INCIDENT 2026-08-30 03:45:29 trigger: php_rss=1901MB mysql_conn=17 ================================================================== load: 1.57 0.94 0.76 17/695 2564552 ncpu:10 mem_avail: 7475MB/13777MB (54.3%) swap_used:1840MB swapout:0/s blocked(D):0 running:17 iowait:0.2% steal:0.0% php: 20 procs / 1901MB heaviest user: infinium (13 procs, 1220MB) apache: 28 procs tcp_estab: 64 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2694 infinium 14 1321 root 262 1156 nobody 27 493 tubesupplies 3 471 netdata 7 197 madalice 1 133 mailman 20 127 evolution 12 83 cpanellogin 1 62 dovenull 6 45 lowrange 3 44 wp-toolkit 3 32 kurri 2 26 zabbix 1 20 dovecot 3 20 named 1 15 candyfabcom 1 14 alison 1 14 polkitd 1 5 --- php workers by user --- USER PROCS RSS_MB infinium 13 1332 tubesupplies 3 471 madalice 1 133 root 1 22 evolution 1 13 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6322 MB Active(file): 4653 MB Inactive(file): 1826 MB Dirty: 3 MB Writeback: 0 MB SReclaimable: 685 MB CommitLimit: 10984 MB Committed_AS: 8784 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 2-01:26:50 4236 /usr/bin/imunify-agent-proxy 2500104 root 15:29 3296 /bin/bash /etc/cron.daily/imunify-antivirus.cron 2500105 root 15:29 1348 sed 1i\ /etc/cron.daily/imunify-antivirus.cron:\ 2500106 root 15:29 9204 /usr/libexec/report-command-error /opt/imunify360/venv/bin/python3 /opt/imunify360/venv/share/imunify360/scripts/delay_on_cron_call.py 2500119 root 15:29 14552 /opt/imunify360/venv/bin/python3 /opt/imunify360/venv/share/imunify360/scripts/delay_on_cron_call.py --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2759140 8.0 Ssl 2-01:26:19 /usr/sbin/mariadbd 2328310 2277352 root 181164 0.0 S 01:07:19 spamd child 508924 1 netdata 176764 1.9 Ssl 2-01:25:48 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2277352 1 root 175896 0.0 Ss 01:22:25 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2328311 2277352 root 168468 0.0 S 01:07:19 spamd child 2550241 2549922 tubesupplies 161036 5.0 S 00:27 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2549622 2533466 tubesupplies 161032 1.5 S 01:26 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2549870 2531942 tubesupplies 161020 2.5 S 00:52 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2564456 510022 madalice 136240 42.6 S 00:03 php-fpm: pool madalice_com_au 509266 1 root 128580 0.0 Ss 2-01:25:45 /usr/lib/systemd/systemd-journald 2564485 2564458 infinium 127428 25.0 S 00:02 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2564509 2547599 infinium 126628 50.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2564512 2564476 infinium 125876 52.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2564517 2531937 infinium 125688 49.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2564507 2533467 infinium 125424 53.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2564510 2553545 infinium 125364 48.0 Rl 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2564506 2564501 infinium 123252 48.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2564514 2564502 infinium 116008 44.