403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.48
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-12-19.07.00.txt
 ## swap threshold exceeded
## server overview
2025-12-19.07.00 load[0] mem[54/39] mysql[4/47] httpd[5]
              total        used        free      shared  buff/cache   available
Mem:           2363        1154          79          39        1129         984
Swap:          4047        1720        2327
 07:00:01 up 25 days,  9:48,  0 users,  load average: 0.17, 0.37, 0.64
## system overview
top - 07:00:01 up 25 days,  9:48,  0 users,  load average: 0.17, 0.37, 0.64
Tasks: 225 total,   7 running, 217 sleeping,   0 stopped,   1 zombie
%Cpu(s): 76.5 us, 20.6 sy,  2.9 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    67604 free,  1194944 used,  1157752 buff/cache
KiB Swap:  4145144 total,  2383404 free,  1761740 used.   995516 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 13043 mysql     20   0 1487024 287740   2168 S 125.0 11.9 378:14.09 /usr/sbin+
 13647 nigeria   20   0  404052  16136  10384 R  12.5  0.7   0:00.05 /opt/cpan+
     6 root      20   0       0      0      0 S   6.2  0.0   4:44.89 [ksoftirq+
   256 root       0 -20       0      0      0 S   6.2  0.0   5:25.61 [kworker/+
 13607 root      20   0 1276956  14640    596 S   6.2  0.6   0:00.06 /usr/bin/+
 13690 locatio+  20   0  406296  18196  11088 R   6.2  0.8   0:00.03 /opt/cpan+
 13777 cloudsms  20   0  404052  15872  10224 R   6.2  0.7   0:00.01 /opt/cpan+
 92737 nobody    20   0  277956  20240   4452 S   6.2  0.8   0:00.53 /usr/sbin+
     1 root      20   0  191864   3468   1496 S   0.0  0.1  59:10.78 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.49 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     7 root      rt   0       0      0      0 S   0.0  0.0   1:30.02 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0  40:26.48 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:06.31 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:06.22 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   1:43.91 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   6:24.06 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.78 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.18 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0  44:49.08 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:04.19 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   0:41.72 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   265 root       0 -20       0      0      0 S   0.0  0.0   4:36.18 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   2:32.82 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40240   6304   6048 S   0.0  0.3  19:25.40 /usr/lib/+
   383 root      20   0   45352      8      4 S   0.0  0.0   0:00.45 /usr/lib/+
   412 root      16  -4   55532    108      0 S   0.0  0.0   2:58.39 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    384    272 S   0.0  0.0   0:54.29 /usr/sbin+
   489 root      20   0   24896   1160    792 S   0.0  0.0   9:32.70 /usr/lib/+
   494 polkitd   20   0  610664   1124    608 S   0.0  0.0   5:21.58 /usr/lib/+
   495 root      20   0  224416   4552    748 S   0.0  0.2   0:26.16 queueproc+
   496 root      20   0   52852     96      0 S   0.0  0.0   0:00.33 /usr/sbin+
   497 root      20   0  152780     56     12 S   0.0  0.0   0:02.80 /usr/sbin+
   503 dbus      20   0   58748   1356    600 S   0.0  0.1  21:05.59 /usr/bin/+
   506 nscd      20   0 1377672   2540    668 S   0.0  0.1  45:29.96 /usr/sbin+
   511 rpc       20   0   69256     20      0 S   0.0  0.0   0:02.25 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208     24      0 S   0.0  0.0   0:00.06 /usr/sbin+
   558 root      20   0  124508    428    296 S   0.0  0.0   1:09.46 /usr/sbin+
   576 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   621 mailnull  20   0   89120   3380    416 S   0.0  0.1   0:55.94 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   2:20.75 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:11.27 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   927 root      20   0   51628    472    304 S   0.0  0.0   0:28.37 /usr/sbin+
   928 systuser  20   0   11540     52      0 S   0.0  0.0   0:01.20 /usr/loca+
   929 systuser  20   0   12756     60      0 S   0.0  0.0   0:01.19 /usr/loca+
   931 systuser  20   0  112524     68      0 S   0.0  0.0   0:01.15 /usr/loca+
   932 systuser  20   0  111608     68      0 S   0.0  0.0   0:01.12 /usr/loca+
   933 root      20   0  153404    220    136 S   0.0  0.0   0:54.84 pure-ftpd+
   935 root      20   0  572372    808    304 S   0.0  0.0   3:21.95 /usr/bin/+
   937 root      20   0  111304    364    256 S   0.0  0.0   4:23.05 /usr/sbin+
   939 root      20   0 1350728   6424      4 S   0.0  0.3   1:28.92 /usr/bin/+
   952 root      20   0  261692   6864   1736 S   0.0  0.3   7:23.66 cpsrvd (S+
   953 root      20   0  331088   6532   5832 S   0.0  0.3  10:14.53 /usr/sbin+
   969 cpanelc+  20   0   10764   3788   2292 S   0.0  0.2  29:36.73 /usr/loca+
   972 memcach+  20   0  342400      0      0 S   0.0  0.0   0:52.74 /usr/bin/+
   974 root      20   0 1277312   2356      4 S   0.0  0.1   0:32.60 /usr/bin/+
   980 systuser  20   0  114016  10760   2724 S   0.0  0.4  10:44.73 /usr/loca+
  1055 dovecot   20   0   10320    352    232 S   0.0  0.0   0:08.74 dovecot/a+
  1144 systuser  20   0  157704   2916    924 S   0.0  0.1   0:11.67 SonarPush+
  1188 named     20   0 1185868  30796   1636 S   0.0  1.3   1:54.80 /usr/sbin+
  1239 root      20   0  167452   1216    668 S   0.0  0.1   0:36.56 dnsadmin +
  1243 root      20   0  209304  19112   1684 S   0.0  0.8   4:53.88 tailwatchd
  1244 root      20   0  262224  21732   3876 S   0.0  0.9   3:40.12 cpdavd - +
  1676 root      38  18  130416   1380    692 S   0.0  0.1   0:06.23 cpanellog+
  5839 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  7177 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  7237 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 13114 nigeria   20   0  400460   4648   2404 S   0.0  0.2   0:00.00 php-fpm: +
 13126 mailnull  20   0   89540   5728   2452 S   0.0  0.2   0:00.00 /usr/sbin+
 13132 mailnull  20   0   89540   5480   2220 S   0.0  0.2   0:00.00 /usr/sbin+
 13245 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 13257 healtho+  20   0  458588  65288   4188 S   0.0  2.7   0:01.17 php-fpm: +
