403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.48
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-12-24.11.24.txt
 ## swap threshold exceeded
## server overview
2025-12-24.11.24 load[5] mem[75/38] mysql[14/47] httpd[21]
              total        used        free      shared  buff/cache   available
Mem:           2363        1765          75          87         522         324
Swap:          4047        1662        2385
 11:24:04 up 30 days, 14:12,  0 users,  load average: 7.30, 2.72, 1.42
## system overview
top - 11:24:04 up 30 days, 14:12,  0 users,  load average: 7.30, 2.72, 1.42
Tasks: 202 total,  13 running, 188 sleeping,   0 stopped,   1 zombie
%Cpu(s): 85.0 us, 12.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  2.5 si,  0.0 st
KiB Mem :  2420300 total,    71568 free,  1864052 used,   484680 buff/cache
KiB Swap:  4145144 total,  2442256 free,  1702888 used.   276624 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 13043 mysql     20   0 1490420 345584   3692 S  42.1 14.3 494:13.72 /usr/sbin+
 30147 cloudw    20   0  576128 110080   6708 S  21.1  4.5   0:00.51 php-fpm: +
 30116 healtho+  20   0  465244  71036   4188 R  10.5  2.9   0:03.32 php-fpm: +
 30130 healtho+  20   0  460636  67396   4216 R  10.5  2.8   0:01.61 php-fpm: +
 30132 healtho+  20   0  461148  67668   4220 R  10.5  2.8   0:01.54 php-fpm: +
 30141 healtho+  20   0  454492  61128   4188 R  10.5  2.5   0:01.01 php-fpm: +
 30167 cloudw    20   0  553448  87212   6172 R  10.5  3.6   0:00.36 php-fpm: +
 30170 cloudw    20   0  545016  76980   6068 R  10.5  3.2   0:00.32 php-fpm: +
 30172 cloudw    20   0  532152  67596   6008 R  10.5  2.8   0:00.26 php-fpm: +
 30258 healtho+  20   0  427740  33220   3460 R  10.5  1.4   0:00.11 php-fpm: +
    36 root      20   0       0      0      0 S   5.3  0.0  51:08.84 [kswapd0]
 30169 cloudw    20   0  547304  81192   6100 R   5.3  3.4   0:00.34 php-fpm: +
 30209 nigeria   20   0  404052  16136  10384 S   5.3  0.7   0:00.07 /opt/cpan+
     1 root      20   0  192272   3512   1540 S   0.0  0.1  72:03.04 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.55 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   5:02.75 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   1:35.19 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0  46:28.43 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:07.53 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:07.47 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   1:48.79 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   6:52.84 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.94 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.20 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:05.10 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   0:48.02 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   6:15.29 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   5:16.02 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   2:57.84 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40240   3112   2852 S   0.0  0.1  22:50.10 /usr/lib/+
   383 root      20   0   45352      8      4 S   0.0  0.0   0:00.45 /usr/lib/+
   412 root      16  -4   55532    428    312 S   0.0  0.0   3:25.00 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    416    304 S   0.0  0.0   1:06.24 /usr/sbin+
   489 root      20   0   24896   1180    796 S   0.0  0.0  11:32.66 /usr/lib/+
   494 polkitd   20   0  610664    996    484 S   0.0  0.0   6:28.23 /usr/lib/+
   496 root      20   0   52852    248    156 S   0.0  0.0   0:00.40 /usr/sbin+
   497 root      20   0  152780     64     20 S   0.0  0.0   0:03.27 /usr/sbin+
   503 dbus      20   0   58748   1360    600 S   0.0  0.1  25:26.93 /usr/bin/+
   511 rpc       20   0   69256     60      0 S   0.0  0.0   0:02.72 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208     24      0 S   0.0  0.0   0:00.07 /usr/sbin+
   558 root      20   0  124508    428    296 S   0.0  0.0   1:24.40 /usr/sbin+
   576 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   2:43.52 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:12.78 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   927 root      20   0   51628    448    276 S   0.0  0.0   0:34.30 /usr/sbin+
   928 systuser  20   0   11540     52      0 S   0.0  0.0   0:01.46 /usr/loca+
   929 systuser  20   0   12756     60      0 S   0.0  0.0   0:01.43 /usr/loca+
   931 systuser  20   0  112524     44      0 S   0.0  0.0   0:01.39 /usr/loca+
   932 systuser  20   0  111608     68      0 S   0.0  0.0   0:01.35 /usr/loca+
   933 root      20   0  153404    220    136 S   0.0  0.0   1:06.68 pure-ftpd+
   935 root      20   0  572372    740    208 S   0.0  0.0   4:04.78 /usr/bin/+
   937 root      20   0  111304    364    256 S   0.0  0.0   5:00.67 /usr/sbin+
   939 root      20   0 1350728   6780      8 S   0.0  0.3   1:49.23 /usr/bin/+
   952 root      20   0  261032  26916   4468 S   0.0  1.1   9:04.26 cpsrvd (S+
   953 root      20   0  331088   4104   3108 S   0.0  0.2  12:04.44 /usr/sbin+
   972 memcach+  20   0  342400     12     12 S   0.0  0.0   1:03.92 /usr/bin/+
   974 root      20   0 1277312   2388      8 S   0.0  0.1   0:34.53 /usr/bin/+
   980 systuser  20   0  114272  10316   2504 S   0.0  0.4  13:05.01 /usr/loca+
  1055 dovecot   20   0   10320    332    216 S   0.0  0.0   0:10.21 dovecot/a+
  1144 systuser  20   0  157704   2204    212 S   0.0  0.1   0:13.92 SonarPush+
  1188 named     20   0 1185868  35124   1300 S   0.0  1.5   6:13.98 /usr/sbin+
  1239 root      20   0  167452   1204    656 S   0.0  0.0   0:44.17 dnsadmin +
  1243 root      20   0  209348  20496   3008 S   0.0  0.8   5:44.98 tailwatchd
  1244 root      20   0  262224  22448   4516 S   0.0  0.9   4:43.41 cpdavd - +
  2067 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kworker/+
  3127 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 11004 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 15361 oysipao+  20   0    3148      4      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3156     36      0 S   0.0  0.0   1:07.07 [kworker]
 17585 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 18251 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 21026 nobody    20   0  277992  20560   4644 S   0.0  0.8   0:01.09 /usr/sbin+
 21040 nobody    20   0  278280  20740   4596 S   0.0  0.9   0:01.06 /usr/sbin+
