INCIDENT 2026-08-13 03:39:12 trigger: php_rss=1592MB mysql_conn=16 ================================================================== load: 6.77 2.45 1.42 32/624 424037 ncpu:10 mem_avail: 6517MB/11729MB (55.6%) swap_used:950MB swapout:0/s blocked(D):0 running:14 iowait:0.1% steal:0.0% php: 15 procs / 1592MB heaviest user: tubesupplies (13 procs, 1350MB) apache: 36 procs tcp_estab: 50 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1697 tubesupplies 17 1412 root 237 902 nobody 35 558 netdata 8 277 corpkicks 1 219 cpanellogin 1 49 evolution 5 44 lowrange 3 38 mailman 20 30 dovenull 6 26 wp-toolkit 6 22 mailnull 3 17 zabbix 1 15 aaa 1 13 infinium 1 12 kurri 1 11 dovecot 3 9 named 1 7 nscd 1 3 --- php workers by user --- USER PROCS RSS_MB tubesupplies 16 1440 corpkicks 1 222 evolution 1 39 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6128 MB Active(file): 4829 MB Inactive(file): 960 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 506 MB CommitLimit: 9960 MB Committed_AS: 9533 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 342014 root 02:27:56 7368 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 184574 1 mysql 1738748 3.5 Ssl 07:05:41 /usr/sbin/mariadbd 423964 422754 corpkicks 242924 48.0 S 00:03 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1220 1 netdata 225948 2.5 Ssl 44-17:29:14 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 388651 382990 root 183320 0.0 S 01:05:14 spamd child 382990 1 root 174872 0.1 Ss 01:16:26 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 388652 382990 root 167348 0.0 S 01:05:14 spamd child 423966 423259 tubesupplies 153136 86.5 S 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 423965 423304 tubesupplies 153020 60.3 S 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 423962 423268 tubesupplies 152976 62.0 S 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 423963 423251 tubesupplies 152640 59.3 S 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 423967 423270 tubesupplies 138384 73.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 423961 423186 tubesupplies 134092 45.0 S 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 159820 1 root 126708 0.0 Ss 23-17:52:22 /usr/lib/systemd/systemd-journald 423971 423319 tubesupplies 123844 117 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 423970 423238 tubesupplies 98168 95.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 423978 423316 tubesupplies 90732 83.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 423976 423239 tubesupplies 90072 78.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 423984 423321 tubesupplies 80556 64.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 424033 423264 tubesupplies 62820 26.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 424034 423240 tubesupplies 60236 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 424023 423296 tubesupplies 55344 18.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 424028 422517 tubesupplies 53908 15.