng
agradio   62866  1.2  1.1 420196 27424 ?        S    03:41   0:00  \_ php-fpm: pool agradio_ng
root      99683  0.0  0.0 439788   280 ?        Ss   Dec18   0:03 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root     100402  0.0  0.0 248660  2348 ?        Ss   Dec18   0:14 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       2140  0.0  0.5 262480 14260 ?        R    Dec18   0:04  \_ spamd child
root      11657  0.0  0.0 248660   596 ?        S    Dec18   0:00  \_ spamd child
root      77791  0.1  0.3 182228  7664 ?        Ss   00:00   0:13 lfd - sleeping
root      63082  0.3  0.5 182228 12504 ?        R    03:42   0:00  \_ lfd - (child) closing
root       7543  0.0  0.0 123576   228 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
root      57761  0.0  0.0 113284   284 ?        SN   03:38   0:00  \_ /bin/bash /bin/run-parts /etc/cron.daily
root      62722  0.0  0.0 113284   244 ?        SN   03:41   0:00      \_ /bin/sh /etc/cron.daily/mlocate
root      62728  0.5  0.0 108856  1320 ?        RN   03:41   0:00      |   \_ /usr/bin/updatedb -f sysfs ramfs bdev proc cgroup cpuset tmpfs devtmpfs debugfs securityfs sockfs dax bpf pipefs configfs devpts hugetlbfs autofs pstore mqueue rpc_pipefs binfmt_misc
root      62723  0.0  0.0 113644   168 ?        SN   03:41   0:00      \_ awk -v progname=/etc/cron.daily/mlocate progname { ????   print progname ":\n" ????   progname=""; ???       } ???       { print; }
root      57771  0.0  0.1 132964  3580 ?        SN   03:38   0:00 ConfigServer Version Check
root      57783  0.0  0.0 108056    72 ?        SN   03:38   0:00  \_ sleep 1502
root      62617  0.0  0.0 114360  1368 ?        SN   03:41   0:00 bash /usr/local/maldetect/maldet -b -r /home?/?/public_html/,/var/www/,/usr/local/apache/htdocs/ 1
root      62715  0.9  0.0 120348   628 ?        RN   03:41   0:00  \_ /bin/find /lmd_find/ /home/agradio/public_html/ /home/agvestcapitals/public_html/ /home/cloudsms/public_html/ /home/cloudurl/public_html/ /home/cloudw/public_html/ /home/ebolaprevention/public_html/ /home/ekoemail42/public_html/ /home/ermsstagingclou7/public_html/ /home/foodcong/public_html/ /home/healthoyostate78/public_html/ /home/kaizancom/public_html/ /home/locationforms/public_html/ /home/mediabuycom/public_html/ /home/nescrowcom/public_html/ /home/nigeria/public_html/ /home/oyocovid19/public_html/ /home/oyotechbcovid/public_html/ /home/oyrtmayouthvol78/public_html/ /home/oysipaoygov/public_html/ /home/pactpay/public_html/ /home/robocallscloudsm/public_html/ /home/saboakin/public_html/ /home/salutem/public_html/ /home/stagingcloudware/public_html/ /home/taisolarinlibr43/public_html/ /home/theforgecom/public_html/ /home/w156credit/public_html/ /home/worencom/public_html/ /home/workflowmanageme/public_html/ /home/xtremotors/public_html/ /home/zabymmmd/public_html/ /var/www/ /usr/local/apache/htdocs/ /tmp /var/tmp /dev/shm -path "/usr/local/maldetect" -prune -o -maxdepth 15 -regextype posix-egrep ( -mtime -1 -o -ctime -1 ) -type f -size +24  -size -6947618  -not -perm 000 -not -uid 0 -not -gid 0
root      62716  0.0  0.0 112812   204 ?        SN   03:41   0:00  \_ grep -E -vf /usr/local/maldetect/ignore_paths
cloudw    62998  0.9  0.4 287616 10320 ?        S    03:42   0:00 /opt/cpanel/ea-php70/root/usr/bin/php -f /home/cloudw/wptraining.cloudware.ng/wp-includes/ggwzcs.php
cloudw    63133  0.0  0.2 287616  5112 ?        R    03:42   0:00  \_ /opt/cpanel/ea-php70/root/usr/bin/php -f /home/cloudw/wptraining.cloudware.ng/wp-includes/ggwzcs.php
## mysql stats
Uptime: 1250228  Threads: 9  Questions: 138028047  Slow queries: 0  Opens: 319124  Flush tables: 1  Open tables: 2000  Queries per second avg: 110.402
*************************** 1. row ***************************
     Id: 2230364
   User: cloudsms_wp167
   Host: localhost
     db: cloudsms_wp167
Command: Sleep
   Time: 11
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 2230377
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `30` WHERE `phone`='2348143389193' LIMIT 1
*************************** 3. row ***************************
     Id: 2230380
   User: saboakin_saboaki
   Host: localhost
     db: saboakin_sabo
Command: Query
   Time: 2
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 10
*************************** 4. row ***************************
     Id: 2230381
