INCIDENT 2026-08-13 05:47:03 trigger: php_rss=1763MB mysql_conn=16 ================================================================== load: 0.85 0.82 0.82 17/607 494935 ncpu:10 mem_avail: 6225MB/11729MB (53.1%) swap_used:966MB swapout:0/s blocked(D):0 running:18 iowait:0.0% steal:0.0% php: 17 procs / 1763MB heaviest user: alison (17 procs, 1763MB) apache: 28 procs tcp_estab: 57 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1900 alison 15 1584 root 236 977 nobody 29 436 netdata 8 250 cpanellogin 1 49 mailman 20 30 dovenull 6 28 lowrange 2 25 wp-toolkit 6 22 zabbix 1 16 kurri 1 11 mailnull 2 10 dovecot 3 9 named 1 7 evolution 4 5 nscd 1 3 dbus 1 3 cpanelconnecttrack 1 3 polkitd 1 2 --- php workers by user --- USER PROCS RSS_MB alison 16 1638 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6186 MB Active(file): 4993 MB Inactive(file): 753 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 516 MB CommitLimit: 9960 MB Committed_AS: 9397 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 342014 root 04:35:46 7368 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 184574 1 mysql 1945908 3.8 Ssl 09:13:31 /usr/sbin/mariadbd 1220 1 netdata 199120 2.5 Ssl 44-19:37:04 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 388651 382990 root 180760 0.0 S 03:13:04 spamd child 382990 1 root 172724 0.0 Ss 03:24:16 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 159820 1 root 168828 0.0 Ss 23-20:00:12 /usr/lib/systemd/systemd-journald 388652 382990 root 162000 0.0 S 03:13:04 spamd child 494865 494622 alison 159420 68.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 494875 494125 alison 134432 55.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 494866 494426 alison 119792 53.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 494870 494624 alison 118480 49.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 494887 494582 alison 116796 88.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 494869 494811 alison 115384 46.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 494867 494815 alison 114444 43.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 494868 494425 alison 114424 48.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 494863 494498 alison 109576 41.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 494876 494627 alison 109504 93.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 494888 494769 alison 103408 73.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 494871 494579 alison 102980 36.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 494904 494902 alison 74072 37.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 494940 491388 alison 61804 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 494947 494929 alison 59732 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 494948 494930 alison 54192 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 454769 1353308 cpanellogin 50516 0.0 S 01:12:45 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base server_locale en default_login_theme cpanel 2223 1201 root 42396 0.0 Sl 44-19:37:03 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 41680 0.0 Ss 22-03:05:34 cpsrvd (SSL) - waiting for connections 4922 2431 netdata 37536 0.1 Sl 44-19:36:59 /usr/libexec/netdata/plugins.d/go.d.plugin 1 494861 1353308 root 35420 0.0 S 00:04 whostmgrd - serving 195.96.139.241 382254 1 root 32712 0.0 Ss 03:24:50 lfd - sleeping 494966 494569 alison 30884 0.0 S 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 491388 1276780 nobody 21428 0.0 S 06:02 /usr/sbin/httpd -k start 1469 1 root 21012 0.1 Ss 44-19:37:03 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 492902 1276780 nobody 19524 0.0 S 03:20 /usr/sbin/httpd -k start 494125 1276780 nobody 19372 0.0 S 01:10 /usr/sbin/httpd -k start 493375 1276780 nobody 19336 0.0 S 02:25 /usr/sbin/httpd -k start 494582 1276780 nobody 18840 0.0 S 00:31 /usr/sbin/httpd -k start 494021 