INCIDENT 2026-08-29 05:31:09 trigger: php_rss=1623MB ================================================================== load: 2.12 1.94 1.51 10/654 2120162 ncpu:10 mem_avail: 7242MB/13777MB (52.6%) swap_used:1258MB swapout:0/s blocked(D):0 running:10 iowait:0.2% steal:0.0% php: 14 procs / 1623MB heaviest user: madalice (10 procs, 1487MB) apache: 20 procs tcp_estab: 53 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2822 madalice 10 1525 root 249 1114 nobody 19 340 mailman 20 228 netdata 7 207 cpanellogin 1 108 evolution 8 69 vinesit 1 68 dovenull 6 59 wp-toolkit 3 52 kurri 3 37 lowrange 2 28 dovecot 3 23 zabbix 1 22 named 1 16 aaa 1 15 infinium 1 14 mailnull 1 9 polkitd 1 8 --- php workers by user --- USER PROCS RSS_MB madalice 10 1537 vinesit 1 68 evolution 2 54 root 1 30 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4526 MB Active(file): 4567 MB Inactive(file): 1005 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 1164 MB CommitLimit: 10984 MB Committed_AS: 8322 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 1-03:12:28 7504 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2889856 11.5 Ssl 1-03:11:57 /usr/sbin/mariadbd 2120080 510022 madalice 204848 49.5 R 00:02 php-fpm: pool madalice_com_au 2120082 510022 madalice 195848 47.5 R 00:02 php-fpm: pool madalice_com_au 2120079 510022 madalice 190776 48.5 R 00:02 php-fpm: pool madalice_com_au 1502903 1451906 root 184308 0.0 S 02:54:46 spamd child 508924 1 netdata 182296 2.0 Ssl 1-03:11:26 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1451906 1 root 175572 0.0 Ss 03:08:01 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1502904 1451906 root 164392 0.0 S 02:54:46 spamd child 2120094 510022 madalice 164328 84.0 S 00:01 php-fpm: pool madalice_com_au 2120091 510022 madalice 164316 81.0 S 00:01 php-fpm: pool madalice_com_au 2120097 510022 madalice 164236 75.0 S 00:01 php-fpm: pool madalice_com_au 2120098 510022 madalice 164236 88.0 S 00:01 php-fpm: pool madalice_com_au 2120114 510022 madalice 157548 0.0 R 00:00 php-fpm: pool madalice_com_au 2120115 510022 madalice 153580 0.0 R 00:00 php-fpm: pool madalice_com_au 1416362 1353308 cpanellogin 111568 0.0 S 03:17:00 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 509266 1 root 82792 0.0 Ss 1-03:11:23 /usr/lib/systemd/systemd-journald 2120129 510022 madalice 82348 0.0 S 00:00 php-fpm: pool madalice_com_au 2120128 2085020 vinesit 74772 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509236 509098 root 49280 0.0 Sl 1-03:11:23 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 41272 0.1 Ss 38-02:49:49 cpsrvd (SSL) - waiting for connections 1451116 1 root 36740 0.0 Ss 03:08:54 lfd - sleeping 509640 508992 root 31468 0.0 Sl 1-03:11:21 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 510022 1 root 31292 0.0 Ss 1-03:11:19 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 938582 1 wp-toolkit 31292 0.0 Ss 1-01:19:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2120126 1469 root 