top - 04:02:23 up 6 days, 4:38, 3 users, load average: 29.43, 42.76, 30.90 Tasks: 435 total, 1 running, 428 sleeping, 4 stopped, 2 zombie Cpu(s): 2.4% us, 10.3% sy, 29.8% ni, 48.5% id, 8.9% wa, 0.0% hi, 0.0% si Mem: 4150324k total, 4127652k used, 22672k free, 15128k buffers Swap: 6144852k total, 939484k used, 5205368k free, 1335824k cached PID CPU PERM USER GROUP TIME AUSER 21446 5.8 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> /root 21399 1.9 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 21447 1.9 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 1 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 2 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 3 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 4 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 5 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 6 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 7 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 8 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 9 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 10 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 37 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 38 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 39 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 58 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 59 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 60 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 204 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 431 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 432 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 433 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 437 0.0 lrwxrwxrwx 1 root root 0 Jul 7 04:02 cwd -> / 438 0.0 ******** Memory usages ****** total used free shared buffers cached Mem: 4053 4012 40 0 15 1305 -/+ buffers/cache: 2691 1361 Swap: 6000 912 5088 ******** IOSTAT CPU Load INFo ****** Linux 2.6.9-89.0.9.ELsmp (salmon.unixbsd.info) 07/07/2011 avg-cpu: %user %nice %sys %iowait %idle 2.41 29.84 10.36 8.92 48.47 Device: tps Blk_read/s Blk_wrtn/s Blk_read Blk_wrtn sda 58.66 350.23 1580.44 187419394 845747219 sda1 0.00 0.00 0.00 1468 11 sda2 1.15 47.70 50.78 25526732 27176552 sda3 57.51 302.52 1529.66 161890210 818570656 sdb 13.58 271.28 349.25 145170526 186894556 sdb1 13.58 271.28 349.25 145169078 186894556 sdc 0.02 0.87 0.67 464110 356360 sdc1 0.02 0.86 0.67 462662 356360 ******** vmstAT memory Load INFo ****** procs -----------memory---------- ---swap-- -----io---- --system-- ----cpu---- r b swpd free buff cache si so bi bo in cs us sy id wa 0 8 934448 41424 15896 1336528 12 13 158 721 3 21 32 10 48 9 ******** Hard Drive usages ****** root 21514 0.0 0.0 5968 652 pts/1 R+ 04:02 0:00 grep /bin/ls root 21516 0.0 0.0 6564 656 pts/1 S+ 04:02 0:00 grep find root 21518 0.0 0.0 4916 656 pts/1 S+ 04:02 0:00 grep grep 32011 10486 0.0 0.4 28048 16640 ? S 03:53 0:00 /usr/local/cpanel/3rdparty/bin/php-cgi -c /usr/local/cpanel/3rdparty/etc/horde /usr/local/cpanel/base/horde/services/portal/sidebar.php root 21520 0.0 0.0 4648 664 pts/1 S+ 04:02 0:00 grep cgi root 13057 0.0 0.1 10452 5832 ? SN 03:14 0:00 /usr/bin/perl /usr/local/cpanel/bin/leechprotect root 21399 0.3 0.1 8148 4208 ? S 04:02 0:00 /usr/bin/perl /etc/cron.hourly/modsecparse.pl root 21522 0.0 0.0 6460 664 pts/1 S+ 04:02 0:00 grep perl dpa 30846 0.0 0.1 9108 5940 ? Ss 04:00 0:00 /usr/bin/perl -w /usr/bin/GET http://www.dpa.hk/members/mailing/bulkmailing.php root 21524 0.0 0.0 6420 656 pts/1 S+ 04:02 0:00 grep gzip root 21526 0.0 0.0 4804 656 pts/1 S+ 04:02 0:00 grep pkg root 29963 