top - 09:59:10 up 5 days, 7:09, 4 users, load average: 3.53, 28.30, 49.52 Tasks: 164 total, 1 running, 160 sleeping, 0 stopped, 3 zombie Cpu(s): 3.8% us, 10.4% sy, 8.6% ni, 44.4% id, 32.7% wa, 0.1% hi, 0.0% si Mem: 4150324k total, 2014612k used, 2135712k free, 74384k buffers Swap: 3068404k total, 42804k used, 3025600k free, 1334380k cached PID CPU PERM USER GROUP TIME AUSER 16122 2.0 lrwxrwxrwx 1 parfumu parfumu 0 Nov 14 09:59 cwd -> /home/parfumu/tmp/webalizer 1 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 2 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 3 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 4 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 5 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 6 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 7 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 8 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 9 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 10 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 37 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 38 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 39 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 58 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 59 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 60 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 204 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 431 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 432 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 433 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 437 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 438 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 462 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / 1132 0.0 lrwxrwxrwx 1 root root 0 Nov 14 09:59 cwd -> / ******** Memory usages ****** total used free shared buffers cached Mem: 4053 1966 2086 0 72 1302 -/+ buffers/cache: 591 3461 Swap: 2996 41 2954 ******** IOSTAT CPU Load INFo ****** Linux 2.6.9-89.0.9.ELsmp (boar.unixbsd.info) 11/14/2011 avg-cpu: %user %nice %sys %iowait %idle 3.77 8.62 10.43 32.74 44.43 Device: tps Blk_read/s Blk_wrtn/s Blk_read Blk_wrtn sda 109.22 1315.99 3703.33 602410098 1695238339 sda1 0.00 0.00 0.00 1452 11 sda2 2.03 75.75 172.99 34676420 79189136 sda3 107.20 1240.24 3530.33 567731242 1616049192 sdb 29.56 994.16 327.74 455089382 150025380 sdb1 29.56 994.16 327.74 455087934 150025380 sdc 0.01 0.11 0.70 49638 322048 sdc1 0.01 0.11 0.70 48190 322048 ******** vmstAT memory Load INFo ****** procs -----------memory---------- ---swap-- -----io---- --system-- ----cpu---- r b swpd free buff cache si so bi bo in cs us sy id wa 0 1 42804 2136096 74556 1334208 19 43 587 1733 16 43 12 10 44 33 ******** Hard Drive usages ****** root 16501 0.0 0.0 5488 648 pts/3 S+ 09:59 0:00 grep /bin/ls root 16503 0.0 0.0 4032 648 pts/3 S+ 09:59 0:00 grep find root 16505 0.0 0.0 5424 644 pts/3 S+ 09:59 0:00 grep grep root 22814 0.0 0.0 4340 672 pts/5 S+ 09:11 0:00 grep nobody root 16507 0.0 0.0 5536 648 pts/3 S+ 09:59 0:00 grep cgi root 16509 0.0 0.0 4704 644 pts/3 S+ 09:59 0:00 grep perl root 16511 0.0 0.0 3680 644 pts/3 S+ 09:59 0:00 grep gzip root 16513 0.0 0.0 5088 648 pts/3 S+ 09:59 0:00 grep pkg ******** Spam usages tmp ****** ******** Spam usages sendmail ****** ******** Spam usages home ****** ******** Spam usages nobody ****** ******** Spam usages hostname ****** 2011-11-14 09:56:39 1RQ0lp-00046m-Ef => info@westernunion.com F=<> R=dk_lookuphost T=dk_remote_smtp S=2357 H=mail.messaging.microsoft.com [216.32.181.178] X=TLSv1:AES128-SHA:128 DN="/C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/OU=Forefront Online Protection for Exchange/CN=mail.global.frontbridge.com/emailAddress=support@frontbridge.com" C="250 2.6.0 [InternalId=3888137] Queued mail for delivery" ******** Apache usages ~ ****** ******** Apache usages Server Status ****** ******** Apache usages Acess logs ****** 174.138.162.154 - - [14/Nov/2011:08:31:33 -0800] "GET / HTTP/1.1" 200 111 180.76.5.178 - - [14/Nov/2011:08:32:46 -0800] "GET / HTTP/1.1" 200 111 180.76.5.178 - - [14/Nov/2011:08:32:50 -0800] "GET /cgi-sys/defaultwebpage.cgi HTTP/1.1" 200 3476 174.138.162.154 - - [14/Nov/2011:08:33:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:33:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:33:57 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:34:33 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:36:02 -0800] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [14/Nov/2011:08:36:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:36:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:36:56 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:37:34 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:39:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:39:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:39:56 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:40:33 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:41:02 -0800] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [14/Nov/2011:08:42:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:42:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:42:56 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:43:33 -0800] "GET / HTTP/1.1" 200 111 203.170.86.125 - - [14/Nov/2011:08:45:14 -0800] "GET /cgi-bin/database/edit.cginlast=http%3A%2F%2Fwww.123dance.com.au&nemail=dance123%40sblive.com.au&action=add&database=&nfirst=Syra&Submit=Submit HTTP/1.1" 400 425 174.138.162.154 - - [14/Nov/2011:08:45:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:45:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:45:56 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:46:02 -0800] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [14/Nov/2011:08:46:33 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:48:49 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:48:49 