 21066 nobody    20   0  278316  20704   4528 S   0.0  0.9   0:01.02 /usr/sbin+
 21068 nobody    20   0  278008  20820   4676 S   0.0  0.9   0:01.02 /usr/sbin+
 21705 nobody    20   0  278168  20664   4696 S   0.0  0.9   0:01.00 /usr/sbin+
 21713 nobody    20   0  278376  21020   4684 S   0.0  0.9   0:01.01 /usr/sbin+
 21714 nobody    20   0  277964  20676   4700 S   0.0  0.9   0:01.08 /usr/sbin+
 21719 nobody    20   0  278276  20872   4628 S   0.0  0.9   0:00.97 /usr/sbin+
 21720 nobody    20   0  278272  20784   4620 S   0.0  0.9   0:00.99 /usr/sbin+
 23652 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 24323 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 26107 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 26408 nobody    20   0  277940  20088   4532 S   0.0  0.8   0:00.54 /usr/sbin+
 26582 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 26584 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 29134 nobody    20   0  277872  18788   4084 S   0.0  0.8   0:00.14 /usr/sbin+
 29258 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 29781 nobody    20   0  277832  18124   3824 S   0.0  0.7   0:00.06 /usr/sbin+
 29791 nobody    20   0  277836  18676   3896 S   0.0  0.8   0:00.07 /usr/sbin+
 29792 nobody    20   0  277832  18172   3852 S   0.0  0.8   0:00.06 /usr/sbin+
 29796 nobody    20   0  277828  18268   3868 S   0.0  0.8   0:00.06 /usr/sbin+
 29797 nobody    20   0  277824  18192   3840 S   0.0  0.8   0:00.08 /usr/sbin+
 29798 nobody    20   0  278016  18368   3908 S   0.0  0.8   0:00.06 /usr/sbin+
 29870 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 29916 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 30051 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 30053 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 30086 cloudw    20   0  474256   5048   3076 S   0.0  0.2   0:00.02 php-fpm: +
 30113 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 30119 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 30150 nobody    20   0  277648  16748   2856 S   0.0  0.7   0:00.00 /usr/sbin+
 30151 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30152 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30156 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30159 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30160 root      20   0  183076   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30163 root      20   0  183076   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 30165 root      20   0  183076   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30178 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 30179 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 30181 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 30183 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
 30189 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 30190 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 30191 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 30192 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 30198 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 30202 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 30203 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 30208 pactpay   20   0  480124  17676  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 30216 nobody    20   0  277520  16600   2736 S   0.0  0.7   0:00.00 /usr/sbin+
 30217 nobody    20   0  277512  16804   2936 S   0.0  0.7   0:00.00 /usr/sbin+
 30221 nigeria   20   0  400460   4464   2356 S   0.0  0.2   0:00.00 php-fpm: +
 30262 nobody    20   0  277524  15828   2044 S   0.0  0.7   0:00.00 /usr/sbin+
 30263 nobody    20   0  277656  16876   2884 S   0.0  0.7   0:00.00 /usr/sbin+
 30264 nobody    20   0  277388  15304   1584 S   0.0  0.6   0:00.00 /usr/sbin+
 30265 nobody    20   0  277520  16600   2736 S   0.0  0.7   0:00.00 /usr/sbin+
 30287 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 30289 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 30292 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 30293 root      20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
 30294 cloudsms  20   0  113284    184      0 R   0.0  0.0   0:00.00 /usr/loca+
 59487 root      20   0  183804  12508   1108 S   0.0  0.5   0:43.06 lfd - sle+
 72712 root      20   0  445028    596    480 S   0.0  0.0   1:33.78 sw-engine+
 72887 wp-tool+  20   0  412396   3472   1364 S   0.0  0.1   8:13.65 /usr/bin/+
 72891 wp-tool+  20   0  387556   3280   1404 S   0.0  0.1   0:13.40 /usr/bin/+
 73748 root      20   0  248808 121696   4308 S   0.0  5.0   0:05.64 /usr/loca+
 79749 root      20   0  265712 129932   2752 S   0.0  5.4   0:03.37 spamd chi+
 79750 root      20   0  248808 118772   1424 S   0.0  4.9   0:00.01 spamd chi+
 81125 root      20   0  400740   1352    616 S   0.0  0.1   1:06.50 php-fpm: +
 81130 root      20   0  388892    292    204 S   0.0  0.0   0:13.30 php-fpm: +
 81135 root      20   0  396248    368    276 S   0.0  0.0   0:13.33 php-fpm: +
 81140 root      20   0  389508    432    336 S   0.0  0.0   0:14.22 php-fpm: +
 81145 root      20   0  439788    360    268 S   0.0  0.0   0:13.91 php-fpm: +
 85330 telegraf  20   0 5654308  22676    988 S   0.0  0.9  16:20.55 /usr/loca+
 90141 dovenull  20   0   47292   2484   1684 S   0.0  0.1   0:00.66 dovecot/p+
 90142 dovenull  20   0   48360   3388   1700 S   0.0  0.1   0:00.90 dovecot/i+
 90143 root      20   0   10452    548    364 S   0.0  0.0   0:00.52 dovecot/l+
 90144 dovenull  20   0   47272   2496   1684 S   0.0  0.1   0:00.91 dovecot/p+
 90145 dovenull  20   0   48916   3888   1740 S   0.0  0.2   0:00.75 dovecot/i+
 90146 root      20   0   24564   2352    488 S   0.0  0.1   0:00.26 dovecot/c+
 90147 dovecot   20   0   13568    500    312 S   0.0  0.0   0:00.10 dovecot/s+
 90148 dovecot   20   0   41300   1680   1016 S   0.0  0.1   0:01.30 dovecot/a+
 90150 root      20   0   12848    340    216 S   0.0  0.0   0:03.40 /usr/loca+
 90151 root      20   0   12732    292    212 S   0.0  0.0   0:02.80 /usr/loca+
 90152 root      20   0   12880    352    220 S   0.0  0.0   0:03.19 /usr/loca+
 90156 root      20   0   53340     36     36 S   0.0  0.0   0:00.04 /usr/loca+
 91745 root      20   0  224392   4800   1016 S   0.0  0.2   0:05.11 queueproc+
 91974 mailnull  20   0   89116   3780    812 S   0.0  0.2   0:08.78 /usr/sbin+
 92390 cpanelc+  20   0   10752   3824   2332 R   0.0  0.2   4:38.11 /usr/loca+
