INCIDENT 2026-08-28 23:56:25 trigger: php_procs=44 php_rss=2850MB mysql_conn=29 ================================================================== load: 3.82 1.40 1.00 52/690 935969 ncpu:10 mem_avail: 7177MB/13777MB (52.1%) swap_used:1163MB swapout:0/s blocked(D):0 running:47 iowait:0.0% steal:0.0% php: 44 procs / 2850MB heaviest user: vinesit (41 procs, 2657MB) apache: 58 procs tcp_estab: 209 --- RSS by user (all processes) --- USER PROCS RSS_MB vinesit 41 2728 mysql 1 2481 nobody 59 992 root 249 936 mailman 20 275 netdata 7 199 madalice 1 156 cpanellogin 1 88 wp-toolkit 3 69 dovenull 6 59 infinium 3 43 kurri 3 37 evolution 7 33 lowrange 2 29 zabbix 1 26 dovecot 3 23 named 1 18 candyfabcom 1 14 aaa 1 14 mailnull 1 10 --- php workers by user --- USER PROCS RSS_MB vinesit 41 2795 madalice 1 156 root 1 20 evolution 1 16 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6056 MB Active(file): 3096 MB Inactive(file): 2416 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 593 MB CommitLimit: 10984 MB Committed_AS: 13985 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 21:37:45 10112 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2541220 13.5 Ssl 21:37:14 /usr/sbin/mariadbd 529389 527476 root 179496 0.0 S 21:32:07 spamd child 508924 1 netdata 178072 2.0 Ssl 21:36:43 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 935502 510022 madalice 162012 19.2 R 00:20 php-fpm: pool madalice_com_au 935863 935848 vinesit 96680 22.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935882 935406 vinesit 96660 31.5 S 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935861 919627 vinesit 96560 21.0 S 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935875 917676 vinesit 92536 30.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935881 935790 vinesit 91900 31.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4074469 1353308 cpanellogin 90804 0.0 S 05:07:00 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 935870 935412 vinesit 89432 26.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935880 935481 vinesit 89368 26.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935879 935409 vinesit 89004 26.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935867 934873 vinesit 87688 17.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935876 917682 vinesit 87032 25.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935873 935408 vinesit 85980 24.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935878 917745 vinesit 85928 24.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 527476 1 root 85812 0.0 Ss 21:33:46 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 935872 934854 vinesit 84772 23.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935884 935827 vinesit 84772 25.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935886 935387 vinesit 82792 24.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935889 935411 vinesit 78416 22.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935868 919628 vinesit 75972 21.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2985227 527476 root 74600 0.0 S 10:17:44 spamd child 935892 935828 vinesit 72616 34.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935899 935480 vinesit 71800 32.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935891 935386 vinesit 70904 32.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935903 918438 vinesit 69388 27.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935893 935487 vinesit 69284 28.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935897 935385 vinesit 68672 30.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509266 1 root 68496 0.0 Ss 21:36:40 /usr/lib/systemd/systemd-journald 935898 918128 vinesit 67628 25.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935905 917744 vinesit 64480 21.