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-12-19' LIMIT 1
*************************** 5. row ***************************
     Id: 2230382
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 2230384
   User: saboakin_saboaki
   Host: localhost
     db: saboakin_sabo
Command: Sleep
   Time: 2
  State: 
   Info: NULL
*************************** 7. row ***************************
     Id: 2230390
   User: agradio_wp607
   Host: localhost
     db: agradio_wp607
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 8. row ***************************
     Id: 2230391
   User: agradio_wp607
   Host: localhost
     db: agradio_wp607
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 9. row ***************************
     Id: 2230394
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 10.30.9.122 TIME_WAIT
      1 10.30.9.138 TIME_WAIT
      1 114.119.140.4 TIME_WAIT
      1 142.44.233.124 TIME_WAIT
      1 148.113.128.130 TIME_WAIT
      1 167.114.139.114 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.73.216.10 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 51.222.95.57 TIME_WAIT
      1 54.86.115.253 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 136.243.228.180 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.66 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Dec 8 2025 14:42:54
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 19-Dec-2025 03:42:15 WAT
   Restart Time: Tuesday, 09-Dec-2025 04:48:00 WAT
   Parent Server Config. Generation: 5
   Parent Server MPM Generation: 4
   Server uptime: 9 days 22 hours 54 minutes 14 seconds
   Server load: 20.72 5.88 2.32
   Total accesses: 2534932 - Total Traffic: 24.4 GB - Total Duration: 999902066
   CPU Usage: u7.08 s45.74 cu17281.6 cs11318.9 - 3.33% CPU load
   2.95 requests/sec - 29.7 kB/second - 10.1 kB/request - 394.449 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 9 idle workers

._._K_W.W__W_W.W.WW.._.CWW.__...................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

    Srv   PID      Acc     M CPU    SS    Req    Dur    Conn Child   Slot      Client      Protocol              VHost                                          Request
   0-4   -     0/0/178179  . 0.00 1      98    68039317 0.0  0.00  1919.30 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   1-4   62802 0/2/166743  _ 0.03 3      33299 64434304 0.0  0.01  1618.05 167.172.158.128 http/1.1 agradio.ng:443                  GET /config.json HTTP/1.1
   2-4   -     0/0/163655  . 0.00 8      0     62758527 0.0  0.00  1647.04 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   3-4   57448 0/39/164860 _ 0.50 0      288   62596751 0.0  0.45  1671.89 217.113.194.124 http/1.1 team.cloudware.ng:80            GET /var/cache/dev/pools/AcsHjSlfaz/2/C/c3o2u9Uiy6j1uuw0A6Xw HT
   4-4   54739 6/37/154401 K 0.92 1      3394  58603713 44.4 0.37  1451.38 51.77.43.178    http/1.1 cloudsms.com.ng:443             GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   5-4   54761 0/58/151131 _ 0.78 3      42013 58507904 0.0  0.48  1596.96 167.172.158.128 http/1.1 agradio.ng:443                  GET /.env HTTP/1.1
   6-4   62803 0/3/147005  W 0.02 2      0     55131589 0.0  0.01  1527.77 15.235.96.72    http/1.1 blog.cloudsms.com.ng:443        GET /wp-sitemap.xml HTTP/1.1
   7-4   -     0/0/137531  . 0.00 11     2     52737733 0.0  0.00  1317.65 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   8-4   62823 0/1/134317  W 0.01 11     0     51742145 0.0  0.00  1358.46 77.75.78.169    http/1.1 cloudware.ng:443                GET /auto-dealers-software-solutions/ HTTP/1.1
   9-4   62824 0/1/124790  _ 0.01 3      31007 48465011 0.0  0.01  1254.43 167.172.158.128 http/1.1 agradio.ng:443                  GET /telescope/requests HTTP/1.1
   10-4  62836 0/3/123500  _ 0.04 2      190   47522437 0.0  0.06  1158.10 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   11-4  58153 0/40/108067 W 0.50 0      0     42117738 0.0  0.33  1020.87 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   12-4  58154 0/38/106246 _ 0.64 1      1616  42206957 0.0  0.38  1011.15 185.191.171.7   http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?lga=Gamawa&state=Bauchi&ward=Gad
   13-4  62837 0/0/93976   W 0.00 28     0     36911801 0.0  0.00  871.54  167.172.158.128 http/1.1 agradio.ng:443                  GET /?rest_route=/wp/v2/users/ HTTP/1.1
