================================================================ ### BASIC INFO ================================================================ Timestamp: Tue Sep 22 17:42:52 +08 2026 Host: ns600.locus-t.com.my 17:42:52 up 3 days, 10:18, 1 user, load average: 8.90, 6.64, 6.88 Linux ns600.locus-t.com.my 4.18.0-553.157.1.lve.el8.x86_64 #1 SMP Mon Aug 24 17:05:39 UTC 2026 x86_64 x86_64 x86_64 GNU/Linux ================================================================ ### CPU / MEMORY SNAPSHOT ================================================================ top - 17:42:52 up 3 days, 10:18, 1 user, load average: 8.90, 6.64, 6.88 Tasks: 343 total, 16 running, 326 sleeping, 0 stopped, 1 zombie %Cpu(s): 74.2 us, 8.6 sy, 0.0 ni, 6.6 id, 9.9 wa, 0.7 hi, 0.0 si, 0.0 st MiB Mem : 31716.6 total, 4211.0 free, 14873.4 used, 12632.2 buff/cache MiB Swap: 16052.0 total, 14047.6 free, 2004.4 used. 14719.5 avail Mem PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 906230 mybgled 20 0 914596 202252 27404 R 83.3 0.6 0:01.52 php-fpm 902573 root 20 0 3015296 2.6g 2768 R 77.8 8.3 5:34.74 lfd - r+ 905690 greenfee 20 0 1274580 225908 58876 R 66.7 0.7 0:11.94 php-fpm 905694 greenfee 20 0 1281440 232600 58552 R 50.0 0.7 0:13.76 php-fpm 906141 btulin 20 0 1244204 180268 43004 R 38.9 0.6 0:03.48 php-fpm 906054 btulin 20 0 1284624 221180 42996 R 33.3 0.7 0:06.48 php-fpm 906139 btulin 20 0 1229868 165512 43000 R 33.3 0.5 0:03.34 php-fpm 906057 btulin 20 0 1261112 197808 42996 R 27.8 0.6 0:05.17 php-fpm 906058 btulin 20 0 1283836 220444 42996 R 27.8 0.7 0:06.92 php-fpm 906063 hypnobir 20 0 788400 76520 27676 S 22.2 0.2 0:04.71 php-fpm 906066 btulin 20 0 1271436 208420 43000 R 22.2 0.6 0:05.73 php-fpm 906140 btulin 20 0 1219628 155744 43000 R 16.7 0.5 0:03.08 php-fpm 3018 mysql 20 0 13.2g 4.7g 22916 S 11.1 15.1 338:35.08 mysqld 902151 root 20 0 371444 36584 9584 S 5.6 0.1 0:00.07 whostmg+ 906053 xingdate 20 0 1383540 248884 46792 R 5.6 0.8 0:02.16 php-fpm 906223 pcamcomm 20 0 1205928 140144 41952 D 5.6 0.4 0:00.89 php-fpm 906278 root 20 0 49696 4184 3288 R 5.6 0.0 0:00.01 top 1 root 20 0 313660 11304 7464 S 0.0 0.0 10:30.04 systemd 2 root 20 0 0 0 0 S 0.0 0.0 0:00.22 kthreadd 3 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 rcu_gp 4 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 rcu_par+ 5 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 slub_fl+ 7 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker+ 10 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 mm_perc+ 11 root 20 0 0 0 0 S 0.0 0.0 0:00.00 rcu_tas+ 12 root 20 0 0 0 0 S 0.0 0.0 0:00.00 rcu_tas+ 13 root 20 0 0 0 0 S 0.0 0.0 0:24.97 ksoftir+ 14 root 20 0 0 0 0 I 0.0 0.0 3:33.07 rcu_sch+ ================================================================ ### LOAD-RELATED PROCESS STATES ================================================================ --- Running / uninterruptible tasks --- S PID PPID USER %CPU %MEM ELAPSED WCHAN CMD R 902573 3691 root 95.3 8.2 05:51 - lfd - retrieving blocklist BINARYDEFENSE R 906230 3666869 mybgled 78.0 0.6 00:02 - php-fpm: pool mybgled_com R 906058 3666869 btulin 38.5 0.6 00:18 - php-fpm: pool btulin_com R 906054 3666869 btulin 34.1 0.6 00:19 - php-fpm: pool btulin_com R 906066 3666869 btulin 31.9 0.6 00:18 - php-fpm: pool btulin_com R 906141 3666869 btulin 31.8 0.5 00:11 - php-fpm: pool btulin_com R 906139 3666869 btulin 30.5 0.5 00:11 - php-fpm: pool btulin_com D 906223 3666869 pcamcomm 29.6 0.4 00:03 - php-fpm: pool pcam_com_my R 906140 3666869 btulin 28.0 0.4 00:11 - php-fpm: pool btulin_com R 906057 3666869 btulin 27.3 0.6 00:19 - php-fpm: pool btulin_com R 905694 3666869 greenfee 22.2 0.7 01:02 - php-fpm: pool greenfeed_com_my R 905690 3666869 greenfee 19.0 0.6 01:03 - php-fpm: pool greenfeed_com_my D 905977 3666869 astronov 14.5 1.1 00:28 - php-fpm: pool astronovaproductid_my D 906064 3666869 mackenzi 8.8 0.4 00:18 - php-fpm: pool mackenzieind_com R 14 2 root 0.0 0.0 3-10:18:04 - [rcu_sched] D 742 2 root 0.0 0.0 3-10:17:15 - [jbd2/sda5-8] R 906288 906256 root 0.0 0.0 00:00 - ps -eo state,pid,ppid,user,%cpu,%mem,etime,wchan:24,cmd --sort=-%cpu ================================================================ ### TOP CPU PROCESSES ================================================================ USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 902573 95.3 8.2 3015296 2694232 ? R 17:37 5:34 lfd - retrieving blocklist BINARYDEFENSE mybgled 906230 79.0 0.6 919336 207176 ? R 17:42 0:01 php-fpm: pool mybgled_com btulin 906058 38.5 0.6 1283836 220444 ? R 17:42 0:06 php-fpm: pool btulin_com todaycom 906221 36.2 0.2 1155980 93244 ? S 17:42 0:01 php-fpm: pool today_com_my btulin 906054 34.1 0.6 1284768 221180 ? R 17:42 0:06 php-fpm: pool btulin_com hypnobir 906043 32.2 0.3 811208 99184 ? S 17:42 0:06 php-fpm: pool hypnobirthing_com_my btulin 906066 31.9 0.6 1273484 210796 ? R 17:42 0:05 php-fpm: pool btulin_com btulin 906141 31.8 0.5 1246252 182644 ? R 17:42 0:03 php-fpm: pool btulin_com btulin 906139 30.5 0.5 1231916 167624 ? R 17:42 0:03 php-fpm: pool btulin_com pcamcomm 906223 29.6 0.4 1205928 140144 ? D 17:42 0:00 php-fpm: pool pcam_com_my btulin 906140 28.0 0.4 1219628 155744 ? R 17:42 0:03 php-fpm: pool btulin_com btulin 906057 27.3 0.6 1261112 197808 ? R 17:42 0:05 php-fpm: pool btulin_com hypnobir 906063 26.1 0.2 788400 76520 ? S 17:42 0:04 php-fpm: pool hypnobirthing_com_my hypnobir 906062 26.0 0.2 788484 76508 ? S 17:42 0:04 php-fpm: pool hypnobirthing_com_my hypnobir 906102 25.5 0.2 802948 90292 ? S 17:42 0:04 php-fpm: pool hypnobirthing_com_my hypnobir 906118 25.5 0.2 786092 75192 ? S 17:42 0:03 php-fpm: pool hypnobirthing_com_my hypnobir 906100 22.5 0.2 785460 73936 ? S 17:42 0:03 php-fpm: pool hypnobirthing_com_my greenfee 905694 22.2 0.7 1287584 238928 ? R 17:41 0:13 php-fpm: pool greenfeed_com_my greenfee 905737 19.1 0.4 1278916 160280 ? S 17:41 0:10 php-fpm: pool greenfeed_com_my greenfee 905690 19.0 0.6 1274580 225908 ? R 17:41 0:11 php-fpm: pool greenfeed_com_my hypnobir 906061 18.5 0.2 781360 69116 ? S 17:42 0:03 php-fpm: pool hypnobirthing_com_my astronov 905977 14.5 1.1 1519716 383908 ? D 17:42 0:04 php-fpm: pool astronovaproductid_my bzbeecom 906110 14.4 0.7 1371176 234088 ? S 17:42 0:02 php-fpm: pool bzbee_com_my xingdate 906053 11.3 0.7 1383540 248884 ? Sl 17:42 0:02 php-fpm: pool xingdatech_com_my greenfee 905691 10.9 0.6 1334576 217736 ? S 17:41 0:06 php-fpm: pool greenfeed_com_my mackenzi 906064 8.8 0.4 1292844 156404 ? D 17:42 0:01 php-fpm: pool mackenzieind_com mysql 3018 6.8 15.1 13871208 4911672 ? Ssl Sep19 338:35 /usr/sbin/mysqld greenfee 906205 4.4 0.1 406660 52708 ? S 17:42 0:00 webmaild - serving 127.0.0.1 root 847834 4.0 1.0 586852 347412 ? Ssl 16:23 3:13 /opt/rustbolit/rustbolit --resident --with-suspicious --smart --cloud-assist=AUTO --use-heuristics-ignore --deobfuscate --memory=2G --no-html --avdb=/var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --skip-system-owner --skip-imunify360-storage --encode-b64-filenames --scan-archive --hs=/var/imunify360/files/sigs/v1/aibolit/hyperscan ================================================================ ### TOP MEMORY PROCESSES ================================================================ USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND mysql 3018 6.8 15.1 13871208 4911672 ? Ssl Sep19 338:35 /usr/sbin/mysqld root 902573 95.3 8.2 3015296 2694232 ? R 17:37 5:34 lfd - retrieving blocklist BINARYDEFENSE cpanels+ 3717 0.2 2.1 6650416 700376 ? Sl Sep19 11:20 /usr/lib/jvm/jre-11/bin/java -server -Xms512m -Xmx512m -XX:+UseG1GC -XX:+PerfDisableSharedMem -XX:+ParallelRefProcEnabled -XX:MaxGCPauseMillis=250 -XX:+UseLargePages -XX:+AlwaysPreTouch -XX:+ExplicitGCInvokesConcurrent -Xlog:gc*:file=/home/cpanelsolr/server/logs/solr_gc.log:time,uptime:filecount=9,filesize=20M -Dsolr.jetty.inetaccess.includes= -Dsolr.jetty.inetaccess.excludes= -Dsolr.log.dir=/home/cpanelsolr/server/logs -Djetty.port=8984 -DSTOP.PORT=7984 -Dhost=127.0.0.1 -Duser.timezone=UTC -XX:-OmitStackTraceInFastThrow -XX:+CrashOnOutOfMemoryError -XX:ErrorFile=/home/cpanelsolr/server/logs/jvm_crash_%p.log -Djetty.home=/home/cpanelsolr/server -Dsolr.solr.home=/home/cpanelsolr/server/solr -Dsolr.install.dir=/home/cpanelsolr -Dsolr.install.symDir=/home/cpanelsolr -Dsolr.default.confdir=/home/cpanelsolr/server/solr/configsets/_default/conf -Xss256k -Djava.security.manager -Djava.security.policy=/home/cpanelsolr/server/etc/security.policy -Djava.security.properties=/home/cpanelsolr/server/etc/security.properties -Dsolr.internal.network.permission=* -DdisableAdminUI=false -Dlog4j2.formatMsgNoLookups=true -Dsolr.autoSoftCommit.maxTime=3000 -Dsolr.log.muteconsole -jar start.jar --module=http --module=requestlog --module=gzip astronov 905977 14.5 1.1 1519716 383908 ? D 17:42 0:04 php-fpm: pool astronovaproductid_my root 847834 4.0 1.0 586852 347412 ? Ssl 16:23 3:13 /opt/rustbolit/rustbolit --resident --with-suspicious --smart --cloud-assist=AUTO --use-heuristics-ignore --deobfuscate --memory=2G --no-html --avdb=/var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --skip-system-owner --skip-imunify360-storage --encode-b64-filenames --scan-archive --hs=/var/imunify360/files/sigs/v1/aibolit/hyperscan nobody 880680 1.0 0.9 4677908 301720 ? Sl 17:07 0:23 /usr/sbin/httpd -k start nobody 880519 0.5 0.9 4677908 296816 ? Sl 17:07 0:11 /usr/sbin/httpd -k start nobody 880627 0.7 0.9 4677908 296720 ? Sl 17:07 0:16 /usr/sbin/httpd -k start nobody 880625 0.6 0.8 4677908 273144 ? Sl 17:07 0:13 /usr/sbin/httpd -k start nobody 880626 0.6 0.8 3866852 270352 ? Sl 17:07 0:13 /usr/sbin/httpd -k start xingdate 906053 11.3 0.7 1383540 248884 ? Sl 17:42 0:02 php-fpm: pool xingdatech_com_my greenfee 905694 22.2 0.7 1291680 242088 ? R 17:41 0:13 php-fpm: pool greenfeed_com_my bzbeecom 906110 14.5 0.7 1371176 234088 ? S 17:42 0:02 php-fpm: pool bzbee_com_my greenfee 905690 19.0 0.6 1274580 225908 ? R 17:41 0:12 php-fpm: pool greenfeed_com_my root 37425 0.2 0.6 2570528 221892 ? Ssl 00:52 2:16 /usr/sbin/imunify360-php-daemon -idle_timeout 600 btulin 906054 34.1 0.6 1284768 221180 ? R 17:42 0:06 php-fpm: pool btulin_com btulin 906058 38.5 0.6 1283836 220444 ? R 17:42 0:06 php-fpm: pool btulin_com greenfee 905691 10.9 0.6 1334576 217736 ? S 17:41 0:06 php-fpm: pool greenfeed_com_my root 818329 0.9 0.6 356460 214460 ? S 15:49 1:01 spamd child btulin 906066 31.9 0.6 1273484 210796 ? R 17:42 0:05 php-fpm: pool btulin_com mybgled 906230 79.5 0.6 921384 209024 ? R 17:42 0:01 php-fpm: pool mybgled_com btulin 906057 27.3 0.6 1261112 197808 ? R 17:42 0:05 php-fpm: pool btulin_com root 881594 0.3 0.6 333348 195532 ? S 17:07 0:06 spamd child btulin 906141 31.8 0.5 1246252 182644 ? R 17:42 0:03 php-fpm: pool btulin_com ================================================================ ### PHP-FPM POOLS ================================================================ mybgled 906230 3666869 81.0 0.6 00:02 php-fpm: pool mybgled_com btulin 906058 3666869 38.5 0.6 00:18 php-fpm: pool btulin_com todaycom 906221 3666869 36.2 0.2 00:04 php-fpm: pool today_com_my btulin 906054 3666869 34.3 0.6 00:19 php-fpm: pool btulin_com hypnobir 906043 3666869 32.2 0.3 00:21 php-fpm: pool hypnobirthing_com_my btulin 906066 3666869 32.0 0.6 00:18 php-fpm: pool btulin_com btulin 906141 3666869 31.8 0.5 00:11 php-fpm: pool btulin_com btulin 906139 3666869 30.6 0.5 00:11 php-fpm: pool btulin_com pcamcomm 906223 3666869 29.6 0.4 00:03 php-fpm: pool pcam_com_my btulin 906140 3666869 28.1 0.4 00:11 php-fpm: pool btulin_com btulin 906057 3666869 27.4 0.6 00:19 php-fpm: pool btulin_com hypnobir 906063 3666869 26.1 0.2 00:18 php-fpm: pool hypnobirthing_com_my hypnobir 906062 3666869 26.0 0.2 00:18 php-fpm: pool hypnobirthing_com_my hypnobir 906102 3666869 25.5 0.2 00:16 php-fpm: pool hypnobirthing_com_my hypnobir 906118 3666869 25.5 0.2 00:14 php-fpm: pool hypnobirthing_com_my hypnobir 906100 3666869 22.5 0.2 00:16 php-fpm: pool hypnobirthing_com_my greenfee 905694 3666869 22.3 0.7 01:02 php-fpm: pool greenfeed_com_my greenfee 905690 3666869 19.1 0.6 01:03 php-fpm: pool greenfeed_com_my greenfee 905737 3666869 19.1 0.4 00:57 php-fpm: pool greenfeed_com_my hypnobir 906061 3666869 18.5 0.2 00:18 php-fpm: pool hypnobirthing_com_my astronov 905977 3666869 14.5 1.1 00:28 php-fpm: pool astronovaproductid_my bzbeecom 906110 3666869 14.5 0.7 00:15 php-fpm: pool bzbee_com_my xingdate 906053 3666869 11.3 0.7 00:19 php-fpm: pool xingdatech_com_my greenfee 905691 3666869 10.9 0.6 01:03 php-fpm: pool greenfeed_com_my mackenzi 906064 3666869 8.8 0.4 00:18 php-fpm: pool mackenzieind_com greenfee 906212 17434 1.8 0.0 00:05 php-fpm: pool user_greenfee potagla+ 906200 17434 1.0 0.0 00:06 php-fpm: pool user_potaglasmalaysia greenfee 905414 17434 0.2 0.0 01:29 php-fpm: pool user_greenfee --- PHP-FPM process count by user --- 7 hypnobir 7 btulin 6 greenfee 1 xingdate 1 todaycom 1 root 1 potagla+ 1 pcamcomm 1 mybgled 1 mackenzi 1 bzbeecom 1 astronov ================================================================ ### MYSQL ================================================================ --- mysqld process --- mysql 3018 6.8 15.1 