403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-09.12.12.txt
 ## swap threshold exceeded
## server overview
2025-11-09.12.12 load[1] mem[66/77] mysql[4/11] httpd[29]
              total        used        free      shared  buff/cache   available
Mem:           2363        1449         150          62         763         672
Swap:          1999        1612         387
 12:12:01 up  8:27,  0 users,  load average: 1.16, 0.94, 1.20
## system overview
top - 12:12:01 up  8:27,  0 users,  load average: 1.16, 0.94, 1.20
Tasks: 239 total,   2 running, 236 sleeping,   0 stopped,   1 zombie
%Cpu(s): 80.0 us, 17.1 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,   133160 free,  1493068 used,   794072 buff/cache
KiB Swap:  2047996 total,   397052 free,  1650944 used.   680404 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1850 mysql     20   0 1477284 254808   1880 S  76.5 10.5  13:03.56 /usr/sbin+
 89301 healtho+  20   0  461848  71856   4212 S  64.7  3.0   0:02.83 php-fpm: +
 89461 nigeria   20   0  400652  15932  10216 S   5.9  0.7   0:00.05 /opt/cpan+
 89491 root      20   0  160220   2324   1592 R   5.9  0.1   0:00.01 top -bcn1
 89493 cloudw    20   0  350316  16624  10324 S   5.9  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44544   3808   1616 S   0.0  0.2   0:59.55 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:03.97 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.53 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:40.98 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.52 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.78 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:21.43 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   106 root      20   0       0      0      0 S   0.0  0.0   0:00.54 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   252 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:02.71 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.25 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:02.08 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40244   4680   4424 S   0.0  0.2   0:15.69 /usr/lib/+
   378 root      20   0   45352    372    368 S   0.0  0.0   0:00.37 /usr/lib/+
   407 root      16  -4   55532    584    456 S   0.0  0.0   0:02.56 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   507 root      20   0  152780    340    296 S   0.0  0.0   0:00.05 /usr/sbin+
   518 rpc       20   0   69256    204    196 S   0.0  0.0   0:00.03 /sbin/rpc+
   521 root      20   0   52852    516    412 S   0.0  0.0   0:00.01 /usr/sbin+
   522 polkitd   20   0  612240   1064    708 S   0.0  0.0   0:04.27 /usr/lib/+
   523 root      20   0   21540    496    408 S   0.0  0.0   0:00.69 /usr/sbin+
   527 root      20   0   24860   1484    916 S   0.0  0.1   0:07.39 /usr/lib/+
   528 dbus      20   0   58708   1612    840 S   0.0  0.1   0:17.01 /usr/bin/+
   533 root      20   0  195208    176    176 S   0.0  0.0   0:00.00 /usr/sbin+
   538 nscd      20   0  994492   1540    864 S   0.0  0.1   0:14.96 /usr/sbin+
   541 root      20   0    4388    224    220 S   0.0  0.0   0:00.00 /usr/sbin+
   561 root      20   0  224148   5236   1400 S   0.0  0.2   0:00.43 queueproc+
   569 root      20   0   24208    192    168 S   0.0  0.0   0:00.00 /usr/sbin+
   570 root      20   0  124480    592    460 S   0.0  0.0   0:00.86 /usr/sbin+
   581 root      20   0  108296    288    284 S   0.0  0.0   0:00.00 /sbin/age+
   582 root      20   0  114704    296    296 S   0.0  0.0   0:00.02 /bin/bash
   589 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   618 mailnull  20   0   91036   3944   1004 S   0.0  0.2   0:00.45 /usr/sbin+
   666 root       0 -20       0      0      0 S   0.0  0.0   0:03.11 [loop0]
   687 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   688 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   926 root      20   0  445028    232    232 S   0.0  0.0   0:00.05 sw-engine+
   927 systuser  20   0   11796      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 memcach+  20   0  342400    216    216 S   0.0  0.0   0:00.65 /usr/bin/+
   930 systuser  20   0  113272     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   931 telegraf  20   0 5654048  34524   5512 S   0.0  1.4   0:17.24 /usr/loca+
   933 systuser  20   0  114016  11740   2912 S   0.0  0.5   0:06.89 /usr/loca+
   936 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   937 systuser  20   0   14068     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 root      20   0  572372   1160    624 S   0.0  0.0   0:02.60 /usr/bin/+
   940 root      20   0  111304    644    548 S   0.0  0.0   0:03.71 /usr/sbin+
   941 root      20   0  153404    528    444 S   0.0  0.0   0:00.71 pure-ftpd+
   942 root      20   0   51508    796    608 S   0.0  0.0   0:00.33 /usr/sbin+
   952 root      20   0  392856   5556   5356 S   0.0  0.2   0:00.82 php-fpm: +
   954 root      20   0 1763032  74268   1140 S   0.0  3.1   0:14.04 /usr/loca+
   955 root      20   0  261160   5912   1624 S   0.0  0.2   0:05.71 cpsrvd (S+
   958 named     20   0 1185800  41260   1980 S   0.0  1.7   0:16.94 /usr/sbin+
   960 root      20   0  436392  16008  15744 S   0.0  0.7   0:00.99 php-fpm: +
   976 root      20   0  386112   6212   6004 S   0.0  0.3   0:00.87 php-fpm: +
   982 root      20   0  306512   5320   4412 S   0.0  0.2   0:08.22 /usr/sbin+
   987 root      20   0  385496   6016   5852 S   0.0  0.2   0:00.91 php-fpm: +
   999 root      20   0  397344  10140   7604 S   0.0  0.4   0:09.21 php-fpm: +
  1012 cpanelc+  20   0   10152   3328   2468 S   0.0  0.1   0:26.15 /usr/loca+
  1077 dovenull  20   0   47048   2468   1740 S   0.0  0.1   0:00.43 dovecot/p+
  1078 dovenull  20   0   48244   3292   2032 S   0.0  0.1   0:00.42 dovecot/i+
  1079 dovecot   20   0   10320    456    344 S   0.0  0.0   0:00.06 dovecot/a+
  1080 root      20   0   10452    696    496 S   0.0  0.0   0:00.35 dovecot/l+
  1081 dovenull  20   0   47180   2472   1728 S   0.0  0.1   0:00.61 dovecot/p+
  1082 dovenull  20   0   48004   3100   1936 S   0.0  0.1   0:00.29 dovecot/i+
  1085 root      20   0   24528   2296    628 S   0.0  0.1   0:00.18 dovecot/c+
  1086 dovecot   20   0   13568    696    488 S   0.0  0.0   0:00.06 dovecot/s+
  1113 systuser  20   0  157708   3176   1172 S   0.0  0.1   0:00.13 SonarPush+
  1159 dovecot   20   0   41056   1540   1104 S   0.0  0.1   0:00.50 dovecot/a+
  1176 wp-tool+  20   0  410480  11180   1948 S   0.0  0.5   0:25.14 /usr/bin/+
  1177 wp-tool+  20   0  387556   3676   1784 S   0.0  0.2   0:00.31 /usr/bin/+
  1251 root      20   0  183900   6072   2844 S   0.0  0.3   0:02.48 cpdavd - +
  1252 root      20   0  167452   2556   1964 S   0.0  0.1   0:00.54 dnsadmin +
  1256 root      20   0  209468  21140   3540 S   0.0  0.9   0:04.87 tailwatchd
  1670 root      20   0  299272    692    528 S   0.0  0.0   0:00.81 php-fpm: +
  1700 root      38  18  130416   1472    788 S   0.0  0.1   0:00.07 cpanellog+
  1919 root      20   0  267104  15188   4924 S   0.0  0.6   0:02.42 /usr/sbin+