 92394 root      38  18  130416   1372    684 S   0.0  0.1   0:01.09 cpanellog+
 92408 nscd      20   0 1346896   1892    632 S   0.0  0.1   1:29.03 /usr/sbin+
 92476 root      20   0  299272    432    268 S   0.0  0.0   0:14.08 php-fpm: +
 95329 root      20   0 1556280  58888    540 S   0.0  2.4  10:37.46 /usr/loca+
100237 root      20   0  267328   6936    552 S   0.0  0.3   1:14.93 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov23   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov23   5:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov23   1:35  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov23  46:28  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov23   0:07  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov23   0:07  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov23   1:48  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov23   6:52  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov23  51:08  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov23   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov23   0:05  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S    Nov23   0:48  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   Nov23   6:15  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov23   5:16  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    Nov23   2:57  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<   Nov23   2:43  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    Nov23   0:12  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root       2067  0.0  0.0      0     0 ?        S    10:10   0:00  \_ [kworker/0:4]
root       3127  0.0  0.0      0     0 ?        S    10:13   0:00  \_ [kworker/u200:1]
root      11004  0.0  0.0      0     0 ?        S    10:34   0:00  \_ [kworker/1:2]
root      17585  0.0  0.0      0     0 ?        S    10:53   0:00  \_ [kworker/u200:2]
root      18251  0.0  0.0      0     0 ?        S    10:55   0:00  \_ [kworker/0:0]
root      23652  0.0  0.0      0     0 ?        S    11:07   0:00  \_ [kworker/1:4]
root      24323  0.0  0.0      0     0 ?        S    11:09   0:00  \_ [kworker/0:1]
root      26107  0.0  0.0      0     0 ?        S    11:13   0:00  \_ [kworker/0:2]
root      26582  0.0  0.0      0     0 ?        S    11:14   0:00  \_ [kworker/1:0]
root      26584  0.0  0.0      0     0 ?        S    11:14   0:00  \_ [kworker/1:1]
root      29258  0.0  0.0      0     0 ?        S    11:21   0:00  \_ [kworker/1:3]
root      29870  0.0  0.0      0     0 ?        S    11:23   0:00  \_ [kworker/u200:0]
root      29916  0.0  0.0      0     0 ?        S    11:23   0:00  \_ [kworker/0:3]
root          1  0.1  0.1 192272  3476 ?        Ss   Nov23  72:03 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  40240  3112 ?        Ss   Nov23  22:50 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352     8 ?        Ss   Nov23   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   428 ?        S<sl Nov23   3:25 /sbin/auditd
root        487  0.0  0.0  21540   416 ?        Ss   Nov23   1:06 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24896  1180 ?        Ss   Nov23  11:32 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610664   996 ?        Ssl  Nov23   6:28 /usr/lib/polkit-1/polkitd --no-debug
root        496  0.0  0.0  52852   248 ?        Ss   Nov23   0:00 /usr/sbin/smartd -n -q never
root        497  0.0  0.0 152780    64 ?        Ss   Nov23   0:03 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        503  0.0  0.0  58748  1360 ?        Ss   Nov23  25:26 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256    60 ?        Ss   Nov23   0:02 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov23   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208     0 ?        Ssl  Nov23   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208    24 ?        Ss   Nov23   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124508   428 ?        Ss   Nov23   1:24 /usr/sbin/crond -n
root      30151  0.0  0.0 183076  2148 ?        S    11:24   0:00  \_ /usr/sbin/CROND -n
root      30190  0.0  0.0 113284  1212 ?        Ss   11:24   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      30192  0.0  0.0 108052   360 ?        S    11:24   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      30198  0.0  0.0 113288  1520 ?        S    11:24   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      30295  0.0  0.0 153672  1776 ?        R    11:24   0:00  |               \_ ps auxf
root      30152  0.0  0.0 183076  2148 ?        S    11:24   0:00  \_ /usr/sbin/CROND -n
root      30183  0.0  0.0  20164   984 ?        Ss   11:24   0:00  |   \_ jailshell (cloudsms) [30296] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      30296  0.0  0.0  20164   260 ?        R    11:24   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      30156  0.0  0.0 183076  2148 ?        S    11:24   0:00  \_ /usr/sbin/CROND -n
root      30181  0.0  0.0  20164   804 ?        Ss   11:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      30159  0.0  0.0 183076  2148 ?        S    11:24   0:00  \_ /usr/sbin/CROND -n
root      30178  0.0  0.0  20164   984 ?        Ss   11:24   0:00  |   \_ jailshell (cloudsms) [30289] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  30289  0.0  0.0  20164   260 ?        S    11:24   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  30292  0.0  0.0 113284  1212 ?        S    11:24   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  30294  0.0  0.0  29888   340 ?        R    11:24   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue5.php
root      30160  0.0  0.0 183076  2144 ?        S    11:24   0:00  \_ /usr/sbin/CROND -n
root      30179  0.0  0.0  20164   808 ?        Ss   11:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      30163  0.0  0.0 183076  2132 ?        S    11:24   0:00  \_ /usr/sbin/CROND -n
root      30191  0.0  0.0  20164   968 ?        Ss   11:24   0:00  |   \_ jailshell (pactpay) [30202] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   30202  0.0  0.0  20164   260 ?        R    11:24   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   30208  1.0  0.7 480124 17676 ?        S    11:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      30165  0.0  0.0 183076  2140 ?        S    11:24   0:00  \_ /usr/sbin/CROND -n
