403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.48
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-12-25.03.12.txt
 ## swap threshold exceeded
## server overview
2025-12-25.03.12 load[0] mem[70/38] mysql[6/47] httpd[4]
              total        used        free      shared  buff/cache   available
Mem:           2363        1432         219          39         711         705
Swap:          4047        1691        2356
 03:12:02 up 31 days,  6:00,  0 users,  load average: 0.93, 1.09, 1.21
## system overview
top - 03:12:02 up 31 days,  6:00,  0 users,  load average: 0.93, 1.09, 1.21
Tasks: 198 total,   5 running, 192 sleeping,   0 stopped,   1 zombie
%Cpu(s): 81.2 us, 15.6 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  3.1 si,  0.0 st
KiB Mem :  2420300 total,   205264 free,  1472712 used,   742324 buff/cache
KiB Swap:  4145144 total,  2413492 free,  1731652 used.   717148 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 13043 mysql     20   0 1490420 264008   3316 S  86.7 10.9 519:32.43 /usr/sbin+
 16865 healtho+  20   0  465376  71304   4216 R  73.3  2.9   0:05.86 php-fpm: +
 17046 cloudw    20   0  412368  18288   3040 S  20.0  0.8   0:00.09 php-fpm: +
     1 root      20   0  192272   3380   1472 S   6.7  0.1  73:38.73 /usr/lib/+
   494 polkitd   20   0  610664    888    460 S   6.7  0.0   6:36.37 /usr/lib/+
 17117 nigeria   20   0  404052  16136  10380 R   6.7  0.7   0:00.05 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.56 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   5:09.46 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   1:35.62 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0  47:34.03 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:07.71 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:07.65 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   1:49.24 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   7:00.04 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.97 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.20 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0  51:53.94 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:05.19 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   0:48.80 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   6:21.21 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   5:20.85 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   3:01.08 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40240   6544   6288 S   0.0  0.3  23:15.19 /usr/lib/+
   383 root      20   0   45352      8      4 S   0.0  0.0   0:00.45 /usr/lib/+
   412 root      16  -4   55532    408    288 S   0.0  0.0   3:28.49 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    348    260 S   0.0  0.0   1:07.79 /usr/sbin+
   489 root      20   0   24896   1160    788 S   0.0  0.0  11:47.73 /usr/lib/+
   496 root      20   0   52852    336    244 S   0.0  0.0   0:00.41 /usr/sbin+
   497 root      20   0  152780     64     20 S   0.0  0.0   0:03.42 /usr/sbin+
   503 dbus      20   0   58748   1360    600 S   0.0  0.1  25:59.87 /usr/bin/+
   511 rpc       20   0   69256     60      0 S   0.0  0.0   0:02.78 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208     20      0 S   0.0  0.0   0:00.07 /usr/sbin+
   558 root      20   0  124508    424    292 S   0.0  0.0   1:26.24 /usr/sbin+
   576 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   2:46.18 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:12.94 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   927 root      20   0   51628    468    280 S   0.0  0.0   0:35.01 /usr/sbin+
   928 systuser  20   0   11540     52      0 S   0.0  0.0   0:01.49 /usr/loca+
   929 systuser  20   0   12756     60      0 S   0.0  0.0   0:01.47 /usr/loca+
   931 systuser  20   0  112524     68      0 S   0.0  0.0   0:01.42 /usr/loca+
   932 systuser  20   0  111608     68      0 S   0.0  0.0   0:01.38 /usr/loca+
   933 root      20   0  153404    220    136 S   0.0  0.0   1:08.26 pure-ftpd+
   935 root      20   0  572372    836    316 S   0.0  0.0   4:09.76 /usr/bin/+
   937 root      20   0  111304    364    256 S   0.0  0.0   5:05.59 /usr/sbin+
   939 root      20   0 1350728   6728      8 S   0.0  0.3   1:51.86 /usr/bin/+
   952 root      20   0  261164   5808   1236 S   0.0  0.2   9:21.11 cpsrvd (S+
   953 root      20   0  331088   6932   6244 S   0.0  0.3  12:18.09 /usr/sbin+
   972 memcach+  20   0  342400      0      0 S   0.0  0.0   1:05.27 /usr/bin/+
   974 root      20   0 1277312   2328      4 S   0.0  0.1   0:34.77 /usr/bin/+
   980 systuser  20   0  114272  10052   2604 S   0.0  0.4  13:20.97 /usr/loca+
  1055 dovecot   20   0   10320    356    244 S   0.0  0.0   0:10.45 dovecot/a+
  1144 systuser  20   0  157704   2852    860 S   0.0  0.1   0:14.20 SonarPush+
  1188 named     20   0 1185868  32368   1328 S   0.0  1.3   6:49.16 /usr/sbin+
  1239 root      20   0  167452   3300   1924 S   0.0  0.1   0:45.14 dnsadmin +
  1243 root      20   0  209740   9296   1276 S   0.0  0.4   5:50.94 tailwatchd
  1244 root      20   0  183900   5188   1952 S   0.0  0.2   4:50.21 cpdavd - +
  2022 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
  6290 nobody    20   0  277924  20024   4472 S   0.0  0.8   0:01.46 /usr/sbin+
  6367 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
  9259 nobody    20   0  277836  19120   4320 S   0.0  0.8   0:00.76 /usr/sbin+
 10609 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 10965 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 11040 nobody    20   0  277872  19408   4240 S   0.0  0.8   0:00.64 /usr/sbin+
 12277 root      20   0  123364    604    376 S   0.0  0.0   0:00.00 /usr/sbin+
 12326 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 12589 nobody    20   0  277840  19152   4228 S   0.0  0.8   0:00.57 /usr/sbin+
 13557 nobody    20   0  277896  19084   4136 S   0.0  0.8   0:00.41 /usr/sbin+
 14266 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 15002 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 15311 nobody    20   0  277796  18548   4064 S   0.0  0.8   0:00.17 /usr/sbin+
