INCIDENT 2026-08-26 21:01:58 trigger: swapout=4655/s php_procs=70 php_rss=6763MB mysql_conn=67 ================================================================== load: 32.04 9.71 4.18 71/781 2716588 ncpu:10 mem_avail: 1800MB/11729MB (15.3%) swap_used:2029MB swapout:4655/s blocked(D):0 running:81 iowait:0.5% steal:0.0% php: 70 procs / 6763MB heaviest user: tubesupplies (54 procs, 5070MB) apache: 105 procs tcp_estab: 58 --- RSS by user (all processes) --- USER PROCS RSS_MB tubesupplies 53 5107 mysql 1 2346 nobody 103 1364 madalice 6 877 root 244 840 corpkicks 2 276 evolution 10 263 netdata 8 234 alison 3 174 mailman 20 164 speedlin 1 115 cpanellogin 1 59 dovenull 6 46 dovecot 3 19 wp-toolkit 6 18 zabbix 1 11 mailnull 2 9 kurri 1 7 named 1 5 nscd 1 3 --- php workers by user --- USER PROCS RSS_MB tubesupplies 53 5134 madalice 6 880 corpkicks 2 277 evolution 4 249 alison 2 165 speedlin 1 115 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4683 MB Active(file): 764 MB Inactive(file): 774 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 365 MB CommitLimit: 9960 MB Committed_AS: 18916 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2700832 root 01:58 1336 /bin/sh -c bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 2703186 root 19:50:42 2600 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2362432 1 mysql 2401756 15.7 Ssl 1-17:30:42 /usr/sbin/mariadbd 2716095 2714946 madalice 245188 13.0 R 00:23 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 193828 2.5 Ssl 58-10:52:08 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2716316 2714754 madalice 177220 18.6 R 00:13 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1065018 2938778 root 175336 0.1 S 07:49:54 spamd child 2716314 2716289 madalice 173912 17.0 R 00:14 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716312 2716286 madalice 162272 14.5 R 00:14 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716313 2716287 corpkicks 158596 9.0 R 00:14 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 2716297 2716061 tubesupplies 151588 11.8 R 00:15 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716296 2714948 tubesupplies 151384 15.8 R 00:15 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2956399 2938778 root 149844 0.0 S 18:32:00 spamd child 2716365 2714950 tubesupplies 149016 23.3 R 00:11 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716278 2716060 tubesupplies 148744 10.9 R 00:16 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716258 2716245 tubesupplies 148328 9.4 R 00:17 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716233 2714913 tubesupplies 148212 9.8 R 00:19 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716256 2714937 tubesupplies 145460 11.4 S 00:17 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716408 2698096 tubesupplies 144992 17.0 R 00:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716419 2716395 tubesupplies 142020 19.0 R 00:09 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716244 2714745 tubesupplies 139360 11.3 R 00:18 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716504 2716478 corpkicks 133264 24.0 R 00:05 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 2716366 2698682 tubesupplies 128440 14.9 R 00:11 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716272 2716264 tubesupplies 126604 10.1 R 00:17 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716436 2716427 tubesupplies 120704 18.2 R 00:08 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716460 2716435 tubesupplies 119236 23.5 R 00:07 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716322 2698764 speedlin 118072 8.8 R 00:13 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716302 2714922 