root      30189  0.0  0.0  20164   964 ?        Ss   11:24   0:00      \_ jailshell (nigeria) [30203] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   30203  0.0  0.0  20164   260 ?        R    11:24   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   30209  3.5  0.6 404052 16136 ?        S    11:24   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        576  0.0  0.0 108296     4 tty1     Ss+  Nov23   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704     0 ttyS0    Ss+  Nov23   0:00 /bin/bash
root        927  0.0  0.0  51628   448 ?        Ss   Nov23   0:34 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1055  0.0  0.0  10320   332 ?        S    Nov23   0:10  \_ dovecot/anvil
dovenull  90141  0.0  0.1  47292  2480 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull  90142  0.0  0.1  48360  3380 ?        S    01:25   0:00  \_ dovecot/imap-login
root      90143  0.0  0.0  10452   548 ?        S    01:25   0:00  \_ dovecot/log
dovenull  90144  0.0  0.1  47272  2492 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull  90145  0.0  0.1  48916  3880 ?        S    01:25   0:00  \_ dovecot/imap-login
root      90146  0.0  0.0  24564  2352 ?        S    01:25   0:00  \_ dovecot/config
dovecot   90147  0.0  0.0  13568   500 ?        S    01:25   0:00  \_ dovecot/stats
dovecot   90148  0.0  0.0  41300  1680 ?        S    01:25   0:01  \_ dovecot/auth
root      30113  0.0  0.1  41052  2724 ?        S    11:23   0:00  \_ dovecot/auth -w
systuser    928  0.0  0.0  11540    52 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756    60 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524    44 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608    68 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        933  0.0  0.0 153404   220 ?        Ss   Nov23   1:06 pure-ftpd (SERVER)
root        935  0.0  0.0 572372   740 ?        Ssl  Nov23   4:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        937  0.0  0.0 111304   364 ?        Ss   Nov23   5:00 /usr/sbin/sshd -D
root        939  0.0  0.2 1350728 6780 ?        Ssl  Nov23   1:49 /usr/bin/cspdaemon
root        952  0.0  1.1 261032 26916 ?        Ss   Nov23   9:04 cpsrvd (SSL) - waiting for connections                   
root      30119  0.0  0.0      0     0 ?        Z    11:23   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.1 331088  4104 ?        Ssl  Nov23  12:04 /usr/sbin/rsyslogd -n
memcach+    972  0.0  0.0 342400    12 ?        Ssl  Nov23   1:03 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 1277312 2388 ?        Ssl  Nov23   0:34 /usr/bin/checkstatus
systuser    980  0.0  0.4 114272 10288 ?        Ssl  Nov23  13:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser   1144  0.0  0.0 157704  2204 ?        S    Nov23   0:13 SonarPush 0.6.12 [sleeping]
root       1239  0.0  0.0 167452  1204 ?        Ss   Nov23   0:44 dnsadmin - dormant mode
root       1243  0.0  0.8 209348 20496 ?        Ss   Nov23   5:44 tailwatchd
root       1244  0.0  0.9 262224 22440 ?        Ss   Nov23   4:43 cpdavd - accepting connections on: 2091, 2077, 2078
oysipao+  15361  0.0  0.0   3148     4 ?        Ss   Nov23   0:00 [kworker]
oysipao+  15368  0.0  0.0   3156    36 ?        S    Nov23   1:07  \_ [kworker]
mysql     13043  1.7 14.2 1490420 345572 ?      Sl   Dec04 494:13 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
telegraf  85330  0.0  0.9 5654308 22172 ?       SLsl Dec04  16:20 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root      95329  0.0  2.4 1556280 58888 ?       Ssl  Dec09  10:37 /usr/local/cpanel/3rdparty/bin/clamd -F
root      72712  0.0  0.0 445028   596 ?        Ss   Dec09   1:33 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  30051  0.0  0.0 445028   324 ?        S    11:23   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  30053  0.0  0.0 445028   324 ?        S    11:23   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  72887  0.0  0.1 412396  3472 ?        Ss   Dec09   8:13 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+  72891  0.0  0.1 387556  3280 ?        Ss   Dec09   0:13 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root     100237  0.0  0.2 267328  6936 ?        Ss   Dec09   1:14 /usr/sbin/httpd -k start
root      90150  0.0  0.0  12848   340 ?        S    01:25   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      90151  0.0  0.0  12732   292 ?        S    01:25   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      90152  0.0  0.0  12880   352 ?        S    01:25   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      90156  0.0  0.0  53340    36 ?        S    01:25   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    21026  0.0  0.8 277992 20556 ?        S    11:01   0:01  \_ /usr/sbin/httpd -k start
nobody    21040  0.0  0.8 278280 20728 ?        S    11:01   0:01  \_ /usr/sbin/httpd -k start
nobody    21066  0.0  0.8 278316 20692 ?        S    11:01   0:01  \_ /usr/sbin/httpd -k start
nobody    21068  0.0  0.8 278008 20808 ?        S    11:01   0:01  \_ /usr/sbin/httpd -k start
nobody    21705  0.0  0.8 278168 20656 ?        S    11:03   0:01  \_ /usr/sbin/httpd -k start
nobody    21713  0.0  0.8 278376 21012 ?        S    11:03   0:01  \_ /usr/sbin/httpd -k start
nobody    21714  0.0  0.8 277964 20668 ?        S    11:03   0:01  \_ /usr/sbin/httpd -k start
nobody    21719  0.0  0.8 278276 20860 ?        S    11:03   0:00  \_ /usr/sbin/httpd -k start
nobody    21720  0.0  0.8 278272 20780 ?        S    11:03   0:00  \_ /usr/sbin/httpd -k start
nobody    26408  0.0  0.8 277940 20076 ?        S    11:13   0:00  \_ /usr/sbin/httpd -k start
nobody    29134  0.0  0.7 277872 18784 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    29781  0.0  0.7 277832 18124 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    29791  0.0  0.7 277836 18676 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    29792  0.0  0.7 277832 18172 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    29796  0.0  0.7 277828 18268 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    29797  0.1  0.7 277824 18192 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    29798  0.0  0.7 277824 18324 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    30150  0.0  0.6 277648 16748 ?        S    11:24   0:00  \_ /usr/sbin/httpd -k start
nobody    30216  0.0  0.6 277520 16600 ?        S    11:24   0:00  \_ /usr/sbin/httpd -k start
nobody    30217  0.0  0.6 277512 16804 ?        S    11:24   0:00  \_ /usr/sbin/httpd -k start
