Monday 14 September 2026, 09:49 | 49 hosts audited, 0 unreachable | read-only
Needs attention. No active compromise detected, but issues were found.
Capacity at risk. One or more hosts have hit, or are near, a hard limit.
| Host | Item | Detail | Urgency |
|---|---|---|---|
| neton | Firewall not active | ufw: | high |
| alioke.co.nz | Many root SSH keys | 5 keys authorised | medium |
| alioke.co.nz | Reboot required | kernel or libc updated | medium |
| allpaintandwash.co.nz | Reboot required | kernel or libc updated | medium |
| api.thehustle.nz | Reboot required | kernel or libc updated | medium |
| artisanwindowcleaning.co.nz | Reboot required | kernel or libc updated | medium |
| baysjoinery.co.nz | Reboot required | kernel or libc updated | medium |
| beaute.co.nz | Many root SSH keys | 5 keys authorised | medium |
| beaute.co.nz | Reboot required | kernel or libc updated | medium |
| bondstchambers.co.nz | Many root SSH keys | 5 keys authorised | medium |
| bondstchambers.co.nz | Reboot required | kernel or libc updated | medium |
| bwrmnelson.com | Many root SSH keys | 5 keys authorised | medium |
| bwrmnelson.com | Reboot required | kernel or libc updated | medium |
| cedarinsight-s-1vcpu-1gb-syd1 | Reboot required | kernel or libc updated | medium |
| citypodiatry.nz | Reboot required | kernel or libc updated | medium |
| divinedesign.co.nz | Many root SSH keys | 5 keys authorised | medium |
| divinedesign.co.nz | Reboot required | kernel or libc updated | medium |
| dunedinvaluations.co.nz | Many root SSH keys | 5 keys authorised | medium |
| dunedinvaluations.co.nz | Reboot required | kernel or libc updated | medium |
| earlychildhoodonstafford.co.nz | Reboot required | kernel or libc updated | medium |
| forestsafe.co.nz | Many root SSH keys | 5 keys authorised | medium |
| gardeningsupplies.co.nz | Reboot required | kernel or libc updated | medium |
| governorscafe.co.nz | Many root SSH keys | 5 keys authorised | medium |
| governorscafe.co.nz | Reboot required | kernel or libc updated | medium |
| greatkingmotel.co.nz | Many root SSH keys | 5 keys authorised | medium |
| greatkingmotel.co.nz | Reboot required | kernel or libc updated | medium |
| hanson.net.nz | Reboot required | kernel or libc updated | medium |
| huntingnewzealanddeer.co.nz | Reboot required | kernel or libc updated | medium |
| jamesengineering.co.nz | Many root SSH keys | 5 keys authorised | medium |
| karenhanna | Many root SSH keys | 5 keys authorised | medium |
| marksandworth.nz | Many root SSH keys | 5 keys authorised | medium |
| marksandworth.nz | Reboot required | kernel or libc updated | medium |
| mikeschainsawshop.co.nz | Reboot required | kernel or libc updated | medium |
| mountainchalets.co.nz | Reboot required | kernel or libc updated | medium |
| noblepainting.co.nz | Reboot required | kernel or libc updated | medium |
| otagoequestriancentre.co.nz | Many root SSH keys | 5 keys authorised | medium |
