CPU too high and affecting server

SYSTEM INFORMATION
OS type and version Ubuntu Linux 18.04.6
Webmin version 2.021
Virtualmin version 7.7
Related packages SUGGESTED
ID Owner CPU Command
22391 root 25.5 % /usr/share/webmin/authentic-theme/stats.cgi
1835 mysql 8.7 % /usr/sbin/mysqld --daemonize --pid-file=/run/mysqld/mysqld.pid
22079 anglican 5.5 % /usr/bin/php-cgi7.2
22080 anglican 5.4 % /usr/bin/php-cgi7.2
22074 anglican 5.3 % /usr/bin/php-cgi7.2
22075 anglican 5.3 % /usr/bin/php-cgi7.2
22077 anglican 5.3 % /usr/bin/php-cgi7.2
22065 anglican 5.2 % /usr/bin/php-cgi7.2
21673 anglican 4.6 % /usr/bin/php-cgi7.2
20480 anglican 4.3 % /usr/bin/php-cgi7.2
20483 anglican 4.3 % /usr/bin/php-cgi7.2
20487 anglican 4.3 % /usr/bin/php-cgi7.2
20500 anglican 4.3 % /usr/bin/php-cgi7.2
19240 anglican 4.2 % /usr/bin/php-cgi7.2
19241 anglican 4.2 % /usr/bin/php-cgi7.2
19243 anglican 4.2 % /usr/bin/php-cgi7.2
19245 anglican 4.2 % /usr/bin/php-cgi7.2
19251 anglican 4.2 % /usr/bin/php-cgi7.2
19288 anglican 4.2 % /usr/bin/php-cgi7.2
19305 anglican 4.2 % /usr/bin/php-cgi7.2
19322 anglican 4.2 % /usr/bin/php-cgi7.2
19378 anglican 4.2 % /usr/bin/php-cgi7.2
19410 anglican 4.2 % /usr/bin/php-cgi7.2
19597 anglican 4.2 % /usr/bin/php-cgi7.2
19550 anglican 4.1 % /usr/bin/php-cgi7.2
19560 anglican 4.1 % /usr/bin/php-cgi7.2
19665 anglican 4.1 % /usr/bin/php-cgi7.2
19670 anglican 4.1 % /usr/bin/php-cgi7.2
1 root 1.3 % /sbin/init
19126 kendallharmon 0.8 % /usr/bin/php-cgi7.2
19127 kendallharmon 0.7 % /usr/bin/php-cgi7.2
22277 cvalleycorvettes 0.7 % /usr/bin/php-cgi7.2
19120 kendallharmon 0.6 % /usr/bin/php-cgi7.2
21445 anglican 0.5 % /usr/bin/php-cgi7.2
89 root 0.2 % [kswapd0]
2105 root 0.1 % python3 -u bin/WALinuxAgent-2.9.1.1-py3.8.egg -run-exthandlers
6223 root 0.1 % /usr/local/ASR/Vx/bin/evtcollforw /Environment A2A_Source
19114 www-data 0.1 % /usr/sbin/apache2 -k start
2 root 0.0 % [kthreadd]
3 root 0.0 % [rcu_gp]
4 root 0.0 % [rcu_par_gp]
6 root 0.0 % [kworker/0:0H-kb]
8 root 0.0 % [mm_percpu_wq]
9 root 0.0 % [ksoftirqd/0]
10 root 0.0 % [rcu_sched]
11 root 0.0 % [migration/0]
13 root 0.0 % [cpuhp/0]
14 root 0.0 % [cpuhp/1]
15 root 0.0 % [migration/1]
16 root 0.0 % [ksoftirqd/1]
18 root 0.0 % [kworker/1:0H-kb]
19 root 0.0 % [kdevtmpfs]
20 root 0.0 % [netns]
21 root 0.0 % [rcu_tasks_kthre]
22 root 0.0 % [kauditd]
24 root 0.0 % [khungtaskd]
25 root 0.0 % [oom_reaper]
26 root 0.0 % [writeback]
27 root 0.0 % [kcompactd0]
28 root 0.0 % [ksmd]
29 root 0.0 % [khugepaged]
75 root 0.0 % [kintegrityd]
76 root 0.0 % [kblockd]
77 root 0.0 % [blkcg_punt_bio]
78 root 0.0 % [tpm_dev_wq]
79 root 0.0 % [ata_sff]
80 root 0.0 % [md]
81 root 0.0 % [edac-poller]
82 root 0.0 % [hv_vmbus_con]
83 root 0.0 % [hv_pri_chan]
84 root 0.0 % [hv_sub_chan]
85 root 0.0 % [devfreq_wq]
86 root 0.0 % [watchdogd]
90 root 0.0 % [ecryptfs-kthrea]
92 root 0.0 % [kthrotld]
93 root 0.0 % [nfit]
94 root 0.0 % [scsi_eh_0]
96 root 0.0 % [nvme-wq]