 13518 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 13519 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 13528 root      20   0  183080   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13529 root      20   0  183080   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13530 root      20   0  183080   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13531 root      20   0  183080   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13533 root      20   0  183080   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13535 root      20   0  183080   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13537 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13538 root      20   0  183080   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13539 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13541 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13542 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13543 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13544 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13545 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13546 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13547 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13548 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13549 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13550 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13551 root      20   0  183076   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 13554 root      20   0  183076   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13555 root      20   0  183076   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 13567 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13570 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 13571 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 13572 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13573 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 13574 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13575 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13576 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13578 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 13580 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13581 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 13582 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13583 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 13584 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13585 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13586 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 13587 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 13588 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 13589 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 13591 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 13592 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 13595 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 13598 root      20   0 1276844  11120    596 S   0.0  0.5   0:00.06 /usr/bin/+
 13599 root      35  15  113288   1424   1240 S   0.0  0.1   0:00.00 /bin/bash+
 13600 root      20   0  114252   2240   1264 S   0.0  0.1   0:00.00 bash /usr+
 13608 root      20   0 1276700  14576    596 R   0.0  0.6   0:00.06 /usr/bin/+
 13609 root      20   0  188236  11108   5148 S   0.0  0.5   0:00.01 /usr/loca+
 13614 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 13628 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 13631 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 13641 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 13643 pactpay   20   0  480124  17680  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 13648 cloudw    20   0  287616  14616   9628 S   0.0  0.6   0:00.02 /opt/cpan+
 13663 locatio+  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 13664 root      20   0  160224   2372   1632 S   0.0  0.1   0:00.01 top -n 2 +
 13677 locatio+  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 13751 root      35  15  113284   1360   1176 S   0.0  0.1   0:00.00 /bin/bash+
 13756 root      35  15   13112    460    348 R   0.0  0.0   0:00.00 lsmod
 13757 root      35  15  112812    988    852 S   0.0  0.0   0:00.00 grep -E -+
 13758 root      35  15  113644    976    824 S   0.0  0.0   0:00.00 awk {prin+
 13761 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 13773 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 13775 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 13779 root      20   0  114252   1148      0 R   0.0  0.0   0:00.00 bash /usr+
 15361 oysipao+  20   0    3148      4      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3156     36      0 S   0.0  0.0   0:55.93 [kworker]
 19357 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 34069 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 45956 root      20   0  248724 118120    816 S   0.0  4.9   0:03.73 /usr/loca+
 49335 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 59356 root      20   0  249996 119504   1016 S   0.0  4.9   0:00.69 spamd chi+
 59357 root      20   0  248724 117632    364 S   0.0  4.9   0:00.00 spamd chi+
 67790 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72706 root      20   0  299272    440    276 S   0.0  0.0   0:39.70 php-fpm: +
 72712 root      20   0  445028    176     64 S   0.0  0.0   0:59.56 sw-engine+
 72887 wp-tool+  20   0  412396   3328   1216 S   0.0  0.1   5:31.15 /usr/bin/+
 72891 wp-tool+  20   0  387556   3056   1180 S   0.0  0.1   0:09.30 /usr/bin/+
 77791 root      20   0  183104  10748   1108 S   0.0  0.4   0:25.59 lfd - sle+
 80258 nobody    20   0  277944  21564   4648 S   0.0  0.9   0:04.03 /usr/sbin+
 84293 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 85330 telegraf  20   0 5654308  27956   6136 S   0.0  1.2  12:05.77 /usr/loca+
 85488 dovenull  20   0   49496   2060    652 S   0.0  0.1   0:29.08 dovecot/p+
 85489 dovenull  20   0   52160   3152   1532 S   0.0  0.1   0:14.71 dovecot/i+
 85490 root      20   0   10452    560    356 S   0.0  0.0   0:16.08 dovecot/l+
 85491 dovenull  20   0   49468   1752    540 S   0.0  0.1   0:21.50 dovecot/p+
 85492 dovenull  20   0   50900   3256   1632 S   0.0  0.1   0:19.48 dovecot/i+
 85493 root      20   0   24700   1832    412 S   0.0  0.1   0:07.38 dovecot/c+
 85494 dovecot   20   0   13700    624    408 S   0.0  0.0   0:03.49 dovecot/s+
 85495 dovecot   20   0   43012   2180   1008 S   0.0  0.1   0:38.19 dovecot/a+
 85637 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 86701 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 90354 nobody    20   0  278072  20076   4188 S   0.0  0.8   0:00.48 /usr/sbin+
 92577 wp-tool+  20   0  445028    136      4 S   0.0  0.0   0:00.00 sw-engine+
 92597 wp-tool+  20   0  445028    136      4 S   0.0  0.0   0:00.00 sw-engine+
 92648 nobody    20   0  277956  19400   4296 S   0.0  0.8   0:00.43 /usr/sbin+
 92649 nobody    20   0  277888  20476   4488 S   0.0  0.8   0:00.45 /usr/sbin+
 92653 nobody    20   0  277824  20100   4360 S   0.0  0.8   0:00.44 /usr/sbin+
 92717 nobody    20   0  278124  19436   4228 S   0.0  0.8   0:00.50 /usr/sbin+
 92723 nobody    20   0  278072  20168   4444 S   0.0  0.8   0:00.40 /usr/sbin+
 92732 nobody    20   0  278088  19848   4444 S   0.0  0.8   0:00.37 /usr/sbin+
 95329 root      20   0 1556048 126632      0 S   0.0  5.2   8:31.65 /usr/loca+