| otagofarmersmarket.org.nz | Many root SSH keys | 5 keys authorised | medium |
| otagofarmersmarket.org.nz | Reboot required | kernel or libc updated | medium |
| paddockpark.co.nz | Reboot required | kernel or libc updated | medium |
| portaking.co.nz | Many root SSH keys | 5 keys authorised | medium |
| quaifespark.co.nz | Many root SSH keys | 5 keys authorised | medium |
| quaifespark.co.nz | Reboot required | kernel or libc updated | medium |
| reecebuildingconsultants.co.nz | Many root SSH keys | 5 keys authorised | medium |
| reecebuildingconsultants.co.nz | Reboot required | kernel or libc updated | medium |
| restaurantari.co.nz | Many root SSH keys | 5 keys authorised | medium |
| restaurantari.co.nz | Reboot required | kernel or libc updated | medium |
| sammcsorley.co.nz | Many root SSH keys | 5 keys authorised | medium |
| sellmycell.co.nz | Many root SSH keys | 5 keys authorised | medium |
| sellmycell.co.nz | Reboot required | kernel or libc updated | medium |
| southproperty.co.nz | Reboot required | kernel or libc updated | medium |
| stevwill.co.nz | Many root SSH keys | 5 keys authorised | medium |
| stevwill.co.nz | Reboot required | kernel or libc updated | medium |
| thehustle.nz | Many root SSH keys | 5 keys authorised | medium |
| upvc.co.nz | Reboot required | kernel or libc updated | medium |
| whiterobelodge.co.nz | Many root SSH keys | 5 keys authorised | medium |
| whiterobelodge.co.nz | Reboot required | kernel or libc updated | medium |
ufw:
5 keys authorised
kernel or libc updated
kernel or libc updated
kernel or libc updated
kernel or libc updated
kernel or libc updated
5 keys authorised
kernel or libc updated
5 keys authorised
kernel or libc updated
5 keys authorised
kernel or libc updated
kernel or libc updated
kernel or libc updated
5 keys authorised
kernel or libc updated
5 keys authorised
kernel or libc updated
kernel or libc updated
5 keys authorised
kernel or libc updated
5 keys authorised
kernel or libc updated
5 keys authorised
kernel or libc updated
kernel or libc updated
kernel or libc updated
5 keys authorised
5 keys authorised
5 keys authorised
kernel or libc updated
kernel or libc updated
kernel or libc updated
kernel or libc updated
5 keys authorised
5 keys authorised
kernel or libc updated
kernel or libc updated
5 keys authorised
5 keys authorised
kernel or libc updated
5 keys authorised
kernel or libc updated
5 keys authorised
kernel or libc updated
5 keys authorised
5 keys authorised
kernel or libc updated
kernel or libc updated
5 keys authorised
kernel or libc updated
5 keys authorised
kernel or libc updated
5 keys authorised
kernel or libc updated
Every host, every metric, measured. Thresholds: memory OK >25%, disk/inode OK <70%, load OK <0.7x cores, swap OK <40%. Any OOM kill is Critical.
| Host | Mem available | Swap used | Disk | Inodes | Load / core | OOM | Uptime |
|---|---|---|---|---|---|---|---|
| divinedesign.co.nz | 42.5% OK | 24% OK | 94% Critical | 12% OK | 0.01x OK | 12 | 39 weeks, 1 day, 11 hours |
