-------- Process tree --------
USER         PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root           2  0.0  0.0      0     0 ?        S    Jul20   0:19 [kthreadd]
root           3  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [rcu_gp]
root           4  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [rcu_par_gp]
root           5  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [slub_flushwq]
root           7  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [kworker/0:0H-events_highpri]
root          10  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [mm_percpu_wq]
root          11  0.0  0.0      0     0 ?        S    Jul20   0:00  \_ [rcu_tasks_rude_]
root          12  0.0  0.0      0     0 ?        S    Jul20   0:00  \_ [rcu_tasks_trace]
root          13  0.5  0.0      0     0 ?        S    Jul20 1082:05  \_ [ksoftirqd/0]
root          14  0.1  0.0      0     0 ?        I    Jul20 337:36  \_ [rcu_sched]
root          15  0.0  0.0      0     0 ?        S    Jul20  38:18  \_ [migration/0]
root          16  0.0  0.0      0     0 ?        S    Jul20   0:11  \_ [watchdog/0]
root          17  0.0  0.0      0     0 ?        S    Jul20   0:00  \_ [cpuhp/0]
root          18  0.0  0.0      0     0 ?        S    Jul20   0:00  \_ [cpuhp/1]
root          19  0.0  0.0      0     0 ?        S    Jul20   0:13  \_ [watchdog/1]
root          20  0.0  0.0      0     0 ?        S    Jul20  38:32  \_ [migration/1]
root          21  0.5  0.0      0     0 ?        S    Jul20 1263:03  \_ [ksoftirqd/1]
root          23  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [kworker/1:0H-events_highpri]
root          24  0.0  0.0      0     0 ?        S    Jul20   0:00  \_ [cpuhp/2]
root          25  0.0  0.0      0     0 ?        S    Jul20   0:13  \_ [watchdog/2]
root          26  0.0  0.0      0     0 ?        S    Jul20  38:18  \_ [migration/2]
root          27  0.5  0.0      0     0 ?        R    Jul20 1190:20  \_ [ksoftirqd/2]
root          29  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [kworker/2:0H-events_highpri]
root          30  0.0  0.0      0     0 ?        S    Jul20   0:00  \_ [cpuhp/3]
root          31  0.0  0.0      0     0 ?        S    Jul20   0:13  \_ [watchdog/3]
root          32  0.0  0.0      0     0 ?        S    Jul20  37:53  \_ [migration/3]
root          33  0.5  0.0      0     0 ?        S    Jul20 1179:00  \_ [ksoftirqd/3]
root          35  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [kworker/3:0H-events_highpri]
root          36  0.0  0.0      0     0 ?        S    Jul20   0:00  \_ [cpuhp/4]
root          37  0.0  0.0      0     0 ?        S    Jul20   0:08  \_ [watchdog/4]
root          38  0.0  0.0      0     0 ?        S    Jul20  25:19  \_ [migration/4]
root          39  0.0  0.0      0     0 ?        S    Jul20  21:38  \_ [ksoftirqd/4]
root          41  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [kworker/4:0H-events_highpri]
root          43  0.0  0.0      0     0 ?        S    Jul20   0:00  \_ [cpuhp/5]
root          44  0.0  0.0      0     0 ?        S    Jul20   0:07  \_ [watchdog/5]
root          45  0.0  0.0      0     0 ?        S    Jul20  24:39  \_ [migration/5]
root          46  0.0  0.0      0     0 ?        S    Jul20  21:13  \_ [ksoftirqd/5]
root          48  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [kworker/5:0H-events_highpri]
root          49  0.0  0.0      0     0 ?        S    Jul20   0:00  \_ [cpuhp/6]
root          50  0.0  0.0      0     0 ?        S    Jul20   0:07  \_ [watchdog/6]
root          51  0.0  0.0      0     0 ?        S    Jul20  23:50  \_ [migration/6]
root          52  0.0  0.0      0     0 ?        S    Jul20  21:00  \_ [ksoftirqd/6]
root          54  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [kworker/6:0H-events_highpri]
root          55  0.0  0.0      0     0 ?        S    Jul20   0:00  \_ [cpuhp/7]
root          56  0.0  0.0      0     0 ?        S    Jul20   0:07  \_ [watchdog/7]
root          57  0.0  0.0      0     0 ?        S    Jul20  23:54  \_ [migration/7]
root          58  0.0  0.0      0     0 ?        S    Jul20  20:53  \_ [ksoftirqd/7]
root          60  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [kworker/7:0H-events_highpri]
root          69  0.0  0.0      0     0 ?        S    Jul20   0:05  \_ [kdevtmpfs]
root          70  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [netns]
root          71  0.0  0.0      0     0 ?        S    Jul20   4:43  \_ [kauditd]