1276780 nobody 18784 0.0 S 01:21 /usr/sbin/httpd -k start 185104 2431 netdata 17864 1.9 Sl 09:13:22 /usr/libexec/netdata/plugins.d/apps.plugin 1 494426 1276780 nobody 17792 0.0 S 00:45 /usr/sbin/httpd -k start 494429 1276780 nobody 17380 0.0 S 00:45 /usr/sbin/httpd -k start 494428 1276780 nobody 16860 0.0 S 00:45 /usr/sbin/httpd -k start 494425 1276780 nobody 16772 0.0 S 00:46 /usr/sbin/httpd -k start 494627 1276780 nobody 16692 0.0 S 00:30 /usr/sbin/httpd -k start 494579 1276780 nobody 16684 0.0 S 00:31 /usr/sbin/httpd -k start 1204 1 zabbix 16648 0.2 Ssl 44-19:37:04 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 494624 1276780 nobody 16564 0.0 S 00:30 /usr/sbin/httpd -k start 494768 1276780 nobody 16076 0.0 S 00:14 /usr/sbin/httpd -k start 494769 1276780 nobody 15608 0.0 S 00:14 /usr/sbin/httpd -k start 494622 1276780 nobody 15584 0.0 S 00:30 /usr/sbin/httpd -k start 494569 1276780 nobody 15548 0.0 S 00:32 /usr/sbin/httpd -k start 494498 1276780 nobody 15472 0.0 S 00:39 /usr/sbin/httpd -k start 494814 1276780 nobody 15376 0.1 S 00:09 /usr/sbin/httpd -k start 494811 1276780 nobody 15244 0.0 S 00:10 /usr/sbin/httpd -k start 494815 1276780 nobody 15216 0.1 S 00:09 /usr/sbin/httpd -k start 494929 1276780 nobody 14780 0.0 S 00:00 /usr/sbin/httpd -k start 494930 1276780 nobody 14776 0.0 S 00:00 /usr/sbin/httpd -k start 494902 1276780 nobody 14720 0.0 S 00:01 /usr/sbin/httpd -k start 1463 1 root 14660 0.0 Ss 44-19:37:03 tailwatchd 494818 1276780 nobody 13660 0.0 S 00:08 /usr/sbin/httpd -k start 494819 1276780 nobody 13660 0.0 S 00:08 /usr/sbin/httpd -k start 494820 1276780 nobody 13616 0.0 S 00:08 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 193782 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min alison/alisonarts.com.au-ssl_log 123 evolution/my.evolutionerp.com.au-ssl_log 45 evolution/portal.evolutionerp.com.au-ssl_log 40 infinium/infinium.net.au-ssl_log 21 aaa/aaadownunder.com.au-ssl_log 7 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 119 136.85.90.220 59 103.104.165.99 29 203.54.180.238 9 118.127.40.55 4 108.167.161.133 2 50.87.171.154 2 216.244.66.240 2 205.134.255.185 2 202.92.6.43 2 20.237.251.56 2 188.40.26.206 2 162.144.21.160 1 69.49.241.21 1 209.42.20.222 --- top request paths across all vhosts (last 3 min) --- 21 GET /heartbeat.php 17 GET /app/ajax.php 13 GET /index.php 9 GET /wp-login.php 8 POST /wp-login.php 7 POST /functions.php 6 POST /portal/register 5 POST /wp-cron.php 4 POST /plugins/fencecosting/plugin.php 4 POST /plugins/csvexporter/plugin.php 4 POST /app/ajax.php 4 POST / 4 GET / 2 POST /inventory.php 2 POST /app/ajax/selectFilterSingle.php 2 POST /app/ajax/selectFilter.php 2 GET /uploadsave.php 1 POST /opportunityeditsave.php 1 GET /wp-json/wp/v2/users/me 1 GET /web/.env --- busiest 3 vhosts: top paths + last 10 requests --- == alison/alisonarts.com.au-ssl_log == -- top paths -- 4 GET / 1 POST /wp-login.php 1 GET /wp-login.php 1 GET /web/.env 1 GET /.ssh/id_rsa 1 GET /.ssh/id_ed25519 1 GET /.ssh/id_ecdsa 1 GET /.ssh/id_dsa 1 GET /.ssh/config 1 GET /src/.env 1 GET /server/.env 1 GET /root/.aws/credentials -- last 10 requests -- 136.85.90.220 - - [13/Aug/2026:05:46:52 +1000] "GET /.azure/credentials HTTP/1.1" 404 49207 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 136.85.90.220 - - [13/Aug/2026:05:46:53 +1000] "GET /api/settings HTTP/1.1" 404 49207 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 136.85.90.220 - - [13/Aug/2026:05:46:53 +1000] "GET /api/env HTTP/1.1" 404 49207 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 136.85.90.220 - - [13/Aug/2026:05:46:54 +1000] "GET /api/v1/env HTTP/1.1" 404 49207 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 136.85.90.220 - - [13/Aug/2026:05:46:54 +1000] "GET /api/v1/config HTTP/1.1" 404 49207 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 136.85.90.220 - - [13/Aug/2026:05:47:01 +1000] "GET /.ssh/id_ed25519 