| southproperty.co.nz | 46.2% OK | 70% Warn | 93% Critical | 12% OK | 0.39x OK | 12 | 37 weeks, 3 days, 1 hour, 41 |
| upvc.co.nz | 24.8% Warn | 52% Warn | 93% Critical | 20% OK | 0.04x OK | 0 | 1 year, 17 weeks, 5 days, 4 |
| thehustle.nz | 35.6% OK | 35% OK | 92% Critical | 11% OK | 0.31x OK | 36 | 27 weeks, 2 days, 20 hours, |
| otagorailtrail.co.nz | 47.9% OK | 61% Warn | 87% Critical | 12% OK | 0.41x OK | 0 | 3 weeks, 4 days, 41 minutes |
| baysjoinery-CLONE-test | 57.3% OK | 27% OK | 83% Warn | 8% OK | 0.0x OK | 0 | 2 weeks, 3 days, 15 hours, 2 |
| baysjoinery.co.nz | 44.6% OK | 36% OK | 83% Warn | 8% OK | 0.47x OK | 135 | 26 weeks, 6 days, 22 hours, |
| noblepainting.co.nz | 52.0% OK | 51% Warn | 83% Warn | 13% OK | 0.43x OK | 0 | 47 weeks, 4 days, 23 hours, |
| steaminc.org.nz | 36.2% OK | 32% OK | 83% Warn | 15% OK | 0.05x OK | 0 | 16 weeks, 6 days, 21 hours, |
| beaute.co.nz | 36.2% OK | 31% OK | 82% Warn | 13% OK | 0.2x OK | 15 | 1 year, 25 weeks, 6 days, 22 |
| bwrmnelson.com | 42.4% OK | 79% Critical | 81% Warn | 13% OK | 0.04x OK | 6 | 1 year, 20 weeks, 4 days, 1 |
| quaifespark.co.nz | 28.5% OK | 47% Warn | 81% Warn | 11% OK | 0.43x OK | 0 | 2 years, 30 weeks, 4 days, 4 |
| baystays.co.nz | 56.2% OK | 36% OK | 78% Warn | 13% OK | 0.16x OK | 0 | 23 weeks, 5 days, 18 hours, |
| otagofarmersmarket.org.nz | 43.7% OK | 44% Warn | 78% Warn | 6% OK | 0.18x OK | 606 | 48 weeks, 4 days, 23 hours, |
| bondstchambers.co.nz | 50.7% OK | 24% OK | 77% Warn | 13% OK | 0.41x OK | 0 | 1 year, 24 weeks, 2 hours, 3 |
| whiterobelodge.co.nz | 50.5% OK | 61% Warn | 77% Warn | 13% OK | 0.58x OK | 18 | 1 year, 26 weeks, 2 hours, 3 |
| hanson.net.nz | 45.9% OK | 42% Warn | 76% Warn | 12% OK | 0.12x OK | 0 | 1 year, 7 weeks, 4 days, 5 h |
| dunedinvaluations.co.nz | 47.4% OK | 57% Warn | 75% Warn | 12% OK | 0.3x OK | 0 | 1 year, 26 weeks, 3 days, 20 |
| greatkingmotel.co.nz | 49.1% OK | 32% OK | 74% Warn | 12% OK | 0.22x OK | 0 | 1 year, 26 weeks, 6 days, 22 |
| alioke.co.nz | 47.3% OK | 32% OK | 73% Warn | 11% OK | 0.14x OK | 0 | 51 weeks, 3 days, 43 minutes |
| api.thehustle.nz | 41.9% OK | 37% OK | 73% Warn | 15% OK | 0.19x OK | 0 | 1 year, 51 weeks, 5 days, 21 |
| governorscafe.co.nz | 42.9% OK | 46% Warn | 73% Warn | 12% OK | 0.18x OK | 0 | 1 year, 20 weeks, 5 days, 2 |
| jamesengineering.co.nz | 43.0% OK | 34% OK | 73% Warn | 10% OK | 0.27x OK | 33 | 27 weeks, 20 hours, 18 minut |
| reecebuildingconsultants.co.nz | 51.2% OK | 55% Warn | 73% Warn | 11% OK | 0.26x OK | 0 | 51 weeks, 3 days, 50 minutes |
| cyclecoaching.co.nz | 50.1% OK | 58% Warn | 72% Warn | 11% OK | 0.05x OK | 0 | 21 weeks, 3 days, 1 hour, 11 |
| mmp.co.nz | 47.9% OK | 36% OK | 72% Warn | 14% OK | 0.3x OK | 0 | 6 weeks, 3 days, 12 hours, 4 |
| mountainchalets.co.nz | 49.0% OK | 53% Warn | 72% Warn | 14% OK | 0.08x OK | 0 | 2 years, 13 weeks, 3 days, 2 |
| marksandworth.nz | 42.7% OK | 70% Warn | 70% Warn | 15% OK | 0.15x OK | 135 | 2 years, 20 weeks, 6 days, 4 |