97 root 0.0 % [scsi_tmf_0]
98 root 0.0 % [scsi_eh_1]
100 root 0.0 % [nvme-reset-wq]
101 root 0.0 % [scsi_tmf_1]
102 root 0.0 % [scsi_eh_2]
104 root 0.0 % [nvme-delete-wq]
105 root 0.0 % [scsi_eh_3]
106 root 0.0 % [scsi_tmf_3]
107 root 0.0 % [scsi_tmf_2]
108 root 0.0 % [scsi_eh_4]
109 root 0.0 % [scsi_tmf_4]
110 root 0.0 % [scsi_eh_5]
111 root 0.0 % [scsi_tmf_5]
113 root 0.0 % [vfio-irqfd-clea]
116 root 0.0 % [kworker/0:1H-kb]
117 root 0.0 % [ipv6_addrconf]
126 root 0.0 % [kstrp]
129 root 0.0 % [kworker/u5:0]
195 root 0.0 % [cryptd]
526 root 0.0 % [raid5wq]
577 root 0.0 % [jbd2/sda1-8]
578 root 0.0 % [ext4-rsv-conver]
606 root 0.0 % [kworker/1:1H-kb]
664 root 0.0 % /lib/systemd/systemd-journald
680 root 0.0 % /sbin/lvmetad -f
686 root 0.0 % [iscsi_eh]
711 root 0.0 % [ib-comp-wq]
716 root 0.0 % [ib-comp-unb-wq]
725 root 0.0 % [ib_mcast]
728 root 0.0 % [ib_nl_sa_wq]
733 root 0.0 % [rdma_cm]
990 root 0.0 % /lib/systemd/systemd-udevd
1007 root 0.0 % bpfilter_umh
1018 root 0.0 % [hv_balloon]
1058 root 0.0 % /usr/lib/linux-tools/5.4.0-1109-azure/hv_kvp_daemon -n
1214 systemd-timesync 0.0 % /lib/systemd/systemd-timesyncd
1493 root 0.0 % /lib/systemd/systemd-logind
1504 root 0.0 % /usr/sbin/cron -f
1513 root 0.0 % /usr/bin/lxcfs /var/lib/lxcfs/
1518 syslog 0.0 % /usr/sbin/rsyslogd -n
1519 root 0.0 % /usr/lib/accountsservice/accounts-daemon
1520 messagebus 0.0 % /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd- …
1521 root 0.0 % [jbd2/sdc1-8]
1524 root 0.0 % [ext4-rsv-conver]
1534 root 0.0 % /usr/bin/python3 -Es /usr/sbin/firewalld --nofork --nopid
1535 daemon 0.0 % /usr/sbin/atd -f
1538 root 0.0 % /usr/sbin/irqbalance --foreground
1544 root 0.0 % /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
1546 root 0.0 % /usr/lib/policykit-1/polkitd --no-debug
1651 systemd-network 0.0 % /lib/systemd/systemd-networkd
1678 systemd-resolve 0.0 % /lib/systemd/systemd-resolved
1716 bind 0.0 % /usr/sbin/named -f -u bind
1722 root 0.0 % php-fpm: master process (/etc/php/7.2/fpm/php-fpm.conf)
1723 root 0.0 % /usr/bin/python3 /usr/share/unattended-upgrades/unattended-upgrade-shutdown --wa …
1797 root 0.0 % /opt/omi/bin/omiserver -d
1804 omi 0.0 % /opt/omi/bin/omiengine -d --logfilefd 3 --socketpair 9
1848 www-data 0.0 % php-fpm: pool www
1850 www-data 0.0 % php-fpm: pool www
1947 omsagent 0.0 % /opt/microsoft/omsagent/ruby/bin/ruby /opt/microsoft/omsagent/bin/omsagent -d /v …
1960 root 0.0 % /usr/bin/perl /usr/share/usermin/miniserv.pl /etc/usermin/miniserv.conf
1963 root 0.0 % /usr/bin/perl /usr/share/webmin/miniserv.pl --nofork /etc/webmin/miniserv.conf
1996 root 0.0 % /usr/bin/python3 -u /usr/sbin/waagent -daemon
2006 root 0.0 % /usr/sbin/dovecot -F
2039 clamav 0.0 % /usr/bin/freshclam -d --foreground=true
2046 root 0.0 % /usr/bin/python2 /var/lib/waagent/Microsoft.Azure.Diagnostics.LinuxDiagnostic-3. …
2074 root 0.0 % /usr/sbin/sshd -D
2079 root 0.0 % /sbin/agetty -o -p – \u --keep-baud 115200,38400,9600 ttyS0 vt220