root          76  0.0  0.0      0     0 ?        S    Jul20   0:15  \_ [khungtaskd]
root          77  0.0  0.0      0     0 ?        S    Jul20   0:00  \_ [oom_reaper]
root          78  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [writeback]
root          79  0.0  0.0      0     0 ?        S    Jul20   3:22  \_ [kcompactd0]
root          80  0.0  0.0      0     0 ?        S    Jul20   5:06  \_ [kcompactd1]
root          81  0.0  0.0      0     0 ?        SN   Jul20   0:00  \_ [ksmd]
root          83  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [crypto]
root          84  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [kintegrityd]
root          85  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [kblockd]
root          86  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [blkcg_punt_bio]
root          87  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [tpm_dev_wq]
root          88  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [md]
root          89  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [md_bitmap]
root          90  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [edac-poller]
root          91  0.0  0.0      0     0 ?        S    Jul20   0:00  \_ [watchdogd]
root          92  0.0  0.0      0     0 ?        I<   Jul20  11:25  \_ [kworker/0:1H-kblockd]
root         104  0.0  0.0      0     0 ?        S    Jul20 208:27  \_ [kswapd0]
root         105  0.1  0.0      0     0 ?        S    Jul20 239:39  \_ [kswapd1]
root         169  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [kthrotld]
root         170  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [acpi_thermal_pm]
root         171  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [kmpath_rdacd]
root         172  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [kaluad]
root         174  0.0  0.0      0     0 ?        I<   Jul20  15:09  \_ [kworker/1:1H-kblockd]
root         175  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [ipv6_addrconf]
root         176  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [kstrp]
root         218  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [zswap-shrink]
root         249  0.0  0.0      0     0 ?        I<   Jul20  14:15  \_ [kworker/7:1H-kblockd]
root         283  0.0  0.0      0     0 ?        I<   Jul20  27:26  \_ [kworker/2:1H-kblockd]
root         285  0.0  0.0      0     0 ?        I<   Jul20  14:15  \_ [kworker/5:1H-kblockd]
root         287  0.0  0.0      0     0 ?        I<   Jul20  14:12  \_ [kworker/6:1H-kblockd]
root         290  0.0  0.0      0     0 ?        I<   Jul20  11:35  \_ [kworker/3:1H-kblockd]
root         298  0.0  0.0      0     0 ?        I<   Jul20  14:18  \_ [kworker/4:1H-kblockd]
root         431  0.0  0.0      0     0 ?        S    Jul20   0:00  \_ [scsi_eh_0]
root         433  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [scsi_tmf_0]
root         479  0.0  0.0      0     0 ?        S    Jul20 160:23  \_ [jbd2/sda4-8]
root         480  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [ext4-rsv-conver]
root         651  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [ipmi-msghandler]
root         661  0.0  0.0      0     0 ?        SN   Jul20   0:00  \_ [kipmi0]
root         708  0.0  0.0      0     0 ?        S    Jul20   0:00  \_ [jbd2/sda2-8]
root         709  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [ext4-rsv-conver]
root         716  0.0  0.0      0     0 ?        S    Jul20  24:50  \_ [jbd2/sda3-8]
root         717  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [ext4-rsv-conver]
root         753  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [rpciod]
root         754  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [xprtiod]
root        1051  0.0  0.0      0     0 ?        S<   Jul20   9:18  \_ [loop0]
root        1059  0.0  0.0      0     0 ?        S    Jul20   0:31  \_ [jbd2/loop0-8]
root        1060  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [ext4-rsv-conver]
root        1467  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [xfsalloc]
root        1468  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [xfs_mru_cache]
root        1504  0.0  0.0      0     0 ?        S    Jul20   1:14  \_ [lve_tag_thread]
root        1505  0.0  0.0      0     0 ?        S    Jul20   0:01  \_ [lve_init_thread]
root        1506  0.0  0.0      0     0 ?        S    Jul20   9:48  \_ [lve_loadavg]
root        1538  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [iscsi_eh]
root        1539  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [iscsi_conn_clea]