tubesupplies 112908 10.8 R 00:15 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716401 2714909 tubesupplies 109008 14.0 R 00:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716404 2716288 tubesupplies 108208 12.1 R 00:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716403 2698651 tubesupplies 108100 11.1 R 00:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716471 2698733 tubesupplies 107636 19.0 R 00:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2575382 1 root 107440 0.0 Ss 11-13:11:29 /usr/lib/systemd/systemd-journald 2716465 2716291 tubesupplies 103868 23.8 R 00:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716367 2714926 tubesupplies 103700 12.6 R 00:11 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716493 2716448 tubesupplies 103688 26.8 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716418 2714774 tubesupplies 101828 16.4 R 00:09 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716428 2716246 tubesupplies 101740 10.4 R 00:09 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716324 2714775 alison 101000 9.3 R 00:12 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716497 2716455 tubesupplies 100524 29.2 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716411 2716326 tubesupplies 100384 14.0 R 00:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716430 2714734 tubesupplies 99112 11.5 R 00:08 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716422 2716051 tubesupplies 98984 11.7 R 00:09 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716396 2714934 tubesupplies 94964 8.3 R 00:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716397 2716072 tubesupplies 93852 9.4 R 00:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2938778 1 root 92768 0.0 Ss 18:38:30 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2716467 2714923 tubesupplies 91864 11.1 R 00:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716399 2715905 tubesupplies 89104 9.2 R 00:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716464 2714927 tubesupplies 86896 18.5 R 00:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716398 2714904 tubesupplies 86868 7.9 R 00:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716439 2714773 tubesupplies 86760 7.3 R 00:08 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716447 2698676 tubesupplies 86200 10.4 R 00:07 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716457 2716434 tubesupplies 81368 13.0 R 00:07 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716520 2716265 evolution 78772 11.6 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2716522 2716480 madalice 78292 13.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716526 2716073 madalice 78196 13.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716498 2714941 evolution 77736 7.0 R 00:05 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2716495 2716450 tubesupplies 76896 11.6 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716466 2716292 tubesupplies 74748 9.1 R 00:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716458 2716438 tubesupplies 74448 10.0 R 00:07 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716496 2716451 tubesupplies 73520 9.0 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2716470 2698742 tubesupplies 73372 11.1 R 00:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi --- processes in D state (uninterruptible IO) --- 2716606 D - /usr/sbin/httpd -k start --- mariadb processlist (non-sleeping) --- +---------+-----------------------+-----------------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+-----------------------+-----------------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 8891472 