 15361 oysipao+  20   0    3148      4      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3156     76     40 S   0.0  0.0   1:08.31 [kworker]
 15374 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 15732 nobody    20   0  277832  18832   3984 S   0.0  0.8   0:00.14 /usr/sbin+
 15742 nobody    20   0  278200  18916   4068 S   0.0  0.8   0:00.14 /usr/sbin+
 15846 nobody    20   0  277832  18308   3980 S   0.0  0.8   0:00.16 /usr/sbin+
 16862 healtho+  20   0  462684  69492   4244 S   0.0  2.9   0:05.89 php-fpm: +
 16872 mailnull  20   0   89540   4436   1232 S   0.0  0.2   0:00.00 /usr/sbin+
 16897 healtho+  20   0  462684  69488   4240 S   0.0  2.9   0:04.96 php-fpm: +
 16900 nigeria   20   0  400460   4464   2356 S   0.0  0.2   0:00.01 php-fpm: +
 16903 mailnull  20   0   89540   4436   1232 S   0.0  0.2   0:00.00 /usr/sbin+
 16990 healtho+  20   0  460636  67432   4244 S   0.0  2.8   0:02.66 php-fpm: +
 16994 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 17020 wp-tool+  20   0  445028    320    188 S   0.0  0.0   0:00.00 sw-engine+
 17022 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 17036 mailnull  20   0   89348   5200   1924 S   0.0  0.2   0:00.00 /usr/sbin+
 17037 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 17038 healtho+  20   0  446300  52900   4216 S   0.0  2.2   0:00.69 php-fpm: +
 17063 root      20   0  183080   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 17064 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17065 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17066 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17067 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17068 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17069 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17071 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17072 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17073 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17075 root      20   0  183076   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17077 root      20   0  183076   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17082 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 17083 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17084 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 17085 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17086 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17087 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17090 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17091 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17093 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17095 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 17096 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 17097 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17105 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 17106 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 17111 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 17114 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 17122 pactpay   20   0  480124  17672  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 17149 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 17152 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 17153 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 17154 cloudsms  20   0  129464   2584   2096 R   0.0  0.1   0:00.00 /usr/loca+
 35862 root      20   0  181948   9812   1100 S   0.0  0.4   0:12.40 lfd - sle+
 51947 root      20   0  262632  87848   1640 S   0.0  3.6   0:03.08 spamd chi+
 55989 worencom  20   0   38492   1116    444 S   0.0  0.0   0:00.06 dovecot/i+
 60781 root      20   0  183080   1828   1272 S   0.0  0.1   0:00.00 /usr/sbin+
 60842 root      20   0  113284    696    516 S   0.0  0.0   0:00.00 /bin/sh -+
 60853 root      20   0  108056    300    224 S   0.0  0.0   0:00.00 sleep 5h +
 72712 root      20   0  445028    596    480 S   0.0  0.0   1:37.60 sw-engine+
 72887 wp-tool+  20   0  412396   3568   1380 S   0.0  0.1   8:32.36 /usr/bin/+
 72891 wp-tool+  20   0  387556   3372   1404 S   0.0  0.1   0:13.91 /usr/bin/+
 73748 root      20   0  248808   2752    688 S   0.0  0.1   0:12.54 /usr/loca+
 79750 root      20   0  248808   1356    312 S   0.0  0.1   0:00.07 spamd chi+
 81125 root      20   0  400740   1348    612 S   0.0  0.1   1:24.63 php-fpm: +
 81130 root      20   0  388892    288    208 S   0.0  0.0   0:15.00 php-fpm: +
 81135 root      20   0  396248    256    172 S   0.0  0.0   0:15.06 php-fpm: +
 81140 root      20   0  389508    404    308 S   0.0  0.0   0:16.03 php-fpm: +
 81145 root      20   0  439788    312    220 S   0.0  0.0   0:15.73 php-fpm: +
 85330 telegraf  20   0 5654308  23644   1664 S   0.0  1.0  16:52.24 /usr/loca+
 89884 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 90141 dovenull  20   0   47292   1544    864 S   0.0  0.1   0:01.61 dovecot/p+
 90142 dovenull  20   0   48816   2308   1132 S   0.0  0.1   0:01.73 dovecot/i+
 90143 root      20   0   10452    572    392 S   0.0  0.0   0:01.24 dovecot/l+
 90144 dovenull  20   0   47344   1564    840 S   0.0  0.1   0:02.30 dovecot/p+
 90145 dovenull  20   0   48916   2072    980 S   0.0  0.1   0:01.35 dovecot/i+
 90146 root      20   0   24564   1904    408 S   0.0  0.1   0:00.59 dovecot/c+
 90147 dovecot   20   0   13568    424    244 S   0.0  0.0   0:00.26 dovecot/s+
 90148 dovecot   20   0   41300   1416    904 S   0.0  0.1   0:02.97 dovecot/a+
 90150 root      20   0   12812    336    212 S   0.0  0.0   0:09.26 /usr/loca+
 90151 root      20   0   12732    288    208 S   0.0  0.0   0:07.65 /usr/loca+
 90152 root      20   0   12840    348    216 S   0.0  0.0   0:08.69 /usr/loca+
 90156 root      20   0   53340      8      8 S   0.0  0.0   0:00.04 /usr/loca+
 91745 root      20   0  224392   3132    812 S   0.0  0.1   0:05.72 queueproc+
 91974 mailnull  20   0   89116   3612    656 S   0.0  0.1   0:10.40 /usr/sbin+
 92390 cpanelc+  20   0   10748   3624   2288 S   0.0  0.1   5:24.73 /usr/loca+
 92394 root      38  18  130416   1348    672 S   0.0  0.1   0:01.24 cpanellog+
 92408 nscd      20   0 1353052   1984    516 S   0.0  0.1   1:44.38 /usr/sbin+