nobody    30262  0.0  0.6 277524 15828 ?        S    11:24   0:00  \_ /usr/sbin/httpd -k start
nobody    30263  0.0  0.6 277656 16876 ?        S    11:24   0:00  \_ /usr/sbin/httpd -k start
nobody    30264  0.0  0.6 277388 15304 ?        S    11:24   0:00  \_ /usr/sbin/httpd -k start
nobody    30265  0.0  0.6 277520 16600 ?        S    11:24   0:00  \_ /usr/sbin/httpd -k start
named      1188  0.0  1.4 1185868 35116 ?       Ssl  Dec17   6:13 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root      81125  0.0  0.0 400740  1352 ?        Ss   Dec19   1:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    30086  0.1  0.2 474256  5048 ?        S    11:23   0:00  \_ php-fpm: pool edoocds_cloudware_ng
healtho+  30116 30.1  2.9 465244 71300 ?        R    11:23   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  30130 27.0  2.7 460636 67396 ?        R    11:23   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  30132 26.0  2.7 461148 67668 ?        R    11:23   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  30141 25.5  2.5 454492 61128 ?        R    11:24   0:01  \_ php-fpm: pool health_oyostate_gov_ng
cloudw    30147 17.3  2.4 523904 60000 ?        R    11:24   0:00  \_ php-fpm: pool cloudware_ng
cloudw    30167 12.3  3.6 555496 88268 ?        R    11:24   0:00  \_ php-fpm: pool cloudware_ng
cloudw    30169 11.6  3.4 551400 83568 ?        R    11:24   0:00  \_ php-fpm: pool cloudware_ng
cloudw    30170 11.3  3.3 547304 80936 ?        R    11:24   0:00  \_ php-fpm: pool cloudware_ng
cloudw    30172  9.0  2.8 534200 68652 ?        R    11:24   0:00  \_ php-fpm: pool cloudware_ng
nigeria   30221  0.0  0.1 400460  4464 ?        S    11:24   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  30258 12.0  1.4 429852 35332 ?        R    11:24   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root      81130  0.0  0.0 388892   292 ?        Ss   Dec19   0:13 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root      81135  0.0  0.0 396248   368 ?        Ss   Dec19   0:13 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root      81140  0.0  0.0 389508   432 ?        Ss   Dec19   0:14 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root      81145  0.0  0.0 439788   360 ?        Ss   Dec19   0:13 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root      91745  0.0  0.1 224392  4800 ?        Ss   Dec20   0:05 queueprocd - waiting up to 60s to process a task
mailnull  91974  0.0  0.1  89116  3776 ?        Ss   Dec20   0:08 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
cpanelc+  92390  0.0  0.1  10752  3820 ?        Ss   Dec20   4:38 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root      92394  0.0  0.0 130416  1372 ?        SN   Dec20   0:01 cpanellogd - sleeping for logs
nscd      92408  0.0  0.0 1346896 1892 ?        Ssl  Dec20   1:29 /usr/sbin/nscd
root      92476  0.0  0.0 299272   424 ?        Ss   Dec20   0:14 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root      59487  0.1  0.5 183804 12508 ?        Ss   00:00   0:43 lfd - sleeping
root      73748  0.0  5.0 248808 121692 ?       Ss   04:47   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      79749  0.0  5.3 265712 129904 ?       S    05:02   0:03  \_ spamd child
root      79750  0.0  4.9 248808 118772 ?       S    05:02   0:00  \_ spamd child
## mysql stats
Uptime: 1709938  Threads: 12  Questions: 180247386  Slow queries: 0  Opens: 425292  Flush tables: 1  Open tables: 2000  Queries per second avg: 105.411
*************************** 1. row ***************************
     Id: 2860696
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 2860697
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 2860698
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 2860699
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 2860700
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 2860701
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 7. row ***************************
     Id: 2860704
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 8. row ***************************
     Id: 2860708
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 9. row ***************************
     Id: 2860714
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 10. row ***************************
     Id: 2860716
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 11. row ***************************
     Id: 2860719
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 12. row ***************************
     Id: 2860722
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 103.252.184.174 TIME_WAIT
      1 114.119.128.143 TIME_WAIT
      1 119.13.192.117 TIME_WAIT
      1 119.13.220.169 TIME_WAIT
      1 152.39.201.174 TIME_WAIT
      1 161.129.166.231 TIME_WAIT
      1 ::1 TIME_WAIT
      1 223.109.252.161 TIME_WAIT
      1 57.141.0.13 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 216.73.216.10 TIME_WAIT
      2 57.141.0.35 TIME_WAIT
     50 165.22.103.242 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.66 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Dec 8 2025 14:42:54
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Wednesday, 24-Dec-2025 11:24:04 WAT
   Restart Time: Tuesday, 09-Dec-2025 04:48:00 WAT
   Parent Server Config. Generation: 11
   Parent Server MPM Generation: 10
   Server uptime: 15 days 6 hours 36 minutes 4 seconds
   Server load: 7.30 2.72 1.42
   Total accesses: 3514524 - Total Traffic: 33.4 GB - Total Duration: 1291523957
   CPU Usage: u18.23 s67.01 cu24108 cs15549.5 - 3.01% CPU load
   2.66 requests/sec - 26.5 kB/second - 10.0 kB/request - 367.482 ms/request
   24 requests currently being processed, 0 workers gracefully restarting, 0 idle workers

CWWWWWWWWWWWKWWWWRKKWW...........W.W............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

    Srv   PID      Acc      M CPU    SS   Req    Dur    Conn Child   Slot      Client      Protocol              VHost                                          Request
   0-10  26408 1/194/252102 C 2.41 0      3000 88735958 2.3  1.12  2526.78 89.187.162.178  http/1.1 health.oyostate.gov.ng:443      POST /xmlrpc.php HTTP/1.1
   1-10  21705 0/427/239888 W 2.79 2      0    85151279 0.0  2.44  2295.68 188.212.136.199 http/1.1 cloudware.ng:443                GET /attorneys-law-firms/ HTTP/1.1
