INCIDENT 2026-09-06 20:44:58 trigger: php_rss=1537MB ================================================================== load: 4.05 2.99 2.50 9/706 3926590 ncpu:10 mem_avail: 8619MB/13777MB (62.6%) swap_used:2401MB swapout:260/s blocked(D):1 running:16 iowait:8.8% steal:0.0% php: 15 procs / 1537MB heaviest user: madalice (10 procs, 1460MB) apache: 53 procs tcp_estab: 56 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1500 madalice 10 1462 root 249 834 nobody 52 820 netdata 8 238 mailman 20 118 tubesupplies 1 57 wp-toolkit 3 56 dovenull 6 55 mailnull 2 25 dovecot 3 23 cpanellogin 1 18 aaa 1 15 named 1 13 zabbix 1 11 evolution 11 10 polkitd 1 9 kurri 1 9 nscd 1 4 rpc 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 10 1462 tubesupplies 1 58 root 1 23 evolution 3 0 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 7613 MB Active(file): 4019 MB Inactive(file): 3724 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 532 MB CommitLimit: 10984 MB Committed_AS: 9623 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 5-18:22:32 5732 /usr/bin/imunify-agent-proxy 4109079 root 1-16:00:10 1752 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 1-16:00:10 86552 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress / --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2987918 1 mysql 1536740 3.0 Ssl 1-01:08:27 /usr/sbin/mariadbd 166870 1 netdata 180244 2.6 Ssl 18:22:38 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3926476 167896 madalice 166488 43.1 R 00:07 php-fpm: pool madalice_com_au 3926479 167896 madalice 163832 39.7 R 00:07 php-fpm: pool madalice_com_au 3926478 167896 madalice 162308 41.5 R 00:07 php-fpm: pool madalice_com_au 3926158 167896 madalice 160624 15.6 S 00:43 php-fpm: pool madalice_com_au 3926477 167896 madalice 158836 71.2 S 00:07 php-fpm: pool madalice_com_au 220207 168913 root 157704 0.0 S 18:06:40 spamd child 3926512 167896 madalice 142444 39.8 R 00:05 php-fpm: pool madalice_com_au 3926510 167896 madalice 138560 28.8 R 00:05 php-fpm: pool madalice_com_au 3926519 167896 madalice 137748 40.2 R 00:04 php-fpm: pool madalice_com_au 3926522 167896 madalice 136792 36.0 S 00:04 php-fpm: pool madalice_com_au 3926523 167896 madalice 135508 31.0 S 00:04 php-fpm: pool madalice_com_au 167871 1 root 111328 0.0 Ss 18:22:31 /usr/lib/systemd/systemd-journald 168913 1 root 94928 0.0 Ss 18:21:28 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 4109105 4109079 root 86552 1.4 Sl 1-16:00:10 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 3926560 3909210 tubesupplies 64992 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2902970 168913 root 43232 0.0 S 05:03:23 spamd child 1353308 1 root 41980 0.1 Ss 46-18:03:44 cpsrvd (SSL) - waiting for connections 1469 1 root 41664 0.1 Ss 69-10:35:13 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 167562 166914 netdata 38164 0.1 Sl 18:22:33 /usr/libexec/netdata/plugins.d/go.d.plugin 1 509236 509098 root 34880 0.0 Sl 9-18:25:18 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 166645 1 wp-toolkit 31852 0.0 Ss 18:22:42 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1463 1 root 24356 0.0 Ss 69-10:35:13 tailwatchd 167896 1 root 23952 0.0 Ss 18:22:30 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3890108 