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2564511 2564475 infinium 109712 40.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2564515 2564503 infinium 108044 40.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2564518 2547457 infinium 96056 34.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2564536 2532589 infinium 70400 19.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2481080 1353308 cpanellogin 63852 0.0 S 24:04 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 509236 509098 root 55452 0.0 Sl 2-01:25:45 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 509640 508992 root 43732 0.0 Sl 2-01:25:43 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1353308 1 root 42024 0.1 Ss 39-01:04:11 cpsrvd (SSL) - waiting for connections 2564574 2548850 evolution 39180 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2275833 1 root 36808 0.0 Ss 01:23:15 lfd - sleeping 2564611 2561852 infinium 35148 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 1469 1 root 23776 0.1 Ss 61-17:35:40 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 510022 1 root 23532 0.0 Ss 2-01:25:41 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 2547599 506832 nobody 22316 0.0 S 04:45 /usr/sbin/httpd -k start 2532589 506832 nobody 22288 0.2 S 07:22 /usr/sbin/httpd -k start 2533466 506832 nobody 22088 0.0 S 05:49 /usr/sbin/httpd -k start 2531797 506832 nobody 21728 0.0 S 09:21 /usr/sbin/httpd -k start 2553545 506832 nobody 21652 0.1 S 00:25 /usr/sbin/httpd -k start 2531942 506832 nobody 21636 0.0 S 09:01 /usr/sbin/httpd -k start 2547457 506832 nobody 21560 0.1 S 05:10 /usr/sbin/httpd -k start 2547581 506832 nobody 21520 0.1 S 04:50 /usr/sbin/httpd -k start 2547587 506832 nobody 21380 0.1 S 04:49 /usr/sbin/httpd -k start 2531937 506832 nobody 21220 0.0 S 09:01 /usr/sbin/httpd -k start 483898 1 zabbix 21156 0.2 Ssl 2-01:27:02 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 2533467 506832 nobody 21132 0.0 S 05:49 /usr/sbin/httpd -k start 2548850 506832 nobody 20404 0.0 S 02:49 /usr/sbin/httpd -k start 1463 1 root 20344 0.0 Ss 61-17:35:40 tailwatchd 2532590 506832 nobody 20068 0.0 S 07:21 /usr/sbin/httpd -k start 2550101 506832 nobody 19916 0.1 S 00:29 /usr/sbin/httpd -k start 2561852 506832 nobody 19612 0.1 R 00:20 /usr/sbin/httpd -k start 2564504 506832 nobody 19596 0.0 S 00:01 /usr/sbin/httpd -k start 2549219 506832 nobody 19548 0.0 S 02:03 /usr/sbin/httpd -k start 2564476 506832 nobody 19532 0.0 S 00:02 /usr/sbin/httpd -k start 2564475 506832 nobody 19404 0.0 S 00:02 /usr/sbin/httpd -k start 2533459 506832 nobody 19312 0.0 S 05:50 /usr/sbin/httpd -k start 938582 1 wp-toolkit 18728 0.0 Ss 1-23:33:22 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2549922 506832 nobody 18548 0.0 S 00:50 /usr/sbin/httpd -k start 2564458 506832 nobody 16908 0.0 S 00:03 /usr/sbin/httpd -k start 1471 1 root 16748 0.0 Ss 61-17:35:40 cPhulkd - processor 2564501 506832 nobody 16500 0.0 S 00:01 /usr/sbin/httpd -k start 2564502 506832 nobody 16472 0.0 S 00:01 /usr/sbin/httpd -k start 2564503 506832 nobody 16448 0.0 S 00:01 