   14-4  -     0/0/83761   . 0.00 12     0     35203671 0.0  0.00  925.08  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-4  58156 0/36/75303  W 1.13 35     0     29390886 0.0  0.47  685.79  54.37.118.67    http/1.1 blog.cloudsms.com.ng:443        GET /robots.txt HTTP/1.1
   16-4  -     0/0/62173   . 0.00 5      93    24990737 0.0  0.00  574.43  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-4  62839 0/0/48064   W 0.00 30     0     20288286 0.0  0.00  490.70  167.172.158.128 http/1.1 agradio.ng:443                  GET /info.php HTTP/1.1
   18-4  62863 0/5/42550   W 0.03 0      0     18992956 0.0  0.01  393.82  52.73.142.41    http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/images/images/images/blog/2019el
   19-4  -     0/0/28423   . 0.00 12     0     12629655 0.0  0.00  306.54  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-4  -     0/0/34150   . 0.00 9      1     14984998 0.0  0.00  326.77  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-4  54433 0/57/17798  _ 0.53 3      40026 7694247  0.0  0.64  159.77  167.172.158.128 http/1.1 agradio.ng:443                  GET /.git/config HTTP/1.1
   22-4  -     0/0/16905   . 0.00 2      98    6684970  0.0  0.00  156.64  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-4  62881 1/2/20237   C 0.01 0      0     8692951  0.2  0.00  208.18  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-4  62887 0/1/14398   W 0.01 9      0     6859322  0.0  0.01  132.42  216.73.216.10   http/1.1 support.cloudware.ng:443        GET /?c=3359974744 HTTP/1.1
   25-4  62888 0/1/13135   W 0.01 5      0     6763588  0.0  0.00  119.45  192.178.4.104   http/1.1 support.cloudware.ng:443        GET /?c=1251848664 HTTP/1.1
   26-4  -     0/0/12622   . 0.00 3      209   5773239  0.0  0.00  104.88  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-4  62894 0/2/8428    _ 0.05 2      1405  3745668  0.0  0.01  70.78   54.166.104.83   http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/blog/blog/images/blog/2019electi
   28-4  62895 0/2/7984    _ 0.05 1      1395  3094762  0.0  0.01  71.44   185.191.171.15  http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?lga=Onitsha-north&state=Anambra&
   29-4  -     0/0/6200    . 0.00 0      0     2515893  0.0  0.00  69.64   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-4  -     0/0/4838    . 0.00 9748   0     2103492  0.0  0.00  30.60   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-4  -     0/0/3941    . 0.00 24694  0     1793568  0.0  0.00  28.55   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-4  -     0/0/4025    . 0.00 26100  0     1446367  0.0  0.00  36.89   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-4  -     0/0/3094    . 0.00 24971  0     1084777  0.0  0.00  20.65   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-4  -     0/0/1503    . 0.00 30205  0     1616017  0.0  0.00  9.16    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-4  -     0/0/1817    . 0.00 30179  0     820435   0.0  0.00  16.63   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-4  -     0/0/4061    . 0.00 30216  0     1489499  0.0  0.00  30.92   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-4  -     0/0/2733    . 0.00 29980  0     727922   0.0  0.00  26.26   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-4  -     0/0/5944    . 0.00 30191  0     2105750  0.0  0.00  55.06   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-4  -     0/0/3161    . 0.00 29923  0     1163040  0.0  0.00  46.76   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-4  -     0/0/4250    . 0.00 30230  3     2875466  0.0  0.00  65.74   45.131.155.103  http/1.1 cybersynchs.cloudware.ng:80     GET / HTTP/1.1