root        1551  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [ib-comp-wq]
root        1552  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [kworker/u131:0]
root        1553  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [kworker/u132:0]
root        1554  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [kworker/u133:0]
root        1555  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [ib-comp-unb-wq]
root        1556  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [ib_mcast]
root        1557  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [ib_nl_sa_wq]
root        1623  0.0  0.0      0     0 ?        S    Jul20   0:00  \_ [scsi_eh_1]
root        1624  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [scsi_tmf_1]
root        1625  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [iscsi_q_1]
root        1626  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [scsi_wq_1]
root        1631  0.0  0.0      0     0 ?        S    Jul20   0:00  \_ [scsi_eh_2]
root        1632  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [scsi_tmf_2]
root        1633  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [iscsi_q_2]
root        1634  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [scsi_wq_2]
root        1705  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [kdmflush/253:0]
root        1735  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [xfs-buf/dm-0]
root        1736  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [xfs-conv/dm-0]
root        1737  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [xfs-cil/dm-0]
root        1738  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [xfs-reclaim/dm-]
root        1739  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [xfs-blockgc/dm-]
root        1740  0.0  0.0      0     0 ?        I<   Jul20   0:00  \_ [xfs-log/dm-0]
root        1741  0.0  0.0      0     0 ?        S    Jul20  61:58  \_ [xfsaild/dm-0]
root     3484469  0.1  0.0      0     0 ?        I    13:17   0:09  \_ [kworker/u128:1-monitor_0_hpsa]
root      119822  0.0  0.0      0     0 ?        I    14:01   0:01  \_ [kworker/u130:0-writeback]
root      119850  0.0  0.0      0     0 ?        I    14:01   0:01  \_ [kworker/u129:3-writeback]
root      628375  0.0  0.0      0     0 ?        I    14:26   0:00  \_ [kworker/u129:1-events_unbound]
root     1414601  0.0  0.0      0     0 ?        I    15:16   0:00  \_ [kworker/1:5-cgroup_pidlist_destroy]
root     1507637  0.0  0.0      0     0 ?        I    15:24   0:00  \_ [kworker/2:1-events]
root     1532781  0.0  0.0      0     0 ?        I    15:26   0:00  \_ [kworker/u130:1-events_unbound]
root     1545578  0.0  0.0      0     0 ?        I    15:28   0:00  \_ [kworker/2:3-events]
root     1570688  0.0  0.0      0     0 ?        I    15:30   0:00  \_ [kworker/5:52-cgroup_pidlist_destroy]
root     1599830  0.0  0.0      0     0 ?        I    15:33   0:00  \_ [kworker/6:4-events]
root     1673387  0.0  0.0      0     0 ?        I    15:40   0:00  \_ [kworker/7:2-cgroup_pidlist_destroy]
root     1680997  0.0  0.0      0     0 ?        I    15:41   0:00  \_ [kworker/4:2-events]
root     1686735  0.0  0.0      0     0 ?        I    15:41   0:00  \_ [kworker/u129:2]
root     1699354  0.0  0.0      0     0 ?        I    15:43   0:00  \_ [kworker/0:5-events_power_efficient]
root     1699355  0.0  0.0      0     0 ?        I    15:43   0:00  \_ [kworker/0:6-cgroup_pidlist_destroy]
root     1719550  0.0  0.0      0     0 ?        I    15:44   0:00  \_ [kworker/5:1-cgroup_pidlist_destroy]
root     1724502  0.0  0.0      0     0 ?        I    15:45   0:00  \_ [kworker/u128:0-rescan_0_hpsa]
root     1732783  0.0  0.0      0     0 ?        I    15:46   0:00  \_ [kworker/2:7-events]
root     1735718  0.0  0.0      0     0 ?        I    15:46   0:00  \_ [kworker/4:0-cgroup_pidlist_destroy]
root     1740289  0.0  0.0      0     0 ?        I    15:46   0:00  \_ [kworker/u130:3]
root     1740365  0.0  0.0      0     0 ?        I    15:46   0:00  \_ [kworker/7:1-cgroup_pidlist_destroy]
root     1748292  0.0  0.0      0     0 ?        I    15:49   0:00  \_ [kworker/3:2-events]
root     1748316  0.0  0.0      0     0 ?        I    15:49   0:00  \_ [kworker/6:2-events]
root     1748399  0.0  0.0      0     0 ?        I    15:49   0:00  \_ [kworker/3:4-cgroup_pidlist_destroy]
root     1749658  0.0  0.0      0     0 ?        I    15:50   0:00  \_ [kworker/1:4-cgroup_pidlist_destroy]