0.0 0.0 1464 368 ? SN 03:36 0:00 /usr/local/cpanel/bin/cpuwatch 7.0 /scripts/pkgacct magazina /home userbackup root 29964 0.0 0.3 17844 13800 ? TNs 03:36 0:00 pkgacct - magazina - av: 3 - waiting for subprocess: 30055 root 30055 0.0 0.3 17844 12596 ? TN 03:37 0:00 pkgacct - magazina - av: 3 - subprocess ******** Spam usages tmp ****** ******** Spam usages sendmail ****** 2011-07-07 03:46:01 cwd=/var/spool 7 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 2011-07-07 03:47:01 cwd=/var/spool 7 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 2011-07-07 03:48:01 cwd=/var/spool 7 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 2011-07-07 03:49:01 cwd=/var/spool 7 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 2011-07-07 03:50:07 cwd=/var/spool 7 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 2011-07-07 03:51:01 cwd=/home/rojakurd/public_html 3 args: /usr/sbin/sendmail -t -i 2011-07-07 03:51:04 cwd=/var/spool 7 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 2011-07-07 03:52:01 cwd=/var/spool 7 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 2011-07-07 03:53:15 cwd=/var/spool 7 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 2011-07-07 03:54:04 cwd=/var/spool 7 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 2011-07-07 03:55:02 cwd=/var/spool 7 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 2011-07-07 03:56:06 cwd=/var/spool 7 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 2011-07-07 03:57:01 cwd=/var/spool 7 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 2011-07-07 03:58:11 cwd=/home/rojakurd/public_html 3 args: /usr/sbin/sendmail -t -i 2011-07-07 03:58:57 cwd=/var/spool 7 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 2011-07-07 03:59:27 cwd=/var/spool 7 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 2011-07-07 04:00:18 cwd=/var/spool 7 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 2011-07-07 04:00:18 cwd=/var/spool 7 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 2011-07-07 04:02:16 cwd=/var/spool 7 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t 2011-07-07 04:02:16 cwd=/var/spool 7 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t ******** Spam usages home ****** 2011-07-07 03:45:43 1Qem5U-000547-UP <= wendy@affinity.com.cn H=(thtfcomputer) [121.206.75.90]:4355 I=[208.87.241.2]:25 P=esmtpa A=courier_login:wendy@affinity.com.cn S=1717 T="\266\340\307\351\315\346\274\322\327\250\323\303Idj-fu110" from for dj-fu11@163.com djh@sinohome.com dragonheart_xyz@tom.com dukes@sina.com duzuolan520@163.com egh-egh@hotmail.com fengbin_100@163.com fengforever85@sohu.com fenglifa@126.com flx@inhe.net forest009@sohu.com foreverwaits@sina.com 2011-07-07 03:45:44 1Qem5U-000547-UP ** djh@sinohome.com F= R=checkspam2: Domain affinity.com.cn has exceeded the max emails per hour (60) allowed. Message discarded. 2011-07-07 03:45:49 1Qem5a-000547-7m <= wendy@affinity.com.cn H=(thtfcomputer) [121.206.75.90]:4355 I=[208.87.241.2]:25 P=esmtpa A=courier_login:wendy@affinity.com.cn S=1759 T="\266\340\307\351\315\346\274\322\327\250\323\303Ixiaotaiyangaa9" from for xiaotaiyangaa@126.com xiedan321@yahoo.com.cn xiyu3558@sina.com xkcydt@sina.com xqw1984712@yahoo.com.cn xuewenliu@163.com xxcshome@126.com xxjsjyz@zj.com xxtkele8@163.com xygds@sina.com 2011-07-07 03:45:49 1Qem5a-000547-7m ** xxcshome@126.com F= R=checkspam2: Domain affinity.com.cn has exceeded the max emails per hour (60) allowed. Message discarded. 