403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.48
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-12-19.08.00.txt
 ## swap threshold exceeded
## server overview
2025-12-19.08.00 load[0] mem[54/39] mysql[3/47] httpd[4]
              total        used        free      shared  buff/cache   available
Mem:           2363        1167          85          48        1110         961
Swap:          4047        1713        2334
 08:00:02 up 25 days, 10:48,  0 users,  load average: 0.29, 0.37, 0.47
## system overview
top - 08:00:02 up 25 days, 10:48,  0 users,  load average: 0.29, 0.37, 0.47
Tasks: 222 total,  10 running, 212 sleeping,   0 stopped,   0 zombie
%Cpu(s): 68.8 us, 31.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    65052 free,  1215984 used,  1139264 buff/cache
KiB Swap:  4145144 total,  2390700 free,  1754444 used.   964924 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 13043 mysql     20   0 1487024 291916   3852 S 106.7 12.1 379:15.68 /usr/sbin+
     1 root      20   0  191864   3488   1508 S   6.7  0.1  59:18.34 /usr/lib/+
 91005 nigeria   20   0  404052  16140  10384 R   6.7  0.7   0:00.10 /opt/cpan+
 91054 root      20   0 1276956  14624    600 S   6.7  0.6   0:00.05 /usr/bin/+
 91056 root      20   0 1350688  14392    604 S   6.7  0.6   0:00.05 /usr/bin/+
 91127 cloudw    20   0  287616  14612   9628 S   6.7  0.6   0:00.02 /opt/cpan+
 91128 locatio+  20   0  406668  19776  11204 S   6.7  0.8   0:00.03 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.49 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   4:45.24 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   1:30.30 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0  40:30.24 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:06.32 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:06.23 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   1:44.20 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   6:24.50 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.78 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.18 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 R   0.0  0.0  44:49.63 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:04.20 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   0:41.75 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   5:25.76 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   4:36.28 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   2:33.04 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40240   5712   5456 S   0.0  0.2  19:26.66 /usr/lib/+
   383 root      20   0   45352      8      4 S   0.0  0.0   0:00.45 /usr/lib/+
   412 root      16  -4   55532    108      0 S   0.0  0.0   2:58.52 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    384    272 S   0.0  0.0   0:54.37 /usr/sbin+
   489 root      20   0   24896   1168    792 S   0.0  0.0   9:33.66 /usr/lib/+
   494 polkitd   20   0  610664   1124    608 S   0.0  0.0   5:22.11 /usr/lib/+
   495 root      20   0  224416   4552    748 S   0.0  0.2   0:26.19 queueproc+
   496 root      20   0   52852    244    148 S   0.0  0.0   0:00.33 /usr/sbin+
   497 root      20   0  152780     80     36 S   0.0  0.0   0:02.81 /usr/sbin+
   503 dbus      20   0   58748   1356    600 S   0.0  0.1  21:07.68 /usr/bin/+
   506 nscd      20   0 1377672   2560    688 S   0.0  0.1  45:35.11 /usr/sbin+
   511 rpc       20   0   69256     20      0 S   0.0  0.0   0:02.25 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208     24      0 S   0.0  0.0   0:00.06 /usr/sbin+
   558 root      20   0  124508    428    296 S   0.0  0.0   1:09.58 /usr/sbin+
   576 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   621 mailnull  20   0   89120   3848    880 S   0.0  0.2   0:55.99 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   2:20.79 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:11.28 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   927 root      20   0   51628    472    304 S   0.0  0.0   0:28.41 /usr/sbin+
   928 systuser  20   0   11540     52      0 S   0.0  0.0   0:01.20 /usr/loca+
   929 systuser  20   0   12756     60      0 S   0.0  0.0   0:01.19 /usr/loca+
   931 systuser  20   0  112524     68      0 S   0.0  0.0   0:01.15 /usr/loca+
   932 systuser  20   0  111608     68      0 S   0.0  0.0   0:01.13 /usr/loca+
   933 root      20   0  153404    220    136 S   0.0  0.0   0:54.93 pure-ftpd+
   935 root      20   0  572372    808    304 S   0.0  0.0   3:22.26 /usr/bin/+
   937 root      20   0  111304    364    256 S   0.0  0.0   4:23.20 /usr/sbin+
   939 root      20   0 1350728   6412      4 S   0.0  0.3   1:29.06 /usr/bin/+
   952 root      20   0  261692   6904   1736 S   0.0  0.3   7:24.06 cpsrvd (S+
   953 root      20   0  331088   6120   5360 S   0.0  0.3  10:15.21 /usr/sbin+
   969 cpanelc+  20   0   10764   3788   2292 S   0.0  0.2  29:39.68 /usr/loca+
   972 memcach+  20   0  342400      0      0 S   0.0  0.0   0:52.82 /usr/bin/+
   974 root      20   0 1277312   2356      4 S   0.0  0.1   0:32.61 /usr/bin/+
   980 systuser  20   0  114016  10696   2944 S   0.0  0.4  10:45.65 /usr/loca+
  1055 dovecot   20   0   10320    352    232 S   0.0  0.0   0:08.75 dovecot/a+
  1144 systuser  20   0  157704   2916    924 S   0.0  0.1   0:11.69 SonarPush+
  1188 named     20   0 1185868  31684   1672 S   0.0  1.3   1:57.09 /usr/sbin+
  1239 root      20   0  167452   1216    668 S   0.0  0.1   0:36.60 dnsadmin +
  1243 root      20   0  209304  19504   1992 S   0.0  0.8   4:54.37 tailwatchd
  1244 root      20   0  262224  24612   6760 S   0.0  1.0   3:42.06 cpdavd - +
  1676 root      38  18  130416   1380    692 S   0.0  0.1   0:06.23 cpanellog+
  5839 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 15361 oysipao+  20   0    3148      4      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3156     36      0 S   0.0  0.0   0:56.01 [kworker]
 19357 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
 45956 root      20   0  248724 118120    816 S   0.0  4.9   0:04.15 /usr/loca+
 46009 root      20   0       0      0      0 R   0.0  0.0   0:00.09 [kworker/+
 51323 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 59356 root      20   0  249996 119732   1244 S   0.0  4.9   0:01.01 spamd chi+
 59357 root      20   0  248724 117632    364 S   0.0  4.9   0:00.00 spamd chi+
 60112 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 61329 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 62795 nobody    20   0  277764  20360   4624 S   0.0  0.8   0:00.57 /usr/sbin+
 62815 nobody    20   0  278064  20588   4652 S   0.0  0.9   0:00.52 /usr/sbin+
 62817 nobody    20   0  277708  20100   4628 S   0.0  0.8   0:00.57 /usr/sbin+
 64730 nobody    20   0  277748  20064   4616 S   0.0  0.8   0:00.55 /usr/sbin+
 64863 nobody    20   0  277760  20320   4708 S   0.0  0.8   0:00.60 /usr/sbin+
 67790 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 68677 nobody    20   0  277728  20136   4652 S   0.0  0.8   0:00.52 /usr/sbin+