 92476 root      20   0  299272    472    308 S   0.0  0.0   0:15.98 php-fpm: +
 95329 root      20   0 1556324 316188    196 S   0.0 13.1  10:47.01 /usr/loca+
 95754 nobody    20   0  278320  21052   4728 S   0.0  0.9   0:02.29 /usr/sbin+
 98116 nobody    20   0  278000  20472   4776 S   0.0  0.8   0:02.04 /usr/sbin+
100237 root      20   0  267328   6740    552 S   0.0  0.3   1:17.62 /usr/sbin+
102103 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov23   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov23   5:09  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov23   1:35  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov23  47:34  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov23   0:07  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov23   0:07  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov23   1:49  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov23   7:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov23  51:53  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov23   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov23   0:05  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S    Nov23   0:48  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    Nov23   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   Nov23   6:21  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov23   5:20  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    Nov23   3:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<   Nov23   2:46  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    Nov23   0:12  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   Nov23   0:00  \_ [ext4-rsv-conver]
root      89884  0.0  0.0      0     0 ?        S    02:13   0:00  \_ [kworker/u200:0]
root     102103  0.0  0.0      0     0 ?        S    02:38   0:00  \_ [kworker/0:0]
root       2022  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/u200:2]
root       6367  0.0  0.0      0     0 ?        S    02:47   0:00  \_ [kworker/0:4]
root      10609  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/0:1]
root      10965  0.0  0.0      0     0 ?        S    02:59   0:00  \_ [kworker/1:3]
root      12326  0.0  0.0      0     0 ?        S    03:01   0:00  \_ [kworker/0:3]
root      14266  0.0  0.0      0     0 ?        S    03:05   0:00  \_ [kworker/1:2]
root      15002  0.0  0.0      0     0 ?        S    03:07   0:00  \_ [kworker/1:4]
root      15374  0.0  0.0      0     0 ?        S    03:08   0:00  \_ [kworker/0:2]
root      16994  0.0  0.0      0     0 ?        S    03:11   0:00  \_ [kworker/u200:1]
root          1  0.1  0.1 192272  3380 ?        Ss   Nov23  73:38 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  40240  6544 ?        Ss   Nov23  23:15 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352     8 ?        Ss   Nov23   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   408 ?        S<sl Nov23   3:28 /sbin/auditd
root        487  0.0  0.0  21540   348 ?        Ss   Nov23   1:07 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24896  1160 ?        Ss   Nov23  11:47 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610664   888 ?        Ssl  Nov23   6:36 /usr/lib/polkit-1/polkitd --no-debug
root        496  0.0  0.0  52852   336 ?        Ss   Nov23   0:00 /usr/sbin/smartd -n -q never
root        497  0.0  0.0 152780    64 ?        Ss   Nov23   0:03 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        503  0.0  0.0  58748  1360 ?        Ss   Nov23  25:59 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256    60 ?        Ss   Nov23   0:02 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov23   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208     0 ?        Ssl  Nov23   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208    20 ?        Ss   Nov23   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124508   424 ?        Ss   Nov23   1:26 /usr/sbin/crond -n
root      60781  0.0  0.0 183080  1828 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      60842  0.0  0.0 113284   696 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      60853  0.0  0.0 108056   300 ?        S    01:00   0:00  |       \_ sleep 5h 19m
root      17063  0.0  0.0 183080  2140 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      17082  0.0  0.0 113284  1212 ?        Ss   03:12   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      17105  0.0  0.0 108052   360 ?        S    03:12   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      17106  0.0  0.0 113288  1516 ?        S    03:12   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      17155  0.0  0.0 153672  1784 ?        R    03:12   0:00  |               \_ ps auxf
root      17064  0.0  0.0 183076  2144 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      17086  0.0  0.0  20164   804 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      17065  0.0  0.0 183076  2144 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      17093  0.0  0.0  20164   804 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      17066  0.0  0.0 183076  2144 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      17091  0.0  0.0  20164   804 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      17067  0.0  0.0 183076  2144 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      17085  0.0  0.0  20164   804 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      17068  0.0  0.0 183076  2144 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      17096  0.0  0.0  20164   984 ?        Ss   03:12   0:00  |   \_ jailshell (cloudsms) [17152] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  17152  0.0  0.0  20164   260 ?        S    03:12   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  17153  0.0  0.0 113284  1212 ?        S    03:12   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  17154  0.0  0.4 386480 10456 ?        R    03:12   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue2.php