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 8891343 | tubesupplies_wp_wfe9g | tubesupplies_wp_2gzao | Query | 0 | Opening tables | SELECT * FROM 7QNYeM0E_posts WHERE ID = 35216 LIMIT 1 | +---------+-----------------------+-----------------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min tubesupplies/tubesupplies.com.au-ssl_log 460 speedlin/speedlinefencing.com.au-ssl_log 93 corpkicks/corporatekicks.com.au-ssl_log 92 speedlin/speedlinefencing.com.au 91 corpkicks/corporatekicks.com.au 82 cosgrovecreative/cosgrovecreative.com.au-ssl_log 80 lowrange/lowrange.com.au 69 evolution/portal.evolutionerp.com.au-ssl_log 30 kamcool/kamcool.com.au 30 nrg/nrgservices.net.au-ssl_log 28 evolution/my.evolutionerp.com.au-ssl_log 22 infinium/infinium.net.au-ssl_log 10 aaa/aaadownunder.com.au-ssl_log 6 madalice/madalice.com.au-ssl_log 4 otterfencing/otterfencing.com.au-ssl_log 3 (total vhosts taking traffic: 17) --- top client IPs across all vhosts (last 3 min) --- 419 34.158.61.4 181 82.102.18.222 161 20.104.104.62 80 52.139.37.240 69 4.204.200.136 30 203.54.180.238 30 20.151.129.194 29 20.100.175.163 29 118.127.40.55 28 20.240.128.207 13 202.153.211.134 6 216.73.216.31 5 206.83.113.169 3 94.154.43.135 3 52.167.144.142 --- top request paths across all vhosts (last 3 min) --- 30 GET /heartbeat.php 29 POST /wp-cron.php 27 GET /fetch 16 GET / 14 POST /functions.php 9 GET /index.php 8 GET /proxy 4 POST /wp-login.php 4 GET /wp-content/themes/index.php 4 GET /admin.php 4 GET /3PJcpMFsD8B.php 3 GET /wp-login.php 3 GET /simple.php 3 GET /reviall.php 3 GET /read 3 GET /.git/config 3 GET /gecko-new.php 3 GET /@fs/proc/self/environ 3 GET /fling.php 3 GET /download --- busiest 3 vhosts: top paths + last 10 requests --- == tubesupplies/tubesupplies.com.au-ssl_log == -- top paths -- 27 GET /fetch 22 POST /wp-cron.php 8 GET /proxy 5 GET / 3 GET /read 3 GET /@fs/proc/self/environ 3 GET /download 2 POST /wp-login.php 2 GET /webhook 2 GET /screenshot 2 GET /redirect 2 GET /preview -- last 10 requests -- 34.158.61.4 - - [26/Aug/2026:21:01:53 +1000] "GET /config/application.properties HTTP/1.1" 404 127751 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; 34.158.61.4 - - [26/Aug/2026:21:01:52 +1000] "GET /.my.cnf HTTP/1.1" 404 127751 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.158.61.4 - - [26/Aug/2026:21:01:53 +1000] "GET /.vault-token HTTP/1.1" 404 127751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.2277.13 Safari/537.36; compatible; m 34.158.61.4 - - [26/Aug/2026:21:01:50 +1000] "GET /docker-compose.production.yml HTTP/1.1" 404 127751 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1. 34.158.61.4 - - [26/Aug/2026:21:01:52 +1000] "GET /docker-compose.yaml HTTP/1.1" 404 127751 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.158.61.4 - - [26/Aug/2026:21:01:53 +1000] "GET /.netrc HTTP/1.1" 404 127751 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.2683.47 Mobile Safari/537.36; compatible; 34.158.61.4 - - [26/Aug/2026:21:01:53 +1000] "GET /application-prod.properties HTTP/1.1" 404 127751 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.1513.68 Safari/5 34.158.61.4 - - [26/Aug/2026:21:01:58 +1000] "GET /.azure/credentials HTTP/1.1" 404 152094 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0)" 34.158.61.4 - - [26/Aug/2026:21:01:52 +1000] "GET /terraform.tfstate HTTP/1.1" 404 127751 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.158.61.4 - - [26/Aug/2026:21:01:53 +1000] "GET /config/application.yml HTTP/1.1" 404 127751 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1)" == speedlin/speedlinefencing.com.au-ssl_log == -- top paths -- 1 POST /wp-cron.php 1 GET /wp-content/plugins/contact-form-7/modules/wp-content/plugins/contact-form-7/ 