   41-4  -     0/0/2277    . 0.00 30214  0     979265   0.0  0.00  28.19   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-4  -     0/0/1789    . 0.00 29760  0     847663   0.0  0.00  22.69   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-4  -     0/0/2219    . 0.00 30172  0     890357   0.0  0.00  23.58   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-4  -     0/0/3382    . 0.00 27828  0     997980   0.0  0.00  27.36   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-4  -     0/0/1308    . 0.00 30217  0     649586   0.0  0.00  13.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-4  -     0/0/1181    . 0.00 29771  0     487858   0.0  0.00  9.38    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-4  -     0/0/860     . 0.00 30181  0     444916   0.0  0.00  8.37    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-4  -     0/0/1735    . 0.00 30183  0     653358   0.0  0.00  12.22   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-4  -     0/0/830     . 0.00 30224  0     433804   0.0  0.00  6.48    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-4  -     0/0/1022    . 0.00 30210  0     405466   0.0  0.00  10.57   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-4  -     0/0/1041    . 0.00 30202  0     456641   0.0  0.00  4.93    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-4  -     0/0/1739    . 0.00 30022  0     693479   0.0  0.00  14.80   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-4  -     0/0/1930    . 0.00 29542  0     842894   0.0  0.00  19.46   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-4  -     0/0/409     . 0.00 30187  0     300350   0.0  0.00  2.73    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-4  -     0/0/1366    . 0.00 30190  0     482139   0.0  0.00  9.73    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-4  -     0/0/475     . 0.00 30162  0     385204   0.0  0.00  3.23    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-4  -     0/0/1368    . 0.00 29328  0     700009   0.0  0.00  9.93    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-4  -     0/0/1230    . 0.00 30223  0     419126   0.0  0.00  7.23    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-4  -     0/0/170     . 0.00 30201  0     321326   0.0  0.00  1.38    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-4  -     0/0/604     . 0.00 29757  0     284353   0.0  0.00  3.19    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-4  -     0/0/807     . 0.00 30180  0     352719   0.0  0.00  8.04    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-4  -     0/0/998     . 0.00 30222  0     437042   0.0  0.00  11.97   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-4  -     0/0/753     . 0.00 30212  0     500477   0.0  0.00  6.05    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-4  -     0/0/172     . 0.00 30211  0     228200   0.0  0.00  1.37    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-4  -     0/0/707     . 0.00 30225  0     437281   0.0  0.00  4.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-4  -     0/0/248     . 0.00 30204  0     155488   0.0  0.00  1.42    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-4  -     0/0/1317    . 0.00 30200  4     631744   0.0  0.00  13.19   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-4  -     0/0/229     . 0.00 30230  0     267294   0.0  0.00  1.35    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-4  -     0/0/767     . 0.00 29197  0     688887   0.0  0.00  6.19    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-4  -     0/0/755     . 0.00 30122  0     283745   0.0  0.00  5.62    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-4  -     0/0/1983    . 0.00 28155  0     763362   0.0  0.00  13.53   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-4  -     0/0/287     . 0.00 30207  0     297051   0.0  0.00  2.16    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-4  -     0/0/409     . 0.00 29775  243   271293   0.0  0.00  2.91    178.128.19.45   http/1.1 nigeriadecide.org:443           POST /blog//xmlrpc.php HTTP/1.1
   74-4  -     0/0/160     . 0.00 30196  0     186077   0.0  0.00  0.63    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-4  -     0/0/326     . 0.00 30195  0     139945   0.0  0.00  1.50    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-4  -     0/0/287     . 0.00 30230  0     125653   0.0  0.00  1.32    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-4  -     0/0/241     . 0.00 29983  4     378337   0.0  0.00  0.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-4  -     0/0/141     . 0.00 30171  0     35995    0.0  0.00  0.22    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   79-4  -     0/0/157     . 0.00 30194  0     13496    0.0  0.00  0.29    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   80-4  -     0/0/528     . 0.00 29628  0     158358   0.0  0.00  2.80    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   81-4  -     0/0/319     . 