INCIDENT 2026-09-02 05:15:43 trigger: php_procs=25 php_rss=2299MB mysql_conn=23 ================================================================== load: 6.00 1.85 1.28 26/686 1265810 ncpu:10 mem_avail: 5891MB/13777MB (42.8%) swap_used:2304MB swapout:0/s blocked(D):0 running:28 iowait:0.1% steal:0.0% php: 25 procs / 2299MB heaviest user: tubesupplies (23 procs, 2265MB) apache: 52 procs tcp_estab: 189 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3295 tubesupplies 22 2212 root 248 1093 nobody 51 1069 mailman 20 357 cpanellogin 1 227 netdata 7 203 dovenull 6 67 wp-toolkit 3 59 lowrange 3 44 kurri 3 43 infinium 3 42 dovecot 3 28 mailnull 3 25 evolution 7 24 zabbix 1 19 named 1 12 nscd 1 4 cpanelconnecttrack 1 4 polkitd 1 3 --- php workers by user --- USER PROCS RSS_MB tubesupplies 22 2147 root 1 25 evolution 1 8 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5457 MB Active(file): 3546 MB Inactive(file): 1129 MB Dirty: 3 MB Writeback: 0 MB SReclaimable: 475 MB CommitLimit: 10984 MB Committed_AS: 10799 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 1201899 root 15:42 1368 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 1251529 root 00:43 3148 /bin/sh -c bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || : 3926885 root 1-02:53:15 3896 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 3374332 10.4 Ssl 5-02:56:35 /usr/sbin/mariadbd 704828 1353308 cpanellogin 232968 0.2 S 02:39:49 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 706070 655564 root 189516 0.0 S 02:37:45 spamd child 508924 1 netdata 182216 2.0 Ssl 5-02:56:04 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 706071 655564 root 181648 0.0 S 02:37:45 spamd child 655564 1 root 174404 0.0 Ss 02:52:21 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1265771 1265724 tubesupplies 135468 58.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265751 1233356 tubesupplies 134484 38.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265749 1251463 tubesupplies 126124 36.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265756 1251350 tubesupplies 122488 35.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265747 1265638 tubesupplies 117840 33.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265748 1250929 tubesupplies 115592 32.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265750 1265607 tubesupplies 109104 32.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265764 1265597 tubesupplies 108648 44.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265757 1265689 tubesupplies 104680 28.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265765 1249970 tubesupplies 99484 38.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265758 1251314 tubesupplies 99256 25.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265766 1265727 tubesupplies 98876 38.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265769 1265722 tubesupplies 98300 36.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265760 1265716 tubesupplies 97636 24.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265762 1265723 tubesupplies 97428 24.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265761 1265635 tubesupplies 94200 22.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265767 1265726 tubesupplies 92524 32.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265774 1265688 tubesupplies 88944 29.