13871208 4911672 ? Ssl Sep19 338:35 /usr/sbin/mysqld --- processlist --- +--------+-------------------+-----------+-------------------+---------+--------+------------------------+------------------+ | Id | User | Host | db | Command | Time | State | Info | +--------+-------------------+-----------+-------------------+---------+--------+------------------------+------------------+ | 5 | event_scheduler | localhost | | Daemon | 295914 | Waiting on empty queue | | | 449590 | root | localhost | | Sleep | 13 | | | | 598792 | astronov_wp_mjsqx | localhost | astronov_wp_9cuay | Sleep | 0 | | | | 598812 | xingdate_3jety | localhost | xingdate_a6wji | Sleep | 0 | | | | 598822 | mackenzi_wrdp1 | localhost | mackenzi_wrdp1 | Sleep | 0 | | | | 598835 | bzbeecom_user | localhost | bzbeecom_db_new | Sleep | 0 | | | | 598900 | btulin_bt5NR | localhost | btulin_bt0LP | Sleep | 0 | | | | 598902 | btulin_bt5NR | localhost | btulin_bt0LP | Sleep | 0 | | | | 598904 | btulin_bt5NR | localhost | btulin_bt0LP | Sleep | 0 | | | | 598907 | btulin_bt5NR | localhost | btulin_bt0LP | Sleep | 0 | | | | 598908 | btulin_bt5NR | localhost | btulin_bt0LP | Sleep | 0 | | | | 598910 | pcamcomm_wp259 | localhost | pcamcomm_wp259 | Sleep | 0 | | | | 598912 | btulin_bt5NR | localhost | btulin_bt0LP | Sleep | 0 | | | | 598915 | greenfee_f0h6e | localhost | greenfee_f0h6e | Sleep | 0 | | | | 598916 | btulin_bt5NR | localhost | btulin_bt0LP | Sleep | 0 | | | | 598917 | mybgled_edc | localhost | mybgled_dbEDC | Sleep | 0 | | | | 598921 | greenfee_f0h6e | localhost | greenfee_f0h6e | Sleep | 0 | | | | 598923 | root | localhost | | Query | 0 | init | show processlist | +--------+-------------------+-----------+-------------------+---------+--------+------------------------+------------------+ ================================================================ ### DISK / I/O ================================================================ Filesystem Type Size Used Avail Use% Mounted on devtmpfs devtmpfs 16G 0 16G 0% /dev tmpfs tmpfs 16G 0 16G 0% /dev/shm tmpfs tmpfs 16G 1.2G 15G 8% /run tmpfs tmpfs 16G 0 16G 0% /sys/fs/cgroup /dev/sda4 ext4 295G 31G 249G 11% / /dev/sda2 xfs 1014M 314M 701M 31% /boot /dev/sda1 vfat 599M 6.2M 593M 2% /boot/efi /dev/sda6 ext4 49G 3.5M 47G 1% /tmp /dev/sda3 ext4 3.1T 803G 2.1T 28% /home /dev/sda5 ext4 196G 38G 148G 21% /var none tmpfs 16G 4.0K 16G 1% /var/lve/dbgovernor-shm /dev/sda7 ext4 16G 100K 15G 1% /var/tmp tmpfs tmpfs 3.1G 0 3.1G 0% /run/user/0 --- iostat --- Linux 4.18.0-553.157.1.lve.el8.x86_64 (ns600.locus-t.com.my) 09/22/26 _x86_64_ (8 CPU) avg-cpu: %user %nice %system %iowait %steal %idle 32.34 1.22 4.52 6.91 0.00 55.01 Device r/s w/s rkB/s wkB/s rrqm/s wrqm/s %rrqm %wrqm r_await w_await aqu-sz rareq-sz wareq-sz svctm %util sda 71.91 62.48 1593.60 1172.00 6.21 77.24 7.95 55.28 13.44 83.80 6.20 22.16 18.76 3.13 42.00 avg-cpu: %user %nice %system %iowait %steal %idle 85.64 0.12 9.11 2.12 0.00 3.00 Device r/s w/s rkB/s wkB/s rrqm/s wrqm/s %rrqm %wrqm r_await w_await aqu-sz rareq-sz wareq-sz svctm %util sda 168.00 16.00 1180.00 356.00 0.00 48.00 0.00 75.00 8.50 19.81 1.75 7.02 22.25 3.04 55.90 avg-cpu: %user %nice %system %iowait %steal %idle 89.03 0.37 9.73 0.37 0.00 0.50 Device r/s w/s rkB/s wkB/s rrqm/s wrqm/s %rrqm %wrqm r_await w_await aqu-sz rareq-sz wareq-sz svctm %util sda 61.39 64.36 780.20 1077.23 26.73 190.10 30.34 74.71 18.32 16.51 2.19 12.71 16.74 5.67 71.29 ================================================================ ### LFD / CSF ================================================================ --- Active LFD processes --- root 3691 0.1 0.0 300400 18232 ? Ss 00:00 1:18 lfd - sleeping root 902573 95.3 8.2 3015296 2694300 ? R 17:37 5:36 lfd - retrieving blocklist BINARYDEFENSE --- LF_IPSET --- LF_IPSET = "1" LF_IPSET_HASHSIZE = "1048576" LF_IPSET_MAXELEM = "16777216" --- Enabled blocklists of interest --- --- Recent blocklist activity --- Sep 22 13:23:12 ns600 lfd[695547]: Retrieved and blocking blocklist BINARYDEFENSE IP address ranges Sep 22 13:27:52 ns600 lfd[701440]: Retrieved and blocking blocklist CIARMY IP address ranges Sep 22 13:30:21 ns600 lfd[701440]: Retrieved and blocking blocklist DSHIELD IP address ranges Sep 22 13:31:31 ns600 lfd[704268]: Child : *Lock Error* [BLOCKLISTS] still active - section skipped Sep 22 13:38:04 ns600 lfd[707955]: Retrieved and blocking blocklist BITWIRE_OUTBOUND IP address ranges Sep 22 13:53:05 ns600 lfd[718349]: Retrieved and blocking blocklist FEODO IP address ranges Sep 22 13:58:32 ns600 lfd[721905]: Retrieved and blocking blocklist INTERSERVER IP address ranges Sep 22 14:01:35 ns600 lfd[725717]: Child : *Lock Error* [BLOCKLISTS] still active - section skipped Sep 22 14:02:00 ns600 lfd[721905]: Retrieved and blocking blocklist MERBL IP address ranges Sep 22 14:03:39 ns600 lfd[721905]: Retrieved and blocking blocklist BITWIRE_INBOUND IP address ranges Sep 22 14:06:35 ns600 lfd[729165]: Child : *Lock Error* [BLOCKLISTS] still active - section skipped Sep 22 14:06:45 ns600 lfd[721905]: Unable to retrieve blocklist SPAMDROP for the next 3193 secs Sep 22 14:13:11 ns600 lfd[732205]: Retrieved and blocking blocklist PROJECTHONEYPOT IP address ranges Sep 22 14:15:56 ns600 lfd[732205]: Retrieved and blocking blocklist BRUTEFORCEBLOCKER IP address ranges Sep 22 14:16:37 ns600 lfd[737024]: Child : *Lock Error* [BLOCKLISTS] still active - section skipped Sep 22 14:17:23 ns600 lfd[732205]: Unable to retrieve blocklist SPAMDROP for the next 2555 secs Sep 22 14:23:22 ns600 lfd[742409]: Retrieved and blocking blocklist GREENSNOW IP address ranges Sep 22 14:26:26 ns600 lfd[742409]: Retrieved and blocking blocklist BDEALL IP address ranges Sep 22 14:26:38 ns600 lfd[745878]: Child : *Lock Error* [BLOCKLISTS] still active - section skipped Sep 22 14:28:13 ns600 lfd[742409]: Unable to retrieve blocklist SPAMDROP for the next 1905 secs Sep 22 14:29:54 ns600 lfd[742409]: Retrieved and blocking blocklist BINARYDEFENSE IP address ranges Sep 22 14:31:39 ns600 lfd[750126]: Unable to retrieve blocklist SPAMDROP for the next 1699 secs Sep 22 14:33:37 ns600 lfd[750126]: Retrieved and blocking blocklist CIARMY IP address ranges Sep 22 14:36:23 ns600 lfd[750126]: Retrieved and blocking blocklist DSHIELD IP address ranges Sep 22 14:36:39 ns600 lfd[754099]: Child : *Lock Error* [BLOCKLISTS] still active - section skipped Sep 22 14:43:14 ns600 lfd[758145]: Retrieved and blocking blocklist BITWIRE_OUTBOUND IP address ranges Sep 22 14:44:28 ns600 lfd[758145]: Unable to retrieve blocklist SPAMDROP for the next 930 secs