 71171 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 72706 root      20   0  299272    496    332 S   0.0  0.0   0:39.81 php-fpm: +
 72712 root      20   0  445028    596    480 S   0.0  0.0   0:59.79 sw-engine+
 72887 wp-tool+  20   0  412396   3476   1364 S   0.0  0.1   5:32.30 /usr/bin/+
 72891 wp-tool+  20   0  387556   3264   1388 S   0.0  0.1   0:09.32 /usr/bin/+
 77391 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 77791 root      20   0  183376  11296   1112 S   0.0  0.5   0:29.34 lfd - sle+
 79884 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 80465 nobody    20   0  277688  19648   4344 S   0.0  0.8   0:00.23 /usr/sbin+
 85330 telegraf  20   0 5654308  28036   6060 S   0.0  1.2  12:07.67 /usr/loca+
 85488 dovenull  20   0   49496   2848   1440 S   0.0  0.1   0:29.18 dovecot/p+
 85489 dovenull  20   0   52160   3384   1744 S   0.0  0.1   0:14.74 dovecot/i+
 85490 root      20   0   10452    560    356 S   0.0  0.0   0:16.13 dovecot/l+
 85491 dovenull  20   0   49468   2808   1596 S   0.0  0.1   0:21.57 dovecot/p+
 85492 dovenull  20   0   50900   3248   1624 S   0.0  0.1   0:19.52 dovecot/i+
 85493 root      20   0   24700   1832    412 S   0.0  0.1   0:07.40 dovecot/c+
 85494 dovecot   20   0   13700    624    408 S   0.0  0.0   0:03.49 dovecot/s+
 85495 dovecot   20   0   43012   2184   1008 S   0.0  0.1   0:38.25 dovecot/a+
 85963 nobody    20   0  277688  19000   4088 S   0.0  0.8   0:00.11 /usr/sbin+
 87327 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 88508 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 89614 nobody    20   0  277592  17840   3824 S   0.0  0.7   0:00.04 /usr/sbin+
 90538 nigeria   20   0  400460   4392   2228 S   0.0  0.2   0:00.01 php-fpm: +
 90564 healtho+  20   0  460636  67392   4224 S   0.0  2.8   0:02.72 php-fpm: +
 90605 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 90619 wp-tool+  20   0  445028    328    196 S   0.0  0.0   0:00.00 sw-engine+
 90971 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90972 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90973 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90974 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90977 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90979 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90981 root      20   0  183080   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 90983 root      20   0  183080   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 90984 root      20   0  183080   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 90985 root      20   0  183076   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 90986 root      20   0  183076   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 90987 root      20   0  183076   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 90988 root      20   0  183076   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 90989 root      20   0  183076   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 90990 root      20   0  183076   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 90991 root      20   0  183076   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 90992 root      20   0  183076   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 90993 root      20   0  183076   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 90995 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90996 root      20   0  183076   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90999 root      20   0  183076   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91000 root      20   0  183076   2144   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 91002 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 91004 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 91019 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 91022 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 91023 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 91025 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 91026 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 91027 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 91028 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 91030 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 91031 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 91032 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 91034 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 91035 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 91037 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 91038 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 91039 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 91040 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 91041 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 91043 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 91044 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 91048 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 91049 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 91051 root      20   0  188236  11100   5148 S   0.0  0.5   0:00.01 /usr/loca+
 91053 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 91057 root      20   0  113284   1464   1256 S   0.0  0.1   0:00.00 bash /usr+
 91058 root      20   0 1277356  11536    600 S   0.0  0.5   0:00.05 /usr/bin/+
 91065 root      35  15  113288   1432   1240 S   0.0  0.1   0:00.00 /bin/bash+
 91073 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 91105 root      20   0  261692   9972   2860 S   0.0  0.4   0:00.00 cpaneld -+
 91107 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 91113 locatio+  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 91119 locatio+  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 91121 pactpay   20   0  480124  17676  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 91122 root      20   0  160224   2376   1636 S   0.0  0.1   0:00.00 top -n 2 +
 91170 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 91200 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 91202 root      20   0  261692   7916   1416 S   0.0  0.3   0:00.00 cpsrvd (S+
 91204 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 91207 root      35  15  113284   1196   1020 R   0.0  0.0   0:00.00 /bin/bash+
 91210 cloudsms  20   0  399576  10652   7448 R   0.0  0.4   0:00.00 /opt/cpan+
 91213 root      35  15  113284    180      0 R   0.0  0.0   0:00.00 /bin/bash+
 91214 root      20   0  113284    208      0 R   0.0  0.0   0:00.00 bash /usr+
 91215 cloudw    20   0  287616   5164    180 R   0.0  0.2   0:00.00 /opt/cpan+
 92649 nobody    20   0  277964  22260   5024 S   0.0  0.9   0:02.07 /usr/sbin+
 92737 nobody    20   0  277956  22496   5148 S   0.0  0.9   0:01.99 /usr/sbin+
 95329 root      20   0 1556048 120236      0 S   0.0  5.0   8:31.65 /usr/loca+
 99663 root      20   0  400740   1528    608 S   0.0  0.1   0:32.39 php-fpm: +