 96646 nobody    20   0  277700  19572   4264 S   0.0  0.8   0:00.38 /usr/sbin+
 98049 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 98058 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 99663 root      20   0  400740   1528    608 S   0.0  0.1   0:31.68 php-fpm: +
 99668 root      20   0  388892    344    252 S   0.0  0.0   0:03.53 php-fpm: +
 99673 root      20   0  396248    300    216 S   0.0  0.0   0:03.64 php-fpm: +
 99678 root      20   0  389508    336    248 S   0.0  0.0   0:03.71 php-fpm: +
 99683 root      20   0  439788    372    280 S   0.0  0.0   0:03.80 php-fpm: +
 99686 root      20   0   12840    340    212 S   0.0  0.0   0:09.82 /usr/loca+
 99687 root      20   0   12732    268    188 S   0.0  0.0   0:08.00 /usr/loca+
 99688 root      20   0   12876    348    216 S   0.0  0.0   0:08.95 /usr/loca+
 99689 root      20   0   53252      4      4 S   0.0  0.0   0:00.05 /usr/loca+
100237 root      20   0  267196   4592    336 S   0.0  0.2   0:52.12 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov23   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov23   4:44  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov23   1:30  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov23  40:26  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov23   0:06  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov23   0:06  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov23   1:43  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov23   6:24  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov23  44:49  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov23   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov23   0:04  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S    Nov23   0:41  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   Nov23   5:25  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov23   4:36  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    Nov23   2:32  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<   Nov23   2:20  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    Nov23   0:11  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root      19357  0.0  0.0      0     0 ?        S    05:45   0:00  \_ [kworker/u200:1]
root      34069  0.0  0.0      0     0 ?        S    05:57   0:00  \_ [kworker/0:0]
root      49335  0.0  0.0      0     0 ?        S    06:08   0:00  \_ [kworker/1:1]
root      67790  0.0  0.0      0     0 ?        S    06:22   0:00  \_ [kworker/u200:2]
root      84293  0.0  0.0      0     0 ?        S    06:35   0:00  \_ [kworker/1:2]
root      85637  0.0  0.0      0     0 ?        S    06:36   0:00  \_ [kworker/0:1]
root      86701  0.0  0.0      0     0 ?        S    06:37   0:00  \_ [kworker/0:3]
root      98049  0.0  0.0      0     0 ?        S    06:46   0:00  \_ [kworker/1:0]
root      98058  0.0  0.0      0     0 ?        S    06:46   0:00  \_ [kworker/0:2]
root       5839  0.0  0.0      0     0 ?        S    06:54   0:00  \_ [kworker/1:3]
root       7177  0.0  0.0      0     0 ?        S    06:55   0:00  \_ [kworker/0:4]
root       7237  0.0  0.0      0     0 ?        S    06:55   0:00  \_ [kworker/1:4]
root          1  0.1  0.1 191864  3468 ?        Ss   Nov23  59:10 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  40240  6304 ?        Ss   Nov23  19:25 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352     8 ?        Ss   Nov23   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   108 ?        S<sl Nov23   2:58 /sbin/auditd
root        487  0.0  0.0  21540   384 ?        Ss   Nov23   0:54 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24896  1160 ?        Ss   Nov23   9:32 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610664  1124 ?        Ssl  Nov23   5:21 /usr/lib/polkit-1/polkitd --no-debug
root        495  0.0  0.1 224416  4552 ?        Ss   Nov23   0:26 queueprocd - waiting up to 60s to process a task
root        496  0.0  0.0  52852    96 ?        Ss   Nov23   0:00 /usr/sbin/smartd -n -q never
root        497  0.0  0.0 152780    56 ?        Ss   Nov23   0:02 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        503  0.0  0.0  58748  1356 ?        Ss   Nov23  21:05 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        506  0.1  0.1 1377672 2540 ?        Ssl  Nov23  45:29 /usr/sbin/nscd
rpc         511  0.0  0.0  69256    20 ?        Ss   Nov23   0:02 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov23   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208     0 ?        Ssl  Nov23   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208    24 ?        Ss   Nov23   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124508   428 ?        Ss   Nov23   1:09 /usr/sbin/crond -n
root      13528  0.0  0.0 183080  2140 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13589  0.0  0.0 113284  1212 ?        Ss   07:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      13608  6.0  0.6 1276700 14576 ?       Sl   07:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      13529  0.0  0.0 183080  2140 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13581  0.0  0.0 113284  1212 ?        Ss   07:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      13598  6.0  0.4 1276844 11120 ?       Sl   07:00   0:00  |       \_ /usr/bin/update_imunify
root      13530  0.0  0.0 183080  2140 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13586  0.0  0.0 113284  1208 ?        Ss   07:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      13607  6.0  0.6 1276956 14640 ?       Sl   07:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      13531  0.0  0.0 183080  2140 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13570  0.0  0.0 113284  1212 ?        Ss   07:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      13599  0.0  0.0 113288  1424 ?        SN   07:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      13751  0.0  0.0 113284  1360 ?        SN   07:00   0:00  |           \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      13756  0.0  0.0  13116   836 ?        RN   07:00   0:00  |               \_ lsmod
root      13757  0.0  0.0 112812   988 ?        SN   07:00   0:00  |               \_ grep -E -v ^Module
root      13758  0.0  0.0 113644   976 ?        SN   07:00   0:00  |               \_ awk {printf "%s ", $1}
root      13533  0.0  0.0 183080  2140 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13571  0.0  0.0 113284  1212 ?        Ss   07:00   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      13600  0.0  0.0 114256  2416 ?        S    07:00   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      13535  0.0  0.0 183080  2140 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13592  0.0  0.0 113284  1208 ?        Ss   07:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      13614  0.0  0.0 108052   356 ?        S    07:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      13628  0.0  0.0 113288  1512 ?        S    07:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      13781  0.0  0.0 153840  2088 ?        R    07:00   0:00  |               \_ ps auxf