29156 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2052397 506832 nobody 24896 0.0 S 16:19 /usr/sbin/httpd -k start 1469 1 root 24172 0.1 Ss 60-19:21:18 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2086040 506832 nobody 23940 0.0 S 07:50 /usr/sbin/httpd -k start 2120195 2114922 evolution 23872 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 483898 1 zabbix 23492 0.2 Ssl 1-03:12:40 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 2085020 506832 nobody 22836 0.1 S 09:58 /usr/sbin/httpd -k start 1463 1 root 21708 0.0 Ss 60-19:21:18 tailwatchd 2104713 506832 nobody 21580 0.0 S 01:27 /usr/sbin/httpd -k start 2084757 506832 nobody 21444 0.1 S 10:35 /usr/sbin/httpd -k start 2086122 506832 nobody 21124 0.0 S 07:37 /usr/sbin/httpd -k start 2104240 506832 nobody 20764 0.0 S 02:34 /usr/sbin/httpd -k start 938585 1 wp-toolkit 20384 0.0 Ss 1-01:19:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 2119476 506832 nobody 19984 0.0 S 00:29 /usr/sbin/httpd -k start 2114922 506832 nobody 19168 0.6 S 00:59 /usr/sbin/httpd -k start 2104413 506832 nobody 18936 0.0 S 02:08 /usr/sbin/httpd -k start 2110318 506832 nobody 18676 0.0 S 01:02 /usr/sbin/httpd -k start 2117777 506832 nobody 18440 0.9 S 00:57 /usr/sbin/httpd -k start 2116300 506832 nobody 18400 0.0 S 00:58 /usr/sbin/httpd -k start 2102286 506832 nobody 18264 0.0 S 04:51 /usr/sbin/httpd -k start 509671 508992 netdata 17924 2.1 Sl 1-03:11:21 /usr/libexec/netdata/plugins.d/apps.plugin 1 481558 1 root 17420 0.1 Ssl 1-03:13:50 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 2120112 506832 nobody 17048 0.0 S 00:00 /usr/sbin/httpd -k start 2120086 506832 nobody 16972 0.0 S 00:01 /usr/sbin/httpd -k start 2120113 506832 nobody 16932 0.0 S 00:00 /usr/sbin/httpd -k start 508634 1 named 16864 0.0 Ssl 1-03:11:31 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 1908879 1471 root 16816 0.0 S 57:20 cPhulkd - dbprocessor 1239685 508511 aaa 15872 0.0 S 04:08:28 dovecot/imap 1471 1 root 15360 0.0 Ss 60-19:21:18 cPhulkd - processor 607605 508511 lowrange 15064 0.0 S 07:09:50 dovecot/imap 4180059 4180015 evolution 14888 0.0 Ss 1-05:31:08 /opt/cpanel/ea-php74/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 1927295 508511 infinium 14712 0.0 S 52:22 dovecot/imap 504012 508511 kurri 14640 0.0 S 07:40:54 dovecot/imap 2120041 508511 kurri 14572 0.0 S 00:03 dovecot/imap 1943286 508511 lowrange 14532 0.0 S 49:48 dovecot/imap 508856 508814 mailman 14500 0.0 S 1-03:11:29 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 3839618 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 938 olympic/olympicfencing.com.au-ssl_log 62 olympic/olympicfencing.com.au 38 evolution/portal.evolutionerp.com.au-ssl_log 20 vinesit/vinesit.com.au-ssl_log 20 evolution/evolutionerp.com.au-ssl_log 12 infinium/infinium.net.au-ssl_log 5 customc/customcentral.com.au-ssl_log 2 madalice/madalice.com.au-ssl_log 2 kamcool/kamcool.com.au-ssl_log 1 (total vhosts taking traffic: 10) --- top