2011-07-07 03:51:01 cwd=/home/rojakurd/public_html 3 args: /usr/sbin/sendmail -t -i 2011-07-07 03:58:11 cwd=/home/rojakurd/public_html 3 args: /usr/sbin/sendmail -t -i 2011-07-07 03:59:33 failed to expand condition "${if exists {$home/etc/$domain/quota}{${if > {${lookup{$local_part}lsearch{$home/etc/$domain/quota}{$value}{0}}}{0}{${if eq {${if exists {$home/mail/$domain/$local_part/maildirsize}{1}{0}}}{0}{${if > {${run {/usr/local/cpanel/bin/eximwrap GETDISKUSED $local_part $domain}}}{${lookup{$local_part}lsearch{$home/etc/$domain/quota}{$value}{0}}}{true}{false}}}{${perl{checkuserquota}{$domain}{$local_part}{$message_size}{${lookup{$local_part}lsearch{$home/etc/$domain/quota}{$value}}}{$home/mail/$domain/$local_part/maildirsize}}}}}{false}}}{false}}" for virtual_user_maildir_overquota router: command timed out 2011-07-07 04:00:33 failed to expand condition "${if exists {$home/etc/$domain/quota}{${if > {${lookup{$local_part}lsearch{$home/etc/$domain/quota}{$value}{0}}}{0}{${if eq {${if exists {$home/mail/$domain/$local_part/maildirsize}{1}{0}}}{0}{${if > {${run {/usr/local/cpanel/bin/eximwrap GETDISKUSED $local_part $domain}}}{${lookup{$local_part}lsearch{$home/etc/$domain/quota}{$value}{0}}}{true}{false}}}{${perl{checkuserquota}{$domain}{$local_part}{$message_size}{${lookup{$local_part}lsearch{$home/etc/$domain/quota}{$value}}}{$home/mail/$domain/$local_part/maildirsize}}}}}{false}}}{false}}" for virtual_user_maildir_overquota router: command timed out 2011-07-07 04:00:40 failed to expand condition "${if exists {$home/etc/$domain/quota}{${if > {${lookup{$local_part}lsearch{$home/etc/$domain/quota}{$value}{0}}}{0}{${if eq {${if exists {$home/mail/$domain/$local_part/maildirsize}{1}{0}}}{0}{${if > {${run {/usr/local/cpanel/bin/eximwrap GETDISKUSED $local_part $domain}}}{${lookup{$local_part}lsearch{$home/etc/$domain/quota}{$value}{0}}}{true}{false}}}{${perl{checkuserquota}{$domain}{$local_part}{$message_size}{${lookup{$local_part}lsearch{$home/etc/$domain/quota}{$value}}}{$home/mail/$domain/$local_part/maildirsize}}}}}{false}}}{false}}" for virtual_user_maildir_overquota router: command timed out 2011-07-07 04:00:58 failed to expand condition "${if exists {$home/etc/$domain/quota}{${if > {${lookup{$local_part}lsearch{$home/etc/$domain/quota}{$value}{0}}}{0}{${if eq {${if exists {$home/mail/$domain/$local_part/maildirsize}{1}{0}}}{0}{${if > {${run {/usr/local/cpanel/bin/eximwrap GETDISKUSED $local_part $domain}}}{${lookup{$local_part}lsearch{$home/etc/$domain/quota}{$value}{0}}}{true}{false}}}{${perl{checkuserquota}{$domain}{$local_part}{$message_size}{${lookup{$local_part}lsearch{$home/etc/$domain/quota}{$value}}}{$home/mail/$domain/$local_part/maildirsize}}}}}{false}}}{false}}" for virtual_user_maildir_overquota router: command timed out ******** Spam usages nobody ****** 2011-07-07 03:45:46 1Qem5T-00054a-Ee => anthonywainman@googlemail.com F= R=lookuphost T=remote_smtp S=3066 H=gmail-smtp-in.l.google.com [74.125.65.27] X=TLSv1:RC4-SHA:128 DN="/C=US/ST=California/L=Mountain View/O=Google Inc/CN=smtp.gmail.com" C="250 2.0.0 OK 1310035535 u26si1436986ybi.58" 2011-07-07 03:51:04 1QemAf-0007mq-GK <= nobody@salmon.unixbsd.info U=nobody P=local S=2681 id=8974793645.20110707125056@gmail.com T="Job not to be missed!" from for mohamedasif.patel@gmail.com mohamedasif.patel@gmail.com 2011-07-07 03:51:13 1QemAf-0007mq-GK => mohamedasif.patel@gmail.com F= R=lookuphost T=remote_smtp S=3162 H=gmail-smtp-in.l.google.com [74.125.67.27] X=TLSv1:RC4-SHA:128 DN="/C=US/ST=California/L=Mountain View/O=Google Inc/CN=mx.google.com" C="250 2.0.0 OK 1310035863 b1si36689875yho.23" 2011-07-07 03:58:54 1QemHb-0007xp-W0 <= nobody@salmon.unixbsd.info U=nobody P=local S=2525 id=8254053916.20110707125405@gmail.com T="Job Alert for Simon Siegertsz" from