INCIDENT 2026-08-15 01:51:14 trigger: php_procs=45 php_rss=3945MB mysql_conn=38 ================================================================== load: 2.60 2.46 2.16 53/738 2364328 ncpu:10 mem_avail: 3986MB/11729MB (34.0%) swap_used:1360MB swapout:470/s blocked(D):0 running:58 iowait:0.1% steal:0.0% php: 45 procs / 3945MB heaviest user: olympic (39 procs, 3361MB) apache: 115 procs tcp_estab: 72 --- RSS by user (all processes) --- USER PROCS RSS_MB olympic 42 3549 mysql 1 2197 nobody 114 1376 root 240 995 netdata 8 263 corpkicks 1 220 alison 1 122 customc 1 75 madalice 1 68 cpanellogin 1 59 kurri 4 49 dovenull 6 28 lowrange 2 24 wp-toolkit 6 20 mailman 20 14 infinium 1 13 zabbix 1 12 mailnull 2 10 dovecot 3 8 named 1 7 --- php workers by user --- USER PROCS RSS_MB olympic 42 3591 corpkicks 1 221 alison 1 122 customc 1 77 root 1 71 madalice 1 70 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4478 MB Active(file): 2566 MB Inactive(file): 794 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 570 MB CommitLimit: 9960 MB Committed_AS: 15559 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2342983 root 39:58 9720 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 1420296 1 mysql 2251092 11.8 Ssl 1-00:12:13 /usr/sbin/mariadbd 2364206 2364183 corpkicks 229716 31.5 R 00:04 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1220 1 netdata 213228 2.5 Ssl 46-15:41:16 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1451534 1444234 root 195048 0.0 S 23:14:07 spamd child 2342760 2342758 root 180428 0.6 S 40:14 /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload 2364211 2364173 olympic 135224 39.0 S 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364213 2364176 olympic 133352 41.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364209 2362779 alison 127036 34.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364230 2364202 olympic 121868 37.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364214 2364177 olympic 117984 32.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364218 2364184 olympic 113236 31.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364223 2364185 olympic 112284 30.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364210 2364172 olympic 110008 29.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364208 2364171 olympic 109944 29.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364215 2364178 olympic 109656 29.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364212 2364175 olympic 103432 25.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364220 2364181 olympic 102512 26.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364224 2364186 olympic 102196 26.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364270 2362653 olympic 101764 43.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364219 2364180 olympic 101632 25.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364228 2364190 olympic 101124 24.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364225 2364188 olympic 100680 24.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364229 2364201 olympic 100124 24.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364216 2364174 olympic 98580 23.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364217 2364179 olympic 97396 24.