2107 root 0.0 % /sbin/agetty -o -p – \u --noclear tty1 linux
2128 dovecot 0.0 % dovecot/anvil
2129 root 0.0 % dovecot/log
2131 root 0.0 % dovecot/config
2138 root 0.0 % /usr/sbin/saslauthd -a pam -c -m /var/spool/postfix/var/run/saslauthd -r -n 5
2146 root 0.0 % /usr/sbin/saslauthd -a pam -c -m /var/spool/postfix/var/run/saslauthd -r -n 5
2147 root 0.0 % /usr/sbin/saslauthd -a pam -c -m /var/spool/postfix/var/run/saslauthd -r -n 5
2148 root 0.0 % /usr/sbin/saslauthd -a pam -c -m /var/spool/postfix/var/run/saslauthd -r -n 5
2149 root 0.0 % /usr/sbin/saslauthd -a pam -c -m /var/spool/postfix/var/run/saslauthd -r -n 5
2176 root 0.0 % /usr/sbin/apache2 -k start
2184 proftpd 0.0 % proftpd: (accepting connections)
2316 postgrey 0.0 % postgrey --pidfile=/var/run/postgrey/postgrey.pid --daemonize --inet=10023
2533 root 0.0 % /usr/local/lad/bin/mdsd -A -C -c /var/lib/waagent/Microsoft.Azure.Diagnostics.Li …
2768 root 0.0 % /usr/lib/postfix/sbin/master -w
2777 postfix 0.0 % pickup -l -t unix -u -c
2778 postfix 0.0 % qmgr -l -t unix -u
2809 postfix 0.0 % tlsmgr -l -t unix -u -c
2923 root 0.0 % /usr/local/ASR/Vx/bin/appservice
2926 root 0.0 % /usr/local/ASR/Vx/bin/svagents
2978 root 0.0 % /bin/bash /usr/local/ASR/Vx/bin/uarespawndagent
3165 root 0.0 % /var/lib/waagent/Microsoft.Azure.NetworkWatcher.NetworkWatcherAgentLinux-1.4.257 …
3167 root 0.0 % /var/lib/waagent/Microsoft.Azure.NetworkWatcher.NetworkWatcherAgentLinux-1.4.257 …
3294 root 0.0 % /opt/omi/bin/omiagent 9 10 --destdir / --providerdir /opt/omi/lib --loglevel WAR …
7324 root 0.0 % [kworker/1:3-eve]
15494 root 0.0 % [kworker/0:0-cgr]
15687 root 0.0 % [kworker/u4:0-ev]
16847 root 0.0 % [kworker/u4:1-ev]
18110 root 0.0 % [kworker/1:1-cgr]
18129 root 0.0 % [kworker/0:2-cgr]
19115 www-data 0.0 % /usr/sbin/apache2 -k start
19116 www-data 0.0 % /usr/sbin/apache2 -k start
19117 www-data 0.0 % /usr/sbin/apache2 -k start
19118 www-data 0.0 % /usr/sbin/apache2 -k start
19119 www-data 0.0 % /usr/sbin/apache2 -k start
19125 www-data 0.0 % /usr/sbin/apache2 -k start
19133 www-data 0.0 % /usr/sbin/apache2 -k start
19149 www-data 0.0 % /usr/sbin/apache2 -k start
19154 www-data 0.0 % /usr/sbin/apache2 -k start
19167 www-data 0.0 % /usr/sbin/apache2 -k start
19168 www-data 0.0 % /usr/sbin/apache2 -k start
19169 www-data 0.0 % /usr/sbin/apache2 -k start
19171 www-data 0.0 % /usr/sbin/apache2 -k start
19172 www-data 0.0 % /usr/sbin/apache2 -k start
19173 www-data 0.0 % /usr/sbin/apache2 -k start
19174 www-data 0.0 % /usr/sbin/apache2 -k start
19176 www-data 0.0 % /usr/sbin/apache2 -k start
19177 www-data 0.0 % /usr/sbin/apache2 -k start
19178 www-data 0.0 % /usr/sbin/apache2 -k start
19179 www-data 0.0 % /usr/sbin/apache2 -k start
19180 www-data 0.0 % /usr/sbin/apache2 -k start
19181 www-data 0.0 % /usr/sbin/apache2 -k start
19182 www-data 0.0 % /usr/sbin/apache2 -k start
19183 www-data 0.0 % /usr/sbin/apache2 -k start