root      17069  0.0  0.0 183076  2144 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      17090  0.0  0.0  20164   804 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      17071  0.0  0.0 183076  2144 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      17097  0.0  0.0  20164   804 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      17072  0.0  0.0 183076  2144 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      17087  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      17073  0.0  0.0 183076  2144 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      17083  0.0  0.0  20164   808 ?        Ss   03:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      17075  0.0  0.0 183076  2144 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      17084  0.0  0.0  20164   960 ?        Ss   03:12   0:00  |   \_ jailshell (pactpay) [17111] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   17111  0.0  0.0  20164   256 ?        S    03:12   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   17122  2.0  0.7 480124 17672 ?        S    03:12   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      17077  0.0  0.0 183076  2140 ?        S    03:12   0:00  \_ /usr/sbin/CROND -n
root      17095  0.0  0.0  20164   968 ?        Ss   03:12   0:00      \_ jailshell (nigeria) [17114] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   17114  0.0  0.0  20164   264 ?        S    03:12   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   17117  6.0  0.6 404052 16136 ?        S    03:12   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        576  0.0  0.0 108296     4 tty1     Ss+  Nov23   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704     0 ttyS0    Ss+  Nov23   0:00 /bin/bash
root        927  0.0  0.0  51628   468 ?        Ss   Nov23   0:35 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1055  0.0  0.0  10320   356 ?        S    Nov23   0:10  \_ dovecot/anvil
dovenull  90141  0.0  0.0  47292  1544 ?        S    Dec24   0:01  \_ dovecot/pop3-login
dovenull  90142  0.0  0.0  48816  2308 ?        S    Dec24   0:01  \_ dovecot/imap-login
root      90143  0.0  0.0  10452   572 ?        S    Dec24   0:01  \_ dovecot/log
dovenull  90144  0.0  0.0  47344  1564 ?        S    Dec24   0:02  \_ dovecot/pop3-login
dovenull  90145  0.0  0.0  48916  2072 ?        S    Dec24   0:01  \_ dovecot/imap-login
root      90146  0.0  0.0  24564  1904 ?        S    Dec24   0:00  \_ dovecot/config
dovecot   90147  0.0  0.0  13568   424 ?        S    Dec24   0:00  \_ dovecot/stats
dovecot   90148  0.0  0.0  41300  1416 ?        S    Dec24   0:02  \_ dovecot/auth
worencom  55989  0.0  0.0  38492  1116 ?        S    00:47   0:00  \_ dovecot/imap
systuser    928  0.0  0.0  11540    52 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756    60 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524    68 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608    68 ?        Ssl  Nov23   0:01 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        933  0.0  0.0 153404   220 ?        Ss   Nov23   1:08 pure-ftpd (SERVER)
root        935  0.0  0.0 572372   836 ?        Ssl  Nov23   4:09 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        937  0.0  0.0 111304   364 ?        Ss   Nov23   5:05 /usr/sbin/sshd -D
root        939  0.0  0.2 1350728 6728 ?        Ssl  Nov23   1:51 /usr/bin/cspdaemon
root        952  0.0  0.2 261164  5808 ?        Ss   Nov23   9:21 cpsrvd (SSL) - waiting for connections                   
root      17037  0.0  0.0      0     0 ?        Z    03:11   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.2 331088  6932 ?        Ssl  Nov23  12:18 /usr/sbin/rsyslogd -n
memcach+    972  0.0  0.0 342400     0 ?        Ssl  Nov23   1:05 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 1277312 2328 ?        Ssl  Nov23   0:34 /usr/bin/checkstatus
systuser    980  0.0  0.4 114272 10052 ?        Ssl  Nov23  13:20 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser   1144  0.0  0.1 157704  2852 ?        S    Nov23   0:14 SonarPush 0.6.12 [sleeping]
root       1239  0.0  0.1 167452  3300 ?        Ss   Nov23   0:45 dnsadmin - dormant mode
root       1243  0.0  0.3 209740  9296 ?        Ss   Nov23   5:50 tailwatchd
root       1244  0.0  0.2 183900  5188 ?        Ss   Nov23   4:50 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
oysipao+  15361  0.0  0.0   3148     4 ?        Ss   Nov23   0:00 [kworker]
oysipao+  15368  0.0  0.0   3156    76 ?        S    Nov23   1:08  \_ [kworker]
mysql     13043  1.7 10.9 1490420 264008 ?      Sl   Dec04 519:32 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
telegraf  85330  0.0  0.9 5654308 23644 ?       SLsl Dec04  16:52 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root      95329  0.0 13.0 1556324 316188 ?      Ssl  Dec09  10:47 /usr/local/cpanel/3rdparty/bin/clamd -F
root      72712  0.0  0.0 445028   596 ?        Ss   Dec09   1:37 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  17020  0.0  0.0 445028   320 ?        S    03:11   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  17022  0.0  0.0 445028   324 ?        S    03:11   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  72887  0.0  0.1 412396  3568 ?        Ss   Dec09   8:32 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+  72891  0.0  0.1 387556  3372 ?        Ss   Dec09   0:13 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root     100237  0.0  0.2 267328  6740 ?        Ss   Dec09   1:17 /usr/sbin/httpd -k start
root      90150  0.0  0.0  12812   336 ?        S    Dec24   0:09  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      90151  0.0  0.0  12732   288 ?        S    Dec24   0:07  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      90152  0.0  0.0  12840   348 ?        S    Dec24   0:08  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      90156  0.0  0.0  53340     8 ?        S    Dec24   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    95754  0.0  0.8 278320 21052 ?        S    02:23   0:02  \_ /usr/sbin/httpd -k start
nobody    98116  0.0  0.8 278000 20472 ?        S    02:28   0:02  \_ /usr/sbin/httpd -k start
nobody     6290  0.0  0.8 277924 20024 ?        S    02:47   0:01  \_ /usr/sbin/httpd -k start
nobody     9259  0.0  0.7 277836 19120 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    11040  0.0  0.8 277872 19408 ?        S    02:59   0:00  \_ /usr/sbin/httpd -k start