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1444234 1 root 97128 0.0 Ss 23:28:26 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2364222 2364187 olympic 97040 25.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 159820 1 root 95964 0.0 Ss 25-16:04:24 /usr/lib/systemd/systemd-journald 2364226 2364191 olympic 95592 24.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364227 2364189 olympic 95308 21.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364271 2361135 olympic 92236 31.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364221 2364182 olympic 90904 19.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364231 2362950 olympic 90512 19.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364273 2361161 customc 86180 15.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2364266 2364232 olympic 78368 23.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364265 2364140 olympic 76616 24.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364272 2358841 madalice 75472 19.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364281 2364196 olympic 73488 38.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364282 2364193 olympic 72848 37.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2343703 2342760 root 72816 98.5 R 38:50 /usr/local/cpanel/3rdparty/bin/php /opt/cpanel/ea-wappspector/wappspector.phar --max=1 --json --depth=9 /home/nrg 2364288 2364159 olympic 71732 32.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364286 2363212 olympic 67940 28.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364278 2364112 olympic 67356 26.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364284 2364139 olympic 67084 28.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2357659 1353308 cpanellogin 61024 0.0 S 11:51 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 2364283 2364195 olympic 60968 19.0 S 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364275 2364119 olympic 60720 10.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364285 2361106 olympic 60720 20.0 S 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364312 2364155 olympic 59228 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364280 2362942 olympic 59104 17.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364279 2361145 olympic 58980 16.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2364311 2364200 olympic 57256 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1910802 1444234 root 57208 0.0 S 12:22:40 spamd child 2223 1201 root 55960 0.0 Sl 46-15:41:15 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 2364323 2364160 olympic 43604 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1353308 1 root 41656 0.0 Ss 23-23:09:46 cpsrvd (SSL) - waiting for connections 1469 1 root 40472 0.1 Ss 46-15:41:15 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 4922 2431 netdata 34920 0.1 Sl 46-15:41:11 /usr/libexec/netdata/plugins.d/go.d.plugin 1 2285972 1 root 30776 0.0 Ss 01:51:13 lfd - sleeping 2360094 1276780 nobody 20428 0.0 S 07:12 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+----------------------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+----------------------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 3980365 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | | 3980364 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 3980362 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | +---------+----------------------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min