  4272 root      20   0   12800   1296   1180 S   0.0  0.1   0:02.46 /usr/loca+
  4273 root      20   0   12732   1260   1180 S   0.0  0.1   0:02.05 /usr/loca+
  4274 root      20   0   12824   1308   1180 S   0.0  0.1   0:02.29 /usr/loca+
  4285 root      20   0   53268   1684   1548 S   0.0  0.1   0:00.04 /usr/loca+
 11026 root      20   0  183052   1280   1244 S   0.0  0.1   0:00.00 /usr/sbin+
 11084 root      20   0  113284    524    524 S   0.0  0.0   0:00.00 /bin/sh -+
 11104 root      20   0  108056    228    228 S   0.0  0.0   0:00.00 sleep 5h +
 13454 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 13459 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.56 [kworker]
 40342 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 42050 root      20   0  248188 121340   4564 S   0.0  5.0   0:03.31 /usr/loca+
 46081 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [kworker/+
 48862 root      20   0  264316 131352   3380 S   0.0  5.4   0:01.05 spamd chi+
 48863 root      20   0  248188 118180   1440 S   0.0  4.9   0:00.00 spamd chi+
 53703 nobody    20   0  277672  23064   5024 S   0.0  1.0   0:03.98 /usr/sbin+
 56554 nobody    20   0  277628  22916   4920 S   0.0  0.9   0:03.32 /usr/sbin+
 60390 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 60392 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 63298 nobody    20   0  277916  23032   4832 S   0.0  1.0   0:02.57 /usr/sbin+
 66747 nobody    20   0  277620  22844   4876 S   0.0  0.9   0:02.43 /usr/sbin+
 69202 nobody    20   0  277940  22756   4748 S   0.0  0.9   0:01.81 /usr/sbin+
 73031 nobody    20   0  277932  22500   4484 S   0.0  0.9   0:00.98 /usr/sbin+
 74829 nobody    20   0  277656  22504   4572 S   0.0  0.9   0:01.26 /usr/sbin+
 75646 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76716 nobody    20   0  277588  22288   4472 S   0.0  0.9   0:00.91 /usr/sbin+
 77168 cloudw    20   0  471856   9752   5276 S   0.0  0.4   0:00.99 php-fpm: +
 77279 nobody    20   0  277608  22072   4216 S   0.0  0.9   0:00.50 /usr/sbin+
 77427 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 77781 nobody    20   0  277588  21828   4032 S   0.0  0.9   0:00.49 /usr/sbin+
 77832 nobody    20   0  277944  22580   4564 S   0.0  0.9   0:00.78 /usr/sbin+
 78199 nobody    20   0  277592  22220   4420 S   0.0  0.9   0:01.01 /usr/sbin+
 78252 nobody    20   0  277592  21976   4148 S   0.0  0.9   0:00.59 /usr/sbin+
 78300 nobody    20   0  277600  21984   4164 S   0.0  0.9   0:00.27 /usr/sbin+
 79263 nobody    20   0  277588  22184   4352 S   0.0  0.9   0:00.95 /usr/sbin+
 79342 nobody    20   0  277592  21776   3972 S   0.0  0.9   0:00.31 /usr/sbin+
 79997 nobody    20   0  277520  21668   3936 S   0.0  0.9   0:00.27 /usr/sbin+
 81348 nobody    20   0  277588  21508   3756 S   0.0  0.9   0:00.28 /usr/sbin+
 81354 nobody    20   0  277608  21756   3956 S   0.0  0.9   0:00.42 /usr/sbin+
 81355 nobody    20   0  277592  21868   4052 S   0.0  0.9   0:00.43 /usr/sbin+
 81356 nobody    20   0  277596  22040   4164 S   0.0  0.9   0:00.59 /usr/sbin+
 81570 root      20   0  183252  12288   1720 S   0.0  0.5   0:23.06 lfd - sle+
 82576 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82868 root      20   0 1276100  11492    588 S   0.0  0.5   0:00.06 /usr/bin/+
 82905 root      20   0 1277056  12004    596 S   0.0  0.5   0:00.07 /usr/bin/+
 83291 nobody    20   0  277600  22020   4216 S   0.0  0.9   0:00.63 /usr/sbin+
 83480 nobody    20   0  277592  22116   4324 S   0.0  0.9   0:00.55 /usr/sbin+
 83789 nobody    20   0  277924  22228   4260 S   0.0  0.9   0:00.44 /usr/sbin+
 83803 nobody    20   0  277592  21820   3984 S   0.0  0.9   0:00.42 /usr/sbin+
 83804 nobody    20   0  277508  21384   3692 S   0.0  0.9   0:00.09 /usr/sbin+
 85055 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 85373 nobody    20   0  277588  21672   3888 S   0.0  0.9   0:00.30 /usr/sbin+
 85452 cloudw    20   0  471840   9736   5272 S   0.0  0.4   0:00.40 php-fpm: +
 85458 nobody    20   0  277588  21744   3980 S   0.0  0.9   0:00.27 /usr/sbin+
 85523 nobody    20   0  277592  21920   4120 S   0.0  0.9   0:00.20 /usr/sbin+
 86029 worencom  20   0   38492   4012   3056 S   0.0  0.2   0:00.00 dovecot/i+
 86041 nobody    20   0  277596  21728   3944 S   0.0  0.9   0:00.10 /usr/sbin+
 86072 nobody    20   0  277592  21740   3964 S   0.0  0.9   0:00.60 /usr/sbin+
 86563 cloudw    20   0  363744  18604  11832 S   0.0  0.8   0:00.20 /opt/cpan+
 86784 cloudw    20   0  363744  18604  11832 S   0.0  0.8   0:00.20 /opt/cpan+
 86892 cloudw    20   0  363744  18604  11832 S   0.0  0.8   0:00.20 /opt/cpan+
 87052 cloudw    20   0  363744  18604  11832 S   0.0  0.8   0:00.19 /opt/cpan+
 87113 nobody    20   0  277588  21636   3860 S   0.0  0.9   0:00.29 /usr/sbin+
 87278 cloudw    20   0  363744  18604  11832 S   0.0  0.8   0:00.19 /opt/cpan+
 87497 cloudw    20   0  363744  18604  11832 S   0.0  0.8   0:00.20 /opt/cpan+
 87638 cloudw    20   0  363744  18604  11832 S   0.0  0.8   0:00.21 /opt/cpan+
 87660 cloudw    20   0  471784   9520   5020 S   0.0  0.4   0:00.19 php-fpm: +
 87808 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 87919 cloudw    20   0  363744  18604  11832 S   0.0  0.8   0:00.20 /opt/cpan+
 87933 cloudw    20   0  471784   9524   5024 S   0.0  0.4   0:00.20 php-fpm: +
 88100 cloudw    20   0  363744  18608  11832 S   0.0  0.8   0:00.20 /opt/cpan+
 88115 cloudw    20   0  471784   9524   5024 S   0.0  0.4   0:00.20 php-fpm: +
 88226 cloudw    20   0  363744  18608  11832 S   0.0  0.8   0:00.20 /opt/cpan+
 88338 nobody    20   0  277920  21412   3632 S   0.0  0.9   0:00.05 /usr/sbin+
 88438 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 88554 cloudw    20   0  363744  18604  11832 S   0.0  0.8   0:00.20 /opt/cpan+
 88691 cloudw    20   0  363744  18608  11832 S   0.0  0.8   0:00.21 /opt/cpan+
 88817 cloudw    20   0  363744  18604  11832 S   0.0  0.8   0:00.21 /opt/cpan+
 88907 nobody    20   0  277520  21396   3704 S   0.0  0.9   0:00.08 /usr/sbin+
 88959 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 89049 cloudw    20   0  363744  18604  11832 S   0.0  0.8   0:00.19 /opt/cpan+
 89081 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 89082 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 89171 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 89187 cloudw    20   0  363744  18608  11832 S   0.0  0.8   0:00.20 /opt/cpan+
 89269 cloudw    20   0   62092   6516   4464 S   0.0  0.3   0:00.01 dovecot/l+
 89270 root      20   0   41052   2732   2088 S   0.0  0.1   0:00.00 dovecot/a+
 89280 root      20   0   86580  10060   5056 S   0.0  0.4   0:00.01 /usr/sbin+
 89285 mailnull  20   0   86804   6792   1716 S   0.0  0.3   0:00.00 /usr/sbin+
 89316 healtho+  20   0  457376  67656   4216 S   0.0  2.8   0:02.70 php-fpm: +
 89324 cloudw    20   0  362952  16824  10936 R   0.0  0.7   0:00.12 /opt/cpan+
 89353 root      20   0  111304   4268   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 89356 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 89375 nigeria   20   0  397064   5576   2284 S   0.0  0.2   0:00.00 php-fpm: +