| earlychildhoodonstafford.co.nz | 29.6% OK | 62% Warn | 67% OK | 16% OK | 0.03x OK | 0 | 34 weeks, 3 days, 1 hour, 12 |
| paddockpark.co.nz | 46.2% OK | 53% Warn | 67% OK | 13% OK | 0.13x OK | 0 | 2 years, 25 weeks, 2 hours, |
| restaurantari.co.nz | 43.7% OK | 36% OK | 65% OK | 13% OK | 0.04x OK | 0 | 33 weeks, 5 days, 7 hours, 4 |
| artisanwindowcleaning.co.nz | 45.6% OK | 28% OK | 64% OK | 11% OK | 0.26x OK | 0 | 2 years, 28 weeks, 3 hours, |
| huntingnewzealanddeer.co.nz | 56.6% OK | 21% OK | 64% OK | 11% OK | 0.43x OK | 0 | 1 year, 10 weeks, 2 hours, 7 |
| stevwill.co.nz | 55.4% OK | 30% OK | 64% OK | 12% OK | 0.06x OK | 0 | 1 year, 24 weeks, 4 days, 21 |
| otagoequestriancentre.co.nz | 42.7% OK | 28% OK | 62% OK | 10% OK | 0.13x OK | 0 | 40 weeks, 6 days, 3 hours, 5 |
| karenhanna | 51.0% OK | 25% OK | 61% OK | 10% OK | 0.36x OK | 0 | 19 weeks, 2 days, 22 hours, |
| citypodiatry.nz | 55.3% OK | 62% Warn | 60% OK | 13% OK | 0.37x OK | 0 | 1 year, 45 weeks, 3 days, 22 |
| portaking.co.nz | 46.3% OK | 36% OK | 57% OK | 10% OK | 0.12x OK | 0 | 41 weeks, 6 days, 34 minutes |
| cedarinsight-s-1vcpu-1gb-syd1 | 51.7% OK | 24% OK | 50% OK | 10% OK | 0.12x OK | 3 | 4 weeks, 52 minutes |
| sammcsorley.co.nz | 50.8% OK | 55% Warn | 48% OK | 9% OK | 0.11x OK | 42 | 12 weeks, 6 days, 33 minutes |
| allpaintandwash.co.nz | 55.3% OK | 64% Warn | 47% OK | 9% OK | 0.38x OK | 0 | 43 weeks, 21 hours, 24 minut |
| carisbrook-motel.co.nz | 56.3% OK | 97% Critical | 45% OK | 12% OK | 0.11x OK | 264 | 14 weeks, 1 day, 19 hours, 3 |
| wealthprotection.co.nz | 43.0% OK | 37% OK | 43% OK | 12% OK | 0.36x OK | 0 | 14 weeks, 4 days, 15 hours, |
| forestsafe.co.nz | 58.7% OK | 32% OK | 39% OK | 26% OK | 0.13x OK | 3 | 6 weeks, 2 days, 28 minutes |
| sellmycell.co.nz | 62.7% OK | 65% Warn | 35% OK | 6% OK | 0.96x Warn | 51 | 43 weeks, 6 days, 20 minutes |
| neton | 52.8% OK | 67% Warn | 35% OK | 7% OK | 0.18x OK | 0 | 2 weeks, 4 days, 8 hours, 17 |
| mikeschainsawshop.co.nz | 56.2% OK | 47% Warn | 31% OK | 6% OK | 1.42x Warn | 270 | 1 year, 34 weeks, 2 days, 21 |
| gardeningsupplies.co.nz | 76.0% OK | 53% Warn | 29% OK | 7% OK | 0.08x OK | 0 | 1 year, 40 weeks, 2 days, 23 |
| petersfarm-s-1vcpu-2gb-syd1 | 66.2% OK | 63% Warn | 17% OK | 5% OK | 0.46x OK | 0 | 5 weeks, 5 days, 10 hours, 2 |
Nothing needed removing on this run. No web shells, known malicious files, or mining processes were found on any server.
| Server | Site | File removed | What it was | What was done |
|---|---|---|---|---|
| Nothing required removing. | ||||
Auto-removal is kept deliberately narrow. It only acts on things that cannot plausibly be legitimate: obfuscated PHP (over 50KB on three lines or fewer, opening with an encoded payload), files matching a known-bad hash, and running crypto-miner processes. Everything else — other executables in temp folders, an inactive firewall, unusual login volumes — is reported and left alone, because guessing wrong there takes a client server offline.