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265773 1265642 tubesupplies 87512 28.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265768 1265641 tubesupplies 86856 27.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1265770 1265728 tubesupplies 86368 27.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509640 508992 root 77936 0.0 Sl 5-02:55:59 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 509236 509098 root 47980 0.0 Sl 5-02:56:01 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 37500 0.1 Ss 42-02:34:27 cpsrvd (SSL) - waiting for connections 3929420 1 wp-toolkit 37420 0.0 Ss 1-02:53:06 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 654927 1 root 33212 0.0 Ss 02:52:52 lfd - sleeping 1469 1 root 33192 0.1 Ss 64-19:05:56 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1265759 1353308 root 30004 0.0 S 00:03 cpaneld - serving 212.102.40.218 1233356 506832 nobody 28012 0.0 S 08:24 /usr/sbin/httpd -k start 1249465 506832 nobody 26724 0.0 S 04:00 /usr/sbin/httpd -k start 1250328 506832 nobody 26396 0.1 S 02:34 /usr/sbin/httpd -k start 3929444 1 root 26068 0.0 Ss 1-02:53:06 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1250929 506832 nobody 25408 0.0 S 01:45 /usr/sbin/httpd -k start 1249970 506832 nobody 25388 0.0 S 02:59 /usr/sbin/httpd -k start 1250886 506832 nobody 25180 0.1 S 01:48 /usr/sbin/httpd -k start 1249172 506832 nobody 25156 0.0 S 04:44 /usr/sbin/httpd -k start 1250930 506832 nobody 24440 0.0 S 01:45 /usr/sbin/httpd -k start 1265597 506832 nobody 24124 0.4 S 00:12 /usr/sbin/httpd -k start 1265589 506832 nobody 24044 0.3 S 00:13 /usr/sbin/httpd -k start 1251314 506832 nobody 23924 0.0 S 01:08 /usr/sbin/httpd -k start 1250337 506832 nobody 23668 0.0 S 02:33 /usr/sbin/httpd -k start 1463 1 root 23652 0.0 Ss 64-19:05:56 tailwatchd 1251350 506832 nobody 23644 0.0 S 01:07 /usr/sbin/httpd -k start 1265598 506832 nobody 23488 0.2 S 00:12 /usr/sbin/httpd -k start 1265608 506832 nobody 23484 0.1 S 00:11 /usr/sbin/httpd -k start 1251463 506832 nobody 23388 0.1 S 00:52 /usr/sbin/httpd -k start 1265635 506832 nobody 23388 0.1 S 00:10 /usr/sbin/httpd -k start 1265607 506832 nobody 23352 0.1 S 00:11 /usr/sbin/httpd -k start 1265606 506832 nobody 23344 0.1 S 00:11 /usr/sbin/httpd -k start 1265637 506832 nobody 23180 0.0 S 00:10 /usr/sbin/httpd -k start 1265609 506832 nobody 23168 0.1 S 00:11 /usr/sbin/httpd -k start 1265638 506832 nobody 23092 0.0 S 00:10 /usr/sbin/httpd -k start 1265636 506832 nobody 23056 0.0 S 00:10 /usr/sbin/httpd -k start 1265641 506832 nobody 23056 0.1 S 00:10 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 15613952 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 102 tubesupplies/tubesupplies.com.au-ssl_log 87 olytis/tis.com.au-ssl_log 55 alison/alisonarts.com.au 50 whiz/whizengineering.com.au-ssl_log 46 customkidscom/customkids.com.au-ssl_log 38 evolution/portal.evolutionerp.com.au-ssl_log 34 cosgrovecreative/cosgrovecreative.com.au-ssl_log 20 madalice/madalice.com.au-ssl_log 5 alison/alisonarts.com.au-ssl_log 3 evolution/my.evolutionerp.com.au-ssl_log 2 (total vhosts taking traffic: 11) --- top client IPs across all vhosts (last 3 min) --- 102 40.115.94.245 85 173.46.91.18 52 213.209.159.223 46 20.220.211.172 38 20.48.250.41 34 203.54.180.238 28 172.121.223.237 27 172.121.221.126 16 171.22.217.185 