 99668 root      20   0  388892    344    252 S   0.0  0.0   0:03.62 php-fpm: +
 99673 root      20   0  396248    248    164 S   0.0  0.0   0:03.72 php-fpm: +
 99678 root      20   0  389508    408    320 S   0.0  0.0   0:03.82 php-fpm: +
 99683 root      20   0  439788    404    312 S   0.0  0.0   0:03.90 php-fpm: +
 99686 root      20   0   12788    340    212 S   0.0  0.0   0:10.02 /usr/loca+
 99687 root      20   0   12732    288    208 S   0.0  0.0   0:08.16 /usr/loca+
 99688 root      20   0   12820    348    216 S   0.0  0.0   0:09.13 /usr/loca+
 99689 root      20   0   53252      4      4 S   0.0  0.0   0:00.05 /usr/loca+
100237 root      20   0  267196   4732    476 S   0.0  0.2   0:52.28 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov23   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov23   4:45  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov23   1:30  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov23  40:30  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov23   0:06  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov23   0:06  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov23   1:44  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov23   6:24  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov23  44:49  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov23   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov23   0:04  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S    Nov23   0:41  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   Nov23   5:25  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov23   4:36  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    Nov23   2:33  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<   Nov23   2:20  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    Nov23   0:11  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root      19357  0.0  0.0      0     0 ?        S    05:45   0:00  \_ [kworker/u200:1]
root      67790  0.0  0.0      0     0 ?        S    06:22   0:00  \_ [kworker/u200:2]
root       5839  0.0  0.0      0     0 ?        S    06:54   0:00  \_ [kworker/1:3]
root      46009  0.0  0.0      0     0 ?        S    07:24   0:00  \_ [kworker/0:0]
root      51323  0.0  0.0      0     0 ?        S    07:28   0:00  \_ [kworker/0:2]
root      60112  0.0  0.0      0     0 ?        S    07:35   0:00  \_ [kworker/0:4]
root      61329  0.0  0.0      0     0 ?        S    07:36   0:00  \_ [kworker/1:2]
root      71171  0.0  0.0      0     0 ?        S    07:44   0:00  \_ [kworker/1:0]
root      77391  0.0  0.0      0     0 ?        S    07:49   0:00  \_ [kworker/0:1]
root      79884  0.0  0.0      0     0 ?        S    07:51   0:00  \_ [kworker/1:4]
root      87327  0.0  0.0      0     0 ?        S    07:57   0:00  \_ [kworker/0:3]
root      88508  0.0  0.0      0     0 ?        S    07:58   0:00  \_ [kworker/1:1]
root          1  0.1  0.1 191864  3488 ?        Ss   Nov23  59:18 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  40240  5712 ?        Ss   Nov23  19:26 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352     8 ?        Ss   Nov23   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   108 ?        S<sl Nov23   2:58 /sbin/auditd
root        487  0.0  0.0  21540   384 ?        Ss   Nov23   0:54 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24896  1168 ?        Ss   Nov23   9:33 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610664  1124 ?        Ssl  Nov23   5:22 /usr/lib/polkit-1/polkitd --no-debug
root        495  0.0  0.1 224416  4552 ?        Ss   Nov23   0:26 queueprocd - waiting up to 60s to process a task
root        496  0.0  0.0  52852   244 ?        Ss   Nov23   0:00 /usr/sbin/smartd -n -q never
root        497  0.0  0.0 152780    80 ?        Ss   Nov23   0:02 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        503  0.0  0.0  58748  1356 ?        Ss   Nov23  21:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        506  0.1  0.1 1377672 2560 ?        Ssl  Nov23  45:35 /usr/sbin/nscd
rpc         511  0.0  0.0  69256    20 ?        Ss   Nov23   0:02 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov23   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208     0 ?        Ssl  Nov23   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208    24 ?        Ss   Nov23   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124508   428 ?        Ss   Nov23   1:09 /usr/sbin/crond -n
root      90971  0.0  0.0 183080  2144 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91034  0.0  0.0 113284  1212 ?        Ss   08:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      91056  0.0  0.5 1350688 14392 ?       Sl   08:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      90972  0.0  0.0 183080  2144 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91040  0.0  0.0 113284  1208 ?        Ss   08:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      91058  0.0  0.4 1277356 11536 ?       Sl   08:00   0:00  |       \_ /usr/bin/update_imunify
root      90973  0.0  0.0 183080  2144 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91031  0.0  0.0 113284  1212 ?        Ss   08:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      91054  0.0  0.6 1276956 14624 ?       Sl   08:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      90974  0.0  0.0 183080  2144 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91027  0.0  0.0 113284  1212 ?        Ss   08:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      91065  0.0  0.0 113288  1432 ?        SN   08:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      91207  0.0  0.0 113284  1196 ?        RN   08:00   0:00  |           \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      91213  0.0  0.0 113284   180 ?        RN   08:00   0:00  |               \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      90977  0.0  0.0 183080  2144 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91038  0.0  0.0 113284  1212 ?        Ss   08:00   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      91057  0.0  0.0 113284  1464 ?        S    08:00   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      91214  0.0  0.0 113284   208 ?        R    08:00   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      90979  0.0  0.0 183080  2144 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91035  0.0  0.0 113284  1212 ?        Ss   08:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      91053  0.0  0.0 108052   360 ?        S    08:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      91073  0.0  0.0 113288  1520 ?        S    08:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      91216  0.0  0.0 153840  2100 ?        R    08:00   0:00  |               \_ ps auxf