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4307705 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 405 corpkicks/2025.corporatekicks.com.au-ssl_log 262 alison/wp.alisonarts.com.au-ssl_log 94 alison/wp.alisonarts.com.au 91 madalice/madalice.com.au-ssl_log 85 evolution/evolutionerp.com.au-ssl_log 58 evolution/portal.evolutionerp.com.au-ssl_log 27 evolution/evolutionerp.com.au 24 infinium/infinium.net.au-ssl_log 15 evolution/my.evolutionerp.com.au-ssl_log 2 (total vhosts taking traffic: 10) --- top client IPs across all vhosts (last 3 min) --- 405 40.115.94.245 261 130.211.92.43 185 20.104.18.15 77 20.48.250.41 72 20.220.10.235 27 203.54.180.238 11 198.54.114.50 6 162.0.232.239 4 118.127.40.55 2 34.62.65.246 2 114.119.146.16 2 114.119.130.40 1 91.92.243.246 1 72.167.132.114 1 57.129.136.36 --- top request paths across all vhosts (last 3 min) --- 90 GET /api/getItem/LWHG2001KG 27 GET /heartbeat.php 15 GET /wp-login.php 9 GET /api/getItem/NA 6 GET /store/custom-design-your-own-swoosh/ 4 POST /wp-login.php 4 POST /wp-cron.php 4 POST / 4 GET /goods.php 4 GET /api/getItem/PWFBW3151KG 3 GET /wp-content/plugins/hellopress/wp_filemanager.php 3 GET /this_is_a_new_hello_world.php 3 GET /bgymj.php 3 GET /8.php 2 GET /yyy.php 2 GET /xty.php 2 GET /x.php 2 GET /xmini4.php 2 GET /ws85.php 2 GET /ws66.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 90 GET /api/getItem/LWHG2001KG 9 GET /api/getItem/NA 4 GET /api/getItem/PWFBW3151KG 2 GET /api/getItem/SHSG8989508 2 GET /api/getItem/SHSG8989358 2 GET /api/getItem/SHSG8989258 2 GET /api/getItem/SHSG8989208 2 GET /api/getItem/SHSG7575508 2 GET /api/getItem/SHSG757540-8 2 GET /api/getItem/SHSG757530-8 2 GET /api/getItem/SHSG757525-8 2 GET /api/getItem/SHSG757520-8 -- last 10 requests -- 40.115.94.245 - - [30/Aug/2026:03:45:26 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [30/Aug/2026:03:45:26 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [30/Aug/2026:03:45:26 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [30/Aug/2026:03:45:26 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [30/Aug/2026:03:45:26 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [30/Aug/2026:03:45:27 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [30/Aug/2026:03:45:27 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [30/Aug/2026:03:45:27 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [30/Aug/2026:03:45:27 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [30/Aug/2026:03:45:27 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" == corpkicks/2025.corporatekicks.com.au-ssl_log == -- top paths -- 4 POST / 1 POST /wp-cron.php 1 GET /zend/.env 1 GET /yii/.env 1 GET /www/phpinfo.php 1 GET /www/.env 1 GET /wp/.env 1 GET /wp-admin/phpinfo.php 1 GET /worker/.env 1 GET /wordpress/.env 1 GET /webroot/index.php/_environment 1 GET /webmail/phpinfo.php -- last 10 requests -- 130.211.92.43 - - [30/Aug/2026:03:44:55 +1000] "GET /preview/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 130.211.92.43 - - [30/Aug/2026:03:44:55 +1000] "GET /www/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 130.211.92.43 - - [30/Aug/2026:03:44:55 +1000] "GET /htdocs/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 130.211.92.43 - - [30/Aug/2026:03:44:56 +1000] "GET /public_html/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 130.211.92.43 - - [30/Aug/2026:03:44:56 +1000] "GET /site/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 130.211.92.43 - - [30/Aug/2026:03:44:56 +1000] "GET /docs/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 130.211.92.43 - - [30/Aug/2026:03:44:56 +1000] "GET /wp-admin/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 130.211.92.43 - - [30/Aug/2026:03:44:57 +1000] "GET /administrator/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 130.211.92.43 - - [30/Aug/2026:03:44:57 +1000] "GET /core/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 130.211.92.43 - - [30/Aug/2026:03:44:57 +1000] "GET /includes/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" == alison/wp.alisonarts.com.au-ssl_log == -- top paths -- 2 GET /goods.php 1 GET /xty.php 1 GET /x.php 1 GET /xmini4.php 1 GET /ws85.php 1 GET /ws55.php 1 GET /wp-trackback.php 1 GET /wp-safe.php 1 GET /wp.php 1 GET /wp-includes/index.php 1 GET /wp-includes/ID3/moon.php 1 GET /w.php -- last 10 requests -- 20.104.18.15 - - [30/Aug/2026:03:43:36 +1000] "GET /birrs.php HTTP/1.1" 404 - "-" "-" 20.104.18.15 - - [30/Aug/2026:03:43:37 +1000] "GET /sss.php?p= HTTP/1.1" 404 - "-" "-" 20.104.18.15 - - [30/Aug/2026:03:43:37 +1000] "GET /wp-content/themes/gaukingo/ HTTP/1.1" 404 - "-" "-" 20.104.18.15 - - [30/Aug/2026:03:43:38 +1000] "GET /wp-includes/ID3/moon.php HTTP/1.1" 404 - "-" "-" 20.104.18.15 - - [30/Aug/2026:03:43:38 +1000] "GET /xmini4.php HTTP/1.1" 404 - "-" "-" 20.104.18.15 - - [30/Aug/2026:03:43:38 +1000] "GET /gulu.php HTTP/1.1" 404 - "-" "-" 20.104.18.15 - - [30/Aug/2026:03:43:39 +1000] "GET /replace.php HTTP/1.1" 404 - "-" "-" 20.104.18.15 - - [30/Aug/2026:03:43:39 +1000] "GET /c4.php HTTP/1.1" 404 - "-" "-" 20.104.18.15 - - [30/Aug/2026:03:43:40 +1000] "GET /rxr.php HTTP/1.1" 404 - "-" "-" 20.104.18.15 - - [30/Aug/2026:03:43:40 +1000] "GET /reviall.php HTTP/1.1" 404 - "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-30 03:43:08 L1=0.99 run=2 blk=0 avail=8468 (61.5%) swpO=0 conn=3 myRSS=2694 php=5 phpRSS=453 ap=20 tcp=32 topuser=tubesupplies 2026-08-30 03:43:08 L1=0.99 run=3 blk=0 avail=8433 (61.2%) swpO=0 conn=4 myRSS=2694 php=6 phpRSS=521 ap=20 tcp=32 topuser=tubesupplies 2026-08-30 03:43:18 L1=0.99 run=1 blk=0 avail=8551 (62.1%) swpO=0 conn=3 myRSS=2694 php=4 phpRSS=350 ap=19 tcp=33 topuser=tubesupplies 2026-08-30 03:43:18 L1=0.99 run=1 blk=0 avail=8551 (62.1%) swpO=0 conn=4 myRSS=2694 php=4 phpRSS=350 ap=19 tcp=33 topuser=tubesupplies 2026-08-30 03:43:28 L1=1.15 run=1 blk=0 avail=8546 (62.0%) swpO=2 conn=2 myRSS=2694 php=4 phpRSS=351 ap=20 tcp=34 topuser=madalice 2026-08-30 03:43:28 L1=1.15 run=1 blk=0 avail=8544 (62.0%) swpO=2 conn=4 myRSS=2694 php=4 phpRSS=351 ap=20 tcp=34 topuser=madalice 2026-08-30 03:43:38 L1=1.05 run=2 blk=0 avail=8506 (61.7%) swpO=2 conn=2 myRSS=2694 php=5 phpRSS=425 ap=19 tcp=37 topuser=madalice 