506832 nobody 23888 0.0 S 13:47 /usr/sbin/httpd -k start 3907948 506832 nobody 22516 0.1 S 07:13 /usr/sbin/httpd -k start 3908734 506832 nobody 22428 0.0 S 05:52 /usr/sbin/httpd -k start 3908613 506832 nobody 22200 0.0 S 06:04 /usr/sbin/httpd -k start 3907986 506832 nobody 21756 0.0 S 07:12 /usr/sbin/httpd -k start 3874447 506832 nobody 21560 0.1 S 15:59 /usr/sbin/httpd -k start 3924472 506832 nobody 21544 0.0 S 03:35 /usr/sbin/httpd -k start 3909210 506832 nobody 21516 0.0 S 05:17 /usr/sbin/httpd -k start 3906988 506832 nobody 20804 0.1 S 09:07 /usr/sbin/httpd -k start 3907985 506832 nobody 20496 0.0 S 07:12 /usr/sbin/httpd -k start 3924145 506832 nobody 19992 0.1 S 04:04 /usr/sbin/httpd -k start 167845 1 wp-toolkit 19684 0.0 Ss 18:22:31 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 3890769 1353308 cpanellogin 19092 0.0 S 12:32 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 3926354 506832 nobody 18952 0.0 S 00:22 /usr/sbin/httpd -k start 3926396 506832 nobody 18732 0.1 S 00:17 /usr/sbin/httpd -k start 3926357 506832 nobody 18600 0.1 S 00:21 /usr/sbin/httpd -k start 3926521 506832 nobody 18356 0.2 S 00:04 /usr/sbin/httpd -k start 3926431 506832 nobody 18352 0.3 S 00:13 /usr/sbin/httpd -k start 3926511 506832 nobody 18308 0.2 S 00:05 /usr/sbin/httpd -k start 3926520 506832 nobody 18308 0.2 S 00:04 /usr/sbin/httpd -k start 3926528 506832 nobody 18308 0.3 S 00:03 /usr/sbin/httpd -k start 167566 166914 netdata 17208 2.1 Sl 18:22:33 /usr/libexec/netdata/plugins.d/apps.plugin 1 3926358 506832 nobody 16940 0.0 S 00:21 /usr/sbin/httpd -k start 3926530 506832 nobody 16448 0.0 S 00:03 /usr/sbin/httpd -k start 3926527 506832 nobody 16384 0.0 S 00:03 /usr/sbin/httpd -k start 3926535 506832 nobody 16384 0.5 S 00:02 /usr/sbin/httpd -k start 3926536 506832 nobody 16384 0.0 S 00:02 /usr/sbin/httpd -k start 3926529 506832 nobody 16316 0.0 S 00:03 /usr/sbin/httpd -k start 3926425 506832 nobody 16296 0.0 S 00:15 /usr/sbin/httpd -k start 3926440 506832 nobody 16292 0.0 S 00:11 /usr/sbin/httpd -k start 3926480 506832 nobody 16288 0.0 S 00:07 /usr/sbin/httpd -k start 3926537 506832 nobody 16252 0.0 S 00:02 /usr/sbin/httpd -k start 3651758 167382 aaa 16068 0.0 S 01:23:01 dovecot/imap 3926534 506832 nobody 15800 0.0 S 00:02 /usr/sbin/httpd -k start 3926544 506832 nobody 15800 0.0 S 00:01 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 722352 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 152 tubesupplies/tubesupplies.com.au-ssl_log 134 vinesit/vinesit.com.au-ssl_log 99 vinesit/vinesit.com.au 69 aaa/aaadownunder.com.au-ssl_log 53 madalice/madalice.com.au-ssl_log 51 infinium/infinium.net.au-ssl_log 7 evolution/evolutionerp.com.au-ssl_log 1 evolution/my.evolutionerp.com.au-ssl_log 1 (total vhosts taking traffic: 9) --- top client IPs across all vhosts (last 3 min) --- 168 143.244.57.86 152 40.115.94.245 130 161.33.202.176 50 34.97.93.78 33 34.187.199.90 14 118.127.40.55 3 114.119.140.234 3 103.179.172.246 2 68.65.123.228 2 144.76.72.24 2 114.119.159.70 1 91.92.243.246 1 193.36.224.58 1 188.95.65.97 1 115.129.56.130 --- top request paths across all vhosts (last 3 min) --- 58 GET /wp-login.php 52 GET /wp-admin/index.php 46 GET /api/getItem/LWFBW2001KG 