root     1752221  0.0  0.0      0     0 ?        I    15:51   0:00  \_ [kworker/5:2-events]
root     1753722  0.0  0.0      0     0 ?        I    15:52   0:00  \_ [kworker/0:1-cgroup_pidlist_destroy]
root     1754293  0.0  0.0      0     0 ?        I    15:53   0:00  \_ [kworker/4:1-cgroup_pidlist_destroy]
root     1755805  0.0  0.0      0     0 ?        I    15:54   0:00  \_ [kworker/2:0-mm_percpu_wq]
root     1756077  0.0  0.0      0     0 ?        I    15:54   0:00  \_ [kworker/7:4-events]
root     1756480  0.0  0.0      0     0 ?        I    15:54   0:00  \_ [kworker/3:1-cgroup_pidlist_destroy]
root     1757662  0.0  0.0      0     0 ?        I    15:55   0:00  \_ [kworker/1:0-events]
root     1757784  0.0  0.0      0     0 ?        I    15:55   0:00  \_ [kworker/6:3-events]
root     1760167  0.0  0.0      0     0 ?        I    15:56   0:00  \_ [kworker/u130:2]
root     1760312  0.0  0.0      0     0 ?        I    15:56   0:00  \_ [kworker/2:2-cgroup_pidlist_destroy]
root     1760666  0.0  0.0      0     0 ?        I    15:57   0:00  \_ [kworker/5:0-events]
root     1762240  0.0  0.0      0     0 ?        I    15:58   0:00  \_ [kworker/0:0-events_power_efficient]
root     1762516  0.0  0.0      0     0 ?        I    15:58   0:00  \_ [kworker/4:3-cgroup_pidlist_destroy]
root     1765830  0.0  0.0      0     0 ?        I    16:00   0:00  \_ [kworker/7:0-events]
root     1765989  0.0  0.0      0     0 ?        I    16:00   0:00  \_ [kworker/0:2-events]
root     1766462  0.0  0.0      0     0 ?        I    16:00   0:00  \_ [kworker/1:1]
root           1  1.0  0.0 250476 12932 ?        Ss   Jul20 2343:43 /usr/lib/systemd/systemd --system --deserialize 20
dbus         793  0.1  0.0  57736  5688 ?        Ss   Jul20 404:23 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
root        1354  0.0  0.0  80096  1956 ?        Ss   Jul20   0:00 /sbin/dhclient -1 -q -lf /var/lib/dhclient/dhclient--eth1.lease -pf /run/dhclient-eth1.pid -H box109 eth1
root        1655  0.1  0.0 150128 39380 ?        Ss   Jul20 231:39 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078
root        1657  0.0  0.0  59240  7568 ?        Ss   Jul20   9:08 dnsadmin - dormant mode
root        1658  0.0  0.0  83780 17316 ?        Ss   Jul20  15:05 cPhulkd - processor
root       73063  0.0  0.0  83676 15768 ?        S    07:38   0:04  \_ cPhulkd - dbprocessor
root     3897175  0.0  0.0 149356 38868 ?        Ss   Sep30  85:42 cpsrvd (SSL) - waiting for connections                    
root      277924  0.0  0.0  37212  2200 ?        Ss   Oct02   0:00 SCREEN -S smartsvs
root      277925  0.0  0.0  29296  5288 pts/1    Ss+  Oct02   0:01  \_ /bin/bash
root     2921052  0.0  0.0 101888 24560 ?        Ss   Oct16  21:13 tailwatchd
root     1425664  0.0  0.0  37240  2416 ?        Ss   Oct20   0:01 SCREEN -S meshbaks
root     1425671  0.0  0.0  29020  4880 pts/0    Ss+  Oct20   0:00  \_ /bin/bash
root     2312963  0.0  0.0  37288  2016 ?        Ss   Oct23   0:00 SCREEN -S asyahdaw
root     2312965  0.0  0.0  29020  5024 pts/3    Ss+  Oct23   0:00  \_ /bin/bash
root      391110  0.0  0.0 136356  2776 ?        S<sl Oct31  25:48 /sbin/auditd
root      391124  0.0  0.0  49868  4216 ?        S<   Oct31   7:55  \_ /usr/sbin/sedispatch
root     1450158  0.0  0.0  31188  3604 ?        Ss   Dec09   0:30 /usr/sbin/crond -n
root     1765540  0.0  0.0  31400  2256 ?        S    16:00   0:00  \_ /usr/sbin/CROND -n
root     1765567  0.0  0.0  12804  3132 ?        Ss   16:00   0:00      \_ /bin/sh -c    bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1
root     1765580  0.0  0.0   7388   920 ?        S    16:00   0:00          \_ sleep 589
root     1452752  0.0  0.0 347888 31072 ?        Ssl  Dec09   1:46 /usr/sbin/httpd -k start
root     1927393  0.0  0.0  14304  3836 ?        S    Dec14   0:29  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=box109.exaservers.com --suffix=-bytes_log
root     1927394  0.0  0.0  13912  3592 ?        S    Dec14   0:27  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root     1927395  0.0  0.0  14572  3964 ?        S    Dec14   0:29  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=box109.exaservers.com --mainout=/etc/apache2/logs/access_log
root     1927460  0.0  0.0  50168 14384 ?        S    Dec14   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
root     1927464  0.0  0.0 425508  9592 ?        Ssl  Dec14   0:00  \_ Passenger watchdog
root     1927478  0.0  0.0 1798996 15256 ?       Sl   Dec14   0:15  |   \_ Passenger core
nobody   1750553  0.1  0.0 375568 43852 ?        S    15:50   0:01  \_ /usr/sbin/httpd -k start