client IPs across all vhosts (last 3 min) --- 938 40.115.94.245 96 20.48.179.39 20 203.54.180.238 17 52.139.37.240 5 118.127.40.55 3 192.185.176.97 3 136.124.33.92 2 50.6.169.131 2 2602:fa59:5:367::1 2 136.124.34.229 2 136.124.33.132 2 134.185.86.231 1 8.228.108.49 1 51.68.111.215 1 47.128.37.232 --- top request paths across all vhosts (last 3 min) --- 135 GET /api/getItem/LWPG2001KG 135 GET /api/getItem/LWPB2001KG 135 GET /api/getItem/LWHG2001KG 135 GET /api/getItem/LWFB2001KG 83 GET /api/getItem/LWFBW2001KG 20 GET /heartbeat.php 9 GET /api/getItem/NA 9 GET / 5 POST /wp-cron.php 5 GET /wp-login.php 4 GET /wp-content/themes/index.php 4 GET /api/getItem/PWFBW3151KG 3 GET /xnm-apc.php 3 GET /wp-temp.php 3 GET /wp-manager.php 3 GET /wp-includes/Text/Diff/Engine/about.php 3 GET /wp-includes/ID3/about.php 3 GET /wp-blog.php 3 GET /ssg.php 3 GET /sm.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 135 GET /api/getItem/LWPG2001KG 135 GET /api/getItem/LWPB2001KG 135 GET /api/getItem/LWHG2001KG 135 GET /api/getItem/LWFB2001KG 83 GET /api/getItem/LWFBW2001KG 9 GET /api/getItem/NA 4 GET /api/getItem/PWFBW3151KG 2 GET /api/getItem/SHSG8989508 2 GET /api/getItem/SHSG8989358 2 GET /api/getItem/SHSG8989258 2 GET /api/getItem/SHSG8989208 2 GET /api/getItem/SHSG7575508 -- last 10 requests -- 40.115.94.245 - - [29/Aug/2026:05:31:06 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:05:31:06 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:05:31:06 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:05:31:06 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:05:31:06 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:05:31:07 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:05:31:07 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:05:31:07 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:05:31:07 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [29/Aug/2026:05:31:07 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" == olympic/olympicfencing.com.au-ssl_log == -- top paths -- 2 POST /wp-cron.php 2 GET /xnm-apc.php 2 GET /wp-temp.php 2 GET /wp-manager.php 2 GET /wp-includes/Text/Diff/Engine/about.php 2 GET /wp-includes/ID3/about.php 2 GET /wp-content/themes/index.php 2 GET /wp-blog.php 2 GET /ssg.php 2 GET /sm.php 2 GET /sb.php 2 GET /run.php -- last 10 requests -- 20.48.179.39 - - [29/Aug/2026:05:30:08 +1000] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 - "-" "-" 20.48.179.39 - - [29/Aug/2026:05:30:09 +1000] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 404 56918 "-" "-" 20.48.179.39 - - [29/Aug/2026:05:30:11 +1000] "GET /cgi-bin/admin.php HTTP/1.1" 301 - "-" "-" 20.48.179.39 - - [29/Aug/2026:05:30:13 +1000] "GET /cgi-bin/admin.php HTTP/1.1" 404 56918 "-" "-" 118.127.40.55 - - [29/Aug/2026:05:30:14 +1000] "POST /wp-cron.php?doing_wp_cron=1787945414.3592710494995117187500 HTTP/1.1" 200 1 "-" "WordPress/6.9.7; https://www.olympicfencing.com.au" 20.48.179.39 - - [29/Aug/2026:05:30:15 +1000] "GET /wp-content/ HTTP/1.1" 403 6 "-" "-" 20.48.179.39 - - [29/Aug/2026:05:30:16 +1000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 200 1600 "-" "-" 20.48.179.39 - - [29/Aug/2026:05:30:16 +1000] "GET /wp-includes/block-bindings/ HTTP/1.1" 200 1421 "-" "-" 20.48.179.39 - - [29/Aug/2026:05:30:17 +1000] "GET /wp-includes/assets/ HTTP/1.1" 200 2315 "-" "-" 20.48.179.39 - - [29/Aug/2026:05:30:17 +1000] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 200 1606 "-" "-" == olympic/olympicfencing.com.au == -- top paths -- 2 GET /wp-content/themes/index.php 1 GET /xnm-apc.php 1 GET /wp-temp.php 1 GET /wp-manager.php 1 GET /wp-includes/Text/Diff/Engine/about.php 1 GET //wp-includes/Requests/ 1 GET //wp-includes/l10n/ 1 GET //wp-includes/js/jquery/ 1 GET /wp-includes/ID3/about.php 1 GET /wp-includes/blocks/details/ 1 GET /wp-includes/blocks/audio/ 1 GET //wp-includes/block-bindings/ -- last 10 requests -- 20.48.179.39 - - [29/Aug/2026:05:30:04 +1000] "GET //wp-includes/l10n/ HTTP/1.1" 301 295 "-" "-" 20.48.179.39 - - [29/Aug/2026:05:30:04 +1000] "GET /wp-manager.php HTTP/1.1" 301 292 "-" "-" 20.48.179.39 - - [29/Aug/2026:05:30:07 +1000] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 301 316 "-" "-" 20.48.179.39 - - [29/Aug/2026:05:30:11 +1000] "GET //cgi-bin/admin.php HTTP/1.1" 301 295 "-" "-" 20.48.179.39 - - [29/Aug/2026:05:30:15 +1000] "GET /wp-content/ HTTP/1.1" 301 289 "-" "-" 20.48.179.39 - - [29/Aug/2026:05:30:16 +1000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 303 "-" "-" 20.48.179.39 - - [29/Aug/2026:05:30:16 +1000] "GET //wp-includes/block-bindings/ HTTP/1.1" 301 305 "-" "-" 20.48.179.39 - - [29/Aug/2026:05:30:16 +1000] "GET //wp-includes/assets/ HTTP/1.1" 301 297 "-" "-" 20.48.179.39 - - [29/Aug/2026:05:30:17 +1000] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 301 306 "-" "-" 20.48.179.39 - - [29/Aug/2026:05:30:17 +1000] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 306 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-29 05:28:44 L1=1.97 run=7 blk=0 avail=8084 (58.7%) swpO=0 conn=3 myRSS=2822 php=8 phpRSS=621 ap=19 tcp=36 topuser=madalice 2026-08-29 05:28:48 L1=1.81 run=1 blk=0 avail=8257 (59.9%) swpO=0 conn=3 myRSS=2822 php=4 phpRSS=332 ap=19 tcp=35 topuser=madalice 2026-08-29 05:28:54 L1=1.67 run=3 blk=0 avail=8434 (61.2%) swpO=0 conn=3 myRSS=2822 php=6 phpRSS=234 ap=18 tcp=34 topuser=evolution 2026-08-29 05:28:58 L1=1.61 run=4 blk=0 avail=8294 (60.2%) swpO=0 conn=3 myRSS=2822 php=4 phpRSS=343 ap=17 tcp=35 topuser=customc 2026-08-29 05:29:04 L1=1.64 run=2 blk=0 avail=8393 (60.9%) swpO=0 conn=3 myRSS=2822 php=6 phpRSS=266 ap=19 tcp=38 topuser=evolution 2026-08-29 05:29:08 L1=1.59 run=5 blk=0 avail=8232 (59.8%) swpO=0 conn=3 myRSS=2822 php=6 phpRSS=433 ap=19 tcp=38 topuser=infinium 2026-08-29 05:29:14 L1=1.70 run=5 blk=0 avail=8341 (60.5%) swpO=0 conn=4 myRSS=2822 php=6 phpRSS=329 ap=18 tcp=33 topuser=olympic 2026-08-29 05:29:18 L1=1.89 run=2 blk=0 avail=8374 (60.8%) swpO=0 conn=3 myRSS=2822 php=4 phpRSS=245 ap=18 tcp=33 topuser=olympic 2026-08-29 05:29:24 L1=1.90 run=1 blk=0 avail=8449 (61.3%) swpO=0 conn=4 myRSS=2822 php=5 phpRSS=202 ap=17 tcp=30 topuser=evolution 2026-08-29 05:29:28 L1=1.83 run=2 blk=0 avail=8452 (61.3%) swpO=0 conn=2 myRSS=2822 php=3 phpRSS=155 ap=17 tcp=33 topuser=infinium 2026-08-29 05:29:34 L1=1.76 run=2 blk=0 avail=8398 (61.0%) swpO=0 conn=4 myRSS=2822 php=5 phpRSS=262 ap=17 tcp=34 topuser=olympic 2026-08-29 05:29:38 L1=1.70 run=1 blk=0 avail=8575 (62.2%) swpO=0 conn=2 myRSS=2822 php=2 phpRSS=45 ap=17 tcp=33 topuser=root 2026-08-29 05:29:44 L1=1.72 run=1 blk=0 avail=8540 (62.0%) swpO=0 conn=4 myRSS=2822 php=4 phpRSS=124 ap=19 tcp=36 topuser=evolution 2026-08-29 05:29:48 L1=1.58 run=2 blk=0 avail=8517 (61.8%) swpO=0 conn=2 myRSS=2822 php=3 phpRSS=106 ap=21 tcp=37 topuser=olympic 2026-08-29 05:29:54 L1=1.54 run=2 blk=0 avail=8414 (61.1%) swpO=0 conn=4 myRSS=2822 php=5 phpRSS=289 ap=18 tcp=36 topuser=evolution 2026-08-29 05:29:58 L1=1.65 run=7 blk=0 avail=8484 (61.6%) swpO=0 conn=2 myRSS=2822 php=4 phpRSS=195 ap=18 tcp=35 topuser=evolution 2026-08-29 05:30:04 L1=2.24 run=5 blk=0 avail=8483 (61.6%) swpO=0 conn=4 myRSS=2822 php=5 phpRSS=192 ap=18 tcp=33 topuser=evolution 2026-08-29 05:30:08 L1=2.46 run=5 blk=0 avail=8326 (60.4%) swpO=0 conn=2 myRSS=2822 php=5 phpRSS=354 ap=19 tcp=39 topuser=evolution 2026-08-29 05:30:14 L1=2.59 run=4 blk=0 avail=8271 (60.0%) swpO=0 conn=6 myRSS=2822 php=7 phpRSS=413 ap=26 tcp=45 topuser=olympic 2026-08-29 05:30:18 L1=2.54 run=3 blk=1 avail=8228 (59.7%) swpO=0 conn=2 myRSS=2822 php=6 phpRSS=466 ap=24 tcp=35 topuser=evolution 2026-08-29 05:30:24 L1=2.58 run=2 blk=0 avail=8482 (61.6%) swpO=0 conn=6 myRSS=2822 php=6 phpRSS=233 ap=19 tcp=35 topuser=evolution 2026-08-29 05:30:28 L1=2.37 run=4 blk=1 avail=8508 (61.8%) swpO=0 conn=2 myRSS=2822 php=3 phpRSS=124 ap=19 tcp=35 topuser=olympic 2026-08-29 05:30:34 L1=2.26 run=7 blk=0 avail=8258 (59.9%) swpO=0 conn=6 myRSS=2822 php=7 phpRSS=483 ap=19 tcp=35 topuser=alison 2026-08-29 05:30:38 L1=2.16 run=5 blk=0 avail=8485 (61.6%) swpO=0 conn=2 myRSS=2822 php=4 phpRSS=188 ap=19 tcp=39 topuser=tubesupplies 2026-08-29 05:30:44 L1=2.15 run=2 blk=0 avail=8525 (61.9%) swpO=0 conn=6 myRSS=2822 php=5 phpRSS=163 ap=20 tcp=36 topuser=evolution 2026-08-29 05:30:49 L1=1.97 run=1 blk=0 avail=8553 (62.1%) swpO=0 conn=2 myRSS=2822 php=3 phpRSS=70 ap=20 tcp=32 topuser=evolution 2026-08-29 05:30:54 L1=1.98 run=3 blk=0 avail=8543 (62.0%) swpO=0 conn=6 myRSS=2822 php=3 phpRSS=85 ap=17 tcp=30 topuser=evolution 2026-08-29 05:30:59 L1=2.06 run=4 blk=0 avail=8365 (60.7%) swpO=0 conn=2 myRSS=2822 php=6 phpRSS=377 ap=17 tcp=34 topuser=tubesupplies 2026-08-29 05:31:04 L1=2.13 run=4 blk=0 avail=8540 (62.0%) swpO=0 conn=6 myRSS=2822 php=5 phpRSS=173 ap=17 tcp=34 topuser=evolution 2026-08-29 05:31:09 L1=2.12 run=10 blk=0 avail=7242 (52.6%) swpO=0 conn=14 myRSS=2822 php=14 phpRSS=1623 ap=20 tcp=53 topuser=madalice