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 408664 1353308 cpanellogin 50980 0.0 S 27:46 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale default_login_theme cpanel server_locale en 1353308 1 root 41792 0.0 Ss 22-00:57:44 cpsrvd (SSL) - waiting for connections 2223 1201 root 40012 0.0 Sl 44-17:29:13 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 424066 423307 corpkicks 38104 0.0 R 00:00 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 4922 2431 netdata 38032 0.1 Sl 44-17:29:09 /usr/libexec/netdata/plugins.d/go.d.plugin 1 382254 1 root 33092 0.0 Ss 01:17:00 lfd - sleeping 419272 1276780 nobody 22644 0.0 S 08:10 /usr/sbin/httpd -k start 421203 1276780 nobody 21648 0.0 S 04:35 /usr/sbin/httpd -k start 1469 1 root 20844 0.1 Ss 44-17:29:13 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 422754 1276780 nobody 19880 0.2 S 02:11 /usr/sbin/httpd -k start 423312 1276780 nobody 19556 0.0 S 00:58 /usr/sbin/httpd -k start 423321 1276780 nobody 19348 0.3 S 00:58 /usr/sbin/httpd -k start 423268 1276780 nobody 18516 0.0 S 00:59 /usr/sbin/httpd -k start 423272 1276780 nobody 18412 0.0 S 00:59 /usr/sbin/httpd -k start 423259 1276780 nobody 18296 0.1 S 00:59 /usr/sbin/httpd -k start 423254 1276780 nobody 18288 0.1 S 01:00 /usr/sbin/httpd -k start 423316 1276780 nobody 17936 0.0 S 00:58 /usr/sbin/httpd -k start 185104 2431 netdata 17712 1.9 Sl 07:05:32 /usr/libexec/netdata/plugins.d/apps.plugin 1 423307 1276780 nobody 17564 0.0 S 00:58 /usr/sbin/httpd -k start 423240 1276780 nobody 17528 0.0 S 01:01 /usr/sbin/httpd -k start 423262 1276780 nobody 17484 0.0 S 00:59 /usr/sbin/httpd -k start 423296 1276780 nobody 17356 0.0 S 00:58 /usr/sbin/httpd -k start 422517 1276780 nobody 17336 0.0 S 02:36 /usr/sbin/httpd -k start 423310 1276780 nobody 17304 0.0 S 00:58 /usr/sbin/httpd -k start 423269 1276780 nobody 16924 0.0 S 00:59 /usr/sbin/httpd -k start 423323 1276780 nobody 16640 0.0 S 00:58 /usr/sbin/httpd -k start 423319 1276780 nobody 16448 0.0 S 00:58 /usr/sbin/httpd -k start 423264 1276780 nobody 16096 0.0 S 00:59 /usr/sbin/httpd -k start 423301 1276780 nobody 15964 0.0 S 00:58 /usr/sbin/httpd -k start 423308 1276780 nobody 15884 0.0 S 00:58 /usr/sbin/httpd -k start 423265 1276780 nobody 15828 0.0 S 00:59 /usr/sbin/httpd -k start 1204 1 zabbix 15808 0.2 Ssl 44-17:29:14 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 423299 1276780 nobody 15784 0.0 S 00:58 /usr/sbin/httpd -k start 423305 1276780 nobody 15776 0.0 S 00:58 /usr/sbin/httpd -k start 423270 1276780 nobody 15696 0.0 S 00:59 /usr/sbin/httpd -k start 423251 1276780 nobody 15668 0.0 S 01:00 /usr/sbin/httpd -k start 423304 1276780 nobody 15572 0.0 S 00:58 /usr/sbin/httpd -k start 423239 1276780 nobody 15540 0.0 S 01:01 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 116480 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min tubesupplies/tubesupplies.com.au-ssl_log 271 evolution/portal.evolutionerp.com.au-ssl_log 53 evolution/my.evolutionerp.com.au-ssl_log 11 alison/alisonarts.com.au-ssl_log 8 infinium/infinium.net.au-ssl_log 7 madalice/madalice.com.au-ssl_log 4 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 281 136.110.61.242 38 175.36.227.212 25 203.54.180.238 8 146.75.128.153 8 118.127.40.55 3 178.63.213.250 2 91.92.243.243 2 115.146.125.52 1 2a02:2479:2:7000::1 1 207.46.13.54 1 114.119.143.14 1 114.119.137.101 1 114.119.131.88 --- top request paths across all vhosts (last 3 min) --- 32 GET /fetch 25 GET /heartbeat.php 8 POST /uploadsave.php 8 POST /portal/register 7 POST /wp-cron.php 7 GET /index.php 6 GET /proxy 6 GET /@fs/proc/self/environ 5 GET /app/ajax.php 4 POST /wp-login.php 4 GET /redirect 4 GET /pms 4 GET /@fs/etc/passwd 4 GET /api/webhook 4 GET /api/v1/fetch 4 GET /api/proxy 4 GET /api/fetch 4 GET /api/download 3 GET /userlogin.php 3 GET /uploadsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == tubesupplies/tubesupplies.com.au-ssl_log == -- top paths -- 32 GET /fetch 6 GET /proxy 6 GET /@fs/proc/self/environ 4 POST /wp-cron.php 4 GET /redirect 4 GET /pms 4 GET /@fs/etc/passwd 4 GET /api/webhook 4 GET /api/v1/fetch 4 GET /api/proxy 4 GET /api/fetch 4 GET /api/download -- last 10 requests -- 118.127.40.55 - - [13/Aug/2026:03:39:11 +1000] "POST /wp-cron.php?doing_wp_cron=1786556351.8701300621032714843750 HTTP/1.1" 200 1 "-" "WordPress/7.0.4; https://tubesupplies.com.au" 136.110.61.242 - - [13/Aug/2026:03:39:10 +1000] "GET /config/application.properties HTTP/1.1" 301 - "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 136.110.61.242 - - [13/Aug/2026:03:39:10 +1000] "GET /actuator/configprops HTTP/1.1" 404 151394 "https://www.tubesupplies.com.au/actuator/configprops" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.co 136.110.61.242 - - [13/Aug/2026:03:39:10 +1000] "GET /api/..;/actuator/env HTTP/1.1" 404 151394 "https://www.tubesupplies.com.au/api/..;/actuator/env" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.co 118.127.40.55 - - [13/Aug/2026:03:39:11 +1000] "POST /wp-cron.php?doing_wp_cron=1786556351.8716430664062500000000 HTTP/1.1" 200 1 "-" "WordPress/7.0.4; https://tubesupplies.com.au" 136.110.61.242 - - [13/Aug/2026:03:39:11 +1000] "GET /application-prod.properties HTTP/1.1" 404 151393 "https://www.tubesupplies.com.au/application-prod.properties" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; com 136.110.61.242 - - [13/Aug/2026:03:39:10 +1000] "GET /application.properties HTTP/1.1" 404 151391 "https://www.tubesupplies.com.au/application.properties" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazo 118.127.40.55 - - [13/Aug/2026:03:39:12 +1000] "POST /wp-cron.php?doing_wp_cron=1786556352.2144160270690917968750 HTTP/1.1" 200 1 "-" "WordPress/7.0.4; https://tubesupplies.com.au" 118.127.40.55 - - [13/Aug/2026:03:39:12 +1000] "POST /wp-cron.php?doing_wp_cron=1786556352.7828950881958007812500 HTTP/1.1" 200 1 "-" "WordPress/7.0.4; https://tubesupplies.com.au" 136.110.61.242 - - [13/Aug/2026:03:39:11 +1000] "GET /application.yml HTTP/1.1" 404 151396 "https://www.tubesupplies.com.au/application.yml" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/sup == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 25 GET /heartbeat.php 8 POST /uploadsave.php 8 POST /portal/register 5 GET /index.php 3 GET /userlogin.php 3 GET /uploadsave.php 1 POST /login.php -- last 10 requests -- 175.36.227.212 - - [13/Aug/2026:03:38:39 +1000] "POST /portal/register HTTP/1.1" 404 - "https://portal.evolutionerp.com.au/userlogin.php" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ 175.36.227.212 - - [13/Aug/2026:03:38:40 +1000] "GET /userlogin.php HTTP/1.1" 200 1980 "https://portal.evolutionerp.com.au/logoff.php" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151 175.36.227.212 - - [13/Aug/2026:03:38:40 +1000] "POST /portal/register HTTP/1.1" 404 - "https://portal.evolutionerp.com.au/userlogin.php" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ 175.36.227.212 - - [13/Aug/2026:03:38:41 +1000] "GET /userlogin.php HTTP/1.1" 200 1980 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36" 175.36.227.212 - - [13/Aug/2026:03:38:41 +1000] "POST /portal/register HTTP/1.1" 404 - "https://portal.evolutionerp.com.au/userlogin.php" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ 203.54.180.238 - - [13/Aug/2026:03:38:42 +1000] "GET /heartbeat.php?sentAt=1786556322&bytes=106,124,175,162&_=1786532340683 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:03:38:47 +1000] "GET /heartbeat.php?sentAt=1786556327&bytes=106,124,175,167&_=1786510908088 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:03:38:52 +1000] "GET /heartbeat.php?sentAt=1786556332&bytes=106,124,175,172&_=1786532340684 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:03:38:57 +1000] "GET /heartbeat.php?sentAt=1786556337&bytes=106,124,175,177&_=1786510908089 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:03:39:02 +1000] "GET /heartbeat.php?sentAt=1786556342&bytes=106,124,175,182&_=1786532340685 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 5 GET /app/ajax.php 2 POST /functions.php 2 GET /index.php 1 POST /plugins/csvexporter/plugin.php 1 POST /app/ajax.php -- last 10 requests -- 207.46.13.54 - - [13/Aug/2026:03:38:36 +1000] "GET /index.php?page=activities&keyword=no+face+spirited+away HTTP/1.1" 200 5272 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www. 175.36.227.212 - - [13/Aug/2026:03:38:50 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 976 "https://my.evolutionerp.com.au/index.php?page=opportunityedit&opportunityid=8473" "Mozilla/5.0 (Windows NT 10.0; Win6 175.36.227.212 - - [13/Aug/2026:03:38:55 +1000] "GET /index.php?page=opportunityedit&opportunityid=8473 HTTP/1.1" 200 129893 "https://my.evolutionerp.com.au/index.php?page=opportunityedit&opportunityid=8473" "Mozilla/5.0 175.36.227.212 - - [13/Aug/2026:03:38:57 +1000] "GET /app/ajax.php?cn=tsSimpleViewCB&furi=true&uri=%2F&call=getUserSetting&caller=ajaxSubmitLocal&seq=19728816568 HTTP/1.1" 200 90 "https://my.evolutionerp.com.au/index.php 175.36.227.212 - - [13/Aug/2026:03:38:57 +1000] "GET /app/ajax.php?cn=tsDisabledViewCB&furi=false&uri=&call=getUserSetting&caller=ajaxSubmitLocal&seq=18968518928 HTTP/1.1" 200 88 "https://my.evolutionerp.com.au/index.php 175.36.227.212 - - [13/Aug/2026:03:38:57 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=opportunityedit&opportunityid=8473" "Mozilla/5.0 (Windows NT 10.0; Win 175.36.227.212 - - [13/Aug/2026:03:38:58 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Dopportunityedit%26opportunityid%3D8473&call=getUserSetting&caller=ajaxSubmitLocal&seq=17134786541 HTTP/1.1" 20 175.36.227.212 - - [13/Aug/2026:03:38:58 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=17232720579 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/inde 175.36.227.212 - - [13/Aug/2026:03:38:58 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=14473988488 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/index 175.36.227.212 - - [13/Aug/2026:03:38:58 +1000] "POST /app/ajax.php?call=ts&tsact=tsUpdateTimesheetNominalRates HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=opportunityedit&opportunityid=8473" "Mozilla --- last 30 samples (run-up to this incident) --- 2026-08-13 03:36:50 L1=0.58 run=1 blk=0 avail=7676 (65.4%) swpO=0 conn=1 myRSS=1697 php=0 phpRSS=0 ap=24 tcp=27 topuser=- 2026-08-13 03:36:51 L1=0.58 run=2 blk=0 avail=7656 (65.3%) swpO=0 conn=1 myRSS=1697 php=1 phpRSS=55 ap=24 tcp=27 topuser=alison 2026-08-13 03:37:00 L1=0.49 run=1 blk=0 avail=7728 (65.9%) swpO=0 conn=1 myRSS=1697 php=0 phpRSS=0 ap=19 tcp=28 topuser=- 2026-08-13 03:37:01 L1=0.49 run=1 blk=0 avail=7727 (65.9%) swpO=0 conn=1 myRSS=1697 php=0 phpRSS=0 ap=19 tcp=28 topuser=- 2026-08-13 