nobody   1754530  0.0  0.0      0     0 ?        Z    15:53   0:00  \_ [httpd] <defunct>
nobody   1761106  0.0  0.0 375672 42572 ?        S    15:57   0:00  \_ /usr/sbin/httpd -k start
nobody   1762833  0.0  0.0 375156 42396 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1762843  0.0  0.0 375284 42260 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1762900  0.0  0.0 375148 42512 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1762915  0.0  0.0 375148 41472 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1762916  0.0  0.0 375316 42468 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1762920  0.0  0.0 375148 41904 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1763059  0.0  0.0 375148 41848 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1763061  0.0  0.0 375288 43048 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1763100  0.0  0.0 375016 38908 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1763101  0.0  0.0 375016 38908 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1763102  0.0  0.0 375016 38908 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1763106  0.1  0.0 375576 42192 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1763143  0.0  0.0 375148 42172 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1763144  0.0  0.0 375016 39724 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1763146  0.0  0.0 375152 41880 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1763148  0.0  0.0 375148 42168 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1763150  0.0  0.0 375152 39776 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1763151  0.0  0.0 375152 39776 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1763152  0.0  0.0 375152 39776 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1763153  0.0  0.0 375152 39776 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
nobody   1763208 15.3  0.0 379112 39588 ?        S    15:58   0:17  \_ /usr/sbin/httpd -k start
nobody   1763221  0.0  0.0 375284 42292 ?        S    15:58   0:00  \_ /usr/sbin/httpd -k start
root     1453963  0.0  0.0 277584 64332 ?        Ssl  Dec09   0:02 /opt/cloudlinux/venv/bin/python3 /usr/sbin/cloudlinux-xray-agent
root     1454033  0.0  0.0 498884 32476 ?        Ss   Dec09   0:19 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root     1454079  0.2  0.1 369316 228408 ?       Ss   Dec09  19:51 /usr/lib/systemd/systemd-journald
root     1454118  0.2  0.0 414616 26208 ?        Ssl  Dec09  19:29 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P
root     1454250  0.0  0.0 114604  7852 ?        Ss   Dec09   0:01 /usr/sbin/sshd -D -oCiphers=aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes256-ctr,aes256-cbc,aes128-gcm@openssh.com,aes128-ctr,aes128-cbc -oMACs=hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha1,umac-128@openssh.com,hmac-sha2-512 -oGSSAPIKexAlgorithms=gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1- -oKexAlgorithms=curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1 -oHostKeyAlgorithms=ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com,ssh-rsa,ssh-rsa-cert-v01@openssh.com -oPubkeyAcceptedKeyTypes=ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com,ssh-rsa,ssh-rsa-cert-v01@openssh.com -oCASignatureAlgorithms=ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-256,rsa-sha2-512,ssh-rsa
root     1304828  0.0  0.0 180384  9772 ?        Ss   15:08   0:00  \_ sshd: root [priv]
root     1304931  0.0  0.0 180384  5296 ?        S    15:08   0:00      \_ sshd: root@pts/5
root     1304994  0.0  0.0  29504  6516 pts/5    Ss+  15:08   0:01          \_ -bash
libstor+ 1454295  0.0  0.0  13792   776 ?        Ss   Dec09   0:00 /usr/bin/lsmd -d
polkitd  1454438  0.0  0.0 2015888 12872 ?       Ssl  Dec09   3:52 /usr/lib/polkit-1/polkitd --no-debug
nagios   1454509  0.0  0.0  58924  4288 ?        Ss   Dec09   0:09 /usr/local/nagios/bin/nrpe -c /usr/local/nagios/etc/nrpe.cfg -f
wp-tool+ 1454563  0.0  0.0 332716 38708 ?        Ss   Dec09   0:05 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root     1454584  0.0  0.0  11860  1600 ?        Ss   Dec09   0:00 /usr/sbin/mcelog --ignorenodev --daemon --foreground
root     1454613  0.0  0.0 101880  3072 ?        Ssl  Dec09   0:00 /usr/sbin/gssproxy -D
zabbix   1455205  0.0  0.0 107552  6592 ?        Ss   Dec09   0:20 /usr/sbin/zabbix_agentd -f
zabbix   1455224  0.0  0.0 107552  3024 ?        S    Dec09   1:42  \_ /usr/sbin/zabbix_agentd: collector [idle 1 sec]