nobody    12589  0.0  0.7 277840 19152 ?        S    03:01   0:00  \_ /usr/sbin/httpd -k start
nobody    13557  0.0  0.7 277896 19084 ?        S    03:04   0:00  \_ /usr/sbin/httpd -k start
nobody    15311  0.0  0.7 277796 18548 ?        S    03:07   0:00  \_ /usr/sbin/httpd -k start
nobody    15732  0.0  0.7 277832 18832 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody    15742  0.0  0.7 278200 18916 ?        S    03:09   0:00  \_ /usr/sbin/httpd -k start
nobody    15846  0.0  0.7 277832 18308 ?        S    03:09   0:00  \_ /usr/sbin/httpd -k start
named      1188  0.0  1.3 1185868 32368 ?       Ssl  Dec17   6:49 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root      81125  0.0  0.0 400740  1348 ?        Ss   Dec19   1:24 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  16862 12.8  2.8 462684 69492 ?        S    03:11   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  16865 13.3  2.9 465376 71304 ?        S    03:11   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  16897 13.0  2.8 462684 69488 ?        S    03:11   0:04  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   16900  0.0  0.1 400460  4464 ?        S    03:11   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  16990 12.6  2.7 460636 67432 ?        S    03:11   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  17038  9.8  2.1 446300 52900 ?        S    03:11   0:00  \_ php-fpm: pool health_oyostate_gov_ng
cloudw    17046  1.8  0.7 412368 18288 ?        S    03:11   0:00  \_ php-fpm: pool cloudware_ng
root      81130  0.0  0.0 388892   288 ?        Ss   Dec19   0:15 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root      81135  0.0  0.0 396248   256 ?        Ss   Dec19   0:15 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root      81140  0.0  0.0 389508   404 ?        Ss   Dec19   0:16 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root      81145  0.0  0.0 439788   312 ?        Ss   Dec19   0:15 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root      91745  0.0  0.1 224392  3132 ?        Ss   Dec20   0:05 queueprocd - waiting up to 60s to process a task
mailnull  91974  0.0  0.1  89116  3612 ?        Ss   Dec20   0:10 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  16872  0.0  0.1  89540  4436 ?        S    03:11   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  16903  0.0  0.1  89540  4436 ?        S    03:11   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  17036  0.0  0.2  89348  5200 ?        S    03:11   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
cpanelc+  92390  0.0  0.1  10748  3624 ?        Ss   Dec20   5:24 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root      92394  0.0  0.0 130416  1348 ?        SN   Dec20   0:01 cpanellogd - sleeping for logs
nscd      92408  0.0  0.0 1353052 1984 ?        Ssl  Dec20   1:44 /usr/sbin/nscd
root      92476  0.0  0.0 299272   472 ?        Ss   Dec20   0:15 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root      73748  0.0  0.1 248808  2752 ?        Ss   Dec24   0:12 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      79750  0.0  0.0 248808  1356 ?        S    Dec24   0:00  \_ spamd child
root      51947  0.0  3.6 262632 87848 ?        S    Dec24   0:03  \_ spamd child
root      35862  0.1  0.4 181948  9812 ?        Ss   00:00   0:12 lfd - sleeping
root      12277  0.0  0.0 123364   604 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 1766816  Threads: 5  Questions: 192175115  Slow queries: 0  Opens: 437141  Flush tables: 1  Open tables: 2000  Queries per second avg: 108.769
*************************** 1. row ***************************
     Id: 3041333
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 3041334
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 3041338
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 3041342
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 10.30.9.122 TIME_WAIT
      1 114.119.149.43 TIME_WAIT
      1 142.44.228.158 TIME_WAIT
      1 148.113.128.193 TIME_WAIT
      1 148.113.130.70 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.173.182.13 TIME_WAIT
      1 52.167.144.202 TIME_WAIT
      1 54.39.136.106 TIME_WAIT
      1 54.39.136.209 TIME_WAIT
      1 54.39.89.79 TIME_WAIT
      1 57.141.0.22 TIME_WAIT
      1 57.141.0.23 TIME_WAIT
      1 57.141.0.43 TIME_WAIT
      1 57.141.0.44 TIME_WAIT
      1 57.141.0.5 TIME_WAIT
      1 57.141.0.68 TIME_WAIT
      1 57.141.0.6 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.172 TIME_WAIT
      7 216.73.216.10 TIME_WAIT
     27 62.197.145.19 TIME_WAIT
     82 165.22.103.242 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.66 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Dec 8 2025 14:42:54
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 25-Dec-2025 03:12:02 WAT
   Restart Time: Tuesday, 09-Dec-2025 04:48:00 WAT
   Parent Server Config. Generation: 11
   Parent Server MPM Generation: 10
   Server uptime: 15 days 22 hours 24 minutes 1 second
   Server load: 0.93 1.09 1.21
   Total accesses: 3746858 - Total Traffic: 35.0 GB - Total Duration: 1397018008
   CPU Usage: u17.54 s68.86 cu25261.9 cs16280.1 - 3.02% CPU load
   2.72 requests/sec - 26.6 kB/second - 9.8 kB/request - 372.851 ms/request
   5 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

K___W___..C....RK...............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

    Srv   PID      Acc      M CPU    SS   Req    Dur    Conn Child   Slot      Client      Protocol              VHost                                          Request
   0-10  95754 1/890/270087 K 7.57 0      95   96472713 0.4  8.31  2654.92 57.141.0.45     http/1.1 cloudware.ng:80                 GET /header.php?w=303240562474 HTTP/1.1