19184 www-data 0.0 % /usr/sbin/apache2 -k start
19185 www-data 0.0 % /usr/sbin/apache2 -k start
19186 www-data 0.0 % /usr/sbin/apache2 -k start
19187 www-data 0.0 % /usr/sbin/apache2 -k start
19188 www-data 0.0 % /usr/sbin/apache2 -k start
19189 www-data 0.0 % /usr/sbin/apache2 -k start
19190 www-data 0.0 % /usr/sbin/apache2 -k start
19191 www-data 0.0 % /usr/sbin/apache2 -k start
19192 www-data 0.0 % /usr/sbin/apache2 -k start
19193 www-data 0.0 % /usr/sbin/apache2 -k start
19194 www-data 0.0 % /usr/sbin/apache2 -k start
19195 www-data 0.0 % /usr/sbin/apache2 -k start
19196 www-data 0.0 % /usr/sbin/apache2 -k start
19197 www-data 0.0 % /usr/sbin/apache2 -k start
19198 www-data 0.0 % /usr/sbin/apache2 -k start
19199 www-data 0.0 % /usr/sbin/apache2 -k start
19200 www-data 0.0 % /usr/sbin/apache2 -k start
19201 www-data 0.0 % /usr/sbin/apache2 -k start
19202 www-data 0.0 % /usr/sbin/apache2 -k start
19203 www-data 0.0 % /usr/sbin/apache2 -k start
19204 www-data 0.0 % /usr/sbin/apache2 -k start
19205 www-data 0.0 % /usr/sbin/apache2 -k start
19207 www-data 0.0 % /usr/sbin/apache2 -k start
19208 www-data 0.0 % /usr/sbin/apache2 -k start
19209 www-data 0.0 % /usr/sbin/apache2 -k start
19210 www-data 0.0 % /usr/sbin/apache2 -k start
19211 www-data 0.0 % /usr/sbin/apache2 -k start
19212 www-data 0.0 % /usr/sbin/apache2 -k start
19213 www-data 0.0 % /usr/sbin/apache2 -k start
19214 www-data 0.0 % /usr/sbin/apache2 -k start
19215 www-data 0.0 % /usr/sbin/apache2 -k start
19216 www-data 0.0 % /usr/sbin/apache2 -k start
19217 www-data 0.0 % /usr/sbin/apache2 -k start
19218 www-data 0.0 % /usr/sbin/apache2 -k start
19219 www-data 0.0 % /usr/sbin/apache2 -k start
19220 www-data 0.0 % /usr/sbin/apache2 -k start
19221 www-data 0.0 % /usr/sbin/apache2 -k start
19222 www-data 0.0 % /usr/sbin/apache2 -k start
19223 www-data 0.0 % /usr/sbin/apache2 -k start
19224 www-data 0.0 % /usr/sbin/apache2 -k start
19225 www-data 0.0 % /usr/sbin/apache2 -k start
19226 www-data 0.0 % /usr/sbin/apache2 -k start
19227 www-data 0.0 % /usr/sbin/apache2 -k start
19228 www-data 0.0 % /usr/sbin/apache2 -k start
19229 www-data 0.0 % /usr/sbin/apache2 -k start
19230 www-data 0.0 % /usr/sbin/apache2 -k start
19231 www-data 0.0 % /usr/sbin/apache2 -k start
19232 www-data 0.0 % /usr/sbin/apache2 -k start
19233 www-data 0.0 % /usr/sbin/apache2 -k start
19234 www-data 0.0 % /usr/sbin/apache2 -k start
19235 www-data 0.0 % /usr/sbin/apache2 -k start
19236 www-data 0.0 % /usr/sbin/apache2 -k start
19237 www-data 0.0 % /usr/sbin/apache2 -k start
19238 www-data 0.0 % /usr/sbin/apache2 -k start
19255 www-data 0.0 % /usr/sbin/apache2 -k start
19256 www-data 0.0 % /usr/sbin/apache2 -k start
19257 www-data 0.0 % /usr/sbin/apache2 -k start
19258 www-data 0.0 % /usr/sbin/apache2 -k start
19259 www-data 0.0 % /usr/sbin/apache2 -k start
19261 www-data 0.0 % /usr/sbin/apache2 -k start
19262 www-data 0.0 % /usr/sbin/apache2 -k start