zabbix   1455225  0.0  0.0 107552  2880 ?        S    Dec09   0:21  \_ /usr/sbin/zabbix_agentd: listener #1 [waiting for connection]
zabbix   1455226  0.0  0.0 107552  2880 ?        S    Dec09   0:19  \_ /usr/sbin/zabbix_agentd: listener #2 [waiting for connection]
zabbix   1455227  0.0  0.0 107552  2880 ?        S    Dec09   0:19  \_ /usr/sbin/zabbix_agentd: listener #3 [waiting for connection]
zabbix   1455228  0.0  0.0 107552  2880 ?        S    Dec09   0:21  \_ /usr/sbin/zabbix_agentd: listener #4 [waiting for connection]
zabbix   1455229  0.0  0.0 107552  2880 ?        S    Dec09   0:21  \_ /usr/sbin/zabbix_agentd: listener #5 [waiting for connection]
zabbix   1455230  0.0  0.0 107552  2880 ?        S    Dec09   0:21  \_ /usr/sbin/zabbix_agentd: listener #6 [waiting for connection]
zabbix   1455231  0.0  0.0 107552  2880 ?        S    Dec09   0:21  \_ /usr/sbin/zabbix_agentd: listener #7 [waiting for connection]
zabbix   1455232  0.0  0.0 107552  2880 ?        S    Dec09   0:21  \_ /usr/sbin/zabbix_agentd: listener #8 [waiting for connection]
zabbix   1455233  0.0  0.0 107552  2880 ?        S    Dec09   0:21  \_ /usr/sbin/zabbix_agentd: listener #9 [waiting for connection]
zabbix   1455234  0.0  0.0 107552  2048 ?        S    Dec09   0:20  \_ /usr/sbin/zabbix_agentd: listener #10 [waiting for connection]
zabbix   1455235  0.0  0.0 107552  2964 ?        S    Dec09   0:47  \_ /usr/sbin/zabbix_agentd: active checks #1 [idle 1 sec]
root     1455314  0.0  0.0   7376  1684 ?        Ss   Dec09   0:00 /usr/sbin/rhnsd
root     1455365  0.0  0.0 282648 24052 ?        Ss   Dec09   0:36 php-fpm: master process (/opt/cpanel/ea-php72/root/etc/php-fpm.conf)
root     1455399  0.0  0.0 471640 31000 ?        Ss   Dec09   2:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
bayyina1 1762992  0.8  0.0 585292 123908 ?       S    15:58   0:01  \_ php-fpm: pool bayina_com_sa
zainabal 1766236  0.0  0.0 467716 15476 ?        S    16:00   0:00  \_ php-fpm: pool zainabalkhudairi_com
root     1455420  0.0  0.0  87116  7068 ?        Ss   Dec09   5:58 /usr/lib/systemd/systemd-logind
root     1455443  0.0  0.0 686208 91788 ?        Ssl  Dec09   0:01 /opt/cloudlinux/venv/bin/python3 -sbb /usr/sbin/cloudlinux-ssa-agent
root     1455465  0.0  0.0  50488  4804 ?        Ss   Dec09   0:00 /usr/sbin/smartd -n -q never
root     1455606  0.0  0.0  31520  1396 ?        Ss   Dec09   0:00 /usr/sbin/atd -f
root     1455648  0.1  0.0 731468 41252 ?        Ssl  Dec09  12:36 /usr/sbin/rsyslogd -n
root     1455674  0.0  0.0  10772   756 ?        S    Dec09   0:10 /usr/sbin/proxyexec -q -d -s /var/lib/proxyexec/cagefs.sock/socket /bin/cagefs.server
named    1455888  0.0  0.4 1649440 591616 ?      Ssl  Dec09   1:04 /usr/sbin/named -u named -c /etc/named.conf
wp-tool+ 1456021  0.0  0.0 357552 62424 ?        Ss   Dec09   3:58 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root     1456042  0.0  0.0 102320  8244 ?        Ss   Dec09   3:43 /usr/lib/systemd/systemd-udevd
root     1456065  0.0  0.0  65396 20384 ?        S<Ls Dec09   0:00 /usr/sbin/iscsid -f
mysql    1456362  6.9  1.3 4954284 1825956 ?     Ssl  Dec09 568:45 /usr/sbin/mysqld
root     1456639  0.0  0.0 125172  5776 ?        Ssl  Dec09   1:31 /usr/sbin/irqbalance --foreground
rpc      1456661  0.0  0.0  67332  5696 ?        Ss   Dec09   0:00 /usr/bin/rpcbind -w -f
root     1456685  0.0  0.0 354472 23968 ?        Ss   Dec09   3:00 php-fpm: master process (/opt/cpanel/ea-php80/root/etc/php-fpm.conf)
alimanli 1765667  1.8  0.0 397512 76880 ?        S    16:00   0:00  \_ php-fpm: pool alimanlight_com
root     1456718  0.2  0.0 144296 57992 ?        SN   Dec09  21:01 /opt/cloudlinux/venv/bin/python3 /usr/share/lve-stats/lvestats-server.py start --pidfile /var/run/lvestats.pid
root     1456736  0.5  0.0 365540 55748 ?        SNl  Dec09  43:29  \_ /opt/cloudlinux/venv/bin/python3 /usr/share/lve-stats/lvestats-server.py start --pidfile /var/run/lvestats.pid
root     1456761  0.6  0.0 178056 79716 ?        SN   Dec09  49:31  \_ /opt/cloudlinux/venv/bin/python3 /usr/share/lve-stats/lvestats-server.py start --pidfile /var/run/lvestats.pid
chrony   1456855  0.0  0.0 155208  3092 ?        S    Dec09   0:05 /usr/sbin/chronyd
root     1456882  0.0  0.0 394248 35832 ?        Ss   Dec09   0:37 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+ 1765967  0.0  0.0 394248  9224 ?        S    16:00   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root     1456906  0.0  0.0 278340 24924 ?        Ss   Dec09   0:52 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