bigdeals/bigdeals.com.au 125 olympic/olympicfencing.com.au 58 infinium/infinium.net.au 48 infinium/infinium.net.au-ssl_log 45 olympic/olympicfencing.com.au-ssl_log 45 alison/alisonarts.com.au 44 alison/alisonarts.com.au-ssl_log 39 evolution/portal.evolutionerp.com.au-ssl_log 26 corpkicks/corporatekicks.com.au-ssl_log 2 (total vhosts taking traffic: 9) --- top client IPs across all vhosts (last 3 min) --- 125 172.213.243.2 90 20.106.90.8 59 20.102.65.165 32 45.156.128.164 29 45.156.128.167 28 45.156.128.166 26 45.156.128.165 26 203.54.180.238 23 4.223.171.122 6 118.127.40.55 1 34.196.51.17 1 223.109.252.141 --- top request paths across all vhosts (last 3 min) --- 62 GET /cgi-sys/suspendedpage.cgi 26 GET /heartbeat.php 7 GET /wp-content/plugins/hellopress/wp_filemanager.php 7 GET /this_is_a_new_hello_world.php 6 GET /wp-ws68.php 5 POST /wp-cron.php 5 GET /222.php 5 GET /1.php 4 GET /yj09.php 4 GET /scxy.php 4 GET /ops.php 4 GET /media.php 4 GET /mac.php 4 GET /images.php 4 GET /coffexium.php 4 GET /coffee.php 4 GET /classwithtostring.php 4 GET /biufile.php 4 GET /BDKR28WP.php 4 GET /admin.php --- busiest 3 vhosts: top paths + last 10 requests --- == bigdeals/bigdeals.com.au == -- top paths -- 62 GET /cgi-sys/suspendedpage.cgi 1 GET /wto.php 1 GET /ws45.php 1 GET /ws38.php 1 GET /ws37.php 1 GET /ws34.php 1 GET /ws33.php 1 GET /wp-content/plugins/hellopress/wp_filemanager.php 1 GET /wfile.php 1 GET /wcas.php 1 GET /wb.php 1 GET /vee.php -- last 10 requests -- 172.213.243.2 - - [15/Aug/2026:01:51:02 +1000] "GET /cgi-sys/suspendedpage.cgi HTTP/1.1" 200 7624 "-" "-" 172.213.243.2 - - [15/Aug/2026:01:51:03 +1000] "GET /doti.php HTTP/1.1" 302 250 "-" "-" 172.213.243.2 - - [15/Aug/2026:01:51:03 +1000] "GET /cgi-sys/suspendedpage.cgi HTTP/1.1" 200 7624 "-" "-" 172.213.243.2 - - [15/Aug/2026:01:51:03 +1000] "GET /sko.php HTTP/1.1" 302 250 "-" "-" 172.213.243.2 - - [15/Aug/2026:01:51:04 +1000] "GET /cgi-sys/suspendedpage.cgi HTTP/1.1" 200 7624 "-" "-" 172.213.243.2 - - [15/Aug/2026:01:51:04 +1000] "GET /gmo.php HTTP/1.1" 302 250 "-" "-" 172.213.243.2 - - [15/Aug/2026:01:51:04 +1000] "GET /cgi-sys/suspendedpage.cgi HTTP/1.1" 200 7624 "-" "-" 172.213.243.2 - - [15/Aug/2026:01:51:05 +1000] "GET /ws37.php HTTP/1.1" 302 250 "-" "-" 172.213.243.2 - - [15/Aug/2026:01:51:05 +1000] "GET /cgi-sys/suspendedpage.cgi HTTP/1.1" 200 7624 "-" "-" 172.213.243.2 - - [15/Aug/2026:01:51:05 +1000] "GET /geck.php HTTP/1.1" 302 250 "-" "-" == olympic/olympicfencing.com.au == -- top paths -- 1 GET /wp-content/plugins/wp-video-lightbox/readme.txt 1 GET /wp-content/plugins/wp-user-avatar/readme.txt 1 GET /wp-content/plugins/wp-time-capsule/readme.txt 1 GET /wp-content/plugins/wp-super-cache/readme.txt 1 GET /wp-content/plugins/wps-hide-login/readme.txt 1 GET /wp-content/plugins/wpschoolpress/readme.txt 1 GET /wp-content/plugins/wp-optimize/readme.txt 1 GET /wp-content/plugins/wpforms-lite/readme.txt 1 GET /wp-content/plugins/wp-file-manager/readme.txt 1 GET /wp-content/plugins/wp-central/readme.txt 1 GET /wp-content/plugins/wordpress-seo/readme.txt 1 GET /wp-content/plugins/wordpress-database-reset/readme.txt -- last 10 requests -- 45.156.128.164 - - [15/Aug/2026:01:51:10 +1000] "GET /wp-content/plugins/mailchimp-for-wp/readme.txt HTTP/1.1" 301 324 