Sep 22 14:46:41 ns600 lfd[762087]: Unable to retrieve blocklist SPAMDROP for the next 797 secs Sep 22 14:51:41 ns600 lfd[766674]: Unable to retrieve blocklist SPAMDROP for the next 497 secs Sep 22 14:58:08 ns600 lfd[774280]: Retrieved and blocking blocklist FEODO IP address ranges Sep 22 14:59:06 ns600 lfd[774280]: Unable to retrieve blocklist SPAMDROP for the next 52 secs Sep 22 15:03:46 ns600 lfd[780545]: Retrieved and blocking blocklist INTERSERVER IP address ranges Sep 22 15:06:11 ns600 lfd[780545]: Retrieved and blocking blocklist MERBL IP address ranges Sep 22 15:06:43 ns600 lfd[784365]: Child : *Lock Error* [BLOCKLISTS] still active - section skipped Sep 22 15:08:04 ns600 lfd[780545]: Retrieved and blocking blocklist BITWIRE_INBOUND IP address ranges Sep 22 15:11:44 ns600 lfd[788680]: Child : *Lock Error* [BLOCKLISTS] still active - section skipped Sep 22 15:12:22 ns600 lfd[780545]: Retrieved and blocking blocklist SPAMDROP IP address ranges Sep 22 15:18:02 ns600 lfd[793126]: Retrieved and blocking blocklist PROJECTHONEYPOT IP address ranges Sep 22 15:20:44 ns600 lfd[793126]: Retrieved and blocking blocklist BRUTEFORCEBLOCKER IP address ranges Sep 22 15:21:45 ns600 lfd[796785]: Child : *Lock Error* [BLOCKLISTS] still active - section skipped Sep 22 15:28:11 ns600 lfd[800485]: Retrieved and blocking blocklist GREENSNOW IP address ranges Sep 22 15:30:50 ns600 lfd[800485]: Retrieved and blocking blocklist BDEALL IP address ranges Sep 22 15:31:45 ns600 lfd[805460]: Child : *Lock Error* [BLOCKLISTS] still active - section skipped Sep 22 15:33:26 ns600 lfd[800485]: Retrieved and blocking blocklist BINARYDEFENSE IP address ranges Sep 22 15:38:04 ns600 lfd[811251]: Retrieved and blocking blocklist CIARMY IP address ranges Sep 22 15:40:28 ns600 lfd[811251]: Retrieved and blocking blocklist DSHIELD IP address ranges Sep 22 15:48:13 ns600 lfd[817335]: Retrieved and blocking blocklist BITWIRE_OUTBOUND IP address ranges Sep 22 16:03:55 ns600 lfd[828137]: Retrieved and blocking blocklist FEODO IP address ranges Sep 22 16:08:20 ns600 lfd[832086]: Retrieved and blocking blocklist INTERSERVER IP address ranges Sep 22 16:11:25 ns600 lfd[832086]: Retrieved and blocking blocklist MERBL IP address ranges Sep 22 16:11:50 ns600 lfd[837166]: Child : *Lock Error* [BLOCKLISTS] still active - section skipped Sep 22 16:12:50 ns600 lfd[832086]: Retrieved and blocking blocklist BITWIRE_INBOUND IP address ranges Sep 22 16:16:50 ns600 lfd[842195]: Child : *Lock Error* [BLOCKLISTS] still active - section skipped Sep 22 16:17:49 ns600 lfd[832086]: Retrieved and blocking blocklist SPAMDROP IP address ranges Sep 22 16:23:12 ns600 lfd[846904]: Retrieved and blocking blocklist PROJECTHONEYPOT IP address ranges Sep 22 16:26:03 ns600 lfd[846904]: Retrieved and blocking blocklist BRUTEFORCEBLOCKER IP address ranges Sep 22 16:26:54 ns600 lfd[851051]: Child : *Lock Error* [BLOCKLISTS] still active - section skipped Sep 22 16:33:34 ns600 lfd[854311]: Retrieved and blocking blocklist GREENSNOW IP address ranges Sep 22 16:36:02 ns600 lfd[854311]: Retrieved and blocking blocklist BDEALL IP address ranges Sep 22 16:36:54 ns600 lfd[857973]: Child : *Lock Error* [BLOCKLISTS] still active - section skipped Sep 22 16:38:48 ns600 lfd[854311]: Retrieved and blocking blocklist BINARYDEFENSE IP address ranges Sep 22 16:43:13 ns600 lfd[862050]: Retrieved and blocking blocklist CIARMY IP address ranges Sep 22 16:46:11 ns600 lfd[862050]: Retrieved and blocking blocklist DSHIELD IP address ranges Sep 22 16:46:56 ns600 lfd[866200]: Child : *Lock Error* [BLOCKLISTS] still active - section skipped Sep 22 16:53:29 ns600 lfd[869453]: Retrieved and blocking blocklist BITWIRE_OUTBOUND IP address ranges Sep 22 17:08:23 ns600 lfd[880379]: Retrieved and blocking blocklist FEODO IP address ranges Sep 22 17:13:56 ns600 lfd[884368]: Retrieved and blocking blocklist INTERSERVER IP address ranges Sep 22 17:16:37 ns600 lfd[884368]: Retrieved and blocking blocklist MERBL IP address ranges Sep 22 17:16:59 ns600 lfd[889410]: Child : *Lock Error* [BLOCKLISTS] still active - section skipped Sep 22 17:18:19 ns600 lfd[884368]: Retrieved and blocking blocklist BITWIRE_INBOUND IP address ranges Sep 22 17:21:17 ns600 lfd[884368]: Unable to retrieve blocklist SPAMDROP for the next 3296 secs Sep 22 17:22:00 ns600 lfd[892939]: Unable to retrieve blocklist SPAMDROP for the next 3253 secs Sep 22 17:28:15 ns600 lfd[896326]: Retrieved and blocking blocklist PROJECTHONEYPOT IP address ranges Sep 22 17:30:45 ns600 lfd[896326]: Retrieved and blocking blocklist BRUTEFORCEBLOCKER IP address ranges Sep 22 17:31:50 ns600 lfd[896326]: Unable to retrieve blocklist SPAMDROP for the next 2663 secs Sep 22 17:32:00 ns600 lfd[899113]: Unable to retrieve blocklist SPAMDROP for the next 2653 secs Sep 22 17:38:14 ns600 lfd[902573]: Retrieved and blocking blocklist GREENSNOW IP address ranges Sep 22 17:40:40 ns600 lfd[902573]: Retrieved and blocking blocklist BDEALL IP address ranges Sep 22 17:41:47 ns600 lfd[902573]: Unable to retrieve blocklist SPAMDROP for the next 2066 secs Sep 22 17:42:01 ns600 lfd[905770]: Child : *Lock Error* [BLOCKLISTS] still active - section skipped ================================================================ ### IMUNIFY360 / SECURITY PROCESSES ================================================================ root 847834 4.0 1.0 586852 347232 ? Ssl 16:23 3:14 /opt/rustbolit/rustbolit --resident --with-suspicious --smart --cloud-assist=AUTO --use-heuristics-ignore --deobfuscate --memory=2G --no-html --avdb=/var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --skip-system-owner --skip-imunify360-storage --encode-b64-filenames --scan-archive --hs=/var/imunify360/files/sigs/v1/aibolit/hyperscan root 37507 1.3 0.4 4507092 146912 ? Ssl 00:52 13:56 /usr/bin/imunify-resident root 828 0.4 0.0 2623032 25704 ? Ssl Sep19 21:36 /usr/sbin/wafd_imunify_daemon root 37058 0.3 0.0 2357068 18460 ? Ssl 00:51 3:44 /usr/sbin/imunify-realtime-av root 37425 0.2 0.6 2570528 221892 ? Ssl 00:52 2:16 /usr/sbin/imunify360-php-daemon -idle_timeout 600 root 91379 0.2 0.0 2320244 19120 ? Ssl Sep19 11:47 /usr/sbin/imunify360-unified-access-logger root 168488 0.1 0.1 2232308 37840 ? Ssl 04:20 0:53 /usr/sbin/pam_imunify_daemon.bin root 2667 0.0 0.0 2161980 6056 ? Ssl Sep19 0:05 /usr/sbin/imunify360-webshield-ssl-cache root 2748 0.0 0.0 62504 4832 ? Ss Sep19 0:00 im360: master process /usr/sbin/imunify360-webshield -c /etc/imunify360-webshield/webshield.conf root 38104 0.0 0.0 2130488 8972 ? Ssl 00:53 0:03 /usr/bin/imunify-agent-proxy