abjadeya 1766441 35.4  0.0 325432 69740 ?        S    16:00   0:01  \_ php-fpm: pool abjadeyat_net
root     1456929  0.0  0.0   5076   824 tty1     Ss+  Dec09   0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux
zainabal 1477114  0.2  0.0 526380 34272 ?        S    Dec09  20:18 /opt/cpanel/ea-php74/root/usr/bin/php-cgi /home/zainabal/public_html/wp-includes/br50fa9f/9159112
alrazazl 1932357  0.2  0.0 525316 32096 ?        S    Dec09  21:36 /opt/cpanel/ea-php74/root/usr/bin/php-cgi /home/alrazazl/public_html/wp-includes/02a687c
root     1970673  0.0  0.0  30060  3676 ?        Ss   Dec10   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root     1970674  0.0  0.0  34828  5788 ?        Ss   Dec10   0:01 pure-ftpd (SERVER)
mailnull 1984176  0.0  0.0 114564 25604 ?        Ss   Dec10   0:19 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid
root     1985104  0.0  0.0  97864  8144 ?        Ss   Dec10   0:34 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
root     1985127  0.0  0.0  26028  5936 ?        S    Dec10   0:07  \_ dovecot/anvil
dovenull 4187491  0.0  0.0  42180  8272 ?        S    Dec13   0:00  \_ dovecot/managesieve-login
dovenull 4187493  0.0  0.0  41064 10568 ?        S    Dec13   0:19  \_ dovecot/pop3-login
root     4187494  0.0  0.0  26364  6232 ?        S    Dec13   0:06  \_ dovecot/log
dovenull 4187497  0.0  0.0  42180  8228 ?        S    Dec13   0:00  \_ dovecot/managesieve-login
dovenull 4187500  0.0  0.0  41140 10648 ?        S    Dec13   0:16  \_ dovecot/pop3-login
dovecot  4187521  0.0  0.0  26284  6148 ?        S    Dec13   0:08  \_ dovecot/stats
root     4187527  0.0  0.0  92488 12616 ?        S    Dec13   0:03  \_ dovecot/config
dovecot  4187589  0.0  0.0  50960 10080 ?        S    Dec13   0:54  \_ dovecot/auth
dovecot     9152  0.0  0.0  26100  6120 ?        S    Dec13   0:08  \_ dovecot/imap-hibernate
dovenull 1697755  0.0  0.0  48180 12856 ?        S    Dec14   0:45  \_ dovecot/imap-login
dovenull 1700199  0.0  0.0  48444 13056 ?        S    Dec14   0:52  \_ dovecot/imap-login
x5       1636356  0.0  0.0  91432 12456 ?        S    15:36   0:00  \_ dovecot/imap
solutio2 1765932  0.0  0.0  91100 12352 ?        S    16:00   0:00  \_ dovecot/imap
root     1987714  0.0  1.1 2317516 1448696 ?     Ssl  Dec10   4:58 /usr/local/cpanel/3rdparty/bin/clamd -F
root     2680364  0.0  0.0  84844 16784 ?        Ss   Dec12   0:12 queueprocd - waiting up to 60s to process a task
nscd     2691671  1.8  0.0 2375284 10144 ?       Ssl  Dec12  70:27 /usr/sbin/nscd
cpanelc+ 2692198  0.1  0.0  30680  4820 ?        Ss   Dec12   6:11 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root     2692202  0.0  0.0  26196  5016 ?        SN   Dec12   0:01 cpanellogd - sleeping for logs
root     2692387  0.0  0.0 209296 11580 ?        Ss   Dec12   0:12 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mailman  2692517  0.0  0.0 170100 12672 ?        Ss   Dec12   0:00 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/mailmanctl -s start
mailman  2692550  0.0  0.0 144824 20768 ?        S    Dec12   0:38  \_ /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s
mailman  2692551  0.0  0.0 144824 20732 ?        S    Dec12   0:38  \_ /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:2 -s
mailman  2692552  0.0  0.0 144824 20716 ?        S    Dec12   0:39  \_ /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:1:2 -s
mailman  2692553  0.0  0.0 144788 20624 ?        S    Dec12   0:39  \_ /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s
mailman  2692554  0.0  0.0 144844 20720 ?        S    Dec12   0:38  \_ /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:4 -s
mailman  2692555  0.0  0.0 144844 20684 ?        S    Dec12   0:37  \_ /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:1:4 -s
mailman  2692556  0.0  0.0 144844 20676 ?        S    Dec12   0:39  \_ /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:2:4 -s
mailman  2692557  0.0  0.0 144844 20676 ?        S    Dec12   0:39  \_ /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s
mailman  2692558  0.0  0.0 144860 20812 ?        S    Dec12   0:39  \_ /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s
mailman  2692559  0.0  0.0 144840 20884 ?        S    Dec12   0:39  \_ /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:8 -s
mailman  2692560  0.0  0.0 144840 20848 ?        S    Dec12   0:37  \_ /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:1:8 -s
mailman  2692561  0.0  0.0 144840 20928 ?        S    Dec12   0:41  \_ /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:2:8 -s