root      90981  0.0  0.0 183080  2148 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91037  0.0  0.0  20164   804 ?        Ss   08:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      90983  0.0  0.0 183080  2152 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91039  0.0  0.0  20164   804 ?        Ss   08:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      90984  0.0  0.0 183080  2152 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91026  0.0  0.0  20164   804 ?        Ss   08:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      90985  0.0  0.0 183076  2152 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91025  0.0  0.0  20164   992 ?        Ss   08:00   0:00  |   \_ jailshell (cloudsms) [91200] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
cloudsms  91200  0.0  0.0  20164   264 ?        S    08:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
cloudsms  91204  0.0  0.0 113284  1212 ?        S    08:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
cloudsms  91210  0.0  0.6 404052 15612 ?        S    08:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/queue_status.php
root      90986  0.0  0.0 183076  2152 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91041  0.0  0.0  20164   808 ?        Ss   08:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      90987  0.0  0.0 183076  2152 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91023  0.0  0.0  20164   808 ?        Ss   08:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      90988  0.0  0.0 183076  2152 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91032  0.0  0.0  20164   804 ?        Ss   08:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      90989  0.0  0.0 183076  2152 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91028  0.0  0.0  20164   804 ?        Ss   08:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      90990  0.0  0.0 183076  2152 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91043  0.0  0.0  20164   804 ?        Ss   08:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      90991  0.0  0.0 183076  2152 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91030  0.0  0.0  20164   804 ?        Ss   08:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      90992  0.0  0.0 183076  2152 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91044  0.0  0.0  20164   808 ?        Ss   08:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      90993  0.0  0.0 183076  2152 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91019  0.0  0.0  20164   804 ?        Ss   08:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root      90995  0.0  0.0 183076  2148 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91022  0.0  0.0 113284  1208 ?        Ss   08:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      91051  0.0  0.4 188236 11100 ?        S    08:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      91122  0.0  0.0 160224  2376 ?        S    08:00   0:00  |           \_ top -n 2 -b -c
root      90996  0.0  0.0 183076  2144 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91049  0.0  0.0  20164   972 ?        Ss   08:00   0:00  |   \_ jailshell (pactpay) [91107] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   91107  0.0  0.0  20164   264 ?        S    08:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   91121  0.0  0.7 480124 17676 ?        S    08:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      90999  0.0  0.0 183076  2140 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91002  0.0  0.0  20164   968 ?        Ss   08:00   0:00  |   \_ jailshell (nigeria) [91004] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   91004  0.0  0.0  20164   260 ?        S    08:00   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   91005 10.0  0.6 404052 16140 ?        S    08:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      91000  0.0  0.0 183076  2144 ?        S    08:00   0:00  \_ /usr/sbin/CROND -n
root      91048  0.0  0.0  20164   968 ?        Ss   08:00   0:00      \_ jailshell (locationforms) [91113]  php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  91113  0.0  0.0  20164   256 ?        S    08:00   0:00          \_ jailshell (locationforms) [init] c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  91119  0.0  0.0 113284  1212 ?        S    08:00   0:00              \_ /usr/local/cpanel/bin/jailshell -c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  91128  0.0  0.8 406668 19824 ?        R    08:00   0:00                  \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php
root        576  0.0  0.0 108296     4 tty1     Ss+  Nov23   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704     0 ttyS0    Ss+  Nov23   0:00 /bin/bash
mailnull    621  0.0  0.1  89120  3848 ?        Ss   Nov23   0:55 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        927  0.0  0.0  51628   472 ?        Ss   Nov23   0:28 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1055  0.0  0.0  10320   352 ?        S    Nov23   0:08  \_ dovecot/anvil
dovenull  85488  0.0  0.1  49496  2848 ?        S    Dec05   0:29  \_ dovecot/pop3-login
dovenull  85489  0.0  0.1  52160  3384 ?        S    Dec05   0:14  \_ dovecot/imap-login
root      85490  0.0  0.0  10452   560 ?        S    Dec05   0:16  \_ dovecot/log
dovenull  85491  0.0  0.1  49468  2808 ?        S    Dec05   0:21  \_ dovecot/pop3-login
dovenull  85492  0.0  0.1  50900  3248 ?        S    Dec05   0:19  \_ dovecot/imap-login
root      85493  0.0  0.0  24700  1832 ?        S    Dec05   0:07  \_ dovecot/config
dovecot   85494  0.0  0.0  13700   624 ?        S    Dec05   0:03  \_ dovecot/stats
dovecot   85495  0.0  0.0  43012  2184 ?        S    Dec05   0:38  \_ dovecot/auth
systuser    928  0.0  0.0  11540    52 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756    60 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524    68 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608    68 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        933  0.0  0.0 153404   220 ?        Ss   Nov23   0:54 pure-ftpd (SERVER)
root        935  0.0  0.0 572372   808 ?        Ssl  Nov23   3:22 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        937  0.0  0.0 111304   364 ?        Ss   Nov23   4:23 /usr/sbin/sshd -D
root        939  0.0  0.2 1350728 6412 ?        Ssl  Nov23   1:29 /usr/bin/cspdaemon
root        952  0.0  0.2 261692  6904 ?        Ss   Nov23   7:24 cpsrvd (SSL) - waiting for connections                   
root      91105  0.0  0.4 261692  9972 ?        S    08:00   0:00  \_ cpaneld - serving 18.97.26.84
root      91202  0.0  0.3 261692  7916 ?        S    08:00   0:00  \_ cpsrvd (SSL) - waiting for connections                   
root        953  0.0  0.2 331088  6120 ?        Ssl  Nov23  10:15 /usr/sbin/rsyslogd -n
cpanelc+    969  0.0  0.1  10764  3788 ?        Ss   Nov23  29:39 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
memcach+    972  0.0  0.0 342400     0 ?        Ssl  Nov23   0:52 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 1277312 2356 ?        Ssl  Nov23   0:32 /usr/bin/checkstatus