1 GET /wp-content/plugins/contact-form-7/modules/really-simple-captcha.php 1 GET /wp-content/plugins/contact-form-7/modules/quiz.php 1 GET /wp-content/plugins/contact-form-7/modules/number.php 1 GET /wp-content/plugins/contact-form-7/modules/listo.php 1 GET /wp-content/plugins/contact-form-7/modules/hidden.php 1 GET /wp-content/plugins/contact-form-7/modules/flamingo.php 1 GET /wp-content/plugins/contact-form-7/modules/file.php 1 GET /wp-content/plugins/contact-form-7/modules/doi-helper.php 1 GET /wp-content/plugins/contact-form-7/modules/disallowed-list.php 1 GET /wp-content/plugins/contact-form-7/modules/date.php -- last 10 requests -- 82.102.18.222 - - [26/Aug/2026:21:01:13 +1000] "GET /wp-content/plugins/contact-form-7/modules/date.php HTTP/1.1" 500 - "-" "-" 82.102.18.222 - - [26/Aug/2026:21:01:15 +1000] "GET /wp-content/plugins/contact-form-7/modules/disallowed-list.php HTTP/1.1" 500 - "-" "-" 82.102.18.222 - - [26/Aug/2026:21:01:17 +1000] "GET /wp-content/plugins/contact-form-7/modules/doi-helper.php HTTP/1.1" 500 - "-" "-" 82.102.18.222 - - [26/Aug/2026:21:01:19 +1000] "GET /wp-content/plugins/contact-form-7/modules/file.php HTTP/1.1" 500 - "-" "-" 82.102.18.222 - - [26/Aug/2026:21:01:22 +1000] "GET /wp-content/plugins/contact-form-7/modules/flamingo.php HTTP/1.1" 500 - "-" "-" 82.102.18.222 - - [26/Aug/2026:21:01:23 +1000] "GET /wp-content/plugins/contact-form-7/modules/hidden.php HTTP/1.1" 500 - "-" "-" 82.102.18.222 - - [26/Aug/2026:21:01:25 +1000] "GET /wp-content/plugins/contact-form-7/modules/listo.php HTTP/1.1" 500 - "-" "-" 82.102.18.222 - - [26/Aug/2026:21:01:27 +1000] "GET /wp-content/plugins/contact-form-7/modules/number.php HTTP/1.1" 500 - "-" "-" 82.102.18.222 - - [26/Aug/2026:21:01:28 +1000] "GET /wp-content/plugins/contact-form-7/modules/quiz.php HTTP/1.1" 500 - "-" "-" 82.102.18.222 - - [26/Aug/2026:21:01:32 +1000] "GET /wp-content/plugins/contact-form-7/modules/really-simple-captcha.php HTTP/1.1" 500 - "-" "-" == corpkicks/corporatekicks.com.au-ssl_log == -- top paths -- 2 POST /wp-cron.php 1 HEAD / 1 GET /xwpg.php 1 GET /xty.php 1 GET /ws77.php 1 GET /wpxml.php 1 GET /wp-wlx.php 1 GET /wpupex.php 1 GET /wp-rrtx.php 1 GET /wp-includes/Text/Diff/Engine/file_ed27.php 1 GET /wp-includes/Text/Diff/Engine/file_cdd9.php 1 GET /wp-fure.php -- last 10 requests -- 20.104.104.62 - - [26/Aug/2026:21:00:22 +1000] "GET /cok.php HTTP/1.1" 403 6789 "-" "-" 20.104.104.62 - - [26/Aug/2026:21:00:23 +1000] "GET /wg459o.php HTTP/1.1" 403 6789 "-" "-" 20.104.104.62 - - [26/Aug/2026:21:00:24 +1000] "GET /wp-content/uploads/panel.php HTTP/1.1" 403 12 "-" "-" 20.104.104.62 - - [26/Aug/2026:21:00:25 +1000] "GET /gecko-new.php HTTP/1.1" 403 6789 "-" "-" 20.104.104.62 - - [26/Aug/2026:21:00:26 +1000] "GET /sxxb.php HTTP/1.1" 403 6789 "-" "-" 20.104.104.62 - - [26/Aug/2026:21:00:27 +1000] "GET /ws77.php HTTP/1.1" 403 6789 "-" "-" 20.104.104.62 - - [26/Aug/2026:21:00:28 +1000] "GET /fling.php?p= HTTP/1.1" 403 6789 "-" "-" 20.104.104.62 - - [26/Aug/2026:21:00:29 +1000] "GET /kj.php HTTP/1.1" 403 6789 "-" "-" 20.104.104.62 - - [26/Aug/2026:21:00:30 +1000] "GET /crgio.php HTTP/1.1" 403 6789 "-" "-" 20.104.104.62 - - [26/Aug/2026:21:00:32 +1000] "GET /css.php HTTP/1.1" 403 6789 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-26 20:59:45 L1=1.65 run=2 blk=0 avail=6817 (58.1%) swpO=0 conn=4 myRSS=2493 php=2 phpRSS=156 ap=19 tcp=21 topuser=speedlin 2026-08-26 20:59:45 L1=1.65 run=2 blk=0 avail=6861 (58.5%) swpO=0 conn=2 myRSS=2493 php=1 phpRSS=88 ap=19 tcp=21 topuser=corpkicks 2026-08-26 20:59:55 L1=1.55 run=1 blk=0 avail=6914 (58.9%) swpO=1 conn=2 myRSS=2493 php=1 phpRSS=40 ap=19 tcp=18 topuser=evolution 