root      13537  0.0  0.0 183080  2144 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13567  0.0  0.0  20164   804 ?        Ss   07:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      13538  0.0  0.0 183080  2148 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13587  0.0  0.0  20164   808 ?        Ss   07:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      13539  0.0  0.0 183076  2148 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13585  0.0  0.0  20164   808 ?        Ss   07:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      13541  0.0  0.0 183076  2148 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13578  0.0  0.0  20164   804 ?        Ss   07:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      13542  0.0  0.0 183076  2148 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13575  0.0  0.0  20164   808 ?        Ss   07:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      13543  0.0  0.0 183076  2148 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13572  0.0  0.0  20164   804 ?        Ss   07:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      13544  0.0  0.0 183076  2148 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13582  0.0  0.0  20164   808 ?        Ss   07:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      13545  0.0  0.0 183076  2148 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13583  0.0  0.0  20164   988 ?        Ss   07:00   0:00  |   \_ jailshell (cloudsms) [13773] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  13773  0.0  0.0      0     0 ?        D    07:00   0:00  |       \_ [jailshell]
root      13546  0.0  0.0 183076  2148 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13584  0.0  0.0  20164   808 ?        Ss   07:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      13547  0.0  0.0 183076  2148 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13574  0.0  0.0  20164   808 ?        Ss   07:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      13548  0.0  0.0 183076  2148 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13580  0.0  0.0  20164   808 ?        Ss   07:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      13549  0.0  0.0 183076  2148 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13576  0.0  0.0  20164   804 ?        Ss   07:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root      13550  0.0  0.0 183076  2144 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13588  0.0  0.0 113284  1208 ?        Ss   07:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      13609  1.0  0.4 188236 11108 ?        S    07:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      13664  1.0  0.0 160224  2372 ?        S    07:00   0:00  |           \_ top -n 2 -b -c
root      13551  0.0  0.0 183076  2140 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13573  0.0  0.0  20164   964 ?        Ss   07:00   0:00  |   \_ jailshell (pactpay) [13631] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   13631  0.0  0.0  20164   260 ?        S    07:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   13643  2.0  0.7 480124 17680 ?        S    07:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      13554  0.0  0.0 183076  2140 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13591  0.0  0.0  20164   968 ?        Ss   07:00   0:00  |   \_ jailshell (nigeria) [13641] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   13641  0.0  0.0  20164   264 ?        S    07:00   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   13647  5.0  0.6 404052 16136 ?        S    07:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      13555  0.0  0.0 183076  2140 ?        S    07:00   0:00  \_ /usr/sbin/CROND -n
root      13595  0.0  0.0  20164   964 ?        Ss   07:00   0:00      \_ jailshell (locationforms) [13663]  php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  13663  0.0  0.0  20164   260 ?        S    07:00   0:00          \_ jailshell (locationforms) [init] c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  13677  0.0  0.0 113284  1212 ?        S    07:00   0:00              \_ /usr/local/cpanel/bin/jailshell -c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  13690  3.0  0.7 406296 18196 ?        R    07:00   0:00                  \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php
root        576  0.0  0.0 108296     4 tty1     Ss+  Nov23   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704     0 ttyS0    Ss+  Nov23   0:00 /bin/bash
mailnull    621  0.0  0.1  89120  3380 ?        Ss   Nov23   0:55 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  13126  0.0  0.2  89540  5728 ?        S    06:59   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  13132  0.0  0.2  89540  5480 ?        S    06:59   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        927  0.0  0.0  51628   472 ?        Ss   Nov23   0:28 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1055  0.0  0.0  10320   352 ?        S    Nov23   0:08  \_ dovecot/anvil
dovenull  85488  0.0  0.0  49496  2060 ?        S    Dec05   0:29  \_ dovecot/pop3-login
dovenull  85489  0.0  0.1  52160  3152 ?        S    Dec05   0:14  \_ dovecot/imap-login
root      85490  0.0  0.0  10452   560 ?        S    Dec05   0:16  \_ dovecot/log
dovenull  85491  0.0  0.0  49468  1752 ?        S    Dec05   0:21  \_ dovecot/pop3-login
dovenull  85492  0.0  0.1  50900  3256 ?        S    Dec05   0:19  \_ dovecot/imap-login
root      85493  0.0  0.0  24700  1832 ?        S    Dec05   0:07  \_ dovecot/config
dovecot   85494  0.0  0.0  13700   624 ?        S    Dec05   0:03  \_ dovecot/stats
dovecot   85495  0.0  0.0  43012  2180 ?        S    Dec05   0:38  \_ dovecot/auth
systuser    928  0.0  0.0  11540    52 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756    60 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524    68 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608    68 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        933  0.0  0.0 153404   220 ?        Ss   Nov23   0:54 pure-ftpd (SERVER)
root        935  0.0  0.0 572372   808 ?        Ssl  Nov23   3:21 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        937  0.0  0.0 111304   364 ?        Ss   Nov23   4:23 /usr/sbin/sshd -D
root      13518  0.0  0.1 111304  4448 ?        Ss   07:00   0:00  \_ sshd: [accepted]
sshd      13519  0.0  0.1 115644  2628 ?        S    07:00   0:00      \_ sshd: [net]
root        939  0.0  0.2 1350728 6424 ?        Ssl  Nov23   1:28 /usr/bin/cspdaemon
root        952  0.0  0.2 261692  6864 ?        Ss   Nov23   7:23 cpsrvd (SSL) - waiting for connections                   
