UID PID PPID C STIME TTY TIME CMD root 1 0 0 Jun20 ? 02:02:57 init root 2 1 0 Jun20 ? 00:00:00 [kthreadd/90008] root 3 2 0 Jun20 ? 00:02:23 [khelper] dbus 135 1 0 Jun20 ? 00:17:53 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only root 598 1 0 Jun20 ? 00:01:47 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 (dormant) root 840388 1 0 Oct10 ? 00:00:00 /usr/sbin/sshd -D -oCiphers=aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes256-ctr,aes256-cbc,aes128-gcm@openssh.com,aes128-ctr,aes128-cbc -oMACs=hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha1,umac-128@openssh.com,hmac-sha2-512 -oGSSAPIKexAlgorithms=gss-curve25519-sha256-,gss-nistp256-sha256-,gss-group14-sha256-,gss-group16-sha512-,gss-gex-sha1-,gss-group14-sha1- -oKexAlgorithms=curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1 -oHostKeyAlgorithms=ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com,ssh-rsa,ssh-rsa-cert-v01@openssh.com -oPubkeyAcceptedKeyTypes=ecdsa-sha2-nistp256,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521,ecdsa-sha2-nistp521-cert-v01@openssh.com,ssh-ed25519,ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-512-cert-v01@openssh.com,ssh-rsa,ssh-rsa-cert-v01@openssh.com -oCASignatureAlgorithms=ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ssh-ed25519,rsa-sha2-256,rsa-sha2-512,ssh-rsa root 840465 1 0 Oct10 ? 00:00:00 /usr/sbin/xinetd -stayalive -pidfile /var/run/xinetd.pid root 840517 1 0 Oct10 ? 00:00:00 /usr/sbin/saslauthd -m /run/saslauthd -a pam -n 2 root 840519 840517 0 Oct10 ? 00:00:00 /usr/sbin/saslauthd -m /run/saslauthd -a pam -n 2 root 840540 1 0 Oct10 ? 00:00:00 /usr/sbin/gssproxy -D root 840645 1 0 Oct10 ? 00:00:00 nginx: master process /usr/sbin/nginx root 1407231 1 0 Oct17 ? 00:00:55 queueprocd - waiting up to 60s to process a task nscd 1408717 1 0 Oct17 ? 00:01:27 /usr/sbin/nscd root 1408846 1 0 Oct17 ? 00:00:06 cpanellogd - sleeping for logs nginx 1594501 840645 0 Oct19 ? 00:00:00 nginx: worker process nginx 1594502 840645 0 Oct19 ? 00:00:00 nginx: worker process nginx 1594503 840645 0 Oct19 ? 00:00:00 nginx: worker process nginx 1594504 840645 0 Oct19 ? 00:00:00 nginx: worker process nginx 1594505 840645 0 Oct19 ? 00:00:00 nginx: worker process nginx 1594506 840645 0 Oct19 ? 00:26:18 nginx: worker process nginx 1594507 840645 0 Oct19 ? 00:00:06 nginx: worker process nginx 1594508 840645 0 Oct19 ? 00:00:00 nginx: worker process nginx 1594509 840645 0 Oct19 ? 00:00:30 nginx: cache manager process root 1634798 1 0 Aug29 ? 00:00:00 /usr/sbin/smartd -n -q never root 1634843 1 0 Aug29 ? 00:00:00 /usr/sbin/atd -f mysql 1634909 1 0 Aug29 ? 00:25:28 /usr/sbin/mariadbd root 1716992 1 0 Oct21 ? 00:00:30 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf) root 1719471 1 0 Oct21 ? 00:00:16 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf dovenull 1719472 1719471 0 Oct21 ? 00:00:01 dovecot/pop3-login dovenull 1719473 1719471 0 Oct21 ? 00:00:04 dovecot/imap-login dovecot 1719474 1719471 0 Oct21 ? 00:00:11 dovecot/anvil root 1719475 1719471 0 Oct21 ? 00:00:30 dovecot/log dovenull 1719476 1719471 0 Oct21 ? 00:00:03 dovecot/pop3-login dovenull 1719477 1719471 0 Oct21 ? 00:00:01 dovecot/imap-login root 1719478 1719471 0 Oct21 ? 00:01:31 dovecot/config dovecot 1719479 1719471 0 Oct21 ? 00:00:03 dovecot/stats mailnull 1719526 1 0 Oct21 ? 00:00:47 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid root 1719575 1 0 Oct21 ? 