3 216.73.216.187 3 114.119.140.234 2 103.104.165.99 1 17.166.235.38 1 118.127.40.55 1 114.119.143.104 --- top request paths across all vhosts (last 3 min) --- 53 GET / 45 GET /api/getItem/LWPB2001KG 38 GET /autodiscover/autodiscover.xml 28 GET /robots.txt 25 GET /heartbeat.php 13 GET /wp-json/oembed/1.0/embed 8 GET /wp-json/wp/v2/pages/%5C%22 7 GET /cgi-bin/ 6 GET /index.php 6 GET /api/getItem/LWFB2001KG 5 GET /wp-content/plugins/trx_addons/ 5 GET /store/air-force-1-custom-butterfly-swarovski-diamond-sneakers/ 4 GET /wp-content/themes/optima/skins/default/trx_addons/css/shapes/ 3 GET /uploadsave.php 3 GET /api/getItem/SHSG656520 2 POST /functions.php 2 GET /wp-content/themes/index.php 2 GET /.env 2 GET /api/getItem/SHSG656516 1 POST /wp-cron.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 45 GET /api/getItem/LWPB2001KG 6 GET /api/getItem/LWFB2001KG 3 GET /api/getItem/SHSG656520 2 GET /api/getItem/SHSG656516 1 GET /api/getItem/SHSG8989508 1 GET /api/getItem/SHSG8989358 1 GET /api/getItem/SHSG8989258 1 GET /api/getItem/SHSG8989208 1 GET /api/getItem/SHSG7575508 1 GET /api/getItem/SHSG757540-8 1 GET /api/getItem/SHSG757540 1 GET /api/getItem/SHSG757530-8 -- last 10 requests -- 40.115.94.245 - - [02/Sep/2026:05:14:39 +1000] "GET /api/getItem/SHSG8989508 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:05:14:39 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:05:14:40 +1000] "GET /api/getItem/SHSG100100208 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:05:14:40 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:05:14:40 +1000] "GET /api/getItem/SHSG10010025 HTTP/1.1" 200 1584 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:05:14:40 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:05:14:40 +1000] "GET /api/getItem/SHSG100100308 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:05:14:40 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:05:14:41 +1000] "GET /api/getItem/SHSG100100408 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:05:14:41 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" == tubesupplies/tubesupplies.com.au-ssl_log == -- top paths -- 13 GET /wp-json/oembed/1.0/embed 10 GET / 8 GET /wp-json/wp/v2/pages/%5C%22 5 GET /wp-content/plugins/trx_addons/ 4 GET /wp-content/themes/optima/skins/default/trx_addons/css/shapes/ 1 POST /wp-cron.php 1 GET /xmlrpc.php 1 GET /wp-json/wp/v2/pages/%5C%22%5C%22 1 GET /wp-json/wp/v2/pages/35433 1 GET /wp-json/wp/v2/pages/35205 1 GET /wp-json/wp/v2/pages/35202 1 GET /wp-json/wp/v2/pages/29507 -- last 10 requests -- 173.46.91.18 - - [02/Sep/2026:05:15:36 +1000] "GET /wp-json/wp/v2/pages/35202 HTTP/1.1" 200 5836 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 173.46.91.18 - - [02/Sep/2026:05:15:39 +1000] "GET /?p=2756 HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 173.46.91.18 - - [02/Sep/2026:05:15:39 +1000] "GET /wp-json/wp/v2/cpt_services/35286 HTTP/1.1" 200 2408 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/ 173.46.91.18 - - [02/Sep/2026:05:15:40 +1000] "GET /wp-json/oembed/1.0/embed?url=https://tubesupplies.com.au/portfolio/western-sydney-badgery-creek-airport/ HTTP/1.1" 200 1080 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 173.46.91.18 - - [02/Sep/2026:05:15:39 +1000] "GET /wp-json/wp/v2/cpt_portfolio/2756 HTTP/1.1" 200 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/5 