root      13245  0.0  0.0      0     0 ?        Z    06:59   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.2 331088  6532 ?        Ssl  Nov23  10:14 /usr/sbin/rsyslogd -n
cpanelc+    969  0.0  0.1  10764  3788 ?        Ss   Nov23  29:36 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
memcach+    972  0.0  0.0 342400     0 ?        Ssl  Nov23   0:52 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 1277312 2356 ?        Ssl  Nov23   0:32 /usr/bin/checkstatus
systuser    980  0.0  0.4 114016 10760 ?        Ssl  Nov23  10:44 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser   1144  0.0  0.1 157704  2916 ?        S    Nov23   0:11 SonarPush 0.6.12 [sleeping]
root       1239  0.0  0.0 167452  1216 ?        Ss   Nov23   0:36 dnsadmin - dormant mode
root       1243  0.0  0.7 209304 19112 ?        Ss   Nov23   4:53 tailwatchd
root       1244  0.0  0.8 262224 21732 ?        Ss   Nov23   3:40 cpdavd - accepting connections on: 2091, 2077, 2078
root       1676  0.0  0.0 130416  1380 ?        SN   Nov23   0:06 cpanellogd - sleeping for logs
oysipao+  15361  0.0  0.0   3148     4 ?        Ss   Nov23   0:00 [kworker]
oysipao+  15368  0.0  0.0   3156    36 ?        S    Nov23   0:55  \_ [kworker]
mysql     13043  1.7 11.8 1487024 287740 ?      Sl   Dec04 378:14 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
telegraf  85330  0.0  1.1 5654308 27956 ?       SLsl Dec04  12:05 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root      95329  0.0  5.2 1556048 126632 ?      Ssl  Dec09   8:31 /usr/local/cpanel/3rdparty/bin/clamd -F
root      72706  0.0  0.0 299272   440 ?        Ss   Dec09   0:39 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root      72712  0.0  0.0 445028   176 ?        Ss   Dec09   0:59 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  92577  0.0  0.0 445028   136 ?        S    06:41   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  92597  0.0  0.0 445028   136 ?        S    06:41   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  72887  0.0  0.1 412396  3328 ?        Ss   Dec09   5:31 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+  72891  0.0  0.1 387556  3056 ?        Ss   Dec09   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root     100237  0.0  0.1 267196  4592 ?        Ss   Dec09   0:52 /usr/sbin/httpd -k start
root      99686  0.0  0.0  12840   340 ?        S    Dec18   0:09  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      99687  0.0  0.0  12732   268 ?        S    Dec18   0:08  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      99688  0.0  0.0  12876   348 ?        S    Dec18   0:08  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      99689  0.0  0.0  53252     4 ?        S    Dec18   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    80258  0.0  0.8 277944 21564 ?        S    05:12   0:04  \_ /usr/sbin/httpd -k start
nobody    90354  0.0  0.8 278072 20076 ?        S    06:39   0:00  \_ /usr/sbin/httpd -k start
nobody    92648  0.0  0.8 277956 19400 ?        S    06:41   0:00  \_ /usr/sbin/httpd -k start
nobody    92649  0.0  0.8 277888 20476 ?        S    06:41   0:00  \_ /usr/sbin/httpd -k start
cloudsms  13780  0.0  0.2 161276  6540 ?        R    07:00   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    92653  0.0  0.8 277824 20100 ?        S    06:41   0:00  \_ /usr/sbin/httpd -k start
nobody    92717  0.0  0.8 278124 19436 ?        S    06:41   0:00  \_ /usr/sbin/httpd -k start
nobody    92723  0.0  0.8 278072 20168 ?        S    06:41   0:00  \_ /usr/sbin/httpd -k start
nobody    92732  0.0  0.8 278088 19848 ?        S    06:41   0:00  \_ /usr/sbin/httpd -k start
nobody    92737  0.0  0.8 277956 20240 ?        S    06:41   0:00  \_ /usr/sbin/httpd -k start
nobody    96646  0.0  0.8 277700 19572 ?        S    06:44   0:00  \_ /usr/sbin/httpd -k start
named      1188  0.0  1.2 1185868 30796 ?       Ssl  Dec17   1:54 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root      99663  0.0  0.0 400740  1528 ?        Ss   Dec18   0:31 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   13114  0.0  0.1 400460  4648 ?        S    06:59   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  13257 19.5  2.6 458588 65288 ?        S    06:59   0:01  \_ php-fpm: pool health_oyostate_gov_ng
root      99668  0.0  0.0 388892   344 ?        Ss   Dec18   0:03 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root      99673  0.0  0.0 396248   300 ?        Ss   Dec18   0:03 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root      99678  0.0  0.0 389508   336 ?        Ss   Dec18   0:03 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root      99683  0.0  0.0 439788   372 ?        Ss   Dec18   0:03 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root      77791  0.1  0.4 183104 10748 ?        Ss   00:00   0:25 lfd - sleeping
root      45956  0.0  4.8 248724 118120 ?       Ss   04:47   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      59356  0.0  4.9 249996 119504 ?       S    04:57   0:00  \_ spamd child
root      59357  0.0  4.8 248724 117632 ?       S    04:57   0:00  \_ spamd child
cloudw    13648  2.0  0.6 287616 14616 ?        S    07:00   0:00 /opt/cpanel/ea-php70/root/usr/bin/php -f /home/cloudw/wptraining.cloudware.ng/wp-includes/kqoklx.php
## mysql stats
Uptime: 1262096  Threads: 4  Questions: 139455587  Slow queries: 0  Opens: 322054  Flush tables: 1  Open tables: 2000  Queries per second avg: 110.495
*************************** 1. row ***************************
     Id: 2250431
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 2250435
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 2250439
   User: location_phpl624
   Host: localhost
     db: location_phpl624
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 2250443
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 148.113.130.217 TIME_WAIT
      1 15.235.96.132 TIME_WAIT
      1 15.235.96.184 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.39.0.234 TIME_WAIT
      1 54.39.136.20 TIME_WAIT
      1 54.39.89.53 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 138.199.39.178 TIME_WAIT
      2 216.73.216.10 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.66 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Dec 8 2025 14:42:54
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 19-Dec-2025 07:00:02 WAT
   Restart Time: Tuesday, 09-Dec-2025 04:48:00 WAT
   Parent Server Config. Generation: 5
   Parent Server MPM Generation: 4
   Server uptime: 10 days 2 hours 12 minutes 1 second
   Server load: 0.17 0.37 0.64
   Total accesses: 2560759 - Total Traffic: 24.6 GB - Total Duration: 1011932222
   CPU Usage: u12.15 s47.98 cu17444.7 cs11418.1 - 3.32% CPU load
   2.94 requests/sec - 29.6 kB/second - 10.1 kB/request - 395.169 ms/request
   4 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

_...._._......KK..._...............................R.....W......