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.165 - - [15/Aug/2026:01:51:10 +1000] "GET /wp-content/plugins/sg-security/readme.txt HTTP/1.1" 301 319 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.164 - - [15/Aug/2026:01:51:11 +1000] "GET /wp-content/plugins/wp-optimize/readme.txt HTTP/1.1" 301 319 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.164 - - [15/Aug/2026:01:51:11 +1000] "GET /wp-content/plugins/limit-login-attempts-reloaded/readme.txt HTTP/1.1" 301 337 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537. 45.156.128.164 - - [15/Aug/2026:01:51:11 +1000] "GET /wp-content/plugins/insert-headers-and-footers/readme.txt HTTP/1.1" 301 334 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.165 - - [15/Aug/2026:01:51:11 +1000] "GET /wp-content/plugins/advanced-custom-fields/readme.txt HTTP/1.1" 301 330 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.166 - - [15/Aug/2026:01:51:11 +1000] "GET /wp-content/plugins/really-simple-ssl/readme.txt HTTP/1.1" 301 325 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.167 - - [15/Aug/2026:01:51:11 +1000] "GET /wp-content/plugins/better-search-replace/readme.txt HTTP/1.1" 301 329 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 45.156.128.166 - - [15/Aug/2026:01:51:11 +1000] "GET /wp-content/plugins/ultimate-addons-for-gutenberg/readme.txt HTTP/1.1" 301 337 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537. 45.156.128.167 - - [15/Aug/2026:01:51:11 +1000] "GET /wp-content/plugins/wps-hide-login/readme.txt HTTP/1.1" 301 322 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" == infinium/infinium.net.au == -- top paths -- 1 GET /zi-936.php 1 GET /yj09.php 1 GET /xyn.php 1 GET /ws13.php 1 GET /wp-ws68.php 1 GET //wp-includes/js/jquery/ 1 GET /wp-content/plugins/hellopress/wp_filemanager.php 1 GET /w1px.php 1 GET /this_is_a_new_hello_world.php 1 GET /sky.php 1 GET /SDsadqwrf.php 1 GET /scxy.php -- last 10 requests -- 20.106.90.8 - - [15/Aug/2026:01:49:59 +1000] "GET //mosty.php HTTP/1.1" 301 281 "-" "-" 20.106.90.8 - - [15/Aug/2026:01:50:00 +1000] "GET /blurbs.php HTTP/1.1" 301 282 "-" "-" 20.106.90.8 - - [15/Aug/2026:01:50:02 +1000] "GET /bajah.php HTTP/1.1" 301 281 "-" "-" 20.106.90.8 - - [15/Aug/2026:01:50:03 +1000] "GET /h.php HTTP/1.1" 301 277 "-" "-" 20.106.90.8 - - [15/Aug/2026:01:50:04 +1000] "GET /ano.php HTTP/1.1" 301 279 "-" "-" 20.106.90.8 - - [15/Aug/2026:01:50:05 +1000] "GET /ai.php HTTP/1.1" 301 278 "-" "-" 20.106.90.8 - - [15/Aug/2026:01:50:07 +1000] "GET /w1px.php HTTP/1.1" 301 280 "-" "-" 20.106.90.8 - - [15/Aug/2026:01:50:08 +1000] "GET /zi-936.php?p= HTTP/1.1" 301 285 "-" "-" 20.106.90.8 - - [15/Aug/2026:01:50:10 +1000] "GET /dcsgumnm.php HTTP/1.1" 301 284 "-" "-" 20.106.90.8 - - [15/Aug/2026:01:50:11 +1000] "GET //wp-includes/js/jquery/ HTTP/1.1" 301 294 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-15 01:48:53 L1=1.78 run=3 blk=0 avail=7061 (60.2%) swpO=0 conn=2 myRSS=2212 php=2 phpRSS=110 ap=17 tcp=20 topuser=root 2026-08-15 01:48:55 L1=1.78 run=3 blk=0 avail=7032 (60.0%) swpO=0 conn=1 myRSS=2212 php=2 phpRSS=140 ap=17 tcp=21 topuser=root 2026-08-15 01:49:03 L1=1.66 run=2 blk=0 avail=7052 (60.1%) swpO=0 conn=2 myRSS=2212 php=2 phpRSS=111 ap=18 tcp=23 topuser=root 2026-08-15 01:49:05 L1=1.66 run=3 blk=0 avail=6979 (59.5%) swpO=0 conn=1 myRSS=2212 php=2 phpRSS=186 ap=18 tcp=21 topuser=olympic 