03:37:11 L1=0.56 run=2 blk=0 avail=7483 (63.8%) swpO=0 conn=1 myRSS=1697 php=2 phpRSS=294 ap=20 tcp=29 topuser=corpkicks 2026-08-13 03:37:11 L1=0.56 run=3 blk=0 avail=7454 (63.5%) swpO=0 conn=1 myRSS=1697 php=2 phpRSS=321 ap=20 tcp=29 topuser=corpkicks 2026-08-13 03:37:21 L1=0.56 run=2 blk=0 avail=7731 (65.9%) swpO=0 conn=1 myRSS=1697 php=0 phpRSS=0 ap=18 tcp=26 topuser=- 2026-08-13 03:37:21 L1=0.56 run=1 blk=0 avail=7729 (65.9%) swpO=0 conn=1 myRSS=1697 php=0 phpRSS=0 ap=18 tcp=26 topuser=- 2026-08-13 03:37:31 L1=0.47 run=4 blk=0 avail=7595 (64.8%) swpO=0 conn=1 myRSS=1697 php=2 phpRSS=215 ap=17 tcp=18 topuser=alison 2026-08-13 03:37:31 L1=0.47 run=3 blk=0 avail=7571 (64.6%) swpO=0 conn=1 myRSS=1697 php=2 phpRSS=240 ap=17 tcp=18 topuser=alison 2026-08-13 03:37:41 L1=0.55 run=1 blk=0 avail=7759 (66.2%) swpO=0 conn=1 myRSS=1697 php=0 phpRSS=0 ap=16 tcp=22 topuser=- 2026-08-13 03:37:41 L1=0.55 run=1 blk=0 avail=7759 (66.1%) swpO=0 conn=1 myRSS=1697 php=0 phpRSS=0 ap=16 tcp=22 topuser=- 2026-08-13 03:37:51 L1=0.61 run=1 blk=0 avail=7744 (66.0%) swpO=1 conn=1 myRSS=1697 php=0 phpRSS=0 ap=19 tcp=25 topuser=- 2026-08-13 03:37:51 L1=0.61 run=2 blk=0 avail=7743 (66.0%) swpO=1 conn=1 myRSS=1697 php=0 phpRSS=0 ap=19 tcp=25 topuser=- 2026-08-13 03:38:01 L1=0.52 run=5 blk=0 avail=7699 (65.6%) swpO=1 conn=1 myRSS=1697 php=1 phpRSS=108 ap=14 tcp=20 topuser=madalice 2026-08-13 03:38:01 L1=0.52 run=3 blk=0 avail=7687 (65.5%) swpO=1 conn=2 myRSS=1697 php=1 phpRSS=121 ap=14 tcp=20 topuser=madalice 2026-08-13 03:38:11 L1=0.52 run=6 blk=0 avail=7536 (64.2%) swpO=0 conn=1 myRSS=1697 php=5 phpRSS=376 ap=17 tcp=41 topuser=tubesupplies 2026-08-13 03:38:11 L1=0.52 run=6 blk=0 avail=7471 (63.7%) swpO=0 conn=2 myRSS=1697 php=5 phpRSS=442 ap=17 tcp=42 topuser=tubesupplies 2026-08-13 03:38:21 L1=2.25 run=12 blk=0 avail=6668 (56.9%) swpO=0 conn=10 myRSS=1697 php=10 phpRSS=1039 ap=72 tcp=59 topuser=tubesupplies 2026-08-13 03:38:21 L1=2.25 run=11 blk=0 avail=6771 (57.7%) swpO=0 conn=2 myRSS=1697 php=8 phpRSS=855 ap=72 tcp=56 topuser=tubesupplies 2026-08-13 03:38:31 L1=3.50 run=2 blk=0 avail=7393 (63.0%) swpO=0 conn=10 myRSS=1697 php=1 phpRSS=94 ap=62 tcp=40 topuser=tubesupplies 2026-08-13 03:38:31 L1=3.50 run=2 blk=0 avail=7388 (63.0%) swpO=0 conn=2 myRSS=1697 php=1 phpRSS=98 ap=62 tcp=40 topuser=tubesupplies 2026-08-13 03:38:41 L1=4.20 run=10 blk=0 avail=7011 (59.8%) swpO=0 conn=10 myRSS=1697 php=9 phpRSS=771 ap=52 tcp=44 topuser=tubesupplies 2026-08-13 03:38:41 L1=4.20 run=11 blk=0 avail=7000 (59.7%) swpO=0 conn=2 myRSS=1697 php=8 phpRSS=560 ap=52 tcp=44 topuser=tubesupplies 2026-08-13 03:38:51 L1=4.50 run=14 blk=0 avail=7210 (61.5%) swpO=0 conn=10 myRSS=1697 php=11 phpRSS=717 ap=42 tcp=41 topuser=tubesupplies 2026-08-13 03:38:51 L1=4.50 run=19 blk=0 avail=7156 (61.0%) swpO=0 conn=2 myRSS=1697 php=12 phpRSS=845 ap=42 tcp=41 topuser=tubesupplies 2026-08-13 03:39:01 L1=5.66 run=29 blk=0 avail=7060 (60.2%) swpO=0 conn=10 myRSS=1697 php=10 phpRSS=752 ap=36 tcp=44 topuser=tubesupplies 2026-08-13 03:39:01 L1=5.66 run=18 blk=0 avail=7129 (60.8%) swpO=0 conn=11 myRSS=1697 php=11 phpRSS=815 ap=36 tcp=45 topuser=tubesupplies 2026-08-13 03:39:12 L1=6.77 run=13 blk=0 avail=6614 (56.4%) swpO=0 conn=10 myRSS=1697 php=15 phpRSS=1481 ap=36 tcp=48 topuser=tubesupplies 2026-08-13 03:39:12 L1=6.77 run=14 blk=0 avail=6517 (55.6%) swpO=0 conn=16 myRSS=1697 php=15 phpRSS=1592 ap=36 tcp=50 topuser=tubesupplies