 89392 nobody    20   0  277292  20332   3088 S   0.0  0.8   0:00.00 /usr/sbin+
 89402 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 89404 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 89405 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 89406 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 89407 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 89409 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 89410 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 89411 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 89412 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 89413 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 89414 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89416 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 89423 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 89424 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89425 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89426 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 89427 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89428 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89429 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 89432 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89433 root      20   0   20164    964    768 S   0.0  0.0   0:00.00 jailshell+
 89435 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 89436 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 89437 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 89442 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 89447 pactpay   20   0   20164    268      0 S   0.0  0.0   0:00.00 jailshell+
 89455 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 89456 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 89460 nigeria   20   0   20164    268      0 S   0.0  0.0   0:00.00 jailshell+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:44   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    03:44   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    03:44   0:40  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:44   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    03:44   0:21  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:44   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:44   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [deferwq]
root        106  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [ata_sff]
root        250  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [scsi_eh_0]
root        251  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [scsi_tmf_0]
root        252  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [scsi_eh_1]
root        253  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   03:44   0:02  \_ [kworker/1:1H]
root        266  0.0  0.0      0     0 ?        S<   03:44   0:02  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    03:44   0:02  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [xprtiod]
root        589  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kvm-irqfd-clean]
root        666  0.0  0.0      0     0 ?        S<   03:44   0:03  \_ [loop0]
root        687  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [jbd2/loop0-8]
root        688  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [ext4-rsv-conver]
root      40342  0.0  0.0      0     0 ?        S    10:49   0:00  \_ [kworker/0:2]
root      46081  0.0  0.0      0     0 ?        S    10:58   0:00  \_ [kworker/0:0]
root      60390  0.0  0.0      0     0 ?        S    11:21   0:00  \_ [kworker/1:2]
root      60392  0.0  0.0      0     0 ?        S    11:21   0:00  \_ [kworker/u200:0]
root      75646  0.0  0.0      0     0 ?        S    11:48   0:00  \_ [kworker/u200:2]
root      77427  0.0  0.0      0     0 ?        S    11:51   0:00  \_ [kworker/1:0]
root      82576  0.0  0.0      0     0 ?        S    12:00   0:00  \_ [kworker/1:3]
root      85055  0.0  0.0      0     0 ?        S    12:04   0:00  \_ [kworker/0:1]
root      87808  0.0  0.0      0     0 ?        S    12:09   0:00  \_ [kworker/1:1]
root      88438  0.0  0.0      0     0 ?        S    12:10   0:00  \_ [kworker/1:4]
root      88959  0.0  0.0      0     0 ?        S    12:11   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44544  3808 ?        Ss   03:44   0:59 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  40244  4680 ?        Ss   03:44   0:15 /usr/lib/systemd/systemd-journald
root        378  0.0  0.0  45352   372 ?        Ss   03:44   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   584 ?        S<sl 03:44   0:02 /sbin/auditd
root        507  0.0  0.0 152780   340 ?        Ss   03:44   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
rpc         518  0.0  0.0  69256   204 ?        Ss   03:44   0:00 /sbin/rpcbind -w
root        521  0.0  0.0  52852   516 ?        Ss   03:44   0:00 /usr/sbin/smartd -n -q never
polkitd     522  0.0  0.0 612240  1064 ?        Ssl  03:44   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        523  0.0  0.0  21540   496 ?        Ss   03:44   0:00 /usr/sbin/irqbalance --foreground
root        527  0.0  0.0  24860  1484 ?        Ss   03:44   0:07 /usr/lib/systemd/systemd-logind
dbus        528  0.0  0.0  58708  1612 ?        Ss   03:44   0:17 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        533  0.0  0.0 195208   176 ?        Ssl  03:44   0:00 /usr/sbin/gssproxy -D
nscd        538  0.0  0.0 994492  1540 ?        Ssl  03:44   0:14 /usr/sbin/nscd
root        541  0.0  0.0   4388   224 ?        Ss   03:44   0:00 /usr/sbin/acpid
root        561  0.0  0.2 224148  5236 ?        Ss   03:44   0:00 queueprocd - waiting up to 60s to process a task
root        569  0.0  0.0  24208   192 ?        Ss   03:44   0:00 /usr/sbin/atd -f
root        570  0.0  0.0 124480   592 ?        Ss   03:44   0:00 /usr/sbin/crond -n
root      11026  0.0  0.0 183052  1280 ?        S    07:01   0:00  \_ /usr/sbin/CROND -n
root      11084  0.0  0.0 113284   524 ?        Ss   07:01   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      11104  0.0  0.0 108056   228 ?        S    07:01   0:00  |       \_ sleep 5h 32m
root      89402  0.0  0.0 183048  2144 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      89435  0.0  0.0 113284  1208 ?        Ss   12:12   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      89442  0.0  0.0 108052   356 ?        S    12:12   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      89456  0.0  0.0 113288  1516 ?        S    12:12   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      89496  0.0  0.0 153840  2096 ?        R    12:12   0:00  |               \_ ps auxf