.._...._........................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

    Srv   PID       Acc      M CPU     SS   Req    Dur    Conn Child   Slot      Client      Protocol              VHost                                          Request
   0-4   96646 0/152/180035  _ 1.54  0      197  68696522 0.0  0.70  1932.86 128.140.8.200   http/1.1 cloudsms.com.ng:443             GET /cron/process_queue3.php HTTP/1.1
   1-4   -     0/0/168666    . 0.00  1064   0    65269618 0.0  0.00  1631.45 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   2-4   -     0/0/165199    . 0.00  1034   0    63362661 0.0  0.00  1657.14 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   3-4   -     0/0/166736    . 0.00  1061   0    63231889 0.0  0.00  1686.67 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   4-4   -     0/0/156202    . 0.00  1088   2132 59240427 0.0  0.00  1464.63 45.156.129.152  http/1.1 cloudware.ng:80                 GET /wp-content/plugins/wpforms-lite/readme.txt HTTP/1.1
   5-4   90354 0/199/152595  _ 0.87  0      0    59090614 0.0  2.67  1608.42 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80          GET /whm-server-status HTTP/1.0
   6-4   -     0/0/148378    . 0.00  1088   2343 55747040 0.0  0.00  1538.31 45.156.129.152  http/1.1 cloudware.ng:80                 GET /wp-content/plugins/google-analytics-for-wordpress/readme.t
   7-4   80258 0/1527/139279 _ 15.11 0      2    53390514 0.0  9.14  1328.58 66.249.66.194   http/1.1 health.oyostate.gov.ng:443      GET /wp-content/uploads/elementor/thumbs/theGov_logo-2-rbvdiloy
   8-4   -     0/0/135339    . 0.00  1040   0    52233390 0.0  0.00  1364.62 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   9-4   -     0/0/126078    . 0.00  1041   0    48962487 0.0  0.00  1266.99 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   10-4  -     0/0/124052    . 0.00  1039   0    47830028 0.0  0.00  1162.21 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   11-4  -     0/0/108897    . 0.00  1088   0    42566347 0.0  0.00  1028.03 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   12-4  -     0/0/107368    . 0.00  1088   0    42739986 0.0  0.00  1034.77 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   13-4  -     0/0/93999     . 0.00  1054   0    37094090 0.0  0.00  871.88  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   14-4  92648 7/164/83938   K 1.69  2      212  35298219 7.7  0.82  926.32  216.73.216.10   http/1.1 tasks.cloudware.ng:443          GET /270201284.phtml HTTP/1.1
   15-4  92649 1/171/75484   K 1.07  0      79   29559812 5.3  0.92  686.95  116.203.134.67  http/1.1 cloudsms.com.ng:443             GET /cron/process_queue4.php HTTP/1.1
   16-4  -     0/0/62185     . 0.00  1077   0    25030925 0.0  0.00  574.70  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-4  -     0/0/48539     . 0.00  1057   0    20644575 0.0  0.00  493.80  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-4  -     0/0/43002     . 0.00  1062   0    19241143 0.0  0.00  396.97  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-4  92653 0/169/29093   _ 1.20  0      27   12929231 0.0  1.05  315.03  116.203.129.16  http/1.1 cloudsms.com.ng:443             GET /cron/process_queue5.php HTTP/1.1
   20-4  -     0/0/35798     . 0.00  1031   0    15641150 0.0  0.00  338.76  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-4  -     0/0/17822     . 0.00  991    0    7746768  0.0  0.00  160.15  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-4  -     0/0/17114     . 0.00  1053   0    6826825  0.0  0.00  160.98  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-4  -     0/0/20246     . 0.00  1051   0    8745550  0.0  0.00  208.44  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-4  -     0/0/14407     . 0.00  1088   0    6885597  0.0  0.00  132.55  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-4  -     0/0/13150     . 0.00  1071   0    6895781  0.0  0.00  119.68  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-4  -     0/0/12628     . 0.00  1075   0    5804601  0.0  0.00  105.03  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-4  -     0/0/9392      . 0.00  756    0    4225569  0.0  0.00  77.42   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-4  -     0/0/8498      . 0.00  1050   0    3446098  0.0  0.00  74.71   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-4  -     0/0/6207      . 0.00  1074   0    2542765  0.0  0.00  70.14   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-4  -     0/0/4848      . 0.00  1074   0    2148809  0.0  0.00  31.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-4  -     0/0/3947      . 0.00  1037   0    1811634  0.0  0.00  28.64   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-4  -     0/0/4336      . 0.00  981    0    1573759  0.0  0.00  39.39   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-4  -     0/0/3238      . 0.00  1052   0    1178144  0.0  0.00  22.46   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-4  -     0/0/1574      . 0.00  1036   0    1676071  0.0  0.00  9.80    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-4  -     0/0/1821      . 0.00  1087   0    821691   0.0  0.00  16.64   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-4  -     0/0/4383      . 0.00  1049   0    1671104  0.0  0.00  33.75   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-4  -     0/0/2739      . 0.00  1030   0    752587   0.0  0.00  26.30   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-4  -     0/0/5950      . 0.00  1069   0    2134611  0.0  0.00  55.09   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-4  -     0/0/3166      . 0.00  1068   0    1193869  0.0  0.00  46.90   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-4  -     0/0/4516      . 0.00  1059   0    3009795  0.0  0.00  69.17   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-4  -     0/0/2282      . 0.00  1029   0    1006630  0.0  0.00  28.27   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-4  -     0/0/1792      . 0.00  1044   0    876578   0.0  0.00  22.73   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-4  -     0/0/2231      . 0.00  980    0    920492   0.0  0.00  23.64   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-4  -     0/0/3384      . 0.00  1070   0    998199   0.0  0.00  27.37   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-4  -     0/0/1309      . 0.00  1084   0    649587   0.0  0.00  13.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-4  -     0/0/1183      . 0.00  1067   0    513112   0.0  0.00  9.39    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-4  -     0/0/862       . 0.00  1060   0    444938   0.0  0.00  8.41    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-4  -     0/0/1739      . 0.00  1038   0    660890   0.0  0.00  12.25   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-4  -     0/0/833       . 0.00  1043   0    436583   0.0  0.00  6.51    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-4  -     0/0/1025      . 0.00  1047   0    431917   0.0  0.00  10.60   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-4  92717 0/261/1302    R 2.14  4      303  529029   0.0  0.82  5.75    36.111.32.238   http/1.1