2026-08-30 03:43:38 L1=1.05 run=2 blk=0 avail=8460 (61.4%) swpO=2 conn=4 myRSS=2694 php=5 phpRSS=468 ap=19 tcp=38 topuser=madalice 2026-08-30 03:43:48 L1=1.04 run=3 blk=0 avail=8423 (61.1%) swpO=0 conn=2 myRSS=2694 php=5 phpRSS=493 ap=19 tcp=38 topuser=madalice 2026-08-30 03:43:49 L1=1.04 run=3 blk=0 avail=8396 (60.9%) swpO=0 conn=4 myRSS=2694 php=5 phpRSS=523 ap=19 tcp=38 topuser=evolution 2026-08-30 03:43:58 L1=0.96 run=2 blk=0 avail=8510 (61.8%) swpO=0 conn=2 myRSS=2694 php=4 phpRSS=352 ap=19 tcp=36 topuser=madalice 2026-08-30 03:43:59 L1=0.96 run=1 blk=0 avail=8538 (62.0%) swpO=0 conn=4 myRSS=2694 php=4 phpRSS=352 ap=19 tcp=36 topuser=madalice 2026-08-30 03:44:08 L1=1.04 run=1 blk=0 avail=8396 (60.9%) swpO=0 conn=2 myRSS=2694 php=5 phpRSS=509 ap=19 tcp=40 topuser=tubesupplies 2026-08-30 03:44:09 L1=1.04 run=1 blk=0 avail=8395 (60.9%) swpO=0 conn=3 myRSS=2694 php=5 phpRSS=509 ap=19 tcp=40 topuser=tubesupplies 2026-08-30 03:44:18 L1=0.95 run=1 blk=0 avail=8569 (62.2%) swpO=0 conn=2 myRSS=2694 php=4 phpRSS=326 ap=18 tcp=33 topuser=tubesupplies 2026-08-30 03:44:19 L1=0.95 run=4 blk=0 avail=8569 (62.2%) swpO=0 conn=3 myRSS=2694 php=4 phpRSS=326 ap=18 tcp=33 topuser=tubesupplies 2026-08-30 03:44:28 L1=0.88 run=1 blk=0 avail=8569 (62.2%) swpO=0 conn=2 myRSS=2694 php=4 phpRSS=326 ap=18 tcp=33 topuser=tubesupplies 2026-08-30 03:44:29 L1=0.88 run=3 blk=0 avail=8561 (62.1%) swpO=0 conn=3 myRSS=2694 php=5 phpRSS=366 ap=18 tcp=34 topuser=tubesupplies 2026-08-30 03:44:38 L1=0.89 run=5 blk=0 avail=8480 (61.6%) swpO=2 conn=2 myRSS=2694 php=6 phpRSS=476 ap=18 tcp=35 topuser=tubesupplies 2026-08-30 03:44:39 L1=0.89 run=4 blk=0 avail=8361 (60.7%) swpO=2 conn=3 myRSS=2694 php=6 phpRSS=603 ap=18 tcp=35 topuser=tubesupplies 2026-08-30 03:44:49 L1=0.91 run=4 blk=0 avail=8300 (60.2%) swpO=0 conn=2 myRSS=2694 php=7 phpRSS=683 ap=19 tcp=35 topuser=tubesupplies 2026-08-30 03:44:49 L1=0.91 run=2 blk=0 avail=8337 (60.5%) swpO=0 conn=3 myRSS=2694 php=6 phpRSS=613 ap=19 tcp=35 topuser=tubesupplies 2026-08-30 03:44:59 L1=1.01 run=3 blk=0 avail=8307 (60.3%) swpO=0 conn=2 myRSS=2694 php=6 phpRSS=644 ap=19 tcp=34 topuser=tubesupplies 2026-08-30 03:44:59 L1=1.01 run=2 blk=0 avail=8404 (61.0%) swpO=0 conn=3 myRSS=2694 php=6 phpRSS=547 ap=19 tcp=33 topuser=tubesupplies 2026-08-30 03:45:09 L1=1.39 run=5 blk=0 avail=7957 (57.8%) swpO=0 conn=2 myRSS=2694 php=10 phpRSS=1090 ap=21 tcp=36 topuser=tubesupplies 2026-08-30 03:45:09 L1=1.39 run=8 blk=0 avail=7874 (57.2%) swpO=0 conn=8 myRSS=2694 php=10 phpRSS=1164 ap=21 tcp=37 topuser=tubesupplies 2026-08-30 03:45:19 L1=1.48 run=5 blk=0 avail=8094 (58.8%) swpO=0 conn=2 myRSS=2694 php=8 phpRSS=735 ap=21 tcp=31 topuser=tubesupplies 2026-08-30 03:45:19 L1=1.48 run=1 blk=0 avail=8243 (59.8%) swpO=0 conn=8 myRSS=2694 php=8 phpRSS=742 ap=21 tcp=31 topuser=tubesupplies 2026-08-30 03:45:29 L1=1.57 run=17 blk=0 avail=7475 (54.3%) swpO=0 conn=17 myRSS=2694 php=20 phpRSS=1901 ap=28 tcp=64 topuser=infinium 2026-08-30 03:45:29 L1=1.57 run=15 blk=0 avail=7240 (52.6%) swpO=0 conn=17 myRSS=2694 php=20 phpRSS=2057 ap=28 tcp=64 topuser=infinium