19263 www-data 0.0 % /usr/sbin/apache2 -k start
19264 www-data 0.0 % /usr/sbin/apache2 -k start
19265 www-data 0.0 % /usr/sbin/apache2 -k start
19266 www-data 0.0 % /usr/sbin/apache2 -k start
19267 www-data 0.0 % /usr/sbin/apache2 -k start
19268 www-data 0.0 % /usr/sbin/apache2 -k start
19269 www-data 0.0 % /usr/sbin/apache2 -k start
19270 www-data 0.0 % /usr/sbin/apache2 -k start
19271 www-data 0.0 % /usr/sbin/apache2 -k start
19272 www-data 0.0 % /usr/sbin/apache2 -k start
19273 www-data 0.0 % /usr/sbin/apache2 -k start
19274 www-data 0.0 % /usr/sbin/apache2 -k start
19275 www-data 0.0 % /usr/sbin/apache2 -k start
19276 www-data 0.0 % /usr/sbin/apache2 -k start
19277 www-data 0.0 % /usr/sbin/apache2 -k start
19278 www-data 0.0 % /usr/sbin/apache2 -k start
19279 www-data 0.0 % /usr/sbin/apache2 -k start
19280 www-data 0.0 % /usr/sbin/apache2 -k start
19281 www-data 0.0 % /usr/sbin/apache2 -k start
19282 www-data 0.0 % /usr/sbin/apache2 -k start
19283 www-data 0.0 % /usr/sbin/apache2 -k start
19284 www-data 0.0 % /usr/sbin/apache2 -k start
19285 www-data 0.0 % /usr/sbin/apache2 -k start
19286 www-data 0.0 % /usr/sbin/apache2 -k start
19335 www-data 0.0 % /usr/sbin/apache2 -k start
19356 www-data 0.0 % /usr/sbin/apache2 -k start
19357 www-data 0.0 % /usr/sbin/apache2 -k start
19366 www-data 0.0 % /usr/sbin/apache2 -k start
19367 www-data 0.0 % /usr/sbin/apache2 -k start
19368 www-data 0.0 % /usr/sbin/apache2 -k start
19369 www-data 0.0 % /usr/sbin/apache2 -k start
19399 www-data 0.0 % /usr/sbin/apache2 -k start
19400 www-data 0.0 % /usr/sbin/apache2 -k start
19401 www-data 0.0 % /usr/sbin/apache2 -k start
19402 www-data 0.0 % /usr/sbin/apache2 -k start
19403 www-data 0.0 % /usr/sbin/apache2 -k start
19404 www-data 0.0 % /usr/sbin/apache2 -k start
19405 www-data 0.0 % /usr/sbin/apache2 -k start
19406 www-data 0.0 % /usr/sbin/apache2 -k start
19555 www-data 0.0 % /usr/sbin/apache2 -k start
19582 www-data 0.0 % /usr/sbin/apache2 -k start
19583 www-data 0.0 % /usr/sbin/apache2 -k start
19599 www-data 0.0 % /usr/sbin/apache2 -k start
19600 www-data 0.0 % /usr/sbin/apache2 -k start
19601 www-data 0.0 % /usr/sbin/apache2 -k start
19602 www-data 0.0 % /usr/sbin/apache2 -k start
19606 www-data 0.0 % /usr/sbin/apache2 -k start
19607 www-data 0.0 % /usr/sbin/apache2 -k start
19608 www-data 0.0 % /usr/sbin/apache2 -k start
19609 www-data 0.0 % /usr/sbin/apache2 -k start
19610 www-data 0.0 % /usr/sbin/apache2 -k start
19611 www-data 0.0 % /usr/sbin/apache2 -k start
19612 www-data 0.0 % /usr/sbin/apache2 -k start
19613 www-data 0.0 % /usr/sbin/apache2 -k start
19618 www-data 0.0 % /usr/sbin/apache2 -k start
19619 www-data 0.0 % /usr/sbin/apache2 -k start
19620 www-data 0.0 % /usr/sbin/apache2 -k start
19621 www-data 0.0 % /usr/sbin/apache2 -k start
19622 www-data 0.0 % /usr/sbin/apache2 -k start
19623 www-data 0.0 % /usr/sbin/apache2 -k start
19624 www-data 0.0 % /usr/sbin/apache2 -k start