systuser    980  0.0  0.4 114016 10688 ?        Ssl  Nov23  10:45 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser   1144  0.0  0.1 157704  2916 ?        S    Nov23   0:11 SonarPush 0.6.12 [sleeping]
root       1239  0.0  0.0 167452  1216 ?        Ss   Nov23   0:36 dnsadmin - dormant mode
root       1243  0.0  0.8 209304 19504 ?        Ss   Nov23   4:54 tailwatchd
root       1244  0.0  1.0 262224 24612 ?        Ss   Nov23   3:42 cpdavd - accepting connections on: 2091, 2077, 2078
root       1676  0.0  0.0 130416  1380 ?        SN   Nov23   0:06 cpanellogd - sleeping for logs
oysipao+  15361  0.0  0.0   3148     4 ?        Ss   Nov23   0:00 [kworker]
oysipao+  15368  0.0  0.0   3156    36 ?        S    Nov23   0:56  \_ [kworker]
mysql     13043  1.7 12.0 1487024 291916 ?      Sl   Dec04 379:15 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
telegraf  85330  0.0  1.1 5654308 28036 ?       SLsl Dec04  12:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root      95329  0.0  4.9 1556048 120236 ?      Ssl  Dec09   8:31 /usr/local/cpanel/3rdparty/bin/clamd -F
root      72706  0.0  0.0 299272   496 ?        Ss   Dec09   0:39 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root      72712  0.0  0.0 445028   596 ?        Ss   Dec09   0:59 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  90605  0.0  0.0 445028   324 ?        S    07:59   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  90619  0.0  0.0 445028   328 ?        S    07:59   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  72887  0.0  0.1 412396  3476 ?        Ss   Dec09   5:32 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+  72891  0.0  0.1 387556  3264 ?        Ss   Dec09   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root     100237  0.0  0.1 267196  4732 ?        Ss   Dec09   0:52 /usr/sbin/httpd -k start
root      99686  0.0  0.0  12788   340 ?        S    Dec18   0:10  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      99687  0.0  0.0  12732   288 ?        S    Dec18   0:08  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      99688  0.0  0.0  12820   348 ?        S    Dec18   0:09  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      99689  0.0  0.0  53252     4 ?        S    Dec18   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    92649  0.0  0.9 277964 22260 ?        S    06:41   0:02  \_ /usr/sbin/httpd -k start
nobody    92737  0.0  0.9 277956 22496 ?        S    06:41   0:01  \_ /usr/sbin/httpd -k start
nobody    62795  0.0  0.8 277764 20360 ?        S    07:37   0:00  \_ /usr/sbin/httpd -k start
nobody    62815  0.0  0.8 278064 20588 ?        S    07:37   0:00  \_ /usr/sbin/httpd -k start
nobody    62817  0.0  0.8 277708 20100 ?        S    07:37   0:00  \_ /usr/sbin/httpd -k start
nobody    64730  0.0  0.8 277748 20064 ?        S    07:38   0:00  \_ /usr/sbin/httpd -k start
nobody    64863  0.0  0.8 277760 20320 ?        S    07:38   0:00  \_ /usr/sbin/httpd -k start
nobody    68677  0.0  0.8 277728 20136 ?        S    07:41   0:00  \_ /usr/sbin/httpd -k start
nobody    80465  0.0  0.8 277688 19648 ?        S    07:51   0:00  \_ /usr/sbin/httpd -k start
nobody    85963  0.0  0.7 277688 19000 ?        S    07:55   0:00  \_ /usr/sbin/httpd -k start
nobody    89614  0.0  0.7 277592 17840 ?        S    07:58   0:00  \_ /usr/sbin/httpd -k start
named      1188  0.0  1.3 1185868 31684 ?       Ssl  Dec17   1:57 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root      99663  0.0  0.0 400740  1528 ?        Ss   Dec18   0:32 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   90538  0.0  0.1 400460  4392 ?        S    07:59   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  90564 19.4  2.7 460636 67392 ?        S    07:59   0:02  \_ php-fpm: pool health_oyostate_gov_ng
root      99668  0.0  0.0 388892   344 ?        Ss   Dec18   0:03 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root      99673  0.0  0.0 396248   248 ?        Ss   Dec18   0:03 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root      99678  0.0  0.0 389508   408 ?        Ss   Dec18   0:03 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root      99683  0.0  0.0 439788   404 ?        Ss   Dec18   0:03 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root      77791  0.1  0.4 183376 11296 ?        Ss   00:00   0:29 lfd - sleeping
root      45956  0.0  4.8 248724 118120 ?       Ss   04:47   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      59356  0.0  4.9 249996 119732 ?       S    04:57   0:01  \_ spamd child
root      59357  0.0  4.8 248724 117632 ?       S    04:57   0:00  \_ spamd child
cloudw    91127  0.0  0.6 287616 14612 ?        S    08:00   0:00 /opt/cpanel/ea-php70/root/usr/bin/php -f /home/cloudw/wptraining.cloudware.ng/wp-includes/xmpueb.php
cloudw    91215  0.0  0.2 287616  5164 ?        R    08:00   0:00  \_ /opt/cpanel/ea-php70/root/usr/bin/php -f /home/cloudw/wptraining.cloudware.ng/wp-includes/xmpueb.php
## mysql stats
Uptime: 1265696  Threads: 4  Questions: 139850033  Slow queries: 0  Opens: 322742  Flush tables: 1  Open tables: 2000  Queries per second avg: 110.492
*************************** 1. row ***************************
     Id: 2256381
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 2256388
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 2256392
   User: location_phpl624
   Host: localhost
     db: location_phpl624
Command: Query
   Time: 0
  State: Opening tables
   Info: select * from pl61_templateimage where filename = "powerphplist.png" and template = 0
*************************** 4. row ***************************
     Id: 2256395
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.149.43 TIME_WAIT
      1 138.226.24.203 TIME_WAIT
      1 142.147.171.171 TIME_WAIT
      1 142.44.228.226 TIME_WAIT
      1 148.113.128.11 TIME_WAIT
      1 148.113.130.113 TIME_WAIT
      1 15.235.96.2 TIME_WAIT
      1 167.160.56.135 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.95.191 TIME_WAIT
      1 52.167.144.166 TIME_WAIT
      1 54.39.210.6 TIME_WAIT
      1 91.124.129.72 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 216.73.216.10 TIME_WAIT
    151 98.80.4.6 TIME_WAIT
    191 44.220.185.101 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.66 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Dec 8 2025 14:42:54
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 19-Dec-2025 08:00:02 WAT
   Restart Time: Tuesday, 09-Dec-2025 04:48:00 WAT
   Parent Server Config. Generation: 5
   Parent Server MPM Generation: 4
   Server uptime: 10 days 3 hours 12 minutes 2 seconds
   Server load: 0.29 0.37 0.47
   Total accesses: 2567930 - Total Traffic: 24.6 GB - Total Duration: 1014395839
   CPU Usage: u12.13 s47.88 cu17486.7 cs11449.1 - 3.31% CPU load
   2.93 requests/sec - 29.5 kB/second - 10.1 kB/request - 395.025 ms/request
   4 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