0.00 30221  0     170775   0.0  0.00  1.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   82-4  -     0/0/112     . 0.00 30228  0     120764   0.0  0.00  0.44    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   83-4  -     0/0/621     . 0.00 30186  0     373628   0.0  0.00  3.54    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   84-4  -     0/0/189     . 0.00 30188  0     105779   0.0  0.00  1.02    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   85-4  -     0/0/262     . 0.00 30227  0     74396    0.0  0.00  0.67    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   86-4  -     0/0/223     . 0.00 29692  0     84591    0.0  0.00  1.82    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   87-4  -     0/0/878     . 0.00 28842  0     171957   0.0  0.00  4.33    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   88-4  -     0/0/268     . 0.00 30199  0     80410    0.0  0.00  0.91    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   89-4  -     0/0/689     . 0.00 30185  0     340634   0.0  0.00  17.70   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   90-4  -     0/0/125     . 0.00 30189  0     90117    0.0  0.00  0.63    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   91-2  -     0/0/507     . 0.00 269159 0     174361   0.0  0.00  3.32    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   92-2  -     0/0/179     . 0.00 269693 0     116013   0.0  0.00  0.97    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   93-2  -     0/0/110     . 0.00 269729 0     65032    0.0  0.00  0.45    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   94-2  -     0/0/185     . 0.00 269751 82    114296   0.0  0.00  2.40    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   95-2  -     0/0/163     . 0.00 269656 0     122930   0.0  0.00  0.30    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   96-2  -     0/0/169     . 0.00 269737 0     21600    0.0  0.00  0.16    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   97-2  -     0/0/350     . 0.00 269036 0     77331    0.0  0.00  0.92    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   98-2  -     0/0/283     . 0.00 269694 0     86349    0.0  0.00  0.88    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   99-2  -     0/0/206     . 0.00 268962 0     127715   0.0  0.00  1.02    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   100-2 -     0/0/230     . 0.00 269188 0     45632    0.0  0.00  0.47    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   101-2 -     0/0/113     . 0.00 269716 0     111909   0.0  0.00  0.46    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   102-2 -     0/0/8       . 0.00 269774 86    8810     0.0  0.00  0.06    138.197.152.229 http/1.1 new-vegas-cash.staging.cloudwar GET /wp-2019.php HTTP/1.1
   103-2 -     0/0/193     . 0.00 269658 0     60761    0.0  0.00  0.48    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   104-2 -     0/0/227     . 0.00 269669 0     19228    0.0  0.00  0.14    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   105-2 -     0/0/19      . 0.00 269747 0     20494    0.0  0.00  0.03    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   106-2 -     0/0/89      . 0.00 269746 0     30342    0.0  0.00  0.09    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   107-2 -     0/0/75      . 0.00 269740 0     23965    0.0  0.00  0.05    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   108-2 -     0/0/207     . 0.00 269701 0     99496    0.0  0.00  0.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   109-2 -     0/0/11      . 0.00 269750 0     27094    0.0  0.00  0.01    138.197.152.229 http/1.1 proxy-subdomains-vhost.localhos GET /nf_tracking.php HTTP/1.1