2026-08-15 01:49:13 L1=1.80 run=2 blk=0 avail=7049 (60.1%) swpO=0 conn=2 myRSS=2212 php=2 phpRSS=111 ap=18 tcp=21 topuser=root 2026-08-15 01:49:15 L1=1.80 run=4 blk=0 avail=7006 (59.7%) swpO=0 conn=1 myRSS=2212 php=2 phpRSS=156 ap=18 tcp=22 topuser=infinium 2026-08-15 01:49:23 L1=1.84 run=3 blk=0 avail=7016 (59.8%) swpO=0 conn=2 myRSS=2212 php=2 phpRSS=110 ap=22 tcp=28 topuser=root 2026-08-15 01:49:25 L1=1.84 run=2 blk=0 avail=7027 (59.9%) swpO=0 conn=1 myRSS=2212 php=1 phpRSS=71 ap=22 tcp=29 topuser=root 2026-08-15 01:49:33 L1=2.18 run=4 blk=0 avail=6939 (59.2%) swpO=0 conn=3 myRSS=2212 php=3 phpRSS=214 ap=23 tcp=27 topuser=alison 2026-08-15 01:49:35 L1=2.18 run=3 blk=0 avail=7000 (59.7%) swpO=1 conn=1 myRSS=2212 php=3 phpRSS=160 ap=23 tcp=27 topuser=root 2026-08-15 01:49:43 L1=2.15 run=5 blk=0 avail=6904 (58.9%) swpO=1 conn=3 myRSS=2212 php=5 phpRSS=310 ap=23 tcp=30 topuser=olympic 2026-08-15 01:49:45 L1=2.15 run=3 blk=0 avail=6946 (59.2%) swpO=0 conn=1 myRSS=2212 php=2 phpRSS=178 ap=23 tcp=31 topuser=infinium 2026-08-15 01:49:53 L1=2.27 run=3 blk=0 avail=6983 (59.5%) swpO=0 conn=3 myRSS=2212 php=2 phpRSS=110 ap=26 tcp=33 topuser=root 2026-08-15 01:49:55 L1=2.27 run=4 blk=0 avail=7002 (59.7%) swpO=0 conn=1 myRSS=2212 php=1 phpRSS=71 ap=26 tcp=34 topuser=root 2026-08-15 01:50:04 L1=2.62 run=5 blk=0 avail=6698 (57.1%) swpO=0 conn=3 myRSS=2212 php=6 phpRSS=501 ap=26 tcp=31 topuser=madalice 2026-08-15 01:50:05 L1=2.62 run=4 blk=0 avail=6999 (59.7%) swpO=0 conn=1 myRSS=2212 php=1 phpRSS=71 ap=26 tcp=29 topuser=root 2026-08-15 01:50:14 L1=2.67 run=6 blk=0 avail=6956 (59.3%) swpO=0 conn=3 myRSS=2212 php=3 phpRSS=202 ap=22 tcp=25 topuser=infinium 2026-08-15 01:50:15 L1=2.67 run=5 blk=0 avail=6847 (58.4%) swpO=0 conn=1 myRSS=2212 php=3 phpRSS=311 ap=22 tcp=27 topuser=alison 2026-08-15 01:50:24 L1=2.80 run=3 blk=1 avail=6888 (58.7%) swpO=0 conn=3 myRSS=2212 php=3 phpRSS=237 ap=22 tcp=26 topuser=alison 2026-08-15 01:50:25 L1=2.80 run=2 blk=0 avail=7024 (59.9%) swpO=0 conn=1 myRSS=2212 php=1 phpRSS=71 ap=22 tcp=26 topuser=root 2026-08-15 01:50:34 L1=2.84 run=4 blk=0 avail=6892 (58.8%) swpO=0 conn=4 myRSS=2212 php=4 phpRSS=292 ap=22 tcp=31 topuser=olympic 2026-08-15 01:50:35 L1=2.84 run=2 blk=0 avail=7025 (59.9%) swpO=0 conn=1 myRSS=2212 php=1 phpRSS=71 ap=22 tcp=33 topuser=root 2026-08-15 01:50:44 L1=2.64 run=4 blk=0 avail=6974 (59.5%) swpO=0 conn=4 myRSS=2212 php=3 phpRSS=167 ap=24 tcp=32 topuser=root 2026-08-15 01:50:45 L1=2.64 run=2 blk=1 avail=7014 (59.8%) swpO=0 conn=1 myRSS=2212 php=1 phpRSS=71 ap=24 tcp=28 topuser=root 2026-08-15 01:50:54 L1=2.54 run=6 blk=0 avail=6949 (59.2%) swpO=1 conn=4 myRSS=2212 php=2 phpRSS=183 ap=22 tcp=26 topuser=alison 2026-08-15 01:50:55 L1=2.54 run=4 blk=0 avail=6871 (58.6%) swpO=1 conn=1 myRSS=2212 php=3 phpRSS=291 ap=22 tcp=24 topuser=olympic 2026-08-15 01:51:04 L1=2.53 run=3 blk=0 avail=6932 (59.1%) swpO=0 conn=4 myRSS=2212 php=2 phpRSS=202 ap=22 tcp=26 topuser=alison 2026-08-15 01:51:05 L1=2.53 run=2 blk=0 avail=7040 (60.0%) swpO=0 conn=1 myRSS=2212 php=1 phpRSS=71 ap=22 tcp=56 topuser=root 2026-08-15 01:51:14 L1=2.60 run=58 blk=0 avail=3986 (34.0%) swpO=470 conn=38 myRSS=2201 php=45 phpRSS=3945 ap=115 tcp=72 topuser=olympic 2026-08-15 01:51:15 L1=2.60 run=50 blk=0 avail=3617 (30.8%) swpO=941 conn=41 myRSS=2194 php=42 phpRSS=4218 ap=114 tcp=67 topuser=olympic