   1-10  11040 0/291/255936 _ 1.10 1      339  92434972 0.0  2.04  2410.46 165.22.103.242  http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   2-10  12589 0/285/249634 _ 3.28 0      5    88699063 0.0  2.04  2446.56 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   3-10  13557 0/152/247969 _ 0.77 1      347  88261629 0.0  1.33  2413.81 165.22.103.242  http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   4-10  15311 0/60/231983  W 0.73 0      0    84381165 0.0  0.31  2135.10 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   5-10  15732 0/51/230059  _ 0.31 0      416  83033381 0.0  0.33  2291.31 165.22.103.242  http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   6-10  98116 0/789/219769 _ 5.30 0      7    76966089 0.0  5.17  2220.69 34.236.135.14   http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/2019elections/images/images/blog
   7-10  15742 0/54/210650  _ 0.53 0      341  74554065 0.0  0.36  1999.77 62.197.145.19   http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   8-10  -     0/0/203636   . 0.00 81     0    73606514 0.0  0.00  1948.25 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   9-10  -     0/0/187159   . 0.00 107    0    69004436 0.0  0.00  1796.99 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   10-10 15846 1/55/178818  C 0.35 0      471  65284087 5.7  0.34  1654.35 165.22.103.242  http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   11-10 -     0/0/158616   . 0.00 758    0    58328755 0.0  0.00  1488.20 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   12-10 -     0/0/154212   . 0.00 154    0    57683693 0.0  0.00  1446.82 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   13-10 -     0/0/138071   . 0.00 65     0    51785597 0.0  0.00  1290.53 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   14-10 -     0/0/122714   . 0.00 588    0    48453194 0.0  0.00  1268.60 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-10 6290  0/555/97879  R 6.08 2      29   38246260 0.0  3.22  897.00  62.197.145.19   http/1.1 health.oyostate.gov.ng:443
   16-10 9259  1/306/81860  K 6.65 4      53   31690107 0.4  2.01  721.78  57.141.0.35     http/1.1 cloudware.ng:80                 GET /header.php?w=303240817344 HTTP/1.1
   17-10 -     0/0/70050    . 0.00 174    0    29108822 0.0  0.00  722.12  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-10 -     0/0/54490    . 0.00 859    0    23469921 0.0  0.00  497.24  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-10 -     0/0/45898    . 0.00 833    0    18694959 0.0  0.00  481.87  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-10 -     0/0/46763    . 0.00 477    0    19038662 0.0  0.00  437.34  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-10 -     0/0/27956    . 0.00 6467   0    10649374 0.0  0.00  243.71  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-10 -     0/0/22235    . 0.00 5706   0    8949974  0.0  0.00  200.70  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-10 -     0/0/27338    . 0.00 6866   0    11674459 0.0  0.00  261.91  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-10 -     0/0/18404    . 0.00 4984   0    8571047  0.0  0.00  167.78  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-10 -     0/0/16633    . 0.00 6864   0    8163219  0.0  0.00  155.54  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-10 -     0/0/14151    . 0.00 6867   0    6641149  0.0  0.00  124.57  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-10 -     0/0/10593    . 0.00 6872   0    4781049  0.0  0.00  83.76   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-10 -     0/0/9587     . 0.00 6715   0    4235957  0.0  0.00  91.03   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-10 -     0/0/11329    . 0.00 6757   0    4327017  0.0  0.00  104.50  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-10 -     0/0/7768     . 0.00 58190  0    3699719  0.0  0.00  60.85   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-10 -     0/0/4952     . 0.00 58199  0    2481541  0.0  0.00  51.65   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-10 -     0/0/5692     . 0.00 58178  0    2714663  0.0  0.00  48.35   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-10 -     0/0/4907     . 0.00 53846  0    2257425  0.0  0.00  33.81   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-10 -     0/0/3536     . 0.00 58201  0    2719689  0.0  0.00  27.98   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-10 -     0/0/4702     . 0.00 56012  0    2694510  0.0  0.00  48.91   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-10 -     0/0/6163     . 0.00 58194  0    2604558  0.0  0.00  61.36   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-10 -     0/0/4872     . 0.00 57031  0    1368666  0.0  0.00  57.08   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-10 -     0/0/6416     . 0.00 58200  0    2338381  0.0  0.00  57.71   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-10 -     0/0/5757     . 0.00 58171  0    1864342  0.0  0.00  66.31   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-10 -     0/0/8922     . 0.00 58197  0    4231178  0.0  0.00  110.98  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-10 -     0/0/2677     . 0.00 58185  0    1250390  0.0  0.00  30.45   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-10 -     0/0/2265     . 0.00 77725  0    1212004  0.0  0.00  32.53   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-10 -     0/0/2474     . 0.00 92766  2    1082860  0.0  0.00  25.36   206.81.24.227   http/1.1 workflow-management-software.co GET /?rest_route=/wp/v2/users/ HTTP/1.1
   44-10 -     0/0/3876     . 0.00 92709  0    1135531  0.0  0.00  28.25   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-10 -     0/0/1604     . 0.00 92717  0    761067   0.0  0.00  14.40   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-10 -     0/0/2930     . 0.00 92746  0    997644   0.0  0.00  20.75   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-10 -     0/0/1324     . 0.00 92720  0    785918   0.0  0.00  14.09   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-10 -     0/0/2000     . 0.00 92743  0    746157   0.0  0.00  12.87   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-10 -     0/0/877      . 0.00 92728  0    448922   0.0  0.00  6.94    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-10 -     0/0/1883     . 0.00 92727  0    830479   0.0  0.00  18.23   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-10 -     0/0/1812     . 