root      89404  0.0  0.0 183048  2148 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      89429  0.0  0.0  20164   984 ?        Ss   12:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      89497  0.0  0.0  20164   272 ?        R    12:12   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      89405  0.0  0.0 183048  2148 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      89426  0.0  0.0  20164   804 ?        Ss   12:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      89406  0.0  0.0 183048  2148 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      89432  0.0  0.0  20164   808 ?        Ss   12:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      89407  0.0  0.0 183048  2148 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      89427  0.0  0.0  20164   808 ?        Ss   12:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      89409  0.0  0.0 183048  2144 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      89424  0.0  0.0  20164   808 ?        Ss   12:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      89410  0.0  0.0 183048  2144 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      89425  0.0  0.0  20164   808 ?        Ss   12:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      89411  0.0  0.0 183048  2140 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      89436  0.0  0.0  20164   804 ?        Ss   12:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      89412  0.0  0.0 183048  2140 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      89428  0.0  0.0  20164   808 ?        Ss   12:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      89413  0.0  0.0 183048  2140 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      89437  0.0  0.0  20164   804 ?        Rs   12:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      89414  0.0  0.0 183048  2144 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      89433  0.0  0.0  20164   964 ?        Ss   12:12   0:00  |   \_ jailshell (pactpay) [89447] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   89447  0.0  0.0  20164   268 ?        S    12:12   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   89455  0.0  0.7 476724 17484 ?        S    12:12   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      89416  0.0  0.0 183048  2140 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      89423  0.0  0.0  20164   968 ?        Ss   12:12   0:00      \_ jailshell (nigeria) [89460] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   89460  0.0  0.0  20164   268 ?        S    12:12   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   89461  0.0  0.6 400652 15932 ?        S    12:12   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        581  0.0  0.0 108296   288 tty1     Ss+  03:44   0:00 /sbin/agetty --noclear tty1 linux
root        582  0.0  0.0 114704   296 ttyS0    Ss+  03:44   0:00 /bin/bash
mailnull    618  0.0  0.1  91036  3944 ?        Ss   03:44   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        926  0.0  0.0 445028   232 ?        Ss   03:44   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    927  0.0  0.0  11796     8 ?        Ssl  03:44   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
memcach+    929  0.0  0.0 342400   216 ?        Ssl  03:44   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    930  0.0  0.0 113272    76 ?        Ssl  03:44   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    931  0.0  1.4 5654048 34524 ?       SLsl 03:44   0:17 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    933  0.0  0.4 114016 11740 ?        Ssl  03:44   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    936  0.0  0.0 113932    68 ?        Ssl  03:44   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    937  0.0  0.0  14068    24 ?        Ssl  03:44   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        939  0.0  0.0 572372  1160 ?        Ssl  03:44   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        940  0.0  0.0 111304   644 ?        Ss   03:44   0:03 /usr/sbin/sshd -D
root      89081  0.0  0.1 111304  4264 ?        Ss   12:11   0:00  \_ sshd: [accepted]
sshd      89082  0.0  0.1 115644  2628 ?        S    12:11   0:00  |   \_ sshd: [net]
root      89171  0.0  0.1 111304  4260 ?        Ss   12:11   0:00  \_ sshd: [accepted]
root      89353  0.0  0.1 111304  4268 ?        Ss   12:11   0:00  \_ sshd: [accepted]
root        941  0.0  0.0 153404   528 ?        Ss   03:44   0:00 pure-ftpd (SERVER)
root        942  0.0  0.0  51508   796 ?        Ss   03:44   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1077  0.0  0.1  47048  2468 ?        S    03:44   0:00  \_ dovecot/pop3-login
dovenull   1078  0.0  0.1  48244  3292 ?        S    03:44   0:00  \_ dovecot/imap-login
dovecot    1079  0.0  0.0  10320   456 ?        S    03:44   0:00  \_ dovecot/anvil
root       1080  0.0  0.0  10452   696 ?        S    03:44   0:00  \_ dovecot/log
dovenull   1081  0.0  0.1  47180  2472 ?        S    03:44   0:00  \_ dovecot/pop3-login
dovenull   1082  0.0  0.1  48004  3100 ?        S    03:44   0:00  \_ dovecot/imap-login
root       1085  0.0  0.0  24528  2296 ?        S    03:44   0:00  \_ dovecot/config
dovecot    1086  0.0  0.0  13568   696 ?        S    03:44   0:00  \_ dovecot/stats
dovecot    1159  0.0  0.0  41056  1540 ?        S    03:44   0:00  \_ dovecot/auth
worencom  86029  0.0  0.1  38492  4012 ?        S    12:05   0:00  \_ dovecot/imap
cloudw    89269  0.0  0.2  62092  6516 ?        S    12:11   0:00  \_ dovecot/lmtp
root      89270  0.0  0.1  41052  2732 ?        S    12:11   0:00  \_ dovecot/auth -w
root        952  0.0  0.2 392856  5556 ?        Ss   03:44   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        954  0.0  3.0 1763032 74268 ?       Ssl  03:44   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        955  0.0  0.2 261160  5912 ?        Ss   03:44   0:05 cpsrvd (SSL) - waiting for connections                   
root      89356  0.0  0.0      0     0 ?        Z    12:11   0:00  \_ [cpaneld - servi] <defunct>
named       958  0.0  1.7 1185800 41260 ?       Ssl  03:44   0:16 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        960  0.0  0.6 436392 16008 ?        Ss   03:44   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        976  0.0  0.2 386112  6212 ?        Ss   03:44   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        982  0.0  0.2 306512  5320 ?        Ssl  03:44   0:08 /usr/sbin/rsyslogd -n
root        987  0.0  0.2 385496  6016 ?        Ss   03:44   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        999  0.0  0.4 397344 10140 ?        Ss   03:44   0:09 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    77168  0.0  0.4 471856  9752 ?        S    11:50   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    85452  0.0  0.4 471840  9736 ?        S    12:04   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    87660  0.1  0.3 471784  9520 ?        S    12:08   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    87933  0.1  0.3 471784  9524 ?        S    12:09   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    88115  0.1  0.3 471784  9524 ?        S    12:09   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