   2-10  29134 0/63/233493  W 0.45 3      0    81754832 0.0  0.44  2315.70 180.149.18.249  http/1.1 cloudware.ng:443                GET /credit-management-software-solutions/ HTTP/1.1
   3-10  21713 0/480/231840 W 3.22 2      0    81289218 0.0  2.09  2302.81 165.22.103.242  http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   4-10  21714 0/438/216657 W 3.21 3      0    76349811 0.0  16.04 2011.00 152.39.249.227  http/1.1 cloudware.ng:443                GET /bars-restaurants/ HTTP/1.1
   5-10  29781 0/30/215072  W 0.06 2      0    76142816 0.0  0.09  2184.82 89.187.162.178  http/1.1 health.oyostate.gov.ng:443      POST /xmlrpc.php HTTP/1.1
   6-10  21719 0/339/205224 W 2.11 0      0    70674205 0.0  2.91  2134.07 66.249.64.224   http/1.1 cloudware.ng:443                GET /?l=3035231570 HTTP/1.1
   7-10  29791 0/29/197055  W 0.13 2      0    68470288 0.0  0.11  1902.31 89.187.162.178  http/1.1 health.oyostate.gov.ng:443      POST /xmlrpc.php HTTP/1.1
   8-10  21720 0/404/190717 W 3.19 1      0    67630708 0.0  2.27  1854.53 89.187.162.178  http/1.1 health.oyostate.gov.ng:443      POST /xmlrpc.php HTTP/1.1
   9-10  29792 0/32/174093  W 0.06 0      0    63098227 0.0  0.11  1701.09 167.99.210.137  http/1.1 edoocds.cloudware.ng:443        GET /actuator/env HTTP/1.1
   10-10 29796 0/30/168742  W 0.10 0      0    60401794 0.0  0.09  1582.01 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   11-10 29797 0/38/147244  W 0.08 2      0    53297769 0.0  0.24  1407.02 206.204.1.130   http/1.1 cloudware.ng:443                GET /mortgage-banking-software-solutions/ HTTP/1.1
   12-10 29798 3/32/145314  K 0.11 0      2    53703622 45.7 0.14  1381.85 162.43.249.207  http/1.1 cloudware.ng:443                GET /wp-content/themes/consulting/inc/megamenu/assets/js/megame
   13-10 30150 0/0/128836   W 0.00 3      0    47690929 0.0  0.00  1233.27 152.39.169.100  http/1.1 cloudware.ng:443                GET /core-banking-software-solutions/ HTTP/1.1
   14-10 30216 0/0/113903   W 0.00 2      0    44208998 0.0  0.00  1212.31 89.187.162.178  http/1.1 health.oyostate.gov.ng:443      POST /xmlrpc.php HTTP/1.1
   15-10 21026 0/391/91330  W 4.40 1      0    35453304 0.0  2.45  859.04  162.43.234.221  http/1.1 cloudware.ng:443                GET /real-estate-property-management-software-solutions/ HTTP/1
   16-10 30217 0/0/77023    W 0.00 1      0    29494251 0.0  0.00  690.44  165.22.103.242  http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   17-10 30262 0/1/63783    R 0.00 1      4    26017377 0.0  0.04  683.57  89.187.162.178  http/1.1 health.oyostate.gov.ng:443
   18-10 30263 1/2/52860    K 0.00 0      1    22462077 9.9  0.01  485.24  192.153.71.36   http/1.1 cloudware.ng:443                GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP
   19-10 21040 1/455/41233  K 2.99 1      442  16551384 5.2  2.52  448.61  216.73.216.10   http/1.1 newwebsite.cloudware.ng:443     GET /3515001586.shtml HTTP/1.1
   20-10 30264 0/0/45766    W 0.00 0      0    18695079 0.0  0.00  430.62  89.187.162.178  http/1.1 health.oyostate.gov.ng:443      POST /xmlrpc.php HTTP/1.1
   21-10 30265 0/0/25786    W 0.00 0      0    9732520  0.0  0.00  231.26  89.187.162.178  http/1.1 health.oyostate.gov.ng:443      POST /xmlrpc.php HTTP/1.1
   22-10 -     0/0/20827    . 0.00 1118   0    8315842  0.0  0.00  191.99  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-10 -     0/0/25759    . 0.00 1310   0    11025524 0.0  0.00  247.86  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-10 -     0/0/17668    . 0.00 1296   0    8212034  0.0  0.00  157.35  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-10 -     0/0/15822    . 0.00 1313   0    7952659  0.0  0.00  151.56  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-10 -     0/0/14146    . 0.00 1305   0    6639087  0.0  0.00  124.55  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-10 -     0/0/10208    . 0.00 1318   0    4623262  0.0  0.00  81.56   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-10 -     0/0/9539     . 0.00 1297   0    4210449  0.0  0.00  90.77   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-10 -     0/0/11206    . 0.00 1299   0    4313508  0.0  0.00  104.31  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-10 -     0/0/7768     . 0.00 1312   0    3699719  0.0  0.00  60.85   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-10 -     0/0/4952     . 0.00 1321   0    2481541  0.0  0.00  51.65   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-10 -     0/0/5692     . 0.00 1300   0    2714663  0.0  0.00  48.35   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-10 21066 0/366/4111   W 3.91 1      0    1838325  0.0  2.44  28.80   89.187.162.178  http/1.1 health.oyostate.gov.ng:443      POST /xmlrpc.php HTTP/1.1
   34-10 -     0/0/3536     . 0.00 1323   0    2719689  0.0  0.00  27.98   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-10 21068 0/371/4507   W 3.14 2      0    2512079  0.0  16.33 47.70   206.204.53.238  http/1.1 cloudware.ng:443                GET /church-management-software-solutions/ HTTP/1.1
   36-10 -     0/0/6163     . 0.00 1316   0    2604558  0.0  0.00  61.36   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-10 -     0/0/4872     . 0.00 153    0    1368666  0.0  0.00  57.08   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-10 -     0/0/6416     . 0.00 1322   0    2338381  0.0  0.00  57.71   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-10 -     0/0/5757     . 0.00 1293   0    1864342  0.0  0.00  66.31   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-10 -     0/0/8922     . 0.00 1319   0    4231178  0.0  0.00  110.98  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-10 -     0/0/2677     . 0.00 1307   0    1250390  0.0  0.00  30.45   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-10 -     0/0/2265     . 0.00 20848  0    1212004  0.0  0.00  32.53   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-10 -     0/0/2474     . 0.00 35888  2    1082860  0.0  0.00  25.36   206.81.24.227   http/1.1 workflow-management-software.co GET /?rest_route=/wp/v2/users/ HTTP/1.1