imunify+ 1304909 0.0 0.0 103636 20736 ? S Sep19 1:55 im360: worker process ================================================================ ### NETWORK SUMMARY ================================================================ Total: 912 TCP: 262 (estab 75, closed 87, orphaned 0, timewait 77) Transport Total IP IPv6 RAW 1 1 0 UDP 9 5 4 TCP 175 157 18 INET 185 163 22 FRAG 0 0 0 ================================================================ ### RECENTLY ACTIVE APACHE DOMAIN LOGS ================================================================ hypnobirthing.com.my-ssl_log greenfeed.com.my-ssl_log osteocare.my beststone.com.my greenfeed.com.my-bytes_log rightproc.com-ssl_log greenpenfreight.com.my-ssl_log urbanwolfadventures.com.my arktech.com.my-ssl_log pure.com.my-ssl_log astronovaproductid.my-ssl_log loyal-amethyst-armadillo.aswant.co.id-ssl_log toyomi.com.my-ssl_log toitoi.com.my rightproc.com proxy-subdomains-vhost.localhost profine.com.my-ssl_log pcam.com.my-ssl_log my-kitchen.com.my-ssl_log mutiarafigs.com.my-ssl_log munmenggroup.com-ssl_log kunaklipids.com gemology.com.my-ssl_log bzbee.com.my beststone.com.my-ssl_log achievementalfitness.com.my-ssl_log xingdatech.com.my viss.my-ssl_log toyomi.com.my toitoidixi.com.sg-ssl_log ================================================================ ### TOP PHP-FPM SITES - RECENT REQUEST ANALYSIS ================================================================ ---------------------------------------------------------------- POOL: mybgled_com | approx domain: mybgled.com | CPU snapshot: 68.8% ---------------------------------------------------------------- Log: /usr/local/apache/domlogs/mybgled.com --- Top IPs from latest 3000 requests --- 135 54.184.226.94 123 35.162.140.124 29 162.243.249.110 24 5.188.86.234 19 144.76.32.239 14 192.82.60.164 7 162.243.213.196 3 63.135.161.137 3 173.239.211.67 3 173.239.211.64 3 173.239.211.62 2 63.135.161.151 2 63.135.161.140 2 63.135.161.135 2 47.84.202.108 --- Top requests from latest 3000 requests --- 18 /blog/wp-login.php 12 / 10 /robots.txt 8 /wp-login.php 3 /contact-us/ 2 /wp/ 2 /wp-admin/ 2 /wordpress/ 2 /sitemap.xml 2 /old/ 2 /new/ 2 /blog/ 2 /backup/ 1 /wp-mail.php 1 /wp-includes/txets.php 1 /wp-includes/hp2.php 1 /wp-editor.php 1 /wp-content/wp-setting.php 1 /wp-content/themes/txets.php 1 /wp-content/style.php --- Top HTTP statuses --- 298 301 106 200 --- Suspicious recent requests --- 173.239.211.75 - - [21/Sep/2026:20:31:55 +0800] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 200 12046 "-" "Go-http-client/1.1" 5.188.86.234 - - [21/Sep/2026:22:21:05 +0800] "GET /wp-login.php HTTP/1.1" 200 12157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 5.188.86.234 - - [21/Sep/2026:22:21:06 +0800] "POST /wp-login.php HTTP/1.1" 200 12065 "http://mybgled.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 5.188.86.234 - - [21/Sep/2026:22:21:07 +0800] "POST /wp-login.php HTTP/1.1" 200 12091 "http://mybgled.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 5.188.86.234 - - [21/Sep/2026:22:56:59 +0800] "GET /wp-login.php HTTP/1.1" 200 12071 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 5.188.86.234 - - [21/Sep/2026:22:56:59 +0800] "POST /wp-login.php HTTP/1.1" 200 12071 "http://mybgled.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 5.188.86.234 - - [21/Sep/2026:22:57:00 +0800] "POST /wp-login.php HTTP/1.1" 200 12127 "http://mybgled.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 47.84.202.108 - - [22/Sep/2026:01:15:21 +0800] "POST /wp-login.php HTTP/1.1" 200 12156 "http://www.mybgled.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 5.188.86.234 - - [22/Sep/2026:03:56:17 +0800] "GET /blog/wp-login.php HTTP/1.1" 200 12157 "-" "Mozilla/5.0 (Linux; Android 15; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Mobile Safari/537.36" 5.188.86.234 - - [22/Sep/2026:03:56:18 +0800] "POST /blog/wp-login.php HTTP/1.1" 200 12071 "http://www.mybgled.com/blog/wp-login.php" "Mozilla/5.0 (Linux; Android 15; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Mobile Safari/537.36" 5.188.86.234 - - [22/Sep/2026:03:56:19 +0800] "POST /blog/wp-login.php HTTP/1.1" 200 12092 "http://www.mybgled.com/blog/wp-login.php" "Mozilla/5.0 (Linux; Android 15; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Mobile Safari/537.36" 5.188.86.234 - - [22/Sep/2026:04:42:31 +0800] "GET /blog/wp-login.php HTTP/1.1" 200 12103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 5.188.86.234 - - [22/Sep/2026:04:42:32 +0800] "POST /blog/wp-login.php HTTP/1.1" 200 12117 "http://mybgled.com/blog/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 5.188.86.234 - - [22/Sep/2026:04:42:33 +0800] "POST /blog/wp-login.php HTTP/1.1" 200 12062 "http://mybgled.com/blog/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 74.208.79.82 - - [22/Sep/2026:08:58:10 +0800] "GET /.env HTTP/1.1" 301 277 "-" "python-requests/2.32.4" 5.188.86.234 - - [22/Sep/2026:09:25:11 +0800] "GET /blog/wp-login.php HTTP/1.1" 200 12142 "-" "Mozilla/5.0 (Linux; Android 15; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Mobile Safari/537.36" 5.188.86.234 - - [22/Sep/2026:09:25:11 +0800] "POST /blog/wp-login.php HTTP/1.1" 200 12142 "http://www.mybgled.com/blog/wp-login.php" "Mozilla/5.0 (Linux; Android 15; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Mobile Safari/537.36" 5.188.86.234 - - [22/Sep/2026:09:25:12 +0800] "POST /blog/wp-login.php HTTP/1.1" 200 12138 "http://www.mybgled.com/blog/wp-login.php" "Mozilla/5.0 (Linux; Android 15; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Mobile Safari/537.36" 5.188.86.234 - - [22/Sep/2026:10:39:46 +0800] "GET /blog/wp-login.php HTTP/1.1" 200 12147 "-" "Mozilla/5.0 (Linux; Android 15; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Mobile Safari/537.36" 5.188.86.234 - - [22/Sep/2026:10:39:47 +0800] "POST /blog/wp-login.php HTTP/1.1" 200 12132 "http://www.mybgled.com/blog/wp-login.php" "Mozilla/5.0 (Linux; Android 15; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Mobile Safari/537.36" 5.188.86.234 - - [22/Sep/2026:10:39:48 +0800] "POST /blog/wp-login.php HTTP/1.1" 200 12052 "http://www.mybgled.com/blog/wp-login.php" "Mozilla/5.0 (Linux; Android 15; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Mobile Safari/537.36" 172.237.88.143 - - [22/Sep/2026:12:57:11 +0800] "POST /wp-login.php HTTP/1.1" 200 12045 "http://www.mybgled.com/wp-admin/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36" 5.188.86.234 - - [22/Sep/2026:14:12:51 +0800] "GET /blog/wp-login.php HTTP/1.1" 200 12152 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 