29 POST /wp-login.php 9 POST /wp-cron.php 8 GET /store/barbie-pink-af1s/ 6 GET /wp-admin/css/colors/ectoplasm/ 4 POST / 4 GET /wp-admin/css/colors/modern/ 4 GET /wp-admin/css/colors/midnight/ 4 GET /wp-admin/css/colors/light/ 4 GET /wp-admin/css/colors/coffee/ 4 GET /wp-admin/css/colors/blue/ 4 GET /wp-admin/css/colors/ 3 GET /wp-admin/css/colors/sunrise/ 3 GET /wp-admin/css/colors/ocean/ 3 GET /.env 2 GET /wp-includes/widgets/ 2 GET /wp-includes/theme-compat/ 2 GET /wp-includes/style-engine/ --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 46 GET /api/getItem/LWFBW2001KG 2 GET /api/getItem/IPC2525 2 GET /api/getItem/H10032 2 GET /api/getItem/GEB12-DL 1 GET /api/getItem/SPHDG15040 1 GET /api/getItem/SGC-100 1 GET /api/getItem/S6 1 GET /api/getItem/S5 1 GET /api/getItem/S4 1 GET /api/getItem/S3 1 GET /api/getItem/S2 1 GET /api/getItem/S1 -- last 10 requests -- 40.115.94.245 - - [06/Sep/2026:20:44:16 +1000] "GET /api/getItem/IPC6516 HTTP/1.1" 200 1480 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:44:16 +1000] "GET /api/getItem/IPC6565 HTTP/1.1" 200 1469 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:44:17 +1000] "GET /api/getItem/IPC7550 HTTP/1.1" 200 1321 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:44:17 +1000] "GET /api/getItem/IPC7575 HTTP/1.1" 200 1473 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:44:17 +1000] "GET /api/getItem/IPC90NB HTTP/1.1" 200 1338 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:44:18 +1000] "GET /api/getItem/PC10050 HTTP/1.1" 404 109 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:44:18 +1000] "GET /api/getItem/PC1212 HTTP/1.1" 200 1338 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:44:18 +1000] "GET /api/getItem/PC15050 HTTP/1.1" 404 109 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:44:19 +1000] "GET /api/getItem/PC16 HTTP/1.1" 200 1618 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:20:44:19 +1000] "GET /api/getItem/PC19 HTTP/1.1" 404 106 "-" "RestSharp/106.13.0.0" == tubesupplies/tubesupplies.com.au-ssl_log == -- top paths -- 52 GET /wp-login.php 52 GET /wp-admin/index.php 26 POST /wp-login.php 3 POST /wp-cron.php 1 GET /wp-includes/class-wp-walker.php -- last 10 requests -- 161.33.202.176 - - [06/Sep/2026:20:44:39 +1000] "GET /wp-login.php?redirect_to=https%3A%2F%2Ftubesupplies.com.au%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 7758 "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 161.33.202.176 - - [06/Sep/2026:20:44:40 +1000] "POST /wp-login.php HTTP/1.1" 200 8127 "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Ch 188.95.65.97 - - [06/Sep/2026:20:44:42 +1000] "GET /wp-includes/class-wp-walker.php HTTP/1.1" 200 - "-" "-" 161.33.202.176 - - [06/Sep/2026:20:44:41 +1000] "GET /wp-admin/index.php HTTP/1.1" 302 - "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Vers 161.33.202.176 - - [06/Sep/2026:20:44:43 +1000] "GET /wp-login.php?redirect_to=https%3A%2F%2Ftubesupplies.com.au%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 7758 "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 161.33.202.176 - - [06/Sep/2026:20:44:44 +1000] "GET /wp-admin/index.php HTTP/1.1" 302 - "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Vers 161.33.202.176 - - [06/Sep/2026:20:44:45 +1000] "GET /wp-login.php?redirect_to=https%3A%2F%2Ftubesupplies.com.au%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 7758 "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 161.33.202.176 - - [06/Sep/2026:20:44:47 +1000] "POST /wp-login.php HTTP/1.1" 200 8121 "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/9 161.33.202.176 - - [06/Sep/2026:20:44:48 +1000] "GET /wp-admin/index.php HTTP/1.1" 302 - "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome 161.33.202.176 - - [06/Sep/2026:20:44:49 +1000] "GET /wp-login.php?redirect_to=https%3A%2F%2Ftubesupplies.com.au%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 7758 "https://tubesupplies.com.au/wp-login.php" "Mozilla/5.0 == vinesit/vinesit.com.au-ssl_log == -- top paths -- 3 GET /wp-admin/css/colors/ectoplasm/ 2 GET /wp-login.php 2 GET /wp-admin/css/colors/sunrise/wp-admin/css/colors/ 2 GET /wp-admin/css/colors/sunrise/ 2 GET /wp-admin/css/colors/ocean/wp-admin/css/colors/ 2 GET /wp-admin/css/colors/ocean/ 2 GET /wp-admin/css/colors/modern/wp-admin/css/colors/ 2 GET /wp-admin/css/colors/modern/ 2 GET /wp-admin/css/colors/midnight/wp-admin/css/colors/ 2 GET /wp-admin/css/colors/midnight/ 2 GET /wp-admin/css/colors/light/wp-admin/css/colors/ 2 GET /wp-admin/css/colors/light/ -- last 10 requests -- 143.244.57.86 - - [06/Sep/2026:20:43:47 +1000] "GET /wp-content/plugins/woocommerce/assets/js/ HTTP/1.1" 404 27678 "-" "-" 143.244.57.86 - - [06/Sep/2026:20:43:49 +1000] "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 404 27678 "-" "-" 143.244.57.86 - - [06/Sep/2026:20:43:50 +1000] "GET /wp-admin/meta/ HTTP/1.1" 404 27678 "-" "-" 143.244.57.86 - - [06/Sep/2026:20:43:52 +1000] "GET /wp-admin/network/ HTTP/1.1" 302 - "-" "-" 143.244.57.86 - - [06/Sep/2026:20:43:53 +1000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.vinesit.com.au%2Fwp-admin%2Fnetwork%2F&reauth=1 HTTP/1.1" 401 6 "-" "-" 143.244.57.86 - - [06/Sep/2026:20:43:54 +1000] "GET /wp-admin/user/ HTTP/1.1" 302 - "-" "-" 143.244.57.86 - - [06/Sep/2026:20:43:55 +1000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.vinesit.com.au%2Fwp-admin%2Fuser%2F&reauth=1 HTTP/1.1" 401 6 "-" "-" 143.244.57.86 - - [06/Sep/2026:20:43:55 +1000] "GET /wp-content/ HTTP/1.1" 403 6 "-" "-" 143.244.57.86 - - [06/Sep/2026:20:43:56 +1000] "GET /wp-content/plugins/ HTTP/1.1" 403 6 "-" "-" 143.244.57.86 - - [06/Sep/2026:20:43:57 +1000] "GET /wp-content/themes/ HTTP/1.1" 403 6 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-09-06 20:42:32 L1=2.99 run=5 blk=1 avail=9701 (70.4%) swpO=0 conn=2 myRSS=1508 php=8 phpRSS=532 ap=17 tcp=25 topuser=madalice 2026-09-06 20:42:37 L1=2.83 run=2 blk=1 avail=9686 (70.3%) swpO=0 conn=3 myRSS=1508 php=7 phpRSS=515 ap=17 tcp=28 topuser=madalice 2026-09-06 20:42:42 L1=2.68 run=3 blk=1 avail=9805 (71.2%) swpO=0 conn=2 myRSS=1508 php=7 phpRSS=396 ap=17 tcp=24 topuser=madalice 2026-09-06 20:42:47 L1=2.71 run=2 blk=1 avail=9795 (71.1%) swpO=0 conn=3 myRSS=1508 php=8 phpRSS=410 ap=17 tcp=26 topuser=madalice 2026-09-06 20:42:52 L1=2.65 run=3 blk=1 avail=9802 (71.1%) swpO=0 conn=2 myRSS=1508 php=7 phpRSS=393 ap=17 tcp=24 topuser=madalice 2026-09-06 20:42:57 L1=2.60 run=4 blk=1 avail=9802 (71.1%) swpO=0 