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:48:57 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:08:49:33 -0800] "GET / HTTP/1.1" 200 111 66.249.68.198 - - [14/Nov/2011:09:02:16 -0800] "GET /suspended.page/?option=com_content&view=article&id=1731:2009-08-10-14-37-53&catid=43:2009-08-10-18-41-34&Itemid=67 HTTP/1.1" 200 3448 174.138.162.154 - - [14/Nov/2011:09:03:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:03:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:03:57 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:04:33 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:05:02 -0800] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [14/Nov/2011:09:06:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:06:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:06:57 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:07:33 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:09:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:09:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:09:57 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:10:02 -0800] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [14/Nov/2011:09:10:33 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:12:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:12:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:12:57 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:13:33 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:15:02 -0800] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [14/Nov/2011:09:15:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:15:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:15:57 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:16:33 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:18:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:18:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:18:57 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:19:33 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:20:02 -0800] "GET / HTTP/1.0" 200 111 115.78.131.180 - - [14/Nov/2011:09:20:11 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:21:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:21:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:21:57 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:22:33 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:24:49 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:24:49 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:24:57 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:25:02 -0800] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [14/Nov/2011:09:25:33 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:27:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:27:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:27:57 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:28:33 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:30:02 -0800] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [14/Nov/2011:09:30:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:30:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:30:57 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:31:33 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:33:49 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:33:49 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:33:57 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:34:34 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:35:02 -0800] "GET / HTTP/1.0" 200 111 38.100.21.11 - - [14/Nov/2011:09:36:08 -0800] "GET / HTTP/1.1" 200 111 38.100.21.11 - - [14/Nov/2011:09:36:13 -0800] "GET /cgi-sys/defaultwebpage.cgi HTTP/1.1" 200 3476 174.138.162.154 - - [14/Nov/2011:09:36:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:36:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:36:57 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:37:33 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:39:49 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:39:49 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:39:57 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:40:02 -0800] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [14/Nov/2011:09:40:34 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:42:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:42:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:42:57 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:43:33 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:45:02 -0800] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [14/Nov/2011:09:45:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:45:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:45:58 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:46:33 -0800] "GET / HTTP/1.1" 200 111 89.23.166.36 - - [14/Nov/2011:09:47:09 -0800] "GET /index.php HTTP/1.0" 404 2199 174.138.162.154 - - [14/Nov/2011:09:48:49 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:48:49 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:48:58 -0800] "GET / HTTP/1.1" 200 111 62.231.141.195 - - [14/Nov/2011:09:49:20 -0800] "GET /robots.txt HTTP/1.0" 404 2195 62.231.141.195 - - [14/Nov/2011:09:49:22 -0800] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [14/Nov/2011:09:49:34 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:50:02 -0800] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [14/Nov/2011:09:51:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:51:48 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:51:58 -0800] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [14/Nov/2011:09:52:33 -0800] "GET / HTTP/1.1" 200 111 Total no of Mail connection Socket are 25 and 110 ==> 17 and 10 Total no of Mail process are ==> 18 Total no of apche connection Socket are 80 ==> 5 Total no of apche process are ==> 2 Total no of mysql connection Socket are 3306 ==> 1 Total no of mysql process are ==> 6 ******** Kernel Logs ~ ******