healtho+  89301 17.7  2.9 461848 72120 ?        R    12:11   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  89316 20.7  2.7 457376 67656 ?        S    12:11   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   89375  0.0  0.2 397064  5576 ?        S    12:11   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1012  0.0  0.1  10152  3328 ?        Ss   03:44   0:26 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1113  0.0  0.1 157708  3176 ?        S    03:44   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.4 410480 11180 ?        Ss   03:44   0:25 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1177  0.0  0.1 387556  3676 ?        Ss   03:44   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1251  0.0  0.2 183900  6072 ?        Ss   03:44   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1252  0.0  0.1 167452  2556 ?        Ss   03:44   0:00 dnsadmin - dormant mode
root       1256  0.0  0.8 209468 21140 ?        Ss   03:44   0:04 tailwatchd
root       1670  0.0  0.0 299272   692 ?        Ss   03:44   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1700  0.0  0.0 130416  1472 ?        SN   03:44   0:00 cpanellogd - sleeping for logs
mysql      1850  2.5 10.5 1477284 254808 ?      Sl   03:44  13:03 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1919  0.0  0.6 267104 15188 ?        Ss   03:44   0:02 /usr/sbin/httpd -k start
root       4272  0.0  0.0  12800  1296 ?        S    06:48   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       4273  0.0  0.0  12732  1260 ?        S    06:48   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       4274  0.0  0.0  12824  1308 ?        S    06:48   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       4285  0.0  0.0  53268  1684 ?        S    06:48   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    53703  0.1  0.9 277672 23064 ?        S    11:10   0:03  \_ /usr/sbin/httpd -k start
nobody    56554  0.0  0.9 277628 22916 ?        S    11:14   0:03  \_ /usr/sbin/httpd -k start
nobody    63298  0.0  0.9 277916 23032 ?        S    11:25   0:02  \_ /usr/sbin/httpd -k start
cloudw    86892  0.0  0.7 363744 18604 ?        S    12:07   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    66747  0.1  0.9 277620 22844 ?        S    11:32   0:02  \_ /usr/sbin/httpd -k start
nobody    69202  0.0  0.9 277940 22756 ?        S    11:35   0:01  \_ /usr/sbin/httpd -k start
cloudw    86563  0.0  0.7 363744 18604 ?        S    12:06   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    73031  0.0  0.9 277932 22500 ?        S    11:42   0:00  \_ /usr/sbin/httpd -k start
cloudw    89049  0.3  0.7 363744 18604 ?        S    12:11   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    74829  0.0  0.9 277656 22504 ?        S    11:46   0:01  \_ /usr/sbin/httpd -k start
cloudw    88554  0.1  0.7 363744 18604 ?        S    12:10   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    76716  0.0  0.9 277588 22288 ?        S    11:50   0:00  \_ /usr/sbin/httpd -k start
nobody    77279  0.0  0.9 277608 22072 ?        S    11:50   0:00  \_ /usr/sbin/httpd -k start
cloudw    87052  0.0  0.7 363744 18604 ?        S    12:07   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    77781  0.0  0.9 277588 21828 ?        S    11:51   0:00  \_ /usr/sbin/httpd -k start
cloudw    89493  0.0  0.6 350316 16624 ?        S    12:12   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    77832  0.0  0.9 277944 22580 ?        S    11:51   0:00  \_ /usr/sbin/httpd -k start
cloudw    88691  0.2  0.7 363744 18608 ?        S    12:10   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    78199  0.0  0.9 277592 22220 ?        S    11:52   0:01  \_ /usr/sbin/httpd -k start
cloudw    88226  0.1  0.7 363744 18608 ?        S    12:09   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    78252  0.0  0.9 277592 21976 ?        S    11:52   0:00  \_ /usr/sbin/httpd -k start
cloudw    89187  0.6  0.7 363744 18608 ?        S    12:11   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    78300  0.0  0.9 277600 21984 ?        S    11:52   0:00  \_ /usr/sbin/httpd -k start
nobody    79263  0.0  0.9 277588 22184 ?        S    11:54   0:00  \_ /usr/sbin/httpd -k start
nobody    79342  0.0  0.8 277592 21776 ?        S    11:54   0:00  \_ /usr/sbin/httpd -k start
nobody    79997  0.0  0.8 277520 21668 ?        S    11:55   0:00  \_ /usr/sbin/httpd -k start
nobody    81348  0.0  0.8 277588 21508 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
nobody    81354  0.0  0.8 277608 21756 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
cloudw    88100  0.1  0.7 363744 18608 ?        S    12:09   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    81355  0.0  0.9 277592 21868 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
cloudw    87919  0.1  0.7 363744 18604 ?        S    12:09   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    81356  0.0  0.9 277596 22040 ?        S    11:58   0:00  \_ /usr/sbin/httpd -k start
cloudw    89324  1.0  0.6 362952 16824 ?        S    12:11   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    83291  0.0  0.9 277600 22020 ?        S    12:00   0:00  \_ /usr/sbin/httpd -k start
nobody    83480  0.0  0.9 277592 22116 ?        S    12:01   0:00  \_ /usr/sbin/httpd -k start
nobody    83789  0.0  0.9 277924 22228 ?        S    12:01   0:00  \_ /usr/sbin/httpd -k start
nobody    83803  0.0  0.9 277592 21820 ?        S    12:02   0:00  \_ /usr/sbin/httpd -k start
cloudw    87278  0.0  0.7 363744 18604 ?        S    12:08   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    83804  0.0  0.8 277508 21384 ?        S    12:02   0:00  \_ /usr/sbin/httpd -k start
nobody    85373  0.0  0.8 277588 21672 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
cloudw    87497  0.0  0.7 363744 18604 ?        S    12:08   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    85458  0.0  0.8 277588 21744 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
cloudw    87638  0.1  0.7 363744 18604 ?        S    12:08   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    85523  0.0  0.9 277592 21920 ?        S    12:05   0:00  \_ /usr/sbin/httpd -k start
nobody    86041  0.0  0.8 277596 21728 ?        S    12:05   0:00  \_ /usr/sbin/httpd -k start
cloudw    86784  0.0  0.7 363744 18604 ?        S    12:07   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    86072  0.1  0.8 277592 21740 ?        S    12:06   0:00  \_ /usr/sbin/httpd -k start
nobody    87113  0.1  0.8 277588 21636 ?        S    12:08   0:00  \_ /usr/sbin/httpd -k start
nobody    88338  0.0  0.8 277920 21412 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
cloudw    88817  0.2  0.7 363744 18604 ?        S    12:10   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    88907  0.1  0.8 277520 21396 ?        S    12:11   0:00  \_ /usr/sbin/httpd -k start
nobody    89392  0.0  0.8 277292 20332 ?        S    12:11   0:00  \_ /usr/sbin/httpd -k start
oysipao+  13454  0.0  0.0   3148     8 ?        Ss   04:01   0:00 [kworker]
oysipao+  13459  0.0  0.0   3152    36 ?        S    04:01   0:00  \_ [kworker]
root      81570  0.1  0.5 183252 12288 ?        Ss   06:01   0:23 lfd - sleeping