for sgsiegertsz@googlemail.com sgsiegertsz@googlemail.com 2011-07-07 03:59:36 1QemHb-0007xp-W0 => sgsiegertsz@googlemail.com F= R=lookuphost T=remote_smtp S=3019 H=gmail-smtp-in.l.google.com [74.125.65.27] X=TLSv1:RC4-SHA:128 DN="/C=US/ST=California/L=Mountain View/O=Google Inc/CN=mx.google.com" C="250 2.0.0 OK 1310036341 j68si21489696yhe.66" 2011-07-07 04:02:15 1QemJe-00082B-GQ <= root@salmon.unixbsd.info U=root P=local S=767 T="Cron /root/nobody_check/mailalert.sh" from for root ******** Spam usages hostname ****** 2011-07-07 03:45:45 1Qem5U-00054d-C1 => affinity_services@hotmail.com (wendy@affinity.com.cn) F=<> R=dk_lookuphost T=dk_remote_smtp S=6180 H=mx2.hotmail.com [65.54.188.94] C="250 Queued mail for delivery" 2011-07-07 03:45:46 1Qem5T-00054a-Ee => anthonywainman@googlemail.com F= R=lookuphost T=remote_smtp S=3066 H=gmail-smtp-in.l.google.com [74.125.65.27] X=TLSv1:RC4-SHA:128 DN="/C=US/ST=California/L=Mountain View/O=Google Inc/CN=smtp.gmail.com" C="250 2.0.0 OK 1310035535 u26si1436986ybi.58" 2011-07-07 03:45:49 1Qem5Y-00054s-NU => affinity_services@hotmail.com (wendy@affinity.com.cn) F=<> R=dk_lookuphost T=dk_remote_smtp S=4576 H=mx3.hotmail.com [65.55.92.184] C="250 Queued mail for delivery" 2011-07-07 03:45:50 1Qem5d-000558-Iw => affinity_services@hotmail.com (wendy@affinity.com.cn) F=<> R=dk_lookuphost T=dk_remote_smtp S=4326 H=mx2.hotmail.com [65.54.188.110] C="250 Queued mail for delivery" 2011-07-07 03:46:02 1Qem5p-00055a-JT <= gk82in@salmon.unixbsd.info U=gk82in P=local S=701 T="Cron http://votio.com/ticket/ge/api/cron.php" from for gk82in 2011-07-07 03:46:02 1Qem5p-00055a-JT => gk82in F= R=localuser T=local_delivery S=830 2011-07-07 03:47:02 1Qem6n-00057M-ML <= gk82in@salmon.unixbsd.info U=gk82in P=local S=701 T="Cron http://votio.com/ticket/ge/api/cron.php" from for gk82in 2011-07-07 03:47:02 1Qem6n-00057M-ML => gk82in F= R=localuser T=local_delivery S=830 2011-07-07 03:47:54 H=(server.destekajans.com) [95.211.127.14]:36789 I=[208.87.241.2]:25 F= rejected RCPT : You do not have sufficient privileges to send mail to this address. Please authenticate and try again. 2011-07-07 03:48:01 1Qem7l-00058d-Nj <= gk82in@salmon.unixbsd.info U=gk82in P=local S=701 T="Cron http://votio.com/ticket/ge/api/cron.php" from for gk82in 2011-07-07 03:48:01 1Qem7l-00058d-Nj => gk82in F= R=localuser T=local_delivery S=830 2011-07-07 03:49:01 1Qem8j-0007PU-7U <= gk82in@salmon.unixbsd.info U=gk82in P=local S=701 T="Cron http://votio.com/ticket/ge/api/cron.php" from for gk82in 2011-07-07 03:49:02 1Qem8j-0007PU-7U => gk82in F= R=localuser T=local_delivery S=830 2011-07-07 03:50:36 1Qem9n-0007io-SH <= gk82in@salmon.unixbsd.info U=gk82in P=local S=701 T="Cron http://votio.com/ticket/ge/api/cron.php" from for gk82in 2011-07-07 03:51:00 1Qem9n-0007io-SH => gk82in F= R=localuser T=local_delivery S=830 2011-07-07 03:51:04 1QemAf-0007mq-GK <= nobody@salmon.unixbsd.info U=nobody P=local S=2681 id=8974793645.20110707125056@gmail.com T="Job not to be missed!" from for mohamedasif.patel@gmail.com mohamedasif.patel@gmail.com 2011-07-07 03:51:07 1QemAi-0007mx-3w <= gk82in@salmon.unixbsd.info U=gk82in P=local S=701 T="Cron http://votio.com/ticket/ge/api/cron.php" from for gk82in 2011-07-07 03:51:08 1QemAi-0007mx-3w => gk82in F= R=localuser T=local_delivery S=830 2011-07-07 03:51:13 1QemAf-0007mq-GK => mohamedasif.patel@gmail.com F= R=lookuphost T=remote_smtp S=3162 H=gmail-smtp-in.l.google.com [74.125.67.27] X=TLSv1:RC4-SHA:128 DN="/C=US/ST=California/L=Mountain View/O=Google Inc/CN=mx.google.com" C="250 2.0.0 OK 1310035863 b1si36689875yho.23" 2011-07-07 03:51:24 1QemAn-0007nV-1Z => affinity_services@hotmail.com (wendy@affinity.com.cn) F=<> R=dk_lookuphost T=dk_remote_smtp S=5933 H=mx4.hotmail.com [65.55.37.120] C="250 Queued mail for delivery" 2011-07-07 03:51:30 1QemAp-0007nc-Ce => affinity_services@hotmail.com (wendy@affinity.com.cn) F=<> R=dk_lookuphost T=dk_remote_smtp S=4754 H=mx3.hotmail.com [65.54.188.126] C="250 Queued mail for delivery" 2011-07-07 03:51:33 1QemB1-0007oQ-Ot => affinity_services@hotmail.com (wendy@affinity.com.cn) F=<> R=dk_lookuphost T=dk_remote_smtp S=5326 H=mx3.hotmail.com [65.55.37.72] C="250 Queued mail for delivery" 2011-07-07 03:51:37 1QemBA-0007oe-Tp => affinity_services@hotmail.com (wendy@affinity.com.cn) F=<> R=dk_lookuphost T=dk_remote_smtp S=5306 H=mx2.hotmail.com [65.54.188.94] C="250 Queued mail for delivery" 2011-07-07 03:51:40 1QemBE-0007ot-R3 => affinity_services@hotmail.com (wendy@affinity.com.cn) F=<> R=dk_lookuphost T=dk_remote_smtp S=5304 H=mx1.hotmail.com [65.55.37.104] C="250 Queued mail for delivery" 2011-07-07 03:52:03 1QemBd-0007q9-1c <= gk82in@salmon.unixbsd.info U=gk82in P=local S=701 T="Cron http://votio.com/ticket/ge/api/cron.php" from for gk82in 2011-07-07 03:52:03 1QemBd-0007q9-1c => gk82in F= R=localuser T=local_delivery S=830 2011-07-07 03:52:43 1QemBx-0002g8-PL => affinity_services@hotmail.com (wendy@affinity.com.cn) F=<> R=dk_lookuphost T=dk_remote_smtp S=4188 H=mx4.hotmail.com [65.54.188.94] C="250 Queued mail for delivery" 2011-07-07 03:52:45 1QemCD-0002gb-5J => affinity_services@hotmail.com (wendy@affinity.com.cn) F=<> R=dk_lookuphost T=dk_remote_smtp S=4196 H=mx4.hotmail.com [65.55.37.88] C="250 Queued mail for delivery" 2011-07-07 03:52:46 1QemC8-0002gI-Ip => affinity_services@hotmail.com (wendy@affinity.com.cn) F=<> R=dk_lookuphost T=dk_remote_smtp S=5680 H=mx3.hotmail.com [65.55.37.88] C="250 Queued mail for delivery" 2011-07-07 03:52:56 1QemCK-0002gy-Ri => affinity_services@hotmail.com (wendy@affinity.com.cn) F=<> R=dk_lookuphost T=dk_remote_smtp S=5952 H=mx1.hotmail.com [65.54.188.126] C="250 Queued mail for delivery" 2011-07-07 03:52:58 1QemCS-0002hN-Pu => affinity_services@hotmail.com (wendy@affinity.com.cn) F=<> R=dk_lookuphost T=dk_remote_smtp S=6252 H=mx3.hotmail.com [65.55.92.168] C="250 Queued mail for delivery" 2011-07-07 03:53:30 1QemCp-0002iN-C7 <= gk82in@salmon.unixbsd.info U=gk82in P=local S=701 T="Cron http://votio.com/ticket/ge/api/cron.php" from for gk82in 2011-07-07 03:53:56 1QemCp-0002iN-C7 => gk82in F= R=localuser T=local_delivery S=830 2011-07-07 03:54:05 1QemDc-0002jU-2T <= gk82in@salmon.unixbsd.info U=gk82in P=local S=701 T="Cron http://votio.com/ticket/ge/api/cron.php" from for gk82in 2011-07-07 03:54:07 1QemDc-0002jU-2T => gk82in F= R=localuser T=local_delivery S=830 2011-07-07 03:55:05 1QemEY-0002kZ-HX <= gk82in@salmon.unixbsd.info U=gk82in P=local S=701 T="Cron http://votio.com/ticket/ge/api/cron.php" from for gk82in 2011-07-07 03:55:08 1QemEY-0002kZ-HX => gk82in F= R=localuser T=local_delivery S=830 2011-07-07 03:55:49 1QemFE-0002mn-9R => affinity_services@hotmail.com (wendy@affinity.com.cn) F=<> R=dk_lookuphost T=dk_remote_smtp S=15748 H=mx3.hotmail.com [65.55.92.136] C="250 Queued mail for delivery" 2011-07-07 03:56:09 1QemFa-0002nE-7P <= gk82in@salmon.unixbsd.info U=gk82in P=local S=701 T="Cron http://votio.com/ticket/ge/api/cron.php" from for gk82in 2011-07-07 03:56:20 1QemFa-0002nE-7P => gk82in F= R=localuser T=local_delivery S=830 2011-07-07 03:57:01 1QemGT-0007u8-5y <= gk82in@salmon.unixbsd.info U=gk82in P=local S=701 T="Cron http://votio.com/ticket/ge/api/cron.php" from for gk82in 2011-07-07 03:57:01 1QemGT-0007u8-5y => gk82in