0.00 92755  0    708255   0.0  0.00  7.81    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-10 -     0/0/2954     . 0.00 92740  0    1132252  0.0  0.00  24.27   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-10 -     0/0/2289     . 0.00 92741  0    947621   0.0  0.00  22.97   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-10 -     0/0/541      . 0.00 92711  0    336762   0.0  0.00  4.21    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-10 -     0/0/2154     . 0.00 92733  0    627698   0.0  0.00  14.35   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-10 -     0/0/571      . 0.00 92753  0    498934   0.0  0.00  4.66    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-10 -     0/0/2124     . 0.00 92713  0    941488   0.0  0.00  16.82   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-10 -     0/0/1446     . 0.00 92744  0    533962   0.0  0.00  8.08    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-10 -     0/0/715      . 0.00 92724  0    497558   0.0  0.00  5.25    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-10 -     0/0/1229     . 0.00 91077  0    418085   0.0  0.00  7.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-10 -     0/0/1612     . 0.00 92734  0    540893   0.0  0.00  15.56   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-10 -     0/0/1583     . 0.00 90445  0    591512   0.0  0.00  14.66   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-10 -     0/0/991      . 0.00 92710  0    686945   0.0  0.00  7.89    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-10 -     0/0/271      . 0.00 92370  0    294607   0.0  0.00  3.01    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-10 -     0/0/820      . 0.00 92719  0    507627   0.0  0.00  8.64    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-10 -     0/0/1011     . 0.00 92726  0    394919   0.0  0.00  6.20    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-10 -     0/0/1856     . 0.00 92747  0    838280   0.0  0.00  20.39   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-10 -     0/0/281      . 0.00 92723  0    324442   0.0  0.00  1.68    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-9  -     0/0/810      . 0.00 93341  0    767251   0.0  0.00  6.33    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-9  -     0/0/793      . 0.00 93334  0    352648   0.0  0.00  5.76    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-9  -     0/0/3597     . 0.00 93991  0    1203370  0.0  0.00  29.76   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-9  -     0/0/1479     . 0.00 93987  0    655497   0.0  0.00  18.46   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-9  -     0/0/543      . 0.00 93941  0    333315   0.0  0.00  3.13    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   74-9  -     0/0/289      . 0.00 93959  0    249895   0.0  0.00  0.90    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-9  -     0/0/429      . 0.00 93952  0    181220   0.0  0.00  1.67    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-9  -     0/0/396      . 0.00 93979  0    190319   0.0  0.00  2.19    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-9  -     0/0/270      . 0.00 93933  0    428682   0.0  0.00  0.92    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-9  -     0/0/170      . 0.00 93981  0    84047    0.0  0.00  0.33    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   79-9  -     0/0/193      . 0.00 93930  0    87255    0.0  0.00  0.46    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   80-9  -     0/0/1222     . 0.00 93936  0    363220   0.0  0.00  8.63    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   81-9  -     0/0/344      . 0.00 93978  0    220614   0.0  0.00  1.91    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   82-9  -     0/0/139      . 0.00 93975  0    148192   0.0  0.00  0.51    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   83-9  -     0/0/794      . 0.00 93937  0    426406   0.0  0.00  4.61    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   84-9  -     0/0/224      . 0.00 93923  0    150302   0.0  0.00  1.14    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   85-9  -     0/0/370      . 0.00 93305  0    148219   0.0  0.00  3.79    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   86-9  -     0/0/248      . 0.00 93980  0    109889   0.0  0.00  1.93    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   87-9  -     0/0/908      . 0.00 93976  0    203989   0.0  0.00  4.43    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   88-9  -     0/0/288      . 0.00 93955  0    107861   0.0  0.00  0.99    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   89-9  -     0/0/699      . 0.00 93935  0    399629   0.0  0.00  17.74   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   90-9  -     0/0/533      . 0.00 93313  0    189100   0.0  0.00  2.68    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   91-9  -     0/0/524      . 0.00 93977  0    202137   0.0  0.00  3.38    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   92-9  -     0/0/202      . 0.00 93982  0    143180   0.0  0.00  1.03    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   93-9  -     0/0/133      . 0.00 94018  0    96178    0.0  0.00  0.52    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   94-9  -     0/0/207      . 0.00 94021  0    138793   0.0  0.00  2.47    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   95-9  -     0/0/185      . 0.00 93958  0    153598   0.0  0.00  0.40    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   96-9  -     0/0/191      . 0.00 93953  0    55584    0.0  0.00  0.25    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   97-9  -     0/0/434      . 0.00 93956  0    113071   0.0  0.00  1.45    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   98-9  -     0/0/305      . 0.00 93957  0    108279   0.0  0.00  0.94    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   99-9  -     0/0/228      . 0.00 93984  0    158270   0.0  0.00  1.09    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   100-9 -     0/0/260      . 0.00 93931  0    60798    0.0  0.00  0.67    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   101-9 -     0/0/131      . 0.00 93934  0    139470   0.0  0.00  0.54    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   102-9 -     0/0/30       . 0.00 93954  4    55540    0.0  0.00  0.16    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   103-9 -     0/0/221      . 0.00 93945  0    87242    0.0  0.00  0.55    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   104-9 -     0/0/252      . 0.00 93986  0    45967    0.0  0.00  0.22    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   105-8 -     0/0/40       . 0.00 179142 4    48632    0.0  0.00  0.11    217.113.194.227 http/1.1 team.cloudware.ng:443           GET /var/cache/prod/pools/2wJoJAFabM/V/F/4PCeLMwG1wKTJRIoOuag H