___WK_......._.K..W.._..........................................
......._........................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

    Srv   PID      Acc      M CPU    SS   Req   Dur    Conn Child   Slot      Client      Protocol              VHost                                          Request
   0-4   64730 0/205/180590 _ 1.12 0      0   68875105 0.0  1.10  1936.05 44.220.185.101  http/1.1
   1-4   64863 0/227/168991 _ 2.11 0      258 65358003 0.0  1.31  1633.29 44.220.185.101  http/1.1
   2-4   68677 0/187/165788 _ 2.21 0      353 63542832 0.0  1.37  1660.53 44.220.185.101  http/1.1
   3-4   80465 0/89/167297  W 0.47 0      0   63406615 0.0  0.39  1689.59 36.111.32.238   http/1.1 health.oyostate.gov.ng:443      POST /xmlrpc.php HTTP/1.1
   4-4   85963 1/38/156307  K 0.46 3      12  59266951 6.9  0.22  1465.33 45.145.137.40   http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?state=Kano&lga=Gwarzo&ward=Kutam
   5-4   89614 0/5/153237   _ 0.04 0      29  59328357 0.0  0.03  1613.84 44.220.185.101  http/1.1
   6-4   -     0/0/148799   . 0.00 1098   0   55811785 0.0  0.00  1541.29 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   7-4   -     0/0/139773   . 0.00 1070   0   53548167 0.0  0.00  1330.56 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   8-4   -     0/0/135372   . 0.00 1093   0   52359691 0.0  0.00  1365.14 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   9-4   -     0/0/126083   . 0.00 1357   0   48962525 0.0  0.00  1267.01 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   10-4  -     0/0/124293   . 0.00 496    0   47932037 0.0  0.00  1163.36 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   11-4  -     0/0/108899   . 0.00 1361   0   42566363 0.0  0.00  1028.04 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   12-4  -     0/0/107377   . 0.00 1358   0   42740000 0.0  0.00  1034.78 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   13-4  62795 0/216/94215  _ 2.26 0      0   37160246 0.0  1.02  872.90  44.220.185.101  http/1.1
   14-4  -     0/0/84051    . 0.00 1344   0   35321021 0.0  0.00  926.81  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-4  92649 1/795/76108  K 6.69 2      27  29737244 1.2  6.57  692.61  110.238.83.83   http/1.1 team.cloudware.ng:80            GET /vendor/symfony/http-kernel/Tests/Exception/UnprocessableEn
   16-4  -     0/0/62205    . 0.00 1117   0   25036963 0.0  0.00  574.78  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-4  -     0/0/48541    . 0.00 1360   0   20644588 0.0  0.00  493.81  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-4  62815 0/193/43195  W 1.35 0      0   19414591 0.0  2.44  399.41  ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   19-4  -     0/0/29456    . 0.00 1131   0   13066331 0.0  0.00  316.94  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-4  -     0/0/35799    . 0.00 1367   0   15641151 0.0  0.00  338.76  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-4  62817 0/211/18033  _ 1.60 0      4   7808507  0.0  1.30  161.45  44.220.185.101  http/1.1
   22-4  -     0/0/17115    . 0.00 1368   0   6826826  0.0  0.00  160.98  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-4  -     0/0/20248    . 0.00 1366   0   8746123  0.0  0.00  208.44  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-4  -     0/0/14407    . 0.00 4688   0   6885597  0.0  0.00  132.55  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-4  -     0/0/13150    . 0.00 4671   0   6895781  0.0  0.00  119.68  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-4  -     0/0/12628    . 0.00 4675   0   5804601  0.0  0.00  105.03  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-4  -     0/0/9392     . 0.00 4357   0   4225569  0.0  0.00  77.42   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-4  -     0/0/8498     . 0.00 4651   0   3446098  0.0  0.00  74.71   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-4  -     0/0/6207     . 0.00 4674   0   2542765  0.0  0.00  70.14   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-4  -     0/0/4848     . 0.00 4674   0   2148809  0.0  0.00  31.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-4  -     0/0/3947     . 0.00 4638   0   1811634  0.0  0.00  28.64   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-4  -     0/0/4336     . 0.00 4582   0   1573759  0.0  0.00  39.39   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-4  -     0/0/3238     . 0.00 4653   0   1178144  0.0  0.00  22.46   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-4  -     0/0/1574     . 0.00 4637   0   1676071  0.0  0.00  9.80    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-4  -     0/0/1821     . 0.00 4687   0   821691   0.0  0.00  16.64   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-4  -     0/0/4383     . 0.00 4650   0   1671104  0.0  0.00  33.75   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-4  -     0/0/2739     . 0.00 4631   0   752587   0.0  0.00  26.30   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-4  -     0/0/5950     . 0.00 4669   0   2134611  0.0  0.00  55.09   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-4  -     0/0/3166     . 0.00 4668   0   1193869  0.0  0.00  46.90   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-4  -     0/0/4516     . 0.00 4660   0   3009795  0.0  0.00  69.17   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-4  -     0/0/2282     . 0.00 4630   0   1006630  0.0  0.00  28.27   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-4  -     0/0/1792     . 0.00 4645   0   876578   0.0  0.00  22.73   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-4  -     0/0/2231     . 0.00 4581   0   920492   0.0  0.00  23.64   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-4  -     0/0/3384     . 0.00 4670   0   998199   0.0  0.00  27.37   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-4  -     0/0/1309     . 0.00 4684   0   649587   0.0  0.00  13.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-4  -     0/0/1183     . 0.00 4667   0   513112   0.0  0.00  9.39    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-4  -     0/0/862      . 0.00 4661   0   444938   0.0  0.00  8.41    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-4  -     0/0/1739     . 