173.46.91.18 - - [02/Sep/2026:05:15:39 +1000] "GET /services/trailer-manufacturing/feed/ HTTP/1.1" 200 378 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safa 173.46.91.18 - - [02/Sep/2026:05:15:40 +1000] "GET /services/resellers/feed/ HTTP/1.1" 200 363 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 173.46.91.18 - - [02/Sep/2026:05:15:40 +1000] "GET /wp-json/oembed/1.0/embed?url=https://tubesupplies.com.au/portfolio/western-sydney-badgery-creek-airport/&format=xml HTTP/1.1" 200 1093 "-" "Mozilla/5.0 (Macintosh; Inte 173.46.91.18 - - [02/Sep/2026:05:15:39 +1000] "GET /?p=35286 HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 173.46.91.18 - - [02/Sep/2026:05:15:40 +1000] "GET /wp-json/oembed/1.0/embed?url=https://tubesupplies.com.au/services/resellers/&format=xml HTTP/1.1" 200 1061 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWeb == olytis/tis.com.au-ssl_log == -- top paths -- 28 GET /robots.txt 27 GET / -- last 10 requests -- 172.121.221.126 - - [02/Sep/2026:05:13:20 +1000] "GET /robots.txt HTTP/1.1" 200 26 "https://cpanel.tis.com.au/?locale=fil" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.4a) Gecko/20030401" 172.121.223.237 - - [02/Sep/2026:05:13:21 +1000] "GET /robots.txt HTTP/1.1" 200 26 "https://webmail.tis.com.au/?locale=pt_br" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0 172.121.221.126 - - [02/Sep/2026:05:13:21 +1000] "GET /?locale=en HTTP/1.1" 200 12487 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.4a) Gecko/20030401" 172.121.223.237 - - [02/Sep/2026:05:13:22 +1000] "GET /?locale=cs HTTP/1.1" 200 12729 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.121.221.126 - - [02/Sep/2026:05:13:22 +1000] "GET /robots.txt HTTP/1.1" 200 26 "https://cpanel.tis.com.au/?locale=en" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.4a) Gecko/20030401" 172.121.223.237 - - [02/Sep/2026:05:13:23 +1000] "GET /robots.txt HTTP/1.1" 200 26 "https://webmail.tis.com.au/?locale=cs" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0. 172.121.221.126 - - [02/Sep/2026:05:13:23 +1000] "GET /?locale=ms HTTP/1.1" 200 12591 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.4a) Gecko/20030401" 172.121.223.237 - - [02/Sep/2026:05:13:23 +1000] "GET /?locale=da HTTP/1.1" 200 12569 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.121.221.126 - - [02/Sep/2026:05:13:24 +1000] "GET /robots.txt HTTP/1.1" 200 26 "https://cpanel.tis.com.au/?locale=ms" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.4a) Gecko/20030401" 172.121.223.237 - - [02/Sep/2026:05:13:24 +1000] "GET /robots.txt HTTP/1.1" 200 26 "https://webmail.tis.com.au/?locale=da" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0. --- last 30 samples (run-up to this incident) --- 2026-09-02 05:13:15 L1=0.77 run=2 blk=0 avail=7567 (54.9%) swpO=0 conn=1 myRSS=3295 php=4 phpRSS=232 ap=20 tcp=35 topuser=madalice 2026-09-02 05:13:22 L1=0.97 run=1 blk=0 avail=7586 (55.1%) swpO=0 conn=3 myRSS=3295 php=3 phpRSS=191 ap=20 tcp=36 topuser=madalice 2026-09-02 05:13:25 L1=0.97 run=2 blk=0 avail=7565 (54.9%) swpO=0 conn=1 myRSS=3295 php=4 phpRSS=232 ap=20 tcp=44 topuser=madalice 2026-09-02 05:13:32 L1=0.91 run=5 blk=0 avail=7582 (55.0%) swpO=0 conn=3 myRSS=3295 php=5 phpRSS=269 ap=20 tcp=31 topuser=madalice 2026-09-02 05:13:35 L1=0.91 run=1 blk=0 avail=7581 (55.0%) swpO=0 conn=2 