root      42050  0.0  5.0 248188 121340 ?       Ss   10:51   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      48862  0.0  5.4 264316 131352 ?       S    11:02   0:01  \_ spamd child
root      48863  0.0  4.8 248188 118180 ?       S    11:02   0:00  \_ spamd child
root      82868  0.0  0.4 1276100 11492 ?       Ssl  12:00   0:00 /usr/bin/cspdaemon
root      82905  0.0  0.4 1277056 12004 ?       Ssl  12:00   0:00 /usr/bin/checkstatus
root      89280  0.0  0.4  86580 10060 ?        Ss   12:11   0:00 /usr/sbin/exim -Mc 1vI3Kg-00000000NDy-0Rlq
mailnull  89285  0.0  0.2  86804  6792 ?        S    12:11   0:00  \_ /usr/sbin/exim -Mc 1vI3Kg-00000000NDy-0Rlq
## mysql stats
Uptime: 52150  Threads: 4  Questions: 6348237  Slow queries: 0  Opens: 8479  Flush tables: 1  Open tables: 2000  Queries per second avg: 121.730
*************************** 1. row ***************************
     Id: 91324
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 91327
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 91330
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Query
   Time: 0
  State: Opening tables
   Info: SELECT option_value FROM wpjt_options WHERE option_name = 'using_application_passwords' LIMIT 1
*************************** 4. row ***************************
     Id: 91333
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 110.232.87.104 TIME_WAIT
      1 131.100.51.109 TIME_WAIT
      1 142.44.233.75 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 197.149.86.250 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.255.71.164 TIME_WAIT
      1 54.39.6.109 TIME_WAIT
      1 66.249.70.35 TIME_WAIT
      1 66.249.70.37 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 123.187.240.242 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 95.107.165.123 TIME_WAIT
     33 157.20.32.131 TIME_WAIT
     37 103.253.27.28 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 09-Nov-2025 12:12:01 WAT
   Restart Time: Saturday, 08-Nov-2025 21:42:53 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 14 hours 29 minutes 8 seconds
   Server load: 1.16 0.94 1.20
   Total accesses: 159885 - Total Traffic: 2.4 GB - Total Duration: 211400464
   CPU Usage: u21.41 s9.14 cu1393.31 cs920.07 - 4.49% CPU load
   3.07 requests/sec - 47.9 kB/second - 15.6 kB/request - 1322.2 ms/request
   27 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

L_CLWLWWLW_LWW_L_WKLWWK_LWWW_.K._....._.LLW.....................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

    Srv   PID     Acc     M CPU    SS   Req   Dur    Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-1   63298 1/692/8637 L 9.06  271   0   5585978  5.0   12.64 126.55 173.199.190.174 http/1.1 tasks.cloudware.ng:443     GET /postnews.php?ARRAY=7o2230223n313736323639303035302p2231223
   1-1   56554 0/831/8245 _ 14.14 0     465 6373997  0.0   12.55 138.38 103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   2-1   53703 1/977/8919 C 14.72 0     370 6257013  5.7   17.72 129.34 157.20.32.131   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   3-1   85373 1/60/8591  L 1.17  211   0   5442462  5.0   1.24  124.25 173.199.190.174 http/1.1 tasks.cloudware.ng:443     GET /postnews.php?ARRAY=7o2230223n313736323639303131302p2231223
   4-1   76716 0/194/7527 W 3.68  149   0   5507133  0.0   3.62  137.25 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323639303137322p2231223
   5-1   77279 1/123/7857 L 2.02  251   0   5372641  5.0   1.84  126.98 173.199.190.174 http/1.1 tasks.cloudware.ng:443     GET /postnews.php?ARRAY=7o2230223n313736323639303037302p2231223
   6-1   79997 0/53/8027  W 1.43  129   0   5419397  0.0   0.98  124.38 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323639303139322p2231223
   7-1   88338 0/17/8056  W 0.07  71    0   5536511  0.0   0.15  113.83 173.199.190.174 http/1.1 tasks.cloudware.ng:443     GET /postnews.php?ARRAY=7o2230223n313736323639303235302p2231223
   8-1   86041 1/24/6566  L 0.39  291   0   4409484  5.0   0.43  97.84  173.199.190.174 http/1.1 tasks.cloudware.ng:443     GET /postnews.php?ARRAY=7o2230223n313736323639303033302p2231223
   9-1   66747 0/601/6549 W 8.69  0     0   4995393  0.0   12.25 116.41 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   10-1  86072 0/115/7136 _ 2.50  0     0   4346471  0.0   2.54  109.43 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   11-1  69202 1/435/6201 L 7.24  311   0   4419675  5.0   6.95  97.74  173.199.190.174 http/1.1 tasks.cloudware.ng:443     GET /postnews.php?ARRAY=7o2230223n313736323639303031302p2231223
   12-1  73031 0/281/6180 W 3.42  51    0   4838946  0.0   4.08  92.77  173.199.190.174 http/1.1 tasks.cloudware.ng:443     GET /postnews.php?ARRAY=7o2230223n313736323639303237302p2231223
   13-1  74829 0/287/5902 W 5.02  111   0   4274215  0.0   4.89  94.83  173.199.190.174 http/1.1 tasks.cloudware.ng:443     GET /postnews.php?ARRAY=7o2230223n313736323639303231302p2231223
   14-1  83291 0/170/5226 _ 2.37  0     24  4050545  0.0   2.47  76.82  116.203.134.67  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue4.php HTTP/1.1
   15-1  85458 1/63/3757  L 0.95  191   0   2987216  5.0   1.04  53.59  173.199.190.174 http/1.1 tasks.cloudware.ng:443     GET /postnews.php?ARRAY=7o2230223n313736323639303133302p2231223
   16-1  83480 0/128/3771 _ 1.98  1     23  3398548  0.0   2.14  74.63  116.203.129.16  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue2.php HTTP/1.1
   17-1  85523 0/52/6005  W 0.65  213   0   3850434  0.0   0.83  82.06  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323639303130382p2231223
   18-1  83789 2/89/3057  K 1.95  0     365 2946143  65.6  1.81  48.99  66.249.70.38    http/1.1 support.cloudware.ng:443   GET /?c=3160630929 HTTP/1.1
   19-1  83803 1/102/3084 L 1.78  231   0   45145636 5.0   1.53  51.93  173.199.190.174 http/1.1 tasks.cloudware.ng:443     GET /postnews.php?ARRAY=7o2230223n313736323639303039302p2231223
   20-1  77781 4/152/2838 W 3.16  0     0   3335928  127.3 1.69  46.27  66.249.70.32    http/1.1 support.cloudware.ng:443   GET /?c=2134883940 HTTP/1.1
   21-1  77832 0/180/1847 W 3.19  91    0   1961701  0.0   2.95  23.72  173.199.190.174 http/1.1 tasks.cloudware.ng:443     GET /postnews.php?ARRAY=7o2230223n313736323639303233302p2231223
   22-1  87113 2/67/1377  K 0.99  0     446 1468268  64.6  1.07  19.84  66.249.70.37    http/1.1 support.cloudware.ng:443   GET /?c=3768416854 HTTP/1.1
   23-1  88907 0/19/567   _ 0.17  1     42  1650384  0.0   0.23  8.23   116.203.129.16  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue1.php HTTP/1.1
   24-1  78199 1/225/1843 L 3.93  131   0   1709057  5.0   4.16  27.38  173.199.190.174 http/1.1 tasks.cloudware.ng:443     GET /postnews.php?ARRAY=7o2230223n313736323639303139302p2231223
   25-1  78252 0/180/1361 W 2.20  31    0   1985750  0.0   2.00  17.22  173.199.190.174 http/1.1 tasks.cloudware.ng:443     GET /postnews.php?ARRAY=7o2230223n313736323639303239302p2231223
   26-1  83804 0/22/1204  W 0.45  189   0   1787439  0.0   0.30  17.22  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323639303133322p2231223
   27-1  78300 0/65/357   W 1.33  169   0   45262951 0.0   0.99  4.99   173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323639303135322p2231223