conn=3 myRSS=1508 php=8 phpRSS=444 ap=16 tcp=23 topuser=madalice 2026-09-06 20:43:02 L1=2.55 run=2 blk=1 avail=9701 (70.4%) swpO=0 conn=2 myRSS=1508 php=7 phpRSS=443 ap=16 tcp=28 topuser=madalice 2026-09-06 20:43:07 L1=2.59 run=3 blk=1 avail=9753 (70.8%) swpO=0 conn=3 myRSS=1508 php=7 phpRSS=410 ap=16 tcp=28 topuser=madalice 2026-09-06 20:43:12 L1=2.62 run=2 blk=1 avail=9768 (70.9%) swpO=0 conn=2 myRSS=1508 php=7 phpRSS=394 ap=16 tcp=28 topuser=madalice 2026-09-06 20:43:17 L1=2.65 run=4 blk=1 avail=9777 (71.0%) swpO=0 conn=3 myRSS=1508 php=7 phpRSS=383 ap=16 tcp=27 topuser=madalice 2026-09-06 20:43:22 L1=2.60 run=3 blk=1 avail=9771 (70.9%) swpO=0 conn=2 myRSS=1508 php=7 phpRSS=384 ap=16 tcp=29 topuser=madalice 2026-09-06 20:43:27 L1=2.63 run=2 blk=1 avail=9745 (70.7%) swpO=0 conn=3 myRSS=1508 php=7 phpRSS=410 ap=16 tcp=28 topuser=madalice 2026-09-06 20:43:32 L1=2.66 run=2 blk=1 avail=9733 (70.6%) swpO=0 conn=2 myRSS=1508 php=7 phpRSS=421 ap=16 tcp=30 topuser=madalice 2026-09-06 20:43:37 L1=2.61 run=4 blk=1 avail=9655 (70.1%) swpO=0 conn=4 myRSS=1508 php=7 phpRSS=508 ap=16 tcp=31 topuser=corpkicks 2026-09-06 20:43:42 L1=2.64 run=2 blk=1 avail=9860 (71.6%) swpO=0 conn=2 myRSS=1508 php=6 phpRSS=266 ap=16 tcp=30 topuser=madalice 2026-09-06 20:43:47 L1=2.59 run=3 blk=1 avail=9859 (71.6%) swpO=0 conn=4 myRSS=1508 php=7 phpRSS=303 ap=16 tcp=32 topuser=madalice 2026-09-06 20:43:52 L1=2.54 run=4 blk=1 avail=9826 (71.3%) swpO=0 conn=2 myRSS=1508 php=7 phpRSS=338 ap=16 tcp=29 topuser=madalice 2026-09-06 20:43:57 L1=2.58 run=3 blk=1 avail=9889 (71.8%) swpO=0 conn=4 myRSS=1508 php=6 phpRSS=241 ap=16 tcp=31 topuser=madalice 2026-09-06 20:44:02 L1=2.53 run=3 blk=1 avail=9956 (72.3%) swpO=0 conn=2 myRSS=1508 php=6 phpRSS=224 ap=16 tcp=25 topuser=madalice 2026-09-06 20:44:07 L1=2.49 run=2 blk=1 avail=9884 (71.7%) swpO=2 conn=4 myRSS=1508 php=6 phpRSS=305 ap=16 tcp=27 topuser=madalice 2026-09-06 20:44:12 L1=2.45 run=3 blk=1 avail=9876 (71.7%) swpO=2 conn=2 myRSS=1508 php=5 phpRSS=179 ap=16 tcp=26 topuser=madalice 2026-09-06 20:44:17 L1=2.49 run=3 blk=1 avail=9906 (71.9%) swpO=0 conn=4 myRSS=1508 php=6 phpRSS=277 ap=15 tcp=27 topuser=tubesupplies 2026-09-06 20:44:22 L1=2.53 run=2 blk=1 avail=9930 (72.1%) swpO=0 conn=2 myRSS=1508 php=6 phpRSS=279 ap=15 tcp=27 topuser=tubesupplies 2026-09-06 20:44:27 L1=2.65 run=4 blk=1 avail=10012(72.7%) swpO=0 conn=4 myRSS=1508 php=6 phpRSS=195 ap=15 tcp=25 topuser=madalice 2026-09-06 20:44:32 L1=2.68 run=4 blk=1 avail=9844 (71.4%) swpO=0 conn=2 myRSS=1508 php=8 phpRSS=426 ap=15 tcp=26 topuser=olympic 2026-09-06 20:44:37 L1=2.63 run=2 blk=1 avail=9928 (72.1%) swpO=0 conn=2 myRSS=1508 php=5 phpRSS=236 ap=18 tcp=28 topuser=madalice 2026-09-06 20:44:42 L1=2.58 run=2 blk=1 avail=9871 (71.6%) swpO=0 conn=2 myRSS=1508 php=6 phpRSS=313 ap=19 tcp=32 topuser=madalice 2026-09-06 20:44:48 L1=2.53 run=6 blk=1 avail=9447 (68.6%) swpO=0 conn=2 myRSS=1508 php=10 phpRSS=829 ap=22 tcp=33 topuser=corpkicks 2026-09-06 20:44:53 L1=2.49 run=4 blk=1 avail=9417 (68.3%) swpO=54 conn=2 myRSS=1507 php=10 phpRSS=805 ap=22 tcp=34 topuser=madalice 2026-09-06 20:44:58 L1=4.05 run=16 blk=1 avail=8619 (62.6%) swpO=260 conn=7 myRSS=1500 php=15 phpRSS=1537 ap=53 tcp=56 topuser=madalice