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509236 509098 root 62508 0.0 Sl 21:36:40 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 935909 935846 vinesit 61048 20.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935906 902235 vinesit 60892 18.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935913 935850 vinesit 60812 17.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935915 935352 vinesit 60604 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935912 935851 vinesit 59788 17.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935908 919616 vinesit 59308 15.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935911 935845 vinesit 59088 15.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935935 919689 vinesit 57988 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935927 935407 vinesit 57508 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935910 935849 vinesit 55112 11.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935940 935492 vinesit 54968 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935983 935369 vinesit 54220 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935917 935847 vinesit 53852 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935965 934874 vinesit 45888 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 938582 1 wp-toolkit 40688 0.0 Ss 19:44:17 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1353308 1 root 39600 0.1 Ss 37-21:15:06 cpsrvd (SSL) - waiting for connections 936008 935796 vinesit 30940 0.0 S 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 935992 1469 root 30368 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 936001 1469 root 30368 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 526869 1 root 28644 0.0 Ss 21:34:09 lfd - sleeping 483898 1 zabbix 27840 0.2 Ssl 21:37:57 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 509640 508992 root 27520 0.0 Sl 21:36:38 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 938585 1 wp-toolkit 27304 0.0 Ss 19:44:17 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1469 1 root 26532 0.1 Ss 60-13:46:35 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1463 1 root 22008 0.0 Ss 60-13:46:35 tailwatchd 918437 506832 nobody 22000 0.0 S 03:14 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 3726352 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min candyfabcom/candyfab.com.au-ssl_log 227 olympic/olympicfencing.com.au-ssl_log 205 vinesit/vinesit.com.au-ssl_log 205 infinium/infinium.net.au-ssl_log 176 olytis/tis.com.au-ssl_log 77 alison/alisonarts.com.au-ssl_log 55 vinesit/vinesit.com.au 44 evolution/portal.evolutionerp.com.au-ssl_log 26 madalice/madalice.com.au-ssl_log 4 (total vhosts taking traffic: 9) --- top client IPs across all vhosts (last 3 min) --- 403 68.155.159.216 194 4.205.62.107 189 4.204.200.136 76 34.65.211.73 72 20.104.50.220 55 40.83.93.50 26 203.54.180.238 10 91.224.92.32 2 94.154.43.74 2 94.154.43.135 2 114.119.159.70 2 114.119.143.104 1 94.154.43.180 1 118.127.40.55 --- top request paths across all vhosts (last 3 min) --- 26 GET /heartbeat.php 9 GET /goods.php 8 GET / 6 GET /wp-login.php 5 GET /wp.php 5 GET /admin.php 4 GET /backup.php 4 GET /8.php 3 GET /xty.php 3 GET /ws85.php 3 GET /ws55.php 3 GET /w.php 3 GET /wp-content/uploads/ 3 GET /wp-content/plugins/hellopress/wp_filemanager.php 3 GET /wp-content/admin.php 3 GET /wp-configs.php 3 GET /wp-admin.php 3 GET /wp-activate.php 3 GET /wp-2019.php 3 GET /wnnjpsby.php --- busiest 3 vhosts: top paths + last 10 requests --- == candyfabcom/candyfab.com.au-ssl_log == -- top paths -- 1 GET /xxx.php 1 GET /xx.php 1 GET /xpw.php 1 GET /x.php 1 GET /xmlrpc.php 1 GET /wp-signup.php 1 GET /wp-seo.php 1 GET /wp.php 1 GET /wp-login.php 1 GET /wp-load.php 1 GET /wp-links.php 1 GET /wp-includes/Text/autoload_classmap.php -- last 10 requests -- 68.155.159.216 - - [28/Aug/2026:23:56:05 +1000] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 401 36 "-" "-" 68.155.159.216 - - [28/Aug/2026:23:56:05 +1000] "GET /erin1.PhP7 HTTP/1.1" 401 36 "-" "-" 68.155.159.216 - - [28/Aug/2026:23:56:06 +1000] "GET /home/function.php HTTP/1.1" 401 36 "-" "-" 68.155.159.216 - - [28/Aug/2026:23:56:06 +1000] "GET /wp-login.php HTTP/1.1" 401 36 "-" "-" 68.155.159.216 - - [28/Aug/2026:23:56:07 +1000] "GET /wp-content/index.php HTTP/1.1" 401 36 "-" "-" 68.155.159.216 - - [28/Aug/2026:23:56:07 +1000] "GET /wp-content/upgrade/about.php HTTP/1.1" 401 36 "-" "-" 68.155.159.216 - - [28/Aug/2026:23:56:07 +1000] "GET /wp.php HTTP/1.1" 401 36 "-" "-" 68.155.159.216 - - [28/Aug/2026:23:56:08 +1000] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 401 36 "-" "-" 68.155.159.216 - - [28/Aug/2026:23:56:08 +1000] "GET /css/index.php HTTP/1.1" 401 36 "-" "-" 68.155.159.216 - - [28/Aug/2026:23:56:09 +1000] "GET /.well-known/index.php HTTP/1.1" 401 36 "-" "-" == olympic/olympicfencing.com.au-ssl_log == -- top paths -- 3 GET /wp-login.php 2 HEAD / 2 GET /ms-edit.php 2 GET /motu.php 2 GET /doc.php 2 GET /aww.php 2 GET / 1 POST /wp-cron.php 1 GET /zz.php 1 GET /zaza.php 1 GET /xza.php 1 GET /xve22.php -- last 10 requests -- 4.205.62.107 - - [28/Aug/2026:23:56:09 +1000] "GET /samll.php HTTP/1.1" 401 36 "-" "-" 4.205.62.107 - - [28/Aug/2026:23:56:10 +1000] "GET /pass4.php HTTP/1.1" 401 36 "-" "-" 4.205.62.107 - - [28/Aug/2026:23:56:10 +1000] "GET /dd.php HTTP/1.1" 401 36 "-" "-" 4.205.62.107 - - [28/Aug/2026:23:56:11 +1000] "GET /doc.php HTTP/1.1" 401 36 "-" "-" 91.224.92.32 - - [28/Aug/2026:23:56:09 +1000] "GET / HTTP/1.1" 200 14351 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 4.205.62.107 - - [28/Aug/2026:23:56:11 +1000] "GET /fun.php HTTP/1.1" 401 36 "-" "-" 4.205.62.107 - - [28/Aug/2026:23:56:11 +1000] "GET /bb.php HTTP/1.1" 401 36 "-" "-" 4.205.62.107 - - [28/Aug/2026:23:56:12 +1000] "GET /06.php HTTP/1.1" 401 36 "-" "-" 91.224.92.32 - - [28/Aug/2026:23:56:12 +1000] "GET /ueditor/ HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 91.224.92.32 - - [28/Aug/2026:23:56:12 +1000] "GET /fckeditor/editor/ HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" == vinesit/vinesit.com.au-ssl_log == -- top paths -- 4 GET /goods.php 2 GET /xty.php 2 GET /ws85.php 2 GET /ws55.php 2 GET /wp.php 2 GET /w.php 2 GET /wp-content/mod/adminfuns.php 2 GET /wp_blog_footer.php 2 GET /wp-aothait.php 2 GET /wp-admin/w.php 2 GET /wp-admin/maint/wp-is.php 2 GET /wnnjpsby.php -- last 10 requests -- 34.65.211.73 - - [28/Aug/2026:23:56:24 +1000] "GET /app.yml HTTP/1.1" 404 27678 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.65.211.73 - - [28/Aug/2026:23:56:23 +1000] "GET /api/configprops HTTP/1.1" 404 27678 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.65.211.73 - - [28/Aug/2026:23:56:23 +1000] "GET /app.yaml HTTP/1.1" 404 27678 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.65.211.73 - - [28/Aug/2026:23:56:23 +1000] "GET /app/config.php HTTP/1.1" 404 27678 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.65.211.73 - - [28/Aug/2026:23:56:26 +1000] "GET /backup/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.65.211.73 - - [28/Aug/2026:23:56:23 +1000] "GET /app/config/database.php HTTP/1.1" 404 27678 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.65.211.73 - - [28/Aug/2026:23:56:23 +1000] "GET /app/settings.php HTTP/1.1" 404 27678 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.65.211.73 - - [28/Aug/2026:23:56:23 +1000] "GET /app/actuator/env HTTP/1.1" 404 27678 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.65.211.73 - - [28/Aug/2026:23:56:23 +1000] "GET /application/config/config.php HTTP/1.1" 404 27678 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.65.211.73 - - [28/Aug/2026:23:56:23 +1000] "GET /api/config.yml HTTP/1.1" 404 27678 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" --- last 30 samples (run-up to this incident) --- 2026-08-28 23:54:04 L1=0.49 run=2 blk=0 avail=9052 (65.7%) swpO=0 conn=4 myRSS=2481 php=5 phpRSS=182 ap=20 tcp=36 topuser=evolution 2026-08-28 23:54:05 L1=0.49 run=2 blk=0 avail=9062 (65.8%) swpO=0 conn=3 myRSS=2481 php=4 phpRSS=154 ap=20 tcp=36 topuser=vinesit 2026-08-28 23:54:14 L1=0.57 run=2 blk=0 avail=8949 (65.0%) swpO=0 conn=4 myRSS=2481 php=6 phpRSS=322 ap=19 tcp=33 topuser=madalice 2026-08-28 23:54:15 L1=0.57 run=2 blk=0 avail=8940 (64.9%) swpO=0 conn=3 myRSS=2481 php=5 phpRSS=297 ap=19 tcp=34 topuser=madalice 2026-08-28 23:54:24 L1=0.56 run=2 blk=0 avail=8930 (64.8%) swpO=0 conn=3 myRSS=2481 php=6 phpRSS=341 ap=18 tcp=34 topuser=madalice 2026-08-28 23:54:25 L1=0.56 run=1 blk=0 avail=9007 (65.4%) swpO=0 conn=3 myRSS=2481 php=4 phpRSS=210 ap=18 tcp=35 topuser=madalice 2026-08-28 23:54:34 L1=0.71 run=3 blk=0 avail=9021 (65.5%) swpO=0 conn=3 myRSS=2481 php=3 phpRSS=77 ap=22 tcp=42 topuser=evolution 2026-08-28 23:54:35 L1=0.71 run=3 blk=0 avail=9077 (65.9%) swpO=0 conn=3 myRSS=2481 php=3 phpRSS=77 ap=22 tcp=43 topuser=evolution 2026-08-28 23:54:45 L1=0.91 run=1 blk=0 avail=8966 (65.1%) swpO=0 conn=3 myRSS=2481 php=4 phpRSS=213 ap=22 tcp=41 topuser=madalice 2026-08-28 23:54:45 L1=0.91 run=1 blk=0 avail=8957 (65.0%) swpO=0 conn=2 myRSS=2481 php=5 phpRSS=228 ap=22 tcp=41 topuser=madalice 2026-08-28 23:54:55 L1=0.85 run=4 blk=0 avail=8900 (64.6%) swpO=0 conn=3 myRSS=2481 php=5 phpRSS=287 ap=22 tcp=38 topuser=madalice 2026-08-28 23:54:55 L1=0.85 run=5 blk=0 avail=8899 (64.6%) swpO=0 conn=2 myRSS=2481 php=4 phpRSS=262 ap=22 tcp=38 topuser=madalice 2026-08-28 23:55:05 L1=0.95 run=4 blk=0 avail=8885 (64.5%) swpO=0 conn=3 myRSS=2481 php=4 phpRSS=294 ap=22 tcp=38 topuser=corpkicks 2026-08-28 23:55:05 L1=0.95 run=5 blk=0 avail=8876 (64.4%) swpO=0 conn=2 myRSS=2481 php=4 phpRSS=308 ap=22 tcp=36 topuser=corpkicks 2026-08-28 23:55:15 L1=1.03 run=2 blk=0 avail=8960 (65.0%) swpO=0 conn=3 myRSS=2481 php=4 phpRSS=210 ap=22 tcp=38 topuser=madalice 2026-08-28 23:55:15 L1=1.03 run=2 blk=0 avail=8943 (64.9%) swpO=0 conn=2 myRSS=2481 php=4 phpRSS=229 ap=22 tcp=38 topuser=madalice 2026-08-28 23:55:25 L1=0.95 run=1 blk=0 avail=8971 (65.1%) swpO=0 conn=1 myRSS=2481 php=4 phpRSS=210 ap=21 tcp=37 topuser=madalice 2026-08-28 23:55:25 L1=0.95 run=1 blk=0 avail=8995 (65.3%) swpO=0 conn=2 myRSS=2481 php=3 phpRSS=169 ap=21 tcp=37 topuser=madalice 2026-08-28 23:55:35 L1=0.96 run=2 blk=0 avail=9088 (66.0%) swpO=0 conn=1 myRSS=2481 php=3 phpRSS=82 ap=21 tcp=37 topuser=vinesit 2026-08-28 23:55:35 L1=0.96 run=2 blk=0 avail=9070 (65.8%) swpO=0 conn=2 myRSS=2481 php=3 phpRSS=103 ap=21 tcp=38 topuser=vinesit 2026-08-28 23:55:45 L1=1.26 run=1 blk=0 avail=8985 (65.2%) swpO=0 conn=1 myRSS=2481 php=3 phpRSS=169 ap=24 tcp=38 topuser=madalice 2026-08-28 23:55:45 L1=1.26 run=2 blk=0 avail=8955 (65.0%) swpO=0 conn=1 myRSS=2481 php=4 phpRSS=226 ap=24 tcp=36 topuser=madalice 2026-08-28 23:55:55 L1=1.15 run=2 blk=0 avail=8929 (64.8%) swpO=0 conn=1 myRSS=2481 php=4 phpRSS=251 ap=23 tcp=38 topuser=madalice 2026-08-28 23:55:55 L1=1.15 run=2 blk=0 avail=8908 (64.7%) swpO=0 conn=1 myRSS=2481 php=4 phpRSS=268 ap=23 tcp=38 topuser=madalice 2026-08-28 23:56:05 L1=1.12 run=7 blk=0 avail=8701 (63.2%) swpO=0 conn=1 myRSS=2481 php=8 phpRSS=492 ap=38 tcp=64 topuser=tubesupplies 2026-08-28 23:56:05 L1=1.12 run=5 blk=0 avail=8661 (62.9%) swpO=0 conn=1 myRSS=2481 php=7 phpRSS=507 ap=38 tcp=67 topuser=tubesupplies 2026-08-28 23:56:15 L1=1.58 run=7 blk=0 avail=8272 (60.0%) swpO=0 conn=1 myRSS=2481 php=9 phpRSS=891 ap=46 tcp=56 topuser=olympic 2026-08-28 23:56:15 L1=1.58 run=8 blk=0 avail=8182 (59.4%) swpO=0 conn=1 myRSS=2481 php=9 phpRSS=989 ap=46 tcp=55 topuser=olympic 2026-08-28 23:56:25 L1=3.82 run=47 blk=0 avail=7177 (52.1%) swpO=0 conn=29 myRSS=2481 php=44 phpRSS=2850 ap=58 tcp=209 topuser=vinesit 2026-08-28 23:56:25 L1=3.82 run=49 blk=0 avail=7050 (51.2%) swpO=0 conn=27 myRSS=2481 php=44 phpRSS=2916 ap=60 tcp=209 topuser=vinesit