   52-4  -     0/0/1742      . 0.00  1045   0    719932   0.0  0.00  14.82   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-4  -     0/0/1932      . 0.00  1072   0    842894   0.0  0.00  19.46   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-4  -     0/0/411       . 0.00  1076   0    300364   0.0  0.00  2.73    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-4  -     0/0/1368      . 0.00  1065   0    482449   0.0  0.00  9.73    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-4  -     0/0/478       . 0.00  1048   0    385504   0.0  0.00  3.25    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-4  92723 0/152/1520    W 1.20  0      0    751810   0.0  3.28  13.21   ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   58-4  -     0/0/1231      . 0.00  1081   0    419127   0.0  0.00  7.23    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-4  -     0/0/171       . 0.00  1083   0    321327   0.0  0.00  1.38    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-4  -     0/0/605       . 0.00  1085   0    284354   0.0  0.00  3.19    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-4  -     0/0/808       . 0.00  1080   0    352720   0.0  0.00  8.04    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-4  -     0/0/1002      . 0.00  1035   0    438285   0.0  0.00  11.99   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-4  -     0/0/754       . 0.00  1078   0    500478   0.0  0.00  6.05    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-4  -     0/0/175       . 0.00  1046   0    228436   0.0  0.00  1.37    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-4  -     0/0/708       . 0.00  1079   0    437283   0.0  0.00  4.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-4  92732 0/144/392     _ 0.77  0      0    197591   0.0  2.24  3.66    ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   67-4  -     0/0/1319      . 0.00  1066   0    632183   0.0  0.00  13.20   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-4  -     0/0/230       . 0.00  1086   0    267295   0.0  0.00  1.35    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-4  -     0/0/770       . 0.00  1042   0    702157   0.0  0.00  6.20    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-4  -     0/0/757       . 0.00  1056   0    302880   0.0  0.00  5.62    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-4  92737 0/252/2235    _ 1.84  0      2    813092   0.0  0.98  14.51   138.199.39.178  http/1.1 nigeriadecide.org:443           GET /wp-login.php HTTP/1.1
   72-4  -     0/0/288       . 0.00  1082   0    297052   0.0  0.00  2.16    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-4  -     0/0/411       . 0.00  1055   0    291130   0.0  0.00  2.93    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   74-4  -     0/0/160       . 0.00  42063  0    186077   0.0  0.00  0.63    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-4  -     0/0/326       . 0.00  42062  0    139945   0.0  0.00  1.50    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-4  -     0/0/287       . 0.00  42097  0    125653   0.0  0.00  1.32    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-4  -     0/0/241       . 0.00  41850  4    378337   0.0  0.00  0.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-4  -     0/0/141       . 0.00  42038  0    35995    0.0  0.00  0.22    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   79-4  -     0/0/157       . 0.00  42061  0    13496    0.0  0.00  0.29    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   80-4  -     0/0/528       . 0.00  41495  0    158358   0.0  0.00  2.80    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   81-4  -     0/0/319       . 0.00  42088  0    170775   0.0  0.00  1.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   82-4  -     0/0/112       . 0.00  42095  0    120764   0.0  0.00  0.44    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   83-4  -     0/0/621       . 0.00  42053  0    373628   0.0  0.00  3.54    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   84-4  -     0/0/189       . 0.00  42055  0    105779   0.0  0.00  1.02    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   85-4  -     0/0/262       . 0.00  42094  0    74396    0.0  0.00  0.67    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   86-4  -     0/0/223       . 0.00  41559  0    84591    0.0  0.00  1.82    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   87-4  -     0/0/878       . 0.00  40709  0    171957   0.0  0.00  4.33    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   88-4  -     0/0/268       . 0.00  42066  0    80410    0.0  0.00  0.91    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   89-4  -     0/0/689       . 0.00  42052  0    340634   0.0  0.00  17.70   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   90-4  -     0/0/125       . 0.00  42056  0    90117    0.0  0.00  0.63    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   91-2  -     0/0/507       . 0.00  281026 0    174361   0.0  0.00  3.32    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   92-2  -     0/0/179       . 0.00  281560 0    116013   0.0  0.00  0.97    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   93-2  -     0/0/110       . 0.00  281596 0    65032    0.0  0.00  0.45    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   94-2  -     0/0/185       . 0.00  281618 82   114296   0.0  0.00  2.40    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   95-2  -     0/0/163       . 0.00  281523 0    122930   0.0  0.00  0.30    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   96-2  -     0/0/169       . 0.00  281604 0    21600    0.0  0.00  0.16    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   97-2  -     0/0/350       . 0.00  280903 0    77331    0.0  0.00  0.92    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   98-2  -     0/0/283       . 0.00  281561 0    86349    0.0  0.00  0.88    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   99-2  -     0/0/206       . 0.00  280828 0    127715   0.0  0.00  1.02    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   100-2 -     0/0/230       . 0.00  281055 0    45632    0.0  0.00  0.47    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   101-2 -     0/0/113       . 0.00  281583 0    111909   0.0  0.00  0.46    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   102-2 -     0/0/8         . 0.00  281641 86   8810     0.0  0.00  0.06    138.197.152.229 http/1.1 new-vegas-cash.staging.cloudwar GET /wp-2019.php HTTP/1.1