   28-1  89392 0/1/831    _ 0.00  0     105 500933   0.0   0.01  13.17  128.140.8.200   http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   29-1  -     0/0/510    . 0.00  724   0   944596   0.0   0.00  8.36   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-1  79263 1/209/674  K 4.18  4     403 1174426  36.7  4.37  10.05  66.249.70.36    http/1.1 support.cloudware.ng:443   GET /?c=2776273474 HTTP/1.1
   31-1  -     0/0/521    . 0.00  209   0   292995   0.0   0.00  7.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-1  79342 0/67/269   _ 1.55  1     24  1730231  0.0   1.39  2.55   116.203.129.16  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue5.php HTTP/1.1
   33-1  -     0/0/116    . 0.00  206   0   1318116  0.0   0.00  0.97   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-1  -     0/0/528    . 0.00  454   0   700190   0.0   0.00  5.17   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-1  -     0/0/398    . 0.00  812   0   209439   0.0   0.00  7.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-1  -     0/0/486    . 0.00  814   0   191945   0.0   0.00  6.79   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-1  -     0/0/553    . 0.00  723   0   224799   0.0   0.00  6.24   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-1  81348 0/53/136   _ 1.58  0     343 1349149  0.0   1.18  1.97   66.249.70.34    http/1.1 support.cloudware.ng:443   GET /?c=3159297162 HTTP/1.1
   39-1  -     0/0/121    . 0.00  792   0   56093    0.0   0.00  1.62   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-1  81354 1/96/343   L 1.73  151   0   832150   5.0   1.61  5.03   173.199.190.174 http/1.1 tasks.cloudware.ng:443     GET /postnews.php?ARRAY=7o2230223n313736323639303137302p2231223
   41-1  81355 1/89/183   L 1.87  171   0   710610   5.0   1.72  2.51   173.199.190.174 http/1.1 tasks.cloudware.ng:443     GET /postnews.php?ARRAY=7o2230223n313736323639303135302p2231223
   42-1  81356 0/218/288  W 2.12  11    0   729325   0.0   2.23  2.86   173.199.190.174 http/1.1 tasks.cloudware.ng:443     GET /postnews.php?ARRAY=7o2230223n313736323639303331302p2231223
   43-1  -     0/0/68     . 0.00  37268 0   16606    0.0   0.00  0.52   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-1  -     0/0/141    . 0.00  37283 0   46471    0.0   0.00  1.71   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-1  -     0/0/639    . 0.00  36373 0   582678   0.0   0.00  8.95   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-1  -     0/0/143    . 0.00  37281 0   55838    0.0   0.00  1.86   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-1  -     0/0/80     . 0.00  37270 0   18997    0.0   0.00  0.61   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-1  -     0/0/322    . 0.00  37233 0   115771   0.0   0.00  5.36   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-1  -     0/0/791    . 0.00  37248 0   366002   0.0   0.00  15.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-1  -     0/0/37     . 0.00  37272 0   21640    0.0   0.00  0.45   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-1  -     0/0/79     . 0.00  37269 0   23800    0.0   0.00  0.76   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-1  -     0/0/118    . 0.00  37265 0   42717    0.0   0.00  1.81   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-1  -     0/0/472    . 0.00  36647 0   214014   0.0   0.00  4.99   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-1  -     0/0/73     . 0.00  37241 0   32329    0.0   0.00  1.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-1  -     0/0/214    . 0.00  36866 0   108736   0.0   0.00  3.69   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-1  -     0/0/54     . 0.00  37267 0   27320    0.0   0.00  0.63   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-1  -     0/0/75     . 0.00  37247 0   11955    0.0   0.00  0.28   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-1  -     0/0/58     . 0.00  37235 0   23330    0.0   0.00  0.67   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-1  -     0/0/82     . 0.00  37244 0   24724    0.0   0.00  0.57   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-1  -     0/0/63     . 0.00  37285 0   22012    0.0   0.00  1.15   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-1  -     0/0/60     . 0.00  37230 0   18893    0.0   0.00  0.54   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-1  -     0/0/98     . 0.00  37258 0   23806    0.0   0.00  0.89   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-1  -     0/0/176    . 0.00  36884 0   84522    0.0   0.00  2.73   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-1  -     0/0/710    . 0.00  37238 0   377836   0.0   0.00  10.15  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-1  -     0/0/855    . 0.00  37259 0   439035   0.0   0.00  13.33  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-1  -     0/0/55     . 0.00  37216 0   23481    0.0   0.00  0.54   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-1  -     0/0/516    . 0.00  37897 0   277398   0.0   0.00  7.19   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-1  -     0/0/65     . 0.00  39332 0   37395    0.0   0.00  0.75   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-1  -     0/0/47     . 0.00  39347 0   16783    0.0   0.00  0.39   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-1  -     0/0/56     . 0.00  39356 0   14988    0.0   0.00  0.46   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-1  -     0/0/80     . 0.00  39355 0   24741    0.0   0.00  1.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-1  -     0/0/67     . 0.00  39339 0   15688    0.0   0.00  0.44   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-1  -     0/0/46     . 0.00  39368 0   12467    0.0   0.00  0.29   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-1  -     0/0/390    . 0.00  39358 0   169214   0.0   0.00  6.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-1  -     0/0/59     . 0.00  39328 0   17563    0.0   0.00  0.30   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-1  -     0/0/507    . 0.00  38373 0   249363   0.0   0.00  8.73   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-1  -     0/0/36     . 0.00  39345 0   19351    0.0   0.00  0.32   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-1  -     0/0/135    . 0.00  39064 0   72979    0.0   0.00  2.27   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-1  -     0/0/24     . 0.00  39375 0   10186    0.0   0.00  0.16   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-1  -     0/0/41     . 0.00  39371 0   9195     0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-1  -     0/0/33     . 0.00  39393 0   12358    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-1  -     0/0/11     . 0.00  39380 0   36635    0.0   0.00  0.17   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   83-1  -     0/0/965    . 0.00  39334 0   432950   0.0   0.00  13.74  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   84-1  -     0/0/43     . 