5.188.86.234 - - [22/Sep/2026:14:12:52 +0800] "POST /blog/wp-login.php HTTP/1.1" 200 12124 "http://mybgled.com/blog/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 5.188.86.234 - - [22/Sep/2026:14:12:53 +0800] "POST /blog/wp-login.php HTTP/1.1" 200 12127 "http://mybgled.com/blog/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 5.188.86.234 - - [22/Sep/2026:14:47:42 +0800] "GET /blog/wp-login.php HTTP/1.1" 200 12194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 5.188.86.234 - - [22/Sep/2026:14:47:43 +0800] "POST /blog/wp-login.php HTTP/1.1" 200 12148 "http://mybgled.com/blog/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 5.188.86.234 - - [22/Sep/2026:14:47:43 +0800] "POST /blog/wp-login.php HTTP/1.1" 200 12148 "http://mybgled.com/blog/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" --- User agents for top 3 source IPs --- IP: 54.184.226.94 133 ManageWP-UptimeMonitoring 1 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0 1 Go-http-client/1.1 IP: 35.162.140.124 123 ManageWP-UptimeMonitoring IP: 162.243.249.110 3 Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1 3 Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Mobile/15E148 Safari/604.1 3 Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0 3 Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36 2 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36 ---------------------------------------------------------------- POOL: astronovaproductid_my | approx domain: astronovaproductid.my | CPU snapshot: 67.6% ---------------------------------------------------------------- Log: /usr/local/apache/domlogs/astronovaproductid.my --- Top IPs from latest 3000 requests --- 232 173.234.14.100 50 34.180.108.184 19 146.70.194.228 16 35.192.17.169 11 2a06:98c0:3600::103 7 113.210.191.248 6 96.126.130.210 4 65.109.100.157 4 62.234.117.243 2 65.111.11.184 2 54.184.226.94 2 43.143.208.254 2 148.251.222.219 2 128.90.174.19 2 104.28.208.84 --- Top requests from latest 3000 requests --- 15 / 12 /robots.txt 11 /wp-admin/install.php?step=1 8 /product/astrojet-aj-200/ 5 /great-cosmetic-labels-for-cjs-unique-boutique/ 4 /stanley-black-and-decker-prints-professional-hardware-labels-in-house/ 4 /direct-to-package/ 4 /.env 3 /.env.txt 2 http://astronovaproductid.my:80/ 2 http://astronovaproductid.my/product/ql-425 2 /xmlrpc.php?rsd 2 /wp1/wp-includes/wlwmanifest.xml 2 /wp-includes/wlwmanifest.xml 2 /wordpress/wp-includes/wlwmanifest.xml 2 /web/wp-includes/wlwmanifest.xml 2 /test/wp-includes/wlwmanifest.xml 2 /site/wp-includes/wlwmanifest.xml 2 /shop/wp-includes/wlwmanifest.xml 2 /product/ql-425/ --- Top HTTP statuses --- 210 200 184 301 1 302 --- Suspicious recent requests --- 173.234.14.100 - - [22/Sep/2026:13:06:40 +0800] "GET /wordpress/wp-login.php HTTP/1.1" 200 12204 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:13:09:25 +0800] "GET /wordpress2025/xmlrpc.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:13:20:35 +0800] "GET /wordpress2025/wp-login.php HTTP/1.1" 200 12207 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:13:27:32 +0800] "GET /wordpress2026/xmlrpc.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:13:39:05 +0800] "GET /wordpress2026/wp-login.php HTTP/1.1" 200 12067 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:13:44:31 +0800] "GET /wp1/xmlrpc.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:13:57:42 +0800] "GET /wp1/wp-login.php HTTP/1.1" 200 12148 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:14:01:32 +0800] "GET /wp2/xmlrpc.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:14:13:49 +0800] "GET /wp2/wp-login.php HTTP/1.1" 200 12142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:14:17:24 +0800] "GET /wp3/xmlrpc.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:14:28:49 +0800] "GET /wp3/wp-login.php HTTP/1.1" 200 12093 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:14:32:34 +0800] "GET /wp4/xmlrpc.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:14:45:31 +0800] "GET /wp4/wp-login.php HTTP/1.1" 200 12167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 2a06:98c0:3600::103 - - [22/Sep/2026:14:45:45 +0800] "GET /wp-admin/install.php?step=1 HTTP/1.1" 301 305 "-" "http://astronovaproductid.my/wp-admin/install.php?step=1" 173.234.14.100 - - [22/Sep/2026:14:48:44 +0800] "GET /wp5/xmlrpc.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:15:02:00 +0800] "GET /wp5/wp-login.php HTTP/1.1" 200 12117 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:15:06:41 +0800] "GET /wp6/xmlrpc.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:15:18:56 +0800] "GET /wp6/wp-login.php HTTP/1.1" 200 12085 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:15:23:34 +0800] "GET /wp7/xmlrpc.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:15:35:03 +0800] "GET /wp7/wp-login.php HTTP/1.1" 200 12047 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:15:38:34 +0800] "GET /wp8/xmlrpc.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:15:50:56 +0800] "GET /wp8/wp-login.php HTTP/1.1" 200 12122 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:15:59:11 +0800] "GET /wp9/xmlrpc.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:16:10:25 +0800] "GET /wp9/wp-login.php HTTP/1.1" 200 12143 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:16:15:55 +0800] "GET /wpv1/xmlrpc.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:16:29:03 +0800] "GET /wpv1/wp-login.php HTTP/1.1" 200 12078 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:16:33:57 +0800] "GET /wpv2/xmlrpc.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 2a06:98c0:3600::103 - - [22/Sep/2026:16:39:56 +0800] "GET /wp-admin/install.php?step=1 HTTP/1.1" 301 305 "-" "http://astronovaproductid.my/wp-admin/install.php?step=1" 173.234.14.100 - - [22/Sep/2026:16:44:22 +0800] "GET /wpv2/wp-login.php HTTP/1.1" 200 12114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 173.234.14.100 - - [22/Sep/2026:16:47:44 +0800] "GET /wpv3/xmlrpc.php HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" --- User agents for top 3 source IPs --- IP: 173.234.14.100 232 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 IP: 34.180.108.184 50 crusader-worker/1.0 IP: 146.70.194.228 19 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 ---------------------------------------------------------------- POOL: xingdatech_com_my | approx domain: xingdatech.com.my | CPU snapshot: 60.6% ---------------------------------------------------------------- Log: /usr/local/apache/domlogs/xingdatech.com.my --- Top IPs from latest 3000 requests --- 