   110-2 -     0/0/160     . 0.00 269666 0     55783    0.0  0.00  0.59    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   111-2 -     0/0/4       . 0.00 269670 0     1637     0.0  0.00  0.01    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   112-2 -     0/0/107     . 0.00 269760 0     16580    0.0  0.00  0.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   113-2 -     0/0/135     . 0.00 269160 0     43118    0.0  0.00  0.64    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   114-2 -     0/0/79      . 0.00 269733 0     35968    0.0  0.00  0.04    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   115-2 -     0/0/115     . 0.00 269686 0     51751    0.0  0.00  0.44    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   116-2 -     0/0/207     . 0.00 269696 0     79415    0.0  0.00  0.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   117-2 -     0/0/131     . 0.00 269699 0     48034    0.0  0.00  0.46    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   118-2 -     0/0/112     . 0.00 269683 0     67705    0.0  0.00  0.45    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   119-2 -     0/0/2       . 0.00 269651 0     241030   0.0  0.00  0.00    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   120-2 -     0/0/117     . 0.00 269706 0     58506    0.0  0.00  0.44    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   121-2 -     0/0/159     . 0.00 269697 0     48348    0.0  0.00  0.45    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   122-2 -     0/0/153     . 0.00 269689 0     30575    0.0  0.00  0.10    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   123-2 -     0/0/90      . 0.00 269673 0     69610    0.0  0.00  0.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   124-2 -     0/0/124     . 0.00 269648 0     48197    0.0  0.00  0.44    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   125-2 -     0/0/225     . 0.00 269682 0     46797    0.0  0.00  1.31    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   126-2 -     0/0/113     . 0.00 269654 0     60949    0.0  0.00  0.77    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   127-2 -     0/0/196     . 0.00 269712 0     43269    0.0  0.00  0.49    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   128-2 -     0/0/153     . 0.00 269653 0     89591    0.0  0.00  0.92    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   129-2 -     0/0/182     . 0.00 269676 0     14610    0.0  0.00  0.11    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   130-2 -     0/0/75      . 0.00 269698 0     29077    0.0  0.00  0.38    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   131-2 -     0/0/138     . 0.00 269528 0     61766    0.0  0.00  0.58    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   132-2 -     0/0/105     . 0.00 269726 0     61218    0.0  0.00  0.42    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   133-2 -     0/0/17      . 0.00 269751 0     596      0.0  0.00  0.01    138.197.152.229 http/1.1 proxy-subdomains-vhost.localhos GET /wp-includes/rest-api/about.php HTTP/1.1
   134-2 -     0/0/110     . 0.00 269749 0     13878    0.0  0.00  0.08    138.197.152.229 http/1.1 proxy-subdomains-vhost.localhos GET /wp-includes/IXR/about.php HTTP/1.1
   135-2 -     0/0/6       . 0.00 269762 0     21667    0.0  0.00  0.02    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   136-2 -     0/0/4       . 0.00 269764 0     6056     0.0  0.00  0.00    138.197.152.229 http/1.1 proxy-subdomains-vhost.localhos GET /as.php HTTP/1.1
   137-2 -     0/0/222     . 0.00 269521 0     59782    0.0  0.00  0.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   138-2 -     0/0/109     . 0.00 269748 0     16220    0.0  0.00  0.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   139-2 -     0/0/160     . 0.00 269684 0     24902    0.0  0.00  0.24    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   140-2 -     0/0/9       . 0.00 269764 0     20410    0.0  0.00  0.03    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   141-2 -     0/0/104     . 0.00 269710 0     59137    0.0  0.00  0.42    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   142-2 -     0/0/107     . 0.00 269723 0     36089    0.0  0.00  0.41    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   143-2 -     0/0/86      . 0.00 269677 0     37015    0.0  0.00  0.55    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 510
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 19 seconds, (range: 2...50)
   index usage: 9%, cache usage: 12%
   total entries stored since starting: 118699
   total entries replaced since starting: 0
   total entries expired since starting: 118071
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 12 hit, 965 miss
   total removes since starting: 124 hit, 425 miss
Youez - 2016 - github.com/yon3zu
LinuXploit