00:00:12 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth root 1719576 1 0 Oct21 ? 00:00:15 pure-ftpd (SERVER) root 2416844 1 0 Oct30 ? 00:00:04 /usr/sbin/crond -n root 2511397 1 0 Oct31 ? 00:00:18 /usr/sbin/httpd -k start root 2517254 1 0 Oct31 ? 00:00:49 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf) root 2828764 1 0 Nov03 ? 00:00:21 cPhulkd - processor root 3509075 1 0 Nov03 ? 00:00:00 /usr/lib/systemd/systemd --user root 3509077 3509075 0 Nov03 ? 00:00:00 (sd-pam) root 3509120 1 0 Nov03 ? 00:00:01 gpg-agent --homedir /var/tmp/3509116._USR_LOCAL_CPANEL_SCRIPTS_CPANELSYNC__.897ab2cd.tmp --use-standard-socket --daemon root 3511045 1 0 Nov03 ? 00:00:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) root 3512418 1 0 Nov03 ? 00:02:43 /usr/bin/monarx-agent root 3519024 1 0 Nov03 ? 00:00:45 cpsrvd (SSL) - waiting for connections cpanelc+ 3519043 1 0 Nov03 ? 00:04:12 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0 root 3808291 1 0 Sep26 ? 00:01:51 dnsadmin - dormant mode root 3960501 1 0 Aug07 ? 00:18:52 /usr/sbin/rsyslogd -n root 3960598 1 0 Aug07 ? 00:10:06 /usr/bin/perl /opt/imh-sys-snap/bin/sys-snap.pl --start -y root 3960721 1 0 Aug07 ? 00:00:00 /sbin/agetty -o -p -- \u --noclear tty2 linux root 3960764 1 0 Aug07 ? 00:12:17 /usr/lib/systemd/systemd-journald root 3960965 1 0 Aug07 ? 00:00:05 /usr/lib/systemd/systemd-udevd root 3961077 1 0 Aug07 ? 00:00:00 /sbin/agetty -o -p -- \u --noclear --keep-baud console 115200,38400,9600 linux root 3961119 1 0 Aug07 ? 00:05:13 /usr/lib/systemd/systemd-logind root 4018943 1 0 Nov04 ? 00:00:27 tailwatchd root 4132136 1 0 Nov05 ? 00:00:11 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 root 4132675 4132136 0 Nov05 ? 00:00:07 spamd child root 4132676 4132136 0 Nov05 ? 00:00:00 spamd child root 4180363 1 0 01:35 ? 00:00:00 ConfigServer Version Check root 4180373 4180363 0 01:35 ? 00:00:00 sleep 13210 nobody 4182190 2511397 0 02:14 ? 00:00:00 /usr/sbin/httpd -k start root 4182191 2511397 0 02:14 ? 00:00:00 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect nobody 4182192 2511397 0 02:14 ? 00:00:02 /usr/sbin/httpd -k start nobody 4182193 2511397 0 02:14 ? 00:00:02 /usr/sbin/httpd -k start nobody 4182248 2511397 0 02:14 ? 00:00:02 /usr/sbin/httpd -k start nobody 4182249 2511397 0 02:14 ? 00:00:02 /usr/sbin/httpd -k start nobody 4182250 2511397 0 02:14 ? 00:00:02 /usr/sbin/httpd -k start root 4183758 2828764 0 02:44 ? 00:00:00 cPhulkd - dbprocessor root 4185292 1 0 03:15 ? 00:00:00 lfd - sleeping dovecot 4186339 1719471 0 03:35 ? 00:00:00 dovecot/auth root 4186369 1719471 0 03:35 ? 00:00:00 dovecot/lmtp tephral+ 4186382 1719471 0 03:35 ? 00:00:00 dovecot/quota-status -p postfix tephral+ 4186460 2517254 0 03:35 ? 00:00:00 php-fpm: pool tephralighting_com tephral+ 4186461 2517254 0 03:35 ? 00:00:00 php-fpm: pool tephralighting_com tephral+ 4186462 2517254 0 03:35 ? 00:00:00 php-fpm: pool tephralighting_com tephral+ 4186463 2517254 0 03:35 ? 00:00:00 php-fpm: pool tephralighting_com tephral+ 4186464 2517254 0 03:35 ? 00:00:00 php-fpm: pool tephralighting_com tephral+ 4186540 3519024 0 03:36 ? 00:00:00 [cpaneld - servi] mailnull 4186543 1719526 0 03:36 ? 00:00:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid root 4186547 3960598 0 03:36 ? 00:00:00 vmstat 1 10 tephral+ 4186548 4186460 0 03:36 ? 00:00:00 ps -ef