   44-10 -     0/0/3876     . 0.00 35831  0    1135531  0.0  0.00  28.25   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-10 -     0/0/1604     . 0.00 35839  0    761067   0.0  0.00  14.40   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-10 -     0/0/2930     . 0.00 35868  0    997644   0.0  0.00  20.75   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-10 -     0/0/1324     . 0.00 35842  0    785918   0.0  0.00  14.09   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-10 -     0/0/2000     . 0.00 35865  0    746157   0.0  0.00  12.87   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-10 -     0/0/877      . 0.00 35850  0    448922   0.0  0.00  6.94    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-10 -     0/0/1883     . 0.00 35849  0    830479   0.0  0.00  18.23   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-10 -     0/0/1812     . 0.00 35877  0    708255   0.0  0.00  7.81    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-10 -     0/0/2954     . 0.00 35862  0    1132252  0.0  0.00  24.27   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-10 -     0/0/2289     . 0.00 35863  0    947621   0.0  0.00  22.97   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-10 -     0/0/541      . 0.00 35833  0    336762   0.0  0.00  4.21    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-10 -     0/0/2154     . 0.00 35855  0    627698   0.0  0.00  14.35   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-10 -     0/0/571      . 0.00 35875  0    498934   0.0  0.00  4.66    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-10 -     0/0/2124     . 0.00 35835  0    941488   0.0  0.00  16.82   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-10 -     0/0/1446     . 0.00 35866  0    533962   0.0  0.00  8.08    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-10 -     0/0/715      . 0.00 35846  0    497558   0.0  0.00  5.25    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-10 -     0/0/1229     . 0.00 34199  0    418085   0.0  0.00  7.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-10 -     0/0/1612     . 0.00 35856  0    540893   0.0  0.00  15.56   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-10 -     0/0/1583     . 0.00 33567  0    591512   0.0  0.00  14.66   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-10 -     0/0/991      . 0.00 35832  0    686945   0.0  0.00  7.89    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-10 -     0/0/271      . 0.00 35493  0    294607   0.0  0.00  3.01    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-10 -     0/0/820      . 0.00 35841  0    507627   0.0  0.00  8.64    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-10 -     0/0/1011     . 0.00 35848  0    394919   0.0  0.00  6.20    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-10 -     0/0/1856     . 0.00 35869  0    838280   0.0  0.00  20.39   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-10 -     0/0/281      . 0.00 35845  0    324442   0.0  0.00  1.68    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-9  -     0/0/810      . 0.00 36463  0    767251   0.0  0.00  6.33    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-9  -     0/0/793      . 0.00 36456  0    352648   0.0  0.00  5.76    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-9  -     0/0/3597     . 0.00 37114  0    1203370  0.0  0.00  29.76   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-9  -     0/0/1479     . 0.00 37110  0    655497   0.0  0.00  18.46   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-9  -     0/0/543      . 0.00 37064  0    333315   0.0  0.00  3.13    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   74-9  -     0/0/289      . 0.00 37082  0    249895   0.0  0.00  0.90    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-9  -     0/0/429      . 0.00 37075  0    181220   0.0  0.00  1.67    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-9  -     0/0/396      . 0.00 37102  0    190319   0.0  0.00  2.19    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-9  -     0/0/270      . 0.00 37056  0    428682   0.0  0.00  0.92    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-9  -     0/0/170      . 0.00 37104  0    84047    0.0  0.00  0.33    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   79-9  -     0/0/193      . 0.00 37053  0    87255    0.0  0.00  0.46    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   80-9  -     0/0/1222     . 0.00 37059  0    363220   0.0  0.00  8.63    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   81-9  -     0/0/344      . 0.00 37101  0    220614   0.0  0.00  1.91    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   82-9  -     0/0/139      . 0.00 37098  0    148192   0.0  0.00  0.51    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   83-9  -     0/0/794      . 0.00 37060  0    426406   0.0  0.00  4.61    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   84-9  -     0/0/224      . 0.00 37046  0    150302   0.0  0.00  1.14    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   85-9  -     0/0/370      . 0.00 36427  0    148219   0.0  0.00  3.79    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   86-9  -     0/0/248      . 0.00 37103  0    109889   0.0  0.00  1.93    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   87-9  -     0/0/908      . 0.00 37099  0    203989   0.0  0.00  4.43    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   88-9  -     0/0/288      . 0.00 37078  0    107861   0.0  0.00  0.99    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   89-9  -     0/0/699      . 0.00 37058  0    399629   0.0  0.00  17.74   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   90-9  -     0/0/533      . 0.00 36435  0    189100   0.0  0.00  2.68    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   91-9  -     0/0/524      . 0.00 37100  0    202137   0.0  0.00  3.38    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   92-9  -     0/0/202      . 0.00 37105  0    143180   0.0  0.00  1.03    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   93-9  -     0/0/133      . 0.00 37141  0    96178    0.0  0.00  0.52    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   94-9  -     0/0/207      . 0.00 37144  0    138793   0.0  0.00  2.47    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   95-9  -     0/0/185      . 0.00 37081  0    153598   0.0  0.00  0.40    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   96-9  -     0/0/191      . 0.00 37076  0    55584    0.0  0.00  0.25    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   97-9  -     0/0/434      . 0.00 37079  0    113071   0.0  0.00  1.45    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   98-9  -     0/0/305      . 0.00 37080  0    108279   0.0  0.00  0.94    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   99-9  -     0/0/228      . 