56 192.82.60.164 30 34.101.33.253 20 85.204.70.98 20 85.204.70.104 20 34.48.192.50 17 136.85.84.152 2 32.194.74.48 2 185.117.225.243 2 157.90.94.110 2 143.198.233.182 2 137.184.84.124 1 66.249.69.163 1 49.51.233.95 1 45.138.12.12 1 45.132.195.117 --- Top requests from latest 3000 requests --- 41 / 6 /robots.txt 3 /wp2/wp-includes/wlwmanifest.xml 3 /wp1/wp-includes/wlwmanifest.xml 3 /wp/wp-includes/wlwmanifest.xml 3 /wp-includes/wlwmanifest.xml 3 /wordpress/wp-includes/wlwmanifest.xml 3 /website/wp-includes/wlwmanifest.xml 3 /web/wp-includes/wlwmanifest.xml 3 /test/wp-includes/wlwmanifest.xml 3 /sito/wp-includes/wlwmanifest.xml 3 /site/wp-includes/wlwmanifest.xml 3 /news/wp-includes/wlwmanifest.xml 3 /media/wp-includes/wlwmanifest.xml 3 /cms/wp-includes/wlwmanifest.xml 3 /blog/wp-includes/wlwmanifest.xml 3 /2019/wp-includes/wlwmanifest.xml 3 /2018/wp-includes/wlwmanifest.xml 2 /wwwroot/.codex/auth.json 2 /wp-admin/css/ --- Top HTTP statuses --- 135 200 73 301 2 302 --- Suspicious recent requests --- 144.172.85.23 - - [22/Sep/2026:01:10:52 +0800] "GET /.git/config HTTP/1.1" 301 288 "-" "Mozilla/5.0 (X11; Linux x86_64)" --- User agents for top 3 source IPs --- IP: 192.82.60.164 56 Cpanel-HTTP-Client/1.0 IP: 34.101.33.253 30 crusader-worker/1.0 IP: 85.204.70.98 20 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 ---------------------------------------------------------------- POOL: mackenzieind_com | approx domain: mackenzieind.com | CPU snapshot: 56.5% ---------------------------------------------------------------- Log: /usr/local/apache/domlogs/mackenzieind.com --- Top IPs from latest 3000 requests --- 103 62.60.130.117 57 62.60.130.173 44 34.20.240.176 42 192.82.60.164 29 34.80.170.146 29 162.243.198.92 22 34.175.72.121 18 52.45.146.35 9 43.228.157.173 9 34.78.177.209 7 161.35.170.193 5 62.60.130.150 5 136.243.146.219 4 192.178.7.105 4 16.58.214.250 --- Top requests from latest 3000 requests --- 65 / 32 /robots.txt 6 /wp-content/uploads/ 6 /wp-content/plugins/ 5 /contact/ 3 /wwwroot/.codex/auth.json 3 /wp-mail.php 3 /wp-includes/widgets/ 3 /wp-includes/sitemaps/providers/ 3 /wp-includes/sitemaps/ 3 /wp-includes/pomo/ 3 /wp-includes/js/plupload/ 3 /wp-includes/js/codemirror/ 3 /wp-includes/js/ 3 /wp-includes/images/smilies/ 3 /wp-includes/images/media/ 3 /wp-includes/images/crystal/ 3 /wp-includes/images/ 3 /wp-includes/fonts/ 3 /wp-includes/css/dist/ --- Top HTTP statuses --- 263 301 253 200 --- Suspicious recent requests --- 34.78.177.209 - - [22/Sep/2026:00:24:33 +0800] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 301 305 "-" "Go-http-client/1.1" 43.228.157.173 - - [22/Sep/2026:02:55:21 +0800] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 200 12122 "-" "Go-http-client/1.1" 45.89.242.203 - - [22/Sep/2026:14:58:30 +0800] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 301 305 "-" "Go-http-client/1.1" --- User agents for top 3 source IPs --- IP: 62.60.130.117 103 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 IP: 62.60.130.173 57 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 IP: 34.20.240.176 44 crusader-worker/1.0 ---------------------------------------------------------------- POOL: btulin_com | approx domain: btulin.com | CPU snapshot: 35.2% ---------------------------------------------------------------- Log: /usr/local/apache/domlogs/btulin.com --- Top IPs from latest 3000 requests --- 361 101.36.119.6 101 62.60.130.117 56 192.82.60.164 50 34.47.8.96 44 62.60.130.249 41 62.60.130.173 29 165.227.121.222 27 91.224.92.159 9 38.253.224.42 7 138.197.132.158 5 188.166.159.202 3 93.152.209.10 3 45.249.246.115 3 185.198.243.31 2 34.72.45.191 --- Top requests from latest 3000 requests --- 36 / 8 /wp-content/uploads/ 8 /wp-content/plugins/ 8 /robots.txt 5 /wp-includes/sitemaps/providers/ 5 /wp-includes/sitemaps/ 5 /wp-includes/pomo/ 5 /wp-includes/js/plupload/ 5 /wp-includes/js/codemirror/ 5 /wp-includes/js/ 5 /wp-includes/images/ 5 /wp-includes/blocks/ 5 /wp-includes/PHPMailer/ 5 /wp-includes/IXR/ 5 /wp-includes/ID3/ 5 /wp-content/upgrade/ 5 /wp-content/themes/ 5 /wp-content/languages/ 5 /wp-content/ 5 /wp-admin/css/ --- Top HTTP statuses --- 360 403 321 200 102 301 3 404 --- Suspicious recent requests --- 62.60.130.249 - - [22/Sep/2026:04:27:17 +0800] "GET /cgi-bin/ HTTP/1.1" 200 12153 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 93.152.209.10 - - [22/Sep/2026:08:00:16 +0800] "GET /.env HTTP/1.1" 404 106616 "-" "Go-http-client/1.1" 93.152.209.10 - - [22/Sep/2026:08:00:22 +0800] "GET /.git/HEAD HTTP/1.1" 301 - "-" "Go-http-client/1.1" 93.152.209.10 - - [22/Sep/2026:08:00:26 +0800] "GET /.git/HEAD HTTP/1.1" 404 106614 "http://mail.btulin.com:80/.git/HEAD" "Go-http-client/1.1" 91.224.92.159 - - [22/Sep/2026:09:35:56 +0800] "GET /cgi-bin/ HTTP/1.1" 200 12099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 34.73.26.33 - - [22/Sep/2026:10:03:41 +0800] "GET /.git/config HTTP/1.1" 404 106618 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 38.253.224.42 - - [22/Sep/2026:10:28:28 +0800] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 301 276 "-" "Go-http-client/1.1" 45.89.242.124 - - [22/Sep/2026:13:00:53 +0800] "GET /wp-admin/css/colors/wp-login.php HTTP/1.1" 301 299 "-" "Go-http-client/1.1" --- User agents for top 3 source IPs --- IP: 101.36.119.6 64 Mozilla/5.0 (iPhone; CPU iPhone OS 14_5 like Mac OS X) AppleWebKit/604.1.38 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1.38 56 Mozilla/5.0 (Linux; Android 10; SM-G525X; Build/QD4A.201116.234) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.3351.39 Mobile Safari/537.36 EdgA/138.0.3351.39 53 Mozilla/5.0 (iPhone; CPU iPhone OS 15_5 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) CriOS/127.0.6533.252 Mobile/15E148 Safari/537.36 22 Mozilla/5.0 (iPhone; CPU iPhone OS 17_7 like Mac OS X) AppleWebKit/602.4.8 (KHTML, like Gecko) Version/10.0 Mobile/15E148 Safari/602.4.8 22 Mozilla/5.0 (Linux; Android 9; Redmi A2; Build/PQ3A.230401.136) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.154 Mobile Safari/537.36 IP: 62.60.130.117 101 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 IP: 192.82.60.164 56 Cpanel-HTTP-Client/1.0 ---------------------------------------------------------------- POOL: hypnobirthing_com_my | approx domain: hypnobirthing.com.my | CPU snapshot: 29.4% ---------------------------------------------------------------- Log: /usr/local/apache/domlogs/hypnobirthing.com.my --- Top IPs from latest 3000 requests --- 56 192.82.60.164 19 1.12.55.42 5 216.244.66.244 2 45.61.170.127 2 172.98.14.110 2 