0.00 4639   0   660890   0.0  0.00  12.25   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-4  -     0/0/833      . 0.00 4644   0   436583   0.0  0.00  6.51    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-4  -     0/0/1025     . 0.00 4648   0   431917   0.0  0.00  10.60   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-4  -     0/0/1585     . 0.00 1973   0   635385   0.0  0.00  7.35    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-4  -     0/0/1742     . 0.00 4646   0   719932   0.0  0.00  14.82   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-4  -     0/0/1932     . 0.00 4672   0   842894   0.0  0.00  19.46   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-4  -     0/0/411      . 0.00 4676   0   300364   0.0  0.00  2.73    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-4  -     0/0/1368     . 0.00 4665   0   482449   0.0  0.00  9.73    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-4  -     0/0/478      . 0.00 4649   0   385504   0.0  0.00  3.25    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-4  -     0/0/1894     . 0.00 1362   0   884042   0.0  0.00  15.77   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-4  -     0/0/1231     . 0.00 4681   0   419127   0.0  0.00  7.23    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-4  -     0/0/171      . 0.00 4683   0   321327   0.0  0.00  1.38    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-4  -     0/0/605      . 0.00 4685   0   284354   0.0  0.00  3.19    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-4  -     0/0/808      . 0.00 4680   0   352720   0.0  0.00  8.04    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-4  -     0/0/1002     . 0.00 4636   0   438285   0.0  0.00  11.99   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-4  -     0/0/754      . 0.00 4678   0   500478   0.0  0.00  6.05    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-4  -     0/0/175      . 0.00 4647   0   228436   0.0  0.00  1.37    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-4  -     0/0/708      . 0.00 4679   0   437283   0.0  0.00  4.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-4  -     0/0/611      . 0.00 2682   0   291362   0.0  0.00  4.73    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-4  -     0/0/1319     . 0.00 4666   0   632183   0.0  0.00  13.20   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-4  -     0/0/230      . 0.00 4686   0   267295   0.0  0.00  1.35    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-4  -     0/0/770      . 0.00 4643   0   702157   0.0  0.00  6.20    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-4  -     0/0/757      . 0.00 4657   0   302880   0.0  0.00  5.62    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-4  92737 0/819/2802   _ 7.10 0      345 962136   0.0  4.23  17.76   44.220.185.101  http/1.1
   72-4  -     0/0/288      . 0.00 4682   0   297052   0.0  0.00  2.16    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-4  -     0/0/411      . 0.00 4656   0   291130   0.0  0.00  2.93    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   74-4  -     0/0/160      . 0.00 45663  0   186077   0.0  0.00  0.63    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-4  -     0/0/326      . 0.00 45662  0   139945   0.0  0.00  1.50    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-4  -     0/0/287      . 0.00 45697  0   125653   0.0  0.00  1.32    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-4  -     0/0/241      . 0.00 45451  4   378337   0.0  0.00  0.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-4  -     0/0/141      . 0.00 45638  0   35995    0.0  0.00  0.22    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   79-4  -     0/0/157      . 0.00 45661  0   13496    0.0  0.00  0.29    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   80-4  -     0/0/528      . 0.00 45096  0   158358   0.0  0.00  2.80    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   81-4  -     0/0/319      . 0.00 45688  0   170775   0.0  0.00  1.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   82-4  -     0/0/112      . 0.00 45695  0   120764   0.0  0.00  0.44    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   83-4  -     0/0/621      . 0.00 45653  0   373628   0.0  0.00  3.54    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   84-4  -     0/0/189      . 0.00 45655  0   105779   0.0  0.00  1.02    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   85-4  -     0/0/262      . 0.00 45694  0   74396    0.0  0.00  0.67    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   86-4  -     0/0/223      . 0.00 45160  0   84591    0.0  0.00  1.82    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   87-4  -     0/0/878      . 0.00 44310  0   171957   0.0  0.00  4.33    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   88-4  -     0/0/268      . 0.00 45666  0   80410    0.0  0.00  0.91    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   89-4  -     0/0/689      . 0.00 45652  0   340634   0.0  0.00  17.70   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   90-4  -     0/0/125      . 0.00 45656  0   90117    0.0  0.00  0.63    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   91-2  -     0/0/507      . 0.00 284626 0   174361   0.0  0.00  3.32    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   92-2  -     0/0/179      . 0.00 285161 0   116013   0.0  0.00  0.97    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   93-2  -     0/0/110      . 0.00 285197 0   65032    0.0  0.00  0.45    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   94-2  -     0/0/185      . 0.00 285219 82  114296   0.0  0.00  2.40    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   95-2  -     0/0/163      . 0.00 285124 0   122930   0.0  0.00  0.30    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   96-2  -     0/0/169      . 0.00 285205 0   21600    0.0  0.00  0.16    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   97-2  -     0/0/350      . 0.00 284503 0   77331    0.0  0.00  0.92    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   98-2  -     0/0/283      . 0.00 285162 0   86349    0.0  0.00  0.88    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   99-2  -     0/0/206      . 0.00 284429 0   127715   0.0  0.00  1.02    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   100-2 -     0/0/230      . 0.00 284655 0   45632    0.0  0.00  0.47    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   101-2 -     0/0/113      . 0.00 285184 0   111909   0.0  0.00  0.46    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   102-2 -     0/0/8        . 0.00 285241 86  8810     0.0  0.00  0.06    138.197.152.229 http/1.1 new-vegas-cash.staging.cloudwar GET /wp-2019.php HTTP/1.1