myRSS=3295 php=4 phpRSS=232 ap=20 tcp=33 topuser=madalice 2026-09-02 05:13:42 L1=0.93 run=1 blk=0 avail=7598 (55.2%) swpO=0 conn=3 myRSS=3295 php=3 phpRSS=191 ap=19 tcp=33 topuser=madalice 2026-09-02 05:13:45 L1=0.93 run=2 blk=0 avail=7593 (55.1%) swpO=0 conn=2 myRSS=3295 php=4 phpRSS=232 ap=17 tcp=35 topuser=madalice 2026-09-02 05:13:52 L1=0.86 run=1 blk=0 avail=7608 (55.2%) swpO=0 conn=1 myRSS=3295 php=3 phpRSS=191 ap=17 tcp=29 topuser=madalice 2026-09-02 05:13:55 L1=0.86 run=1 blk=0 avail=7740 (56.2%) swpO=0 conn=2 myRSS=3295 php=2 phpRSS=33 ap=18 tcp=45 topuser=root 2026-09-02 05:14:03 L1=0.80 run=3 blk=0 avail=7523 (54.6%) swpO=0 conn=1 myRSS=3295 php=4 phpRSS=230 ap=29 tcp=36 topuser=madalice 2026-09-02 05:14:05 L1=0.80 run=1 blk=0 avail=7568 (54.9%) swpO=0 conn=2 myRSS=3295 php=4 phpRSS=208 ap=26 tcp=37 topuser=madalice 2026-09-02 05:14:13 L1=0.68 run=1 blk=0 avail=7597 (55.1%) swpO=0 conn=1 myRSS=3295 php=3 phpRSS=168 ap=23 tcp=32 topuser=madalice 2026-09-02 05:14:15 L1=0.68 run=2 blk=0 avail=7523 (54.6%) swpO=0 conn=2 myRSS=3295 php=5 phpRSS=325 ap=20 tcp=30 topuser=madalice 2026-09-02 05:14:23 L1=0.65 run=2 blk=0 avail=7771 (56.4%) swpO=0 conn=1 myRSS=3295 php=3 phpRSS=68 ap=15 tcp=29 topuser=evolution 2026-09-02 05:14:25 L1=0.65 run=1 blk=0 avail=7771 (56.4%) swpO=0 conn=2 myRSS=3295 php=3 phpRSS=74 ap=14 tcp=30 topuser=evolution 2026-09-02 05:14:33 L1=0.63 run=2 blk=0 avail=7658 (55.6%) swpO=0 conn=1 myRSS=3295 php=4 phpRSS=208 ap=14 tcp=31 topuser=madalice 2026-09-02 05:14:35 L1=0.63 run=1 blk=0 avail=7650 (55.5%) swpO=0 conn=2 myRSS=3295 php=4 phpRSS=208 ap=15 tcp=35 topuser=madalice 2026-09-02 05:14:43 L1=0.53 run=2 blk=0 avail=7628 (55.4%) swpO=0 conn=1 myRSS=3295 php=5 phpRSS=239 ap=17 tcp=32 topuser=madalice 2026-09-02 05:14:45 L1=0.53 run=2 blk=0 avail=7592 (55.1%) swpO=0 conn=2 myRSS=3295 php=5 phpRSS=281 ap=17 tcp=34 topuser=madalice 2026-09-02 05:14:53 L1=0.45 run=1 blk=0 avail=7607 (55.2%) swpO=1 conn=2 myRSS=3295 php=4 phpRSS=231 ap=18 tcp=31 topuser=madalice 2026-09-02 05:14:56 L1=0.45 run=4 blk=0 avail=7596 (55.1%) swpO=1 conn=2 myRSS=3295 php=4 phpRSS=239 ap=18 tcp=32 topuser=madalice 2026-09-02 05:15:03 L1=0.54 run=4 blk=0 avail=7549 (54.8%) swpO=0 conn=2 myRSS=3295 php=5 phpRSS=299 ap=17 tcp=32 topuser=madalice 2026-09-02 05:15:06 L1=0.54 run=2 blk=0 avail=7559 (54.9%) swpO=0 conn=2 myRSS=3295 php=5 phpRSS=300 ap=17 tcp=36 topuser=madalice 2026-09-02 05:15:13 L1=0.60 run=1 blk=0 avail=7577 (55.0%) swpO=0 conn=2 myRSS=3295 php=5 phpRSS=301 ap=16 tcp=32 topuser=madalice 2026-09-02 05:15:16 L1=0.60 run=4 blk=0 avail=7404 (53.7%) swpO=0 conn=2 myRSS=3295 php=7 phpRSS=538 ap=15 tcp=34 topuser=tubesupplies 2026-09-02 05:15:23 L1=0.51 run=1 blk=0 avail=7718 (56.0%) swpO=0 conn=2 myRSS=3295 php=4 phpRSS=144 ap=15 tcp=28 topuser=evolution 2026-09-02 05:15:26 L1=0.51 run=2 blk=0 avail=7761 (56.3%) swpO=0 conn=2 myRSS=3295 php=3 phpRSS=74 ap=15 tcp=29 topuser=evolution 2026-09-02 05:15:33 L1=1.07 run=23 blk=0 avail=6946 (50.4%) swpO=0 conn=2 myRSS=3295 php=16 phpRSS=1239 ap=22 tcp=101 topuser=tubesupplies 2026-09-02 05:15:36 L1=1.07 run=1 blk=0 avail=7631 (55.4%) swpO=0 conn=1 myRSS=3295 php=2 phpRSS=33 ap=31 tcp=145 topuser=root 2026-09-02 05:15:43 L1=6.00 run=28 blk=0 avail=5891 (42.8%) swpO=0 conn=23 myRSS=3295 php=25 phpRSS=2299 ap=52 tcp=189 topuser=tubesupplies