Every removal keeps a copy. Nothing is destroyed.
| Host | IP | Cores | RAM | Top CPU | Top memory | Open ports | Firewall | Reboot req. |
|---|---|---|---|---|---|---|---|---|
| alioke.co.nz | 170.64.221.83 | 1 | 957 MB | systemd | mysqld (57 MB) | 16 | active | yes |
| allpaintandwash.co.nz | 170.64.157.23 | 1 | 961 MB | php-fpm8.3 | php-fpm8.3 (33 MB) | 17 | active | yes |
| api.thehustle.nz | 170.64.214.49 | 1 | 961 MB | mysqld | cache-main (83 MB) | 19 | active | yes |
| artisanwindowcleaning.co.nz | 170.64.148.232 | 1 | 957 MB | mysqld | cache-main (83 MB) | 18 | active | yes |
| baysjoinery-CLONE-test | 168.144.166.180 | 1 | 961 MB | systemd | nginx (63 MB) | 15 | active | no |
| baysjoinery.co.nz | 170.64.221.33 | 1 | 961 MB | mysqld | mysqld (33 MB) | 17 | active | yes |
| baystays.co.nz | 170.64.223.208 | 1 | 957 MB | systemd | mysqld (35 MB) | 14 | active | no |
| beaute.co.nz | 170.64.187.226 | 1 | 957 MB | mysqld | nginx (182 MB) | 16 | active | yes |
| bondstchambers.co.nz | 170.64.177.39 | 1 | 957 MB | mysqld | node (42 MB) | 15 | active | yes |
| bwrmnelson.com | 170.64.179.95 | 1 | 957 MB | mysqld | node (96 MB) | 15 | active | yes |
| carisbrook-motel.co.nz | 170.64.148.61 | 1 | 957 MB | mysqld | multipathd (26 MB) | 17 | active | no |
| cedarinsight-s-1vcpu-1gb-syd1 | 134.199.153.240 | 1 | 961 MB | systemd | cache-main (83 MB) | 19 | active | yes |
| citypodiatry.nz | 170.64.136.176 | 1 | 961 MB | mysqld | multipathd (26 MB) | 17 | active | yes |
| cyclecoaching.co.nz | 170.64.210.182 | 1 | 957 MB | mysqld | mysqld (36 MB) | 16 | active | no |
| divinedesign.co.nz | 170.64.143.94 | 1 | 957 MB | mysqld | mysqld (65 MB) | 16 | active | yes |
| dunedinvaluations.co.nz | 134.199.149.123 | 1 | 957 MB | systemd | nginx (48 MB) | 16 | active | yes |
| earlychildhoodonstafford.co.nz | 170.64.157.67 | 1 | 957 MB | systemd | node (204 MB) | 20 | active | yes |
| forestsafe.co.nz | 170.64.140.166 | 1 | 1963 MB | systemd | node (172 MB) | 17 | active | no |
| gardeningsupplies.co.nz | 209.38.91.238 | 1 | 1968 MB | mysqld | nginx (48 MB) | 17 | active | yes |
| governorscafe.co.nz | 170.64.155.152 | 1 | 957 MB | systemd | nginx (96 MB) | 16 | active | yes |
| greatkingmotel.co.nz | 209.38.22.42 | 1 | 957 MB | mysqld | nginx (46 MB) | 16 | active | yes |
| hanson.net.nz | 134.199.158.125 | 1 | 957 MB | mysqld | nginx (40 MB) | 16 | active | yes |
| huntingnewzealanddeer.co.nz | 170.64.220.85 | 1 | 957 MB | systemd | nginx (38 MB) | 14 | active | yes |
| jamesengineering.co.nz | 170.64.162.218 | 1 | 957 MB | php-fpm8.4 | php-fpm8.4 (122 MB) | 16 | active | no |