F= R=localuser T=local_delivery S=830 2011-07-07 03:58:53 1QemH5-0007wW-Gs <= root@salmon.unixbsd.info U=root P=local S=177442 T="Status warning from salmon.unixbsd.info" from for monitor@gazzin.com 2011-07-07 03:58:54 1QemHb-0007xp-W0 <= nobody@salmon.unixbsd.info U=nobody P=local S=2525 id=8254053916.20110707125405@gmail.com T="Job Alert for Simon Siegertsz" from for sgsiegertsz@googlemail.com sgsiegertsz@googlemail.com 2011-07-07 03:59:12 1QemH5-0007wW-Gs ** monitor@gazzin.com F= R=lookuphost T=remote_smtp: SMTP error from remote mail server after initial connection: host gazzin.com [199.119.200.5]: 554 5.7.2 Service denied, closing transmission channel 2011-07-07 03:59:25 1QemIO-0007y8-OJ <= gk82in@salmon.unixbsd.info U=gk82in P=local S=701 T="Cron http://votio.com/ticket/ge/api/cron.php" from for gk82in 2011-07-07 03:59:36 1QemHb-0007xp-W0 => sgsiegertsz@googlemail.com F= R=lookuphost T=remote_smtp S=3019 H=gmail-smtp-in.l.google.com [74.125.65.27] X=TLSv1:RC4-SHA:128 DN="/C=US/ST=California/L=Mountain View/O=Google Inc/CN=mx.google.com" C="250 2.0.0 OK 1310036341 j68si21489696yhe.66" 2011-07-07 03:59:52 1QemIO-0007y8-OJ => gk82in F= R=localuser T=local_delivery S=830 2011-07-07 04:00:01 1QemIp-0007yr-B5 <= gk82in@salmon.unixbsd.info U=gk82in P=local S=701 T="Cron http://votio.com/ticket/ge/api/cron.php" from for gk82in 2011-07-07 04:00:02 1QemIc-0007yT-IA <= <> R=1QemH5-0007wW-Gs U=mailnull P=local S=107965 T="Mail delivery failed: returning message to sender" from <> for root@salmon.unixbsd.info 2011-07-07 04:00:05 1QemIc-0007yT-IA => /dev/null F=<> R=local_aliases T=**bypassed** S=0 2011-07-07 04:00:13 1QemIp-0007yr-B5 => gk82in F= R=localuser T=local_delivery S=830 2011-07-07 04:00:28 1QemJe-000827-1U <= gk82in@salmon.unixbsd.info U=gk82in P=local S=701 T="Cron http://votio.com/ticket/ge/api/cron.php" from for gk82in 2011-07-07 04:01:08 1QemJe-000827-1U => gk82in F= R=localuser T=local_delivery S=830 2011-07-07 04:02:10 1QemKY-0000Dj-Ir <= root@salmon.unixbsd.info U=root P=local S=1128 T="Nobody Check on salmon.unixbsd.info" from for paul@gazzin.com 2011-07-07 04:02:11 1QemKj-0000FJ-EB <= <> U=mailnull P=local S=1152 T="Mail failure - malformed recipient address" from <> for root@salmon.unixbsd.info 2011-07-07 04:02:11 1QemKl-0001If-M0 <= root@salmon.unixbsd.info U=root P=local S=177381 T="Status warning from salmon.unixbsd.info" from for monitor@gazzin.com 2011-07-07 04:02:12 1QemKj-0000FI-E6 <= <> U=mailnull P=local S=1151 T="Mail failure - malformed recipient address" from <> for root@salmon.unixbsd.info 2011-07-07 04:02:13 1QemKj-0000FI-E6 => /dev/null F=<> R=local_aliases T=**bypassed** S=0 2011-07-07 04:02:13 1QemKj-0000FJ-EB => /dev/null F=<> R=local_aliases T=**bypassed** S=0 2011-07-07 04:02:15 1QemJe-00082B-GQ <= root@salmon.unixbsd.info U=root P=local S=767 T="Cron /root/nobody_check/mailalert.sh" from for root 2011-07-07 04:02:16 1QemJe-00082B-GQ => /dev/null F= R=local_aliases T=**bypassed** S=0 2011-07-07 04:02:17 1QemKY-0000Dj-Ir ** paul@gazzin.com F= R=lookuphost T=remote_smtp: SMTP error from remote mail server after initial connection: host gazzin.com [199.119.200.5]: 554 5.7.2 Service denied, closing transmission channel 2011-07-07 04:02:17 1QemLY-0005Yp-Gm <= gk82in@salmon.unixbsd.info U=gk82in P=local S=701 T="Cron http://votio.com/ticket/ge/api/cron.php" from for gk82in 2011-07-07 04:02:19 1QemLY-0005Z8-TR <= gk82in@salmon.unixbsd.info U=gk82in P=local S=701 T="Cron http://votio.com/ticket/ge/api/cron.php" from for gk82in 2011-07-07 04:02:20 1QemLZ-0005ZN-Q0 <= <> R=1QemKY-0000Dj-Ir U=mailnull P=local S=2089 T="Mail delivery failed: returning message to sender" from <> for root@salmon.unixbsd.info 2011-07-07 04:02:20 1QemLZ-0005ZN-Q0 => /dev/null F=<> R=local_aliases T=**bypassed** S=0 2011-07-07 04:02:22 1QemKl-0001If-M0 ** monitor@gazzin.com F= R=lookuphost T=remote_smtp: SMTP error from remote mail server after initial connection: host gazzin.com [199.119.200.5]: 554 5.7.2 Service denied, closing transmission channel ******** Apache usages ~ ****** ******** Apache usages Server Status ****** ******** Apache usages Acess logs ****** 174.138.162.154 - - [07/Jul/2011:03:17:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:18:45 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:19:39 -0700] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [07/Jul/2011:03:19:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:20:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:20:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:21:45 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:22:48 -0700] "GET / HTTP/1.1" 200 111 66.249.71.12 - - [07/Jul/2011:03:23:09 -0700] "GET /robots.txt HTTP/1.1" 404 2251 66.249.71.12 - - [07/Jul/2011:03:23:09 -0700] "GET /404.shtml HTTP/1.1" 200 2252 174.138.162.154 - - [07/Jul/2011:03:23:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:23:48 -0700] "GET / HTTP/1.1" 200 111 208.115.111.250 - - [07/Jul/2011:03:24:32 -0700] "GET /robots.txt HTTP/1.1" 404 2267 208.115.111.250 - - [07/Jul/2011:03:24:32 -0700] "GET /robots.txt HTTP/1.1" 404 2267 208.115.111.250 - - [07/Jul/2011:03:24:32 -0700] "GET /robots.txt HTTP/1.1" 404 2267 208.115.111.250 - - [07/Jul/2011:03:24:32 -0700] "GET /robots.txt HTTP/1.1" 404 2267 208.115.111.250 - - [07/Jul/2011:03:24:32 -0700] "GET /robots.txt HTTP/1.1" 404 2267 208.115.111.250 - - [07/Jul/2011:03:24:32 -0700] "GET /robots.txt HTTP/1.1" 404 2271 208.115.111.250 - - [07/Jul/2011:03:24:32 -0700] "GET /robots.txt HTTP/1.1" 404 2271 208.115.111.250 - - [07/Jul/2011:03:24:32 -0700] "GET /robots.txt HTTP/1.1" 404 2267 208.115.111.250 - - [07/Jul/2011:03:24:32 -0700] "GET /robots.txt HTTP/1.1" 404 2267 208.115.111.250 - - [07/Jul/2011:03:24:33 -0700] "GET /robots.txt HTTP/1.1" 404 2267 174.138.162.154 - - [07/Jul/2011:03:24:39 -0700] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [07/Jul/2011:03:24:45 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:25:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:26:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:26:48 -0700] "GET / HTTP/1.1" 200 111 66.249.71.115 - - [07/Jul/2011:03:26:56 -0700] "GET /robots.txt HTTP/1.1" 404 2227 66.249.71.115 - - [07/Jul/2011:03:26:56 -0700] "GET /500.shtml HTTP/1.1" 200 2291 174.138.162.154 - - [07/Jul/2011:03:27:45 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:28:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:29:39 -0700] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [07/Jul/2011:03:29:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:29:48 -0700] "GET / HTTP/1.1" 200 111 66.249.71.182 - - [07/Jul/2011:03:30:09 -0700] "GET /robots.txt HTTP/1.1" 404 2263 66.249.71.182 - - [07/Jul/2011:03:30:09 -0700] "GET /manual/images/mod_ssl_sb.gif HTTP/1.1" 200 2007 66.249.71.162 - - [07/Jul/2011:03:30:14 -0700] "GET /robots.txt HTTP/1.1" 404 2419 66.249.71.162 - - [07/Jul/2011:03:30:14 -0700] "GET /404.shtml HTTP/1.1" 200 2420 174.138.162.154 - - [07/Jul/2011:03:30:45 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:31:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:32:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:32:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:33:45 