mailman  2692562  0.0  0.0 144840 21048 ?        S    Dec12   0:40  \_ /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:3:8 -s
mailman  2692563  0.0  0.0 144840 20952 ?        S    Dec12   0:39  \_ /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:4:8 -s
mailman  2692564  0.0  0.0 144840 20888 ?        S    Dec12   0:40  \_ /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:5:8 -s
mailman  2692565  0.0  0.0 144840 20888 ?        S    Dec12   0:40  \_ /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:6:8 -s
mailman  2692567  0.0  0.0 144840 20956 ?        S    Dec12   0:40  \_ /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:7:8 -s
mailman  2692568  0.0  0.0 144788 20520 ?        S    Dec12   0:36  \_ /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s
mailman  2692569  0.0  0.0 144792 20612 ?        S    Dec12   0:07  \_ /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s
root     4091855  0.3  0.0  90284 10332 ?        Ss   Dec13  14:34 /usr/lib/systemd/systemd --user
root     4091865  0.0  0.0 312220  5008 ?        S    Dec13   0:00  \_ (sd-pam)
root     4099981  0.0  0.0  29884  2388 ?        Ss   Dec13   0:02 SCREEN -S ncdu
root     4099989  0.0  0.0  29048  5532 pts/4    Ss+  Dec13   0:00  \_ /bin/bash
root     2897348  0.0  0.0 128192 37832 ?        Ss   Dec14   0:08 osmd
root     2897395  0.0  0.0 148636 37112 ?        S    Dec14   0:18  \_ osm logfile
root     2897411  0.0  0.0 164424 40324 ?        S    Dec14   0:04  \_ osm packet
root     2995360  0.0  0.1 348268 176212 ?       Ss   Dec14   0:19 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root     3016422  0.0  0.1 349676 169752 ?       S    Dec14   0:00  \_ spamd child
root     1964929  0.2  0.1 382212 203076 ?       S    10:51   0:54  \_ spamd child
root     1688129  0.0  0.0 1831200 8604 ?        Ssl  04:17   0:00 /usr/bin/imunify-agent-proxy
zainabal 3992797  0.2  0.0 526380 34260 ?        S    07:17   1:25 /opt/cpanel/ea-php74/root/usr/bin/php-cgi /home/zainabal/public_html/wp-content/qqd4ae0f/e0f98b12
zainabal 3997123  0.2  0.0 526380 34248 ?        S    07:17   1:25 /opt/cpanel/ea-php74/root/usr/bin/php-cgi /home/zainabal/public_html/wp-includes/imd08596/2af108
root     1968776  0.5  0.0 111408 35252 ?        Ss   10:52   1:44 lfd - sleeping
root     2076770  0.2  0.0 1121380 56744 ?       Ssl  11:00   0:38 /opt/bitdefender-security-tools/bin/updated -c /opt/bitdefender-security-tools/etc/bdsecd.json
root     2076771  0.0  0.0 1805684 70860 ?       Ssl  11:00   0:14 /opt/bitdefender-security-tools/bin/epagngd -c /opt/bitdefender-security-tools/etc/bdsecd.json
root     2076772 27.6  0.1 2443720 206276 ?      Ssl  11:00  83:05 /opt/bitdefender-security-tools/bin/bdsecd -c /opt/bitdefender-security-tools/etc/bdsecd.json
root     2078363 16.0  0.1 1626200 143580 ?      Sl   11:00  48:10  \_ /opt/bitdefender-security-tools/bin/bdsecd -c /opt/bitdefender-security-tools/etc/bdsecd.json -m networkmonitor -M
root     2079294  0.1  0.0 1146028 27612 ?       Sl   11:00   0:25  \_ /opt/bitdefender-security-tools/bin/bdsecd -c /opt/bitdefender-security-tools/etc/bdsecd.json -m kpdd
root     2080628  7.0  0.0 1277228 33108 ?       Sl   11:00  21:08  \_ /opt/bitdefender-security-tools/bin/bdsecd -c /opt/bitdefender-security-tools/etc/bdsecd.json -m fanotify -M pkgSlots=16
root     3191429  3.4  0.8 2188316 1090372 ?     Sl   12:49   6:39  \_ /opt/bitdefender-security-tools/bin/bdsecd -c /opt/bitdefender-security-tools/etc/bdsecd.json -m antimalware -M config=/opt/bitdefender-security-tools/var/lib/modules/antimalware/update.jso.temp
root     1749998 83.9  0.3 1698672 421036 ?      Sl   15:50   8:41  \_ /opt/bitdefender-security-tools/bin/bdsecd -c /opt/bitdefender-security-tools/etc/bdsecd.json -m ctc -M config=/opt/bitdefender-security-tools/var/lib/modules/ctc/update.jso.temp
root     1766554  0.0  0.0  20032  3308 ?        S    16:00   0:00  \_ sh -c (echo "-------- Process tree --------";ps afux) >> /opt/bitdefender-security-tools/var/tmp/bitdefender_box109.exaservers.com_1765803566/process-tree.txt 2>&1
root     1766555  0.0  0.0  20032  1136 ?        S    16:00   0:00      \_ sh -c (echo "-------- Process tree --------";ps afux) >> /opt/bitdefender-security-tools/var/tmp/bitdefender_box109.exaservers.com_1765803566/process-tree.txt 2>&1
root     1766556  0.0  0.0  53248  4348 ?        R    16:00   0:00          \_ ps afux
root     1766529 73.0  0.0 123604 62184 ?        Rs   16:00   0:00 /opt/cloudlinux/venv/bin/python3 /usr/share/lve/dbgovernor/scripts/sentry_daemon.py