19625 www-data 0.0 % /usr/sbin/apache2 -k start
19626 www-data 0.0 % /usr/sbin/apache2 -k start
19627 www-data 0.0 % /usr/sbin/apache2 -k start
21635 www-data 0.0 % /usr/sbin/apache2 -k start
21665 root 0.0 % sleep 360
22082 postfix 0.0 % trivial-rewrite -n rewrite -t unix -u -c
22083 postfix 0.0 % smtp -t unix -u -c
22084 postfix 0.0 % smtp -t unix -u -c
22085 postfix 0.0 % smtp -t unix -u -c
22086 postfix 0.0 % smtp -t unix -u -c
22087 postfix 0.0 % smtp -t unix -u -c
22138 root 0.0 % sshd: [accepted]
22274 root 0.0 % [kworker/0:1-eve]
22302 root 0.0 % [kworker/u4:2]
22303 postfix 0.0 % bounce -z -n defer -t unix -u -c
22304 postfix 0.0 % bounce -z -n defer -t unix -u -c
22305 postfix 0.0 % bounce -z -n defer -t unix -u -c
22392 root 0.0 % /usr/share/webmin/authentic-theme/stats.cgi
22393 root 0.0 % sh -c (vmstat 1 2 2>/dev/null)
22394 root 0.0 % vmstat 1 2
22400 root 0.0 % sh -c ps --cols 2048 -eo user:80,ruser:80,group:80,rgroup:80,pid,ppid,pgid,pcpu, …
22401 root 0.0 % ps --cols 2048 -eo user:80,ruser:80,group:80,rgroup:80,pid,ppid,pgid,pcpu,rss,ni …

What is your CPU load averages on the Dashboard The stats is pretty aggressive as it gathers data some of my Virtualmin boxes regularly go up to 30-40% CPU but then fall back to sit at < 10% (15 min average)

Owch! that is serious cooking 47% average over 15min Almost certain the /usr/share/webmin/authentic-theme/stats.cgi I don’t think it has anything due to the other processes listed. \maybe someone who understand the deeper working of stats.cgi needs to have a look. @staff

I think the GUI will temporarily spike my CPU a little.

More info would be helpful. You can run the software with the lowest recommended hardware but it might not be happy with it. How many CPU cores? How much physical and virtual memory? If you logoff the interface and go in via ssh does the system recover?


My process have doubled, but my users is the same?

So pretty much OK until 7/8 June - so what happened then some install or other program update. Although I did point at stats.cgi above I am now thinking that might have just been caught in the snapshot. perhaps there is something else? If you list process activity again do you get the same results. I agree with @ID10T what is the memory situation like is there an accompanying high swap file use? To my mind there is an awfull lot of “root” owned activity - more than I would expect.
I’m afraid I don’t use apache so cannot judge on those processes they are all low or 0.0 so would guess that is pretty much normal traffic.

Hey kkallsen,
couple questions. It looks like you 3 different domains or users are eating up CPU.
Are you running Wordpress on any or all of those domains and if so were there any updates or known exploits around June 7 or 8?? Have you checked to see if any of the sights have seen “abnormal” forum activity, like spambot logins?
HTH
Joe

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.