2026-08-26 20:59:55 L1=1.55 run=3 blk=0 avail=6901 (58.8%) swpO=1 conn=2 myRSS=2493 php=1 phpRSS=56 ap=19 tcp=19 topuser=corpkicks 2026-08-26 21:00:05 L1=1.63 run=3 blk=0 avail=6857 (58.5%) swpO=0 conn=2 myRSS=2493 php=2 phpRSS=108 ap=19 tcp=23 topuser=evolution 2026-08-26 21:00:05 L1=1.63 run=3 blk=0 avail=6789 (57.9%) swpO=0 conn=3 myRSS=2493 php=2 phpRSS=182 ap=19 tcp=22 topuser=corpkicks 2026-08-26 21:00:15 L1=1.61 run=5 blk=0 avail=6788 (57.9%) swpO=0 conn=2 myRSS=2493 php=2 phpRSS=108 ap=18 tcp=21 topuser=evolution 2026-08-26 21:00:15 L1=1.61 run=1 blk=0 avail=6884 (58.7%) swpO=0 conn=3 myRSS=2493 php=2 phpRSS=95 ap=18 tcp=20 topuser=evolution 2026-08-26 21:00:25 L1=1.59 run=3 blk=0 avail=6796 (57.9%) swpO=0 conn=2 myRSS=2493 php=2 phpRSS=186 ap=18 tcp=23 topuser=corpkicks 2026-08-26 21:00:26 L1=1.59 run=1 blk=0 avail=6919 (59.0%) swpO=0 conn=3 myRSS=2493 php=0 phpRSS=0 ap=18 tcp=23 topuser=- 2026-08-26 21:00:35 L1=1.50 run=10 blk=0 avail=6481 (55.3%) swpO=0 conn=2 myRSS=2493 php=8 phpRSS=674 ap=19 tcp=51 topuser=tubesupplies 2026-08-26 21:00:36 L1=1.50 run=12 blk=0 avail=6122 (52.2%) swpO=0 conn=3 myRSS=2493 php=11 phpRSS=1169 ap=19 tcp=50 topuser=tubesupplies 2026-08-26 21:00:45 L1=1.93 run=1 blk=0 avail=6744 (57.5%) swpO=0 conn=2 myRSS=2493 php=0 phpRSS=0 ap=44 tcp=18 topuser=- 2026-08-26 21:00:46 L1=1.93 run=1 blk=0 avail=6745 (57.5%) swpO=0 conn=3 myRSS=2493 php=0 phpRSS=0 ap=44 tcp=66 topuser=- 2026-08-26 21:00:55 L1=6.43 run=33 blk=0 avail=4242 (36.2%) swpO=892 conn=23 myRSS=2473 php=27 phpRSS=3019 ap=74 tcp=75 topuser=tubesupplies 2026-08-26 21:00:56 L1=6.43 run=26 blk=0 avail=5318 (45.3%) swpO=892 conn=14 myRSS=2473 php=17 phpRSS=1659 ap=74 tcp=67 topuser=tubesupplies 2026-08-26 21:01:06 L1=8.92 run=11 blk=0 avail=5621 (47.9%) swpO=1565 conn=10 myRSS=2460 php=10 phpRSS=1353 ap=65 tcp=30 topuser=tubesupplies 2026-08-26 21:01:08 L1=8.60 run=27 blk=0 avail=6125 (52.2%) swpO=1204 conn=23 myRSS=2460 php=25 phpRSS=1293 ap=64 tcp=74 topuser=tubesupplies 2026-08-26 21:01:16 L1=8.15 run=23 blk=0 avail=5314 (45.3%) swpO=0 conn=18 myRSS=2460 php=18 phpRSS=1958 ap=58 tcp=43 topuser=tubesupplies 2026-08-26 21:01:18 L1=8.70 run=13 blk=0 avail=6066 (51.7%) swpO=0 conn=23 myRSS=2460 php=9 phpRSS=803 ap=56 tcp=37 topuser=tubesupplies 2026-08-26 21:01:27 L1=11.45 run=33 blk=0 avail=4419 (37.7%) swpO=297 conn=22 myRSS=2460 php=22 phpRSS=2678 ap=56 tcp=49 topuser=tubesupplies 2026-08-26 21:01:28 L1=11.81 run=1 blk=0 avail=6725 (57.3%) swpO=326 conn=23 myRSS=2460 php=0 phpRSS=0 ap=55 tcp=30 topuser=- 2026-08-26 21:01:37 L1=14.95 run=35 blk=0 avail=3574 (30.5%) swpO=1932 conn=35 myRSS=2446 php=35 phpRSS=4218 ap=61 tcp=33 topuser=tubesupplies 2026-08-26 21:01:38 L1=16.56 run=40 blk=0 avail=3378 (28.8%) swpO=1994 conn=40 myRSS=2446 php=43 phpRSS=4610 ap=62 tcp=49 topuser=tubesupplies 2026-08-26 21:01:47 L1=25.01 run=63 blk=2 avail=2964 (25.3%) swpO=3366 conn=49 myRSS=2427 php=53 phpRSS=5185 ap=79 tcp=75 topuser=tubesupplies 2026-08-26 21:01:49 L1=25.01 run=56 blk=0 avail=2953 (25.2%) swpO=3004 conn=49 myRSS=2428 php=52 phpRSS=5233 ap=78 tcp=83 topuser=tubesupplies 2026-08-26 21:01:58 L1=32.04 run=81 blk=0 avail=1800 (15.3%) swpO=4655 conn=67 myRSS=2352 php=70 phpRSS=6763 ap=105 tcp=58 topuser=tubesupplies 2026-08-26 21:01:59 L1=32.04 run=86 blk=1 avail=1848 (15.8%) swpO=6857 conn=61 myRSS=2345 php=64 phpRSS=6684 ap=103 tcp=79 topuser=tubesupplies 2026-08-26 21:02:10 L1=44.69 run=39 blk=64 avail=588 (5.0%) swpO=27361 conn=84 myRSS=1920 php=88 phpRSS=8986 ap=130 tcp=34 topuser=tubesupplies 2026-08-26 21:02:24 L1=61.62 run=89 blk=8 avail=647 (5.5%) swpO=20694 conn=64 myRSS=1634 php=81 phpRSS=7004 ap=117 tcp=37 topuser=tubesupplies