0.00 37107  0    158270   0.0  0.00  1.09    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   100-9 -     0/0/260      . 0.00 37054  0    60798    0.0  0.00  0.67    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   101-9 -     0/0/131      . 0.00 37057  0    139470   0.0  0.00  0.54    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   102-9 -     0/0/30       . 0.00 37077  4    55540    0.0  0.00  0.16    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   103-9 -     0/0/221      . 0.00 37068  0    87242    0.0  0.00  0.55    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   104-9 -     0/0/252      . 0.00 37109  0    45967    0.0  0.00  0.22    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   105-8 -     0/0/40       . 0.00 122265 4    48632    0.0  0.00  0.11    217.113.194.227 http/1.1 team.cloudware.ng:443           GET /var/cache/prod/pools/2wJoJAFabM/V/F/4PCeLMwG1wKTJRIoOuag H
   106-8 -     0/0/100      . 0.00 122293 0    74511    0.0  0.00  0.13    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   107-8 -     0/0/97       . 0.00 122265 620  63333    0.0  0.00  0.15    167.172.232.142 http/1.1 cloudware.ng:443                GET /info.php HTTP/1.1
   108-8 -     0/0/231      . 0.00 122265 1082 124807   0.0  0.00  0.93    167.172.232.142 http/1.1 cloudware.ng:443                GET /js/.DS_Store HTTP/1.1
   109-8 -     0/0/32       . 0.00 122265 1    72048    0.0  0.00  0.15    188.166.108.93  http/1.1 cloudware.ng:443                GET /font/.DS_Store HTTP/1.1
   110-8 -     0/0/182      . 0.00 122265 598  79080    0.0  0.00  0.68    188.166.108.93  http/1.1 cloudware.ng:443                GET /config.json HTTP/1.1
   111-8 -     0/0/23       . 0.00 122263 16   49619    0.0  0.00  0.06    185.34.33.2     http/1.1
   112-8 -     0/0/116      . 0.00 122295 0    39063    0.0  0.00  0.11    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   113-8 -     0/0/162      . 0.00 122265 0    59591    0.0  0.00  0.75    65.87.7.112     http/1.1 email.locationforms.net:80      POST /_next HTTP/1.1
   114-8 -     0/0/92       . 0.00 122265 26   67218    0.0  0.00  0.11    66.249.64.35    http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?state=Nasarawa&lga=Toto&ward=Gwa
   115-4 -     0/0/117      . 0.00 408446 6    65561    0.0  0.00  0.44    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   116-4 -     0/0/211      . 0.00 408474 0    79593    0.0  0.00  0.85    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   117-4 -     0/0/136      . 0.00 408439 0    48689    0.0  0.00  0.48    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   118-4 -     0/0/117      . 0.00 408384 0    86544    0.0  0.00  0.48    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   119-4 -     0/0/7        . 0.00 408398 0    242522   0.0  0.00  0.02    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   120-4 -     0/0/119      . 0.00 408460 0    59090    0.0  0.00  0.45    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   121-4 -     0/0/163      . 0.00 408410 0    67314    0.0  0.00  0.46    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   122-4 -     0/0/159      . 0.00 408396 0    33931    0.0  0.00  0.14    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   123-4 -     0/0/94       . 0.00 408407 0    96508    0.0  0.00  0.08    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   124-4 -     0/0/131      . 0.00 408430 0    49623    0.0  0.00  0.48    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   125-4 -     0/0/226      . 0.00 408452 0    46798    0.0  0.00  1.32    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   126-4 -     0/0/120      . 0.00 408357 0    61627    0.0  0.00  0.80    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   127-4 -     0/0/199      . 0.00 408420 0    44430    0.0  0.00  0.50    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   128-4 -     0/0/156      . 0.00 408419 0    91080    0.0  0.00  0.95    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   129-4 -     0/0/183      . 0.00 408453 0    14611    0.0  0.00  0.11    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   130-4 -     0/0/77       . 0.00 408437 0    30642    0.0  0.00  0.39    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   131-4 -     0/0/141      . 0.00 408417 0    63130    0.0  0.00  0.62    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   132-4 -     0/0/106      . 0.00 408450 0    61219    0.0  0.00  0.42    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   133-4 -     0/0/18       . 0.00 408454 0    597      0.0  0.00  0.01    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   134-4 -     0/0/114      . 0.00 408395 0    16133    0.0  0.00  0.11    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   135-4 -     0/0/10       . 0.00 408394 0    22940    0.0  0.00  0.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   136-4 -     0/0/5        . 0.00 408451 0    6057     0.0  0.00  0.00    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   137-2 -     0/0/222      . 0.00 729231 0    59782    0.0  0.00  0.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   138-2 -     0/0/109      . 0.00 729458 0    16220    0.0  0.00  0.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   139-2 -     0/0/160      . 0.00 729394 0    24902    0.0  0.00  0.24    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   140-2 -     0/0/9        . 0.00 729474 0    20410    0.0  0.00  0.03    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   141-2 -     0/0/104      . 0.00 729420 0    59137    0.0  0.00  0.42    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   142-2 -     0/0/107      . 0.00 729433 0    36089    0.0  0.00  0.41    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   143-2 -     0/0/86       . 0.00 729387 0    37015    0.0  0.00  0.55    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1031
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 12 seconds, (range: 1...45)
   index usage: 18%, cache usage: 25%
   total entries stored since starting: 43526
   total entries replaced since starting: 0
   total entries expired since starting: 42445
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 5410 hit, 806 miss
   total removes since starting: 54 hit, 20 miss
Youez - 2016 - github.com/yon3zu
LinuXploit