   106-8 -     0/0/100      . 0.00 179171 0    74511    0.0  0.00  0.13    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   107-8 -     0/0/97       . 0.00 179142 620  63333    0.0  0.00  0.15    167.172.232.142 http/1.1 cloudware.ng:443                GET /info.php HTTP/1.1
   108-8 -     0/0/231      . 0.00 179142 1082 124807   0.0  0.00  0.93    167.172.232.142 http/1.1 cloudware.ng:443                GET /js/.DS_Store HTTP/1.1
   109-8 -     0/0/32       . 0.00 179142 1    72048    0.0  0.00  0.15    188.166.108.93  http/1.1 cloudware.ng:443                GET /font/.DS_Store HTTP/1.1
   110-8 -     0/0/182      . 0.00 179142 598  79080    0.0  0.00  0.68    188.166.108.93  http/1.1 cloudware.ng:443                GET /config.json HTTP/1.1
   111-8 -     0/0/23       . 0.00 179140 16   49619    0.0  0.00  0.06    185.34.33.2     http/1.1
   112-8 -     0/0/116      . 0.00 179173 0    39063    0.0  0.00  0.11    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   113-8 -     0/0/162      . 0.00 179142 0    59591    0.0  0.00  0.75    65.87.7.112     http/1.1 email.locationforms.net:80      POST /_next HTTP/1.1
   114-8 -     0/0/92       . 0.00 179142 26   67218    0.0  0.00  0.11    66.249.64.35    http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?state=Nasarawa&lga=Toto&ward=Gwa
   115-4 -     0/0/117      . 0.00 465324 6    65561    0.0  0.00  0.44    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   116-4 -     0/0/211      . 0.00 465352 0    79593    0.0  0.00  0.85    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   117-4 -     0/0/136      . 0.00 465317 0    48689    0.0  0.00  0.48    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   118-4 -     0/0/117      . 0.00 465262 0    86544    0.0  0.00  0.48    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   119-4 -     0/0/7        . 0.00 465276 0    242522   0.0  0.00  0.02    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   120-4 -     0/0/119      . 0.00 465338 0    59090    0.0  0.00  0.45    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   121-4 -     0/0/163      . 0.00 465288 0    67314    0.0  0.00  0.46    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   122-4 -     0/0/159      . 0.00 465274 0    33931    0.0  0.00  0.14    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   123-4 -     0/0/94       . 0.00 465285 0    96508    0.0  0.00  0.08    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   124-4 -     0/0/131      . 0.00 465308 0    49623    0.0  0.00  0.48    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   125-4 -     0/0/226      . 0.00 465330 0    46798    0.0  0.00  1.32    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   126-4 -     0/0/120      . 0.00 465235 0    61627    0.0  0.00  0.80    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   127-4 -     0/0/199      . 0.00 465298 0    44430    0.0  0.00  0.50    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   128-4 -     0/0/156      . 0.00 465297 0    91080    0.0  0.00  0.95    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   129-4 -     0/0/183      . 0.00 465331 0    14611    0.0  0.00  0.11    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   130-4 -     0/0/77       . 0.00 465315 0    30642    0.0  0.00  0.39    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   131-4 -     0/0/141      . 0.00 465295 0    63130    0.0  0.00  0.62    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   132-4 -     0/0/106      . 0.00 465328 0    61219    0.0  0.00  0.42    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   133-4 -     0/0/18       . 0.00 465332 0    597      0.0  0.00  0.01    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   134-4 -     0/0/114      . 0.00 465273 0    16133    0.0  0.00  0.11    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   135-4 -     0/0/10       . 0.00 465272 0    22940    0.0  0.00  0.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   136-4 -     0/0/5        . 0.00 465329 0    6057     0.0  0.00  0.00    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   137-2 -     0/0/222      . 0.00 786108 0    59782    0.0  0.00  0.83    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   138-2 -     0/0/109      . 0.00 786336 0    16220    0.0  0.00  0.07    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   139-2 -     0/0/160      . 0.00 786272 0    24902    0.0  0.00  0.24    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   140-2 -     0/0/9        . 0.00 786351 0    20410    0.0  0.00  0.03    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   141-2 -     0/0/104      . 0.00 786298 0    59137    0.0  0.00  0.42    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   142-2 -     0/0/107      . 0.00 786311 0    36089    0.0  0.00  0.41    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   143-2 -     0/0/86       . 0.00 786265 0    37015    0.0  0.00  0.55    ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 440
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 28 seconds, (range: 3...82)
   index usage: 7%, cache usage: 10%
   total entries stored since starting: 114197
   total entries replaced since starting: 0
   total entries expired since starting: 113620
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 5474 hit, 1621 miss
   total removes since starting: 137 hit, 352 miss
Youez - 2016 - github.com/yon3zu
LinuXploit