| karenhanna | 134.199.150.117 | 1 | 957 MB | systemd | nginx (46 MB) | 16 | active | no |
| marksandworth.nz | 170.64.133.72 | 1 | 957 MB | php-fpm8.4 | mysqld (62 MB) | 15 | active | yes |
| mikeschainsawshop.co.nz | 170.64.239.44 | 1 | 1968 MB | mysqld | php (231 MB) | 18 | active | yes |
| mmp.co.nz | 170.64.135.121 | 1 | 957 MB | php-fpm8.3 | php-fpm8.3 (92 MB) | 16 | active | no |
| mountainchalets.co.nz | 170.64.224.113 | 1 | 961 MB | mysqld | multipathd (26 MB) | 17 | active | yes |
| neton | 103.18.56.172 | 4 | 11727 MB | php-fpm | httpd (1993 MB) | 57 | no | |
| noblepainting.co.nz | 170.64.177.146 | 1 | 957 MB | systemd | mysqld (30 MB) | 16 | active | yes |
| otagoequestriancentre.co.nz | 170.64.200.69 | 1 | 957 MB | systemd | mysqld (82 MB) | 16 | active | no |
| otagofarmersmarket.org.nz | 170.64.226.204 | 1 | 1963 MB | php-fpm8.3 | nginx (159 MB) | 16 | active | yes |
| otagorailtrail.co.nz | 209.38.30.115 | 1 | 957 MB | php-fpm8.3 | nginx (45 MB) | 16 | active | no |
| paddockpark.co.nz | 170.64.236.177 | 1 | 957 MB | mysqld | nginx (75 MB) | 16 | active | yes |
| petersfarm-s-1vcpu-2gb-syd1 | 134.199.171.133 | 1 | 1967 MB | systemd | nginx (118 MB) | 19 | active | no |
| portaking.co.nz | 170.64.153.207 | 1 | 957 MB | mysqld | mysqld (48 MB) | 16 | active | no |
| quaifespark.co.nz | 170.64.216.183 | 1 | 957 MB | dotnet | dotnet (296 MB) | 18 | active | yes |
| reecebuildingconsultants.co.nz | 134.199.144.121 | 1 | 957 MB | mysqld | nginx (34 MB) | 16 | active | yes |
| restaurantari.co.nz | 134.199.154.139 | 1 | 957 MB | mysqld | node (34 MB) | 19 | active | yes |
| sammcsorley.co.nz | 170.64.216.97 | 1 | 1963 MB | mysqld | next-server (300 MB) | 19 | active | no |
| sellmycell.co.nz | 170.64.232.219 | 1 | 1968 MB | php-fpm8.1 | php-fpm8.1 (368 MB) | 17 | active | yes |
| southproperty.co.nz | 170.64.171.140 | 1 | 961 MB | mysqld | multipathd (26 MB) | 17 | active | yes |
| steaminc.org.nz | 134.199.161.46 | 1 | 957 MB | mysqld | nginx (192 MB) | 16 | active | no |
| stevwill.co.nz | 134.199.165.96 | 1 | 957 MB | systemd | multipathd (26 MB) | 16 | active | yes |
| thehustle.nz | 170.64.177.230 | 1 | 957 MB | php-fpm8.3 | nginx (74 MB) | 18 | active | no |
| upvc.co.nz | 170.64.216.114 | 1 | 957 MB | mysqld | next-server (221 MB) | 15 | active | yes |
| wealthprotection.co.nz | 134.199.146.38 | 1 | 957 MB | systemd | cache-main (82 MB) | 15 | active | no |
| whiterobelodge.co.nz | 209.38.31.204 | 1 | 957 MB | bash | mysqld (42 MB) | 16 | active | yes |
Read-only audit — nothing was changed on any server. Generated 2026-09-14 09:49.