   103-2 -     0/0/193       . 0.00  281525 0    60761    0.0  0.00  0.48    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   104-2 -     0/0/227       . 0.00  281536 0    19228    0.0  0.00  0.14    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   105-2 -     0/0/19        . 0.00  281614 0    20494    0.0  0.00  0.03    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   106-2 -     0/0/89        . 0.00  281613 0    30342    0.0  0.00  0.09    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   107-2 -     0/0/75        . 0.00  281607 0    23965    0.0  0.00  0.05    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   108-2 -     0/0/207       . 0.00  281568 0    99496    0.0  0.00  0.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   109-2 -     0/0/11        . 0.00  281617 0    27094    0.0  0.00  0.01    138.197.152.229 http/1.1 proxy-subdomains-vhost.localhos GET /nf_tracking.php HTTP/1.1
   110-2 -     0/0/160       . 0.00  281533 0    55783    0.0  0.00  0.59    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   111-2 -     0/0/4         . 0.00  281537 0    1637     0.0  0.00  0.01    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   112-2 -     0/0/107       . 0.00  281627 0    16580    0.0  0.00  0.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   113-2 -     0/0/135       . 0.00  281027 0    43118    0.0  0.00  0.64    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   114-2 -     0/0/79        . 0.00  281600 0    35968    0.0  0.00  0.04    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   115-2 -     0/0/115       . 0.00  281553 0    51751    0.0  0.00  0.44    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   116-2 -     0/0/207       . 0.00  281563 0    79415    0.0  0.00  0.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   117-2 -     0/0/131       . 0.00  281566 0    48034    0.0  0.00  0.46    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   118-2 -     0/0/112       . 0.00  281550 0    67705    0.0  0.00  0.45    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   119-2 -     0/0/2         . 0.00  281518 0    241030   0.0  0.00  0.00    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   120-2 -     0/0/117       . 0.00  281573 0    58506    0.0  0.00  0.44    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   121-2 -     0/0/159       . 0.00  281564 0    48348    0.0  0.00  0.45    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   122-2 -     0/0/153       . 0.00  281556 0    30575    0.0  0.00  0.10    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   123-2 -     0/0/90        . 0.00  281540 0    69610    0.0  0.00  0.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   124-2 -     0/0/124       . 0.00  281515 0    48197    0.0  0.00  0.44    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   125-2 -     0/0/225       . 0.00  281549 0    46797    0.0  0.00  1.31    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   126-2 -     0/0/113       . 0.00  281521 0    60949    0.0  0.00  0.77    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   127-2 -     0/0/196       . 0.00  281579 0    43269    0.0  0.00  0.49    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   128-2 -     0/0/153       . 0.00  281520 0    89591    0.0  0.00  0.92    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   129-2 -     0/0/182       . 0.00  281543 0    14610    0.0  0.00  0.11    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   130-2 -     0/0/75        . 0.00  281565 0    29077    0.0  0.00  0.38    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   131-2 -     0/0/138       . 0.00  281395 0    61766    0.0  0.00  0.58    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   132-2 -     0/0/105       . 0.00  281593 0    61218    0.0  0.00  0.42    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   133-2 -     0/0/17        . 0.00  281618 0    596      0.0  0.00  0.01    138.197.152.229 http/1.1 proxy-subdomains-vhost.localhos GET /wp-includes/rest-api/about.php HTTP/1.1
   134-2 -     0/0/110       . 0.00  281616 0    13878    0.0  0.00  0.08    138.197.152.229 http/1.1 proxy-subdomains-vhost.localhos GET /wp-includes/IXR/about.php HTTP/1.1
   135-2 -     0/0/6         . 0.00  281629 0    21667    0.0  0.00  0.02    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   136-2 -     0/0/4         . 0.00  281631 0    6056     0.0  0.00  0.00    138.197.152.229 http/1.1 proxy-subdomains-vhost.localhos GET /as.php HTTP/1.1
   137-2 -     0/0/222       . 0.00  281388 0    59782    0.0  0.00  0.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   138-2 -     0/0/109       . 0.00  281615 0    16220    0.0  0.00  0.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   139-2 -     0/0/160       . 0.00  281551 0    24902    0.0  0.00  0.24    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   140-2 -     0/0/9         . 0.00  281631 0    20410    0.0  0.00  0.03    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   141-2 -     0/0/104       . 0.00  281577 0    59137    0.0  0.00  0.42    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   142-2 -     0/0/107       . 0.00  281590 0    36089    0.0  0.00  0.41    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   143-2 -     0/0/86        . 0.00  281544 0    37015    0.0  0.00  0.55    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 296
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 30 seconds, (range: 0...112)
   index usage: 5%, cache usage: 7%
   total entries stored since starting: 134656
   total entries replaced since starting: 0
   total entries expired since starting: 134217
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 4369 hit, 1146 miss
   total removes since starting: 143 hit, 444 miss
Youez - 2016 - github.com/yon3zu
LinuXploit