   103-2 -     0/0/193      . 0.00 285126 0   60761    0.0  0.00  0.48    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   104-2 -     0/0/227      . 0.00 285137 0   19228    0.0  0.00  0.14    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   105-2 -     0/0/19       . 0.00 285215 0   20494    0.0  0.00  0.03    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   106-2 -     0/0/89       . 0.00 285214 0   30342    0.0  0.00  0.09    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   107-2 -     0/0/75       . 0.00 285208 0   23965    0.0  0.00  0.05    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   108-2 -     0/0/207      . 0.00 285169 0   99496    0.0  0.00  0.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   109-2 -     0/0/11       . 0.00 285218 0   27094    0.0  0.00  0.01    138.197.152.229 http/1.1 proxy-subdomains-vhost.localhos GET /nf_tracking.php HTTP/1.1
   110-2 -     0/0/160      . 0.00 285134 0   55783    0.0  0.00  0.59    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   111-2 -     0/0/4        . 0.00 285138 0   1637     0.0  0.00  0.01    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   112-2 -     0/0/107      . 0.00 285228 0   16580    0.0  0.00  0.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   113-2 -     0/0/135      . 0.00 284627 0   43118    0.0  0.00  0.64    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   114-2 -     0/0/79       . 0.00 285201 0   35968    0.0  0.00  0.04    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   115-2 -     0/0/115      . 0.00 285154 0   51751    0.0  0.00  0.44    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   116-2 -     0/0/207      . 0.00 285164 0   79415    0.0  0.00  0.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   117-2 -     0/0/131      . 0.00 285167 0   48034    0.0  0.00  0.46    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   118-2 -     0/0/112      . 0.00 285151 0   67705    0.0  0.00  0.45    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   119-2 -     0/0/2        . 0.00 285119 0   241030   0.0  0.00  0.00    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   120-2 -     0/0/117      . 0.00 285174 0   58506    0.0  0.00  0.44    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   121-2 -     0/0/159      . 0.00 285165 0   48348    0.0  0.00  0.45    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   122-2 -     0/0/153      . 0.00 285157 0   30575    0.0  0.00  0.10    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   123-2 -     0/0/90       . 0.00 285141 0   69610    0.0  0.00  0.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   124-2 -     0/0/124      . 0.00 285116 0   48197    0.0  0.00  0.44    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   125-2 -     0/0/225      . 0.00 285150 0   46797    0.0  0.00  1.31    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   126-2 -     0/0/113      . 0.00 285122 0   60949    0.0  0.00  0.77    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   127-2 -     0/0/196      . 0.00 285180 0   43269    0.0  0.00  0.49    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   128-2 -     0/0/153      . 0.00 285121 0   89591    0.0  0.00  0.92    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   129-2 -     0/0/182      . 0.00 285144 0   14610    0.0  0.00  0.11    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   130-2 -     0/0/75       . 0.00 285166 0   29077    0.0  0.00  0.38    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   131-2 -     0/0/138      . 0.00 284996 0   61766    0.0  0.00  0.58    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   132-2 -     0/0/105      . 0.00 285194 0   61218    0.0  0.00  0.42    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   133-2 -     0/0/17       . 0.00 285219 0   596      0.0  0.00  0.01    138.197.152.229 http/1.1 proxy-subdomains-vhost.localhos GET /wp-includes/rest-api/about.php HTTP/1.1
   134-2 -     0/0/110      . 0.00 285217 0   13878    0.0  0.00  0.08    138.197.152.229 http/1.1 proxy-subdomains-vhost.localhos GET /wp-includes/IXR/about.php HTTP/1.1
   135-2 -     0/0/6        . 0.00 285230 0   21667    0.0  0.00  0.02    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   136-2 -     0/0/4        . 0.00 285232 0   6056     0.0  0.00  0.00    138.197.152.229 http/1.1 proxy-subdomains-vhost.localhos GET /as.php HTTP/1.1
   137-2 -     0/0/222      . 0.00 284989 0   59782    0.0  0.00  0.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   138-2 -     0/0/109      . 0.00 285216 0   16220    0.0  0.00  0.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   139-2 -     0/0/160      . 0.00 285152 0   24902    0.0  0.00  0.24    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   140-2 -     0/0/9        . 0.00 285232 0   20410    0.0  0.00  0.03    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   141-2 -     0/0/104      . 0.00 285178 0   59137    0.0  0.00  0.42    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   142-2 -     0/0/107      . 0.00 285191 0   36089    0.0  0.00  0.41    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   143-2 -     0/0/86       . 0.00 285145 0   37015    0.0  0.00  0.55    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 370
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 27 seconds, (range: 3...84)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 138868
   total entries replaced since starting: 0
   total entries expired since starting: 138352
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 5934 hit, 1249 miss
   total removes since starting: 146 hit, 449 miss
Youez - 2016 - github.com/yon3zu
LinuXploit