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:34:39 -0700] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [07/Jul/2011:03:34:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:35:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:35:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:36:45 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:37:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:38:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:38:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:39:39 -0700] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [07/Jul/2011:03:39:45 -0700] "GET / HTTP/1.1" 200 111 46.105.24.61 - - [07/Jul/2011:03:40:41 -0700] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [07/Jul/2011:03:40:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:41:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:41:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:42:45 -0700] "GET / HTTP/1.1" 200 111 94.74.165.10 - - [07/Jul/2011:03:42:55 -0700] "rMessages HTTP/1.1" 400 2192 174.138.162.154 - - [07/Jul/2011:03:43:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:44:39 -0700] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [07/Jul/2011:03:44:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:44:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:45:45 -0700] "GET / HTTP/1.1" 200 111 94.74.165.10 - - [07/Jul/2011:03:46:29 -0700] "rMessages HTTP/1.1" 400 2192 174.138.162.154 - - [07/Jul/2011:03:46:48 -0700] "GET / HTTP/1.1" 200 111 114.80.93.57 - - [07/Jul/2011:03:46:53 -0700] "GET / HTTP/1.1" 200 111 114.80.93.57 - - [07/Jul/2011:03:46:54 -0700] "GET /cgi-sys/defaultwebpage.cgi HTTP/1.1" 200 47 218.26.121.228 - - [07/Jul/2011:03:47:03 -0700] "GET //dbadmin/ HTTP/1.1" 404 2175 218.26.121.228 - - [07/Jul/2011:03:47:03 -0700] "GET //dbadmin/ HTTP/1.1" 404 2171 218.26.121.228 - - [07/Jul/2011:03:47:04 -0700] "GET //dbadmin/ HTTP/1.1" 404 2171 218.26.121.228 - - [07/Jul/2011:03:47:04 -0700] "GET //dbadmin/ HTTP/1.1" 404 2171 218.26.121.228 - - [07/Jul/2011:03:47:04 -0700] "GET /suspended.page/ HTTP/1.1" 200 3448 218.26.121.228 - - [07/Jul/2011:03:47:03 -0700] "GET //dbadmin/ HTTP/1.1" 404 2175 218.26.121.228 - - [07/Jul/2011:03:47:03 -0700] "GET //dbadmin/ HTTP/1.1" 404 2175 218.26.121.228 - - [07/Jul/2011:03:47:05 -0700] "GET //dbadmin/ HTTP/1.1" 404 2171 218.26.121.228 - - [07/Jul/2011:03:47:05 -0700] "GET //dbadmin/ HTTP/1.1" 404 2171 218.26.121.228 - - [07/Jul/2011:03:47:05 -0700] "GET //dbadmin/ HTTP/1.1" 404 2171 174.138.162.154 - - [07/Jul/2011:03:47:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:47:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:48:45 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:49:39 -0700] "GET / HTTP/1.0" 200 111 174.138.162.154 - - [07/Jul/2011:03:49:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:50:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:50:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:51:45 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:52:48 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:54:41 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:54:41 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:57:25 -0700] "GET / HTTP/1.1" 200 111 174.138.162.154 - - [07/Jul/2011:03:57:24 -0700] "GET / HTTP/1.0" 200 111 Total no of Mail connection Socket are 25 and 110 ==> 14 and 9 Total no of Mail process are ==> 12 Total no of apche connection Socket are 80 ==> 475 Total no of apche process are ==> 263 Total no of mysql connection Socket are 3306 ==> 2 Total no of mysql process are ==> 375 ******** Kernel Logs ~ ******