162.244.146.160 2 129.212.231.236 1 93.158.99.118 1 85.208.96.193 1 8.217.145.188 1 74.7.241.61 1 74.7.175.174 1 64.89.163.227 1 64.89.161.160 1 61.53.76.114 --- Top requests from latest 3000 requests --- 27 / 3 /wp-admin/css/ 3 /robots.txt 2 /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?id=a6105c0a611b41b08f1209506350279e&ts=1789994861&wsidchk=10448327&pdata=http%253A%252F%252Fwww.hypnobirthing.com.my&cttl=0&failedChecks=webdriverCheck 2 /my-second-birth-painless-all-natural-unattended-homebirth 2 /imunify-bot-check 2 /chloe-praised-by-the-head-nure-during-the-delivery-stage-said-that-breathing-techniques-and-the-hormone-of-love-were-incredibly-effective/3/ 2 /api/session/properties 2 /about-hypnobirthing/ 2 /about-hypnobirthing 1 /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9738641&pdata=http%253A%252F%252Fhypnobirthing.com.my&id=7fa3b767c460b54a2be4d49030b349c7&ts=1790031340&cttl=0 1 /wp-json/batch/v1 1 /wp-admin/ 1 /testimonies 1 /sites/default/files/styles/thumbnail/public/article-images/2016/applying_lavendar_oil.jpg?itok=oXlkLQZH 1 /sites/default/files/styles/thumbnail/public/article-images/2013/p1000635.jpg?itok=V5lkAzpu 1 /sites/default/files/styles/thumbnail/public/article-images/2013/baby_0.jpg?itok=dzR7f2mR 1 /sites/default/files/styles/thumbnail/public/article-images/2013/1470321_797548096928550_1854560363_n.jpg?itok=3wyPN02p 1 /politics.html 1 /plugins/elrte/src/elrte.src.html --- Top HTTP statuses --- 106 200 25 301 20 404 1 403 1 302 --- Suspicious recent requests --- --- User agents for top 3 source IPs --- IP: 192.82.60.164 56 Cpanel-HTTP-Client/1.0 IP: 1.12.55.42 19 Apache-HttpClient/4.5.2 (Java/1.8.0_151) IP: 216.244.66.244 5 Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com) ================================================================ ### APACHE QUICK STATUS ================================================================ Apache Server Status for localhost (via ::1) Server Version: Apache/2.4.68 (cPanel) OpenSSL/1.1.1k mod_bwlimited/1.4 Server MPM: event Server Built: Jun 10 2026 15:42:57 -------------------------------------------------------------------------- Current Time: Tuesday, 22-Sep-2026 17:42:56 +08 Restart Time: Saturday, 19-Sep-2026 08:05:10 +08 Parent Server Config. Generation: 68 Parent Server MPM Generation: 67 Server uptime: 3 days 9 hours 37 minutes 46 seconds Server load: 8.90 6.64 6.88 Total accesses: 1316176 - Total Traffic: 28.4 GB - Total Duration: 220564939 CPU Usage: u98.08 s19.07 cu9591.16 cs827.35 - 3.59% CPU load 4.48 requests/sec - 101.4 kB/second - 22.6 kB/request - 167.58 ms/request 11 requests currently being processed, 0 workers gracefully restarting, 114 idle workers +------------------------------------------------------------------------------------------------------------------+ | | | | Connections | Threads | Async connections | | Slot | PID | Stopping |-------------------+------------------------+------------------------------------------| | | | | total | accepting | busy | graceful | idle | wait-io | writing | keep-alive | closing | |------+--------+----------+-------+-----------+------+----------+------+---------+---------+------------+---------| |2 |880519 |no |5 |yes |3 |0 |22 |0 |0 |1 |2 | |------+--------+----------+-------+-----------+------+----------+------+---------+---------+------------+---------| |4 |880625 |no |3 |yes |1 |0 |24 |0 |0 |0 |1 | |------+--------+----------+-------+-----------+------+----------+------+---------+---------+------------+---------| |5 |880626 |no |5 |yes |3 |0 |22 |0 |0 |2 |1 | |------+--------+----------+-------+-----------+------+----------+------+---------+---------+------------+---------| |9 |880627 |no |6 |yes |2 |0 |23 |0 |0 |0 |4 | |------+--------+----------+-------+-----------+------+----------+------+---------+---------+------------+---------| |10 |880680 |no |5 |yes |2 |0 |23 |0 |0 |2 |1 | |------+--------+----------+-------+-----------+------+----------+------+---------+---------+------------+---------| |Sum |5 |0 |24 | |11 |0 |114 |0 |0 |5 |9 | +------------------------------------------------------------------------------------------------------------------+ ..................................................______R_______ R_____R____........................._________________R__________ ____R____________R__W_.......................................... .................................__R___________________R_______R _______L___________......................... Scoreboard Key: "_" Waiting for Connection, "S" Starting up, "R" Reading Request, "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup, "C" Closing connection, "L" Logging, "G" Gracefully finishing, "I" Idle cleanup of worker, "." Open slot with no current process ================================================================ ### FINAL QUICK SNAPSHOT ================================================================ 17:42:57 up 3 days, 10:18, 1 user, load average: 8.90, 6.64, 6.88 USER PID %CPU %MEM ELAPSED CMD root 902573 95.0 8.2 05:56 lfd - retrieving blocklist BINARYDEFENSE astronov 906314 64.6 0.6 00:05 php-fpm: pool astronovaproductid_my mybgled 906335 62.3 0.7 00:03 php-fpm: pool mybgled_com mybgled 906230 49.1 0.7 00:07 php-fpm: pool mybgled_com toitoi 906325 39.6 0.5 00:03 php-fpm: pool toitoidixi_com_sg xingdate 906312 36.4 0.4 00:05 php-fpm: pool xingdatech_com_my mackenzi 906316 35.2 0.2 00:04 php-fpm: pool mackenzieind_com btulin 906058 33.0 0.6 00:23 php-fpm: pool btulin_com btulin 906054 31.2 0.6 00:24 php-fpm: pool btulin_com btulin 906066 27.7 0.6 00:23 php-fpm: pool btulin_com hypnobir 906043 27.1 0.2 00:26 php-fpm: pool hypnobirthing_com_my btulin 906139 26.5 0.6 00:16 php-fpm: pool btulin_com btulin 906141 25.8 0.7 00:16 php-fpm: pool btulin_com btulin 906140 24.8 0.7 00:16 php-fpm: pool btulin_com btulin 906057 24.7 0.6 00:24 php-fpm: pool btulin_com btulin 906318 24.0 0.4 00:04 php-fpm: pool btulin_com hypnobir 906062 21.6 0.2 00:23 php-fpm: pool hypnobirthing_com_my greenfee 905694 21.4 0.7 01:07 php-fpm: pool greenfeed_com_my hypnobir 906102 20.9 0.2 00:21 php-fpm: pool hypnobirthing_com_my ================================================================ Diagnostic complete Saved to: /home/rlocust/public_html/ns600-diagnostic-2026-09-22_17-42-52-k5teojh4.txt Download filename: ns600-diagnostic-2026-09-22_17-42-52-k5teojh4.txt NOTE: This report may contain server usernames, IP addresses, paths, and process details. Delete it from public_html after downloading. ================================================================