0.00  39354 0   10169    0.0   0.00  0.15   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   85-1  -     0/0/24     . 0.00  39344 0   8794     0.0   0.00  0.24   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   86-1  -     0/0/33     . 0.00  39390 0   10597    0.0   0.00  0.31   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   87-1  -     0/0/88     . 0.00  39148 0   42183    0.0   0.00  1.46   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   88-1  -     0/0/44     . 0.00  39405 0   2963     0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   89-1  -     0/0/311    . 0.00  39326 0   159516   0.0   0.00  5.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   90-1  -     0/0/479    . 0.00  38190 0   215877   0.0   0.00  5.73   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   91-1  -     0/0/40     . 0.00  39377 0   7847     0.0   0.00  0.28   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   92-1  -     0/0/35     . 0.00  39391 0   8752     0.0   0.00  0.15   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   93-1  -     0/0/23     . 0.00  39404 0   4944     0.0   0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   94-1  -     0/0/42     . 0.00  39348 0   15860    0.0   0.00  0.51   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   95-1  -     0/0/34     . 0.00  39352 0   13749    0.0   0.00  0.26   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   96-0  -     0/0/39     . 0.00  45757 0   12571    0.0   0.00  0.35   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   97-0  -     0/0/27     . 0.00  45745 0   8800     0.0   0.00  0.45   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   98-0  -     0/0/26     . 0.00  45807 0   6783     0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   99-0  -     0/0/39     . 0.00  45817 0   7575     0.0   0.00  0.15   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   100-0 -     0/0/12     . 0.00  45767 0   5318     0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   101-0 -     0/0/28     . 0.00  45755 0   19136    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   102-0 -     0/0/295    . 0.00  44658 0   168536   0.0   0.00  5.28   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   103-0 -     0/0/40     . 0.00  45739 0   8650     0.0   0.00  0.23   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   104-0 -     0/0/237    . 0.00  45228 4   75653    0.0   0.00  2.57   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   105-0 -     0/0/33     . 0.00  45743 4   7899     0.0   0.00  0.31   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   106-0 -     0/0/10     . 0.00  45856 0   3189     0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   107-0 -     0/0/23     . 0.00  45732 0   6280     0.0   0.00  0.19   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   108-0 -     0/0/35     . 0.00  45789 0   8796     0.0   0.00  0.15   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   109-0 -     0/0/24     . 0.00  45838 0   3434     0.0   0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   110-0 -     0/0/22     . 0.00  45812 0   4202     0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   111-0 -     0/0/16     . 0.00  45831 0   12331    0.0   0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   112-0 -     0/0/35     . 0.00  45756 0   4865     0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   113-0 -     0/0/38     . 0.00  45760 0   11619    0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   114-0 -     0/0/18     . 0.00  45848 0   4021     0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   115-0 -     0/0/38     . 0.00  45782 0   8494     0.0   0.00  0.19   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   116-0 -     0/0/12     . 0.00  45841 0   3123     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   117-0 -     0/0/19     . 0.00  45773 0   7066     0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   118-0 -     0/0/33     . 0.00  45772 0   4544     0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   119-0 -     0/0/16     . 0.00  45780 0   10682    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   120-0 -     0/0/37     . 0.00  45769 0   8451     0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   121-0 -     0/0/25     . 0.00  45793 0   3335     0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   122-0 -     0/0/16     . 0.00  45810 0   6575     0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   123-0 -     0/0/13     . 0.00  45844 0   2869     0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   124-0 -     0/0/36     . 0.00  45813 0   7832     0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   125-0 -     0/0/663    . 0.00  43881 0   255485   0.0   0.00  8.44   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   126-0 -     0/0/110    . 0.00  45281 0   169714   0.0   0.00  1.94   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   127-0 -     0/0/9      . 0.00  45853 0   6328     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   128-0 -     0/0/22     . 0.00  45733 0   6389     0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   129-0 -     0/0/19     . 0.00  45832 0   3818     0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   130-0 -     0/0/24     . 0.00  45779 0   7048     0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   131-0 -     0/0/35     . 0.00  45740 0   10146    0.0   0.00  0.31   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   132-0 -     0/0/25     . 0.00  45787 0   10716    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   133-0 -     0/0/16     . 0.00  45785 0   4072     0.0   0.00  0.52   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   134-0 -     0/0/531    . 0.00  44065 0   262101   0.0   0.00  8.19   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   135-0 -     0/0/35     . 0.00  45736 0   14774    0.0   0.00  0.61   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   136-0 -     0/0/40     . 0.00  45763 0   7249     0.0   0.00  0.19   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   137-0 -     0/0/26     . 0.00  45800 0   6818     0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   138-0 -     0/0/23     . 0.00  45761 0   12396    0.0   0.00  0.17   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   139-0 -     0/0/21     . 0.00  45850 0   5953     0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   140-0 -     0/0/630    . 0.00  44212 0   229585   0.0   0.00  8.79   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   141-0 -     0/0/33     . 0.00  45802 0   7839     0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 648
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 0...47)
   index usage: 11%, cache usage: 15%
   total entries stored since starting: 31173
   total entries replaced since starting: 0
   total entries expired since starting: 30503
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 167 miss
   total removes since starting: 22 hit, 1 miss
Youez - 2016 - github.com/yon3zu
LinuXploit