HTTP/1.1" 403 13 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 136.85.90.220 - - [13/Aug/2026:05:47:01 +1000] "GET /.ssh/id_dsa HTTP/1.1" 403 13 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 136.85.90.220 - - [13/Aug/2026:05:47:01 +1000] "GET /.ssh/id_rsa HTTP/1.1" 403 13 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 136.85.90.220 - - [13/Aug/2026:05:47:01 +1000] "GET /.ssh/id_ecdsa HTTP/1.1" 403 13 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 136.85.90.220 - - [13/Aug/2026:05:47:01 +1000] "GET /.ssh/config HTTP/1.1" 403 13 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 17 GET /app/ajax.php 7 POST /functions.php 4 POST /plugins/fencecosting/plugin.php 4 POST /plugins/csvexporter/plugin.php 4 POST /app/ajax.php 4 GET /index.php 2 POST /app/ajax/selectFilterSingle.php 2 POST /app/ajax/selectFilter.php 1 POST /opportunityeditsave.php -- last 10 requests -- 103.104.165.99 - - [13/Aug/2026:05:46:02 +1000] "GET /index.php?page=quotedit"eid=36631 HTTP/1.1" 200 230060 "https://my.evolutionerp.com.au/index.php?page=opportunityedit&opportunityid=3123" "Mozilla/5.0 (Windows NT 103.104.165.99 - - [13/Aug/2026:05:46:04 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36631" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) App 103.104.165.99 - - [13/Aug/2026:05:46:04 +1000] "POST /plugins/fencecosting/plugin.php HTTP/1.1" 200 3913 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36631" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 103.104.165.99 - - [13/Aug/2026:05:46:04 +1000] "POST /plugins/fencecosting/plugin.php HTTP/1.1" 200 93 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36631" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap 103.104.165.99 - - [13/Aug/2026:05:46:05 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=12211684506 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/index 103.104.165.99 - - [13/Aug/2026:05:46:05 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=10115923996 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/inde 103.104.165.99 - - [13/Aug/2026:05:46:05 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Dquotedit%26quoteid%3D36631&call=getUserSetting&caller=ajaxSubmitLocal&seq=13486398034 HTTP/1.1" 200 112 "https 103.104.165.99 - - [13/Aug/2026:05:46:05 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dquotedit%26quoteid36631&call=getUserSetting&caller=ajaxSubmitLocal&seq=14362650579 HTTP/1.1" 200 100 "https://my.evolutionerp.co 103.104.165.99 - - [13/Aug/2026:05:46:05 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dquotedit%26quoteid%3D36631&call=getUserSetting&caller=ajaxSubmitLocal&seq=11157763801 HTTP/1.1" 200 162 "https://my.evolutionerp 103.104.165.99 - - [13/Aug/2026:05:46:06 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36631" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 21 GET /heartbeat.php 9 GET /index.php 6 POST /portal/register 2 POST /inventory.php 2 GET /uploadsave.php -- last 10 requests -- 203.54.180.238 - - [13/Aug/2026:05:46:07 +1000] "GET /heartbeat.php?sentAt=1786563967&bytes=106,124,205,127&_=1786510908852 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:05:46:11 +1000] "GET /heartbeat.php?sentAt=1786563972&bytes=106,124,205,132&_=1786532341448 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:05:46:18 +1000] "GET /heartbeat.php?sentAt=1786563977&bytes=106,124,205,137&_=1786510908853 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:05:46:21 +1000] "GET /heartbeat.php?sentAt=1786563982&bytes=106,124,205,142&_=1786532341449 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:05:46:27 +1000] "GET /heartbeat.php?sentAt=1786563987&bytes=106,124,205,147&_=1786510908854 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:05:46:34 +1000] "GET /heartbeat.php?sentAt=1786563992&bytes=106,124,205,152&_=1786532341450 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:05:46:37 +1000] "GET /heartbeat.php?sentAt=1786563997&bytes=106,124,205,157&_=1786510908855 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:05:46:41 +1000] "GET /heartbeat.php?sentAt=1786564002&bytes=106,124,205,162&_=1786532341451 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [13/Aug/2026:05:46:43 +1000] "POST /inventory.php HTTP/1.1" 302 20 "https://portal.evolutionerp.com.au/index.php?page=delivery_commit&id=33669" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (K 203.54.180.238 - - [13/Aug/2026:05:46:46 +1000] "GET /index.php?page=delivery_commit&id=33669 HTTP/1.1" 200 86325 "https://portal.evolutionerp.com.au/index.php?page=delivery_commit&id=33669" "Mozilla/5.0 (Linux; Android --- last 30 samples (run-up to this incident) --- 2026-08-13 05:44:37 L1=1.06 run=2 blk=0 avail=7400 (63.1%) swpO=0 conn=2 myRSS=1904 php=2 phpRSS=125 ap=22 tcp=29 topuser=tubesupplies 2026-08-13 05:44:42 L1=0.97 run=2 blk=0 avail=7359 (62.7%) swpO=0 conn=3 myRSS=1904 php=2 phpRSS=145 ap=25 tcp=22 topuser=infinium 2026-08-13 05:44:47 L1=0.89 run=2 blk=0 avail=7455 (63.6%) swpO=0 conn=2 myRSS=1904 php=1 phpRSS=40 ap=21 tcp=24 topuser=evolution 2026-08-13 05:44:52 L1=0.90 run=1 blk=0 avail=7462 (63.6%) swpO=0 conn=3 myRSS=1904 php=1 phpRSS=40 ap=20 tcp=27 topuser=evolution 2026-08-13 05:44:57 L1=0.83 run=2 blk=0 avail=7257 (61.9%) swpO=0 conn=3 myRSS=1904 php=2 phpRSS=280 ap=20 tcp=23 topuser=madalice 2026-08-13 05:45:02 L1=0.76 run=1 blk=0 avail=7404 (63.1%) swpO=0 conn=3 myRSS=1904 php=2 phpRSS=108 ap=20 tcp=22 topuser=evolution 2026-08-13 05:45:07 L1=0.78 run=2 blk=0 avail=7221 (61.6%) swpO=0 conn=3 myRSS=1904 php=5 phpRSS=380 ap=21 tcp=34 topuser=infinium 2026-08-13 05:45:12 L1=0.72 run=2 blk=0 avail=7150 (61.0%) swpO=0 conn=3 myRSS=1904 php=4 phpRSS=402 ap=24 tcp=31 topuser=customc 2026-08-13 05:45:17 L1=0.74 run=2 blk=0 avail=7305 (62.3%) swpO=0 conn=3 myRSS=1904 php=3 phpRSS=217 ap=23 tcp=27 topuser=evolution 2026-08-13 05:45:22 L1=0.68 run=3 blk=0 avail=7388 (63.0%) swpO=0 conn=3 myRSS=1904 php=2 phpRSS=110 ap=22 tcp=27 topuser=evolution 2026-08-13 05:45:28 L1=0.63 run=2 blk=0 avail=7415 (63.2%) swpO=0 conn=3 myRSS=1904 php=2 phpRSS=112 ap=21 tcp=18 topuser=evolution 2026-08-13 05:45:32 L1=0.58 run=1 blk=0 avail=7481 (63.8%) swpO=0 conn=3 myRSS=1904 php=1 phpRSS=40 ap=17 tcp=17 topuser=evolution 2026-08-13 05:45:38 L1=0.53 run=2 blk=0 avail=7422 (63.3%) swpO=0 conn=3 myRSS=1905 php=2 phpRSS=128 ap=17 tcp=21 topuser=aaa 2026-08-13 05:45:42 L1=0.65 run=1 blk=0 avail=7460 (63.6%) swpO=0 conn=2 myRSS=1905 php=1 phpRSS=40 ap=19 tcp=26 topuser=evolution 2026-08-13 05:45:48 L1=0.60 run=2 blk=0 avail=7455 (63.6%) swpO=0 conn=3 myRSS=1905 php=2 phpRSS=76 ap=19 tcp=23 topuser=evolution 2026-08-13 05:45:52 L1=0.55 run=1 blk=0 avail=7457 (63.6%) swpO=0 conn=2 myRSS=1905 php=1 phpRSS=40 ap=19 tcp=24 topuser=evolution 2026-08-13 05:45:58 L1=0.58 run=1 blk=0 avail=7454 (63.6%) swpO=0 conn=2 myRSS=1905 php=1 phpRSS=40 ap=20 tcp=17 topuser=evolution 2026-08-13 05:46:02 L1=0.54 run=3 blk=0 avail=7330 (62.5%) swpO=0 conn=2 myRSS=1905 php=2 phpRSS=219 ap=18 tcp=18 topuser=madalice 2026-08-13 05:46:08 L1=0.49 run=3 blk=0 avail=7439 (63.4%) swpO=0 conn=2 myRSS=1905 php=2 phpRSS=114 ap=17 tcp=20 topuser=infinium 2026-08-13 05:46:12 L1=0.70 run=1 blk=0 avail=7476 (63.7%) swpO=0 conn=2 myRSS=1905 php=1 phpRSS=40 ap=18 tcp=16 topuser=evolution 2026-08-13 05:46:18 L1=0.64 run=1 blk=0 avail=7458 (63.6%) swpO=0 conn=2 myRSS=1905 php=0 phpRSS=0 ap=24 tcp=44 topuser=- 2026-08-13 05:46:22 L1=0.59 run=17 blk=0 avail=7105 (60.6%) swpO=0 conn=2 myRSS=1905 php=10 phpRSS=679 ap=21 tcp=34 topuser=alison 2026-08-13 05:46:28 L1=0.54 run=1 blk=0 avail=7471 (63.7%) swpO=0 conn=2 myRSS=1905 php=1 phpRSS=40 ap=21 tcp=21 topuser=evolution 2026-08-13 05:46:32 L1=0.50 run=18 blk=0 avail=6762 (57.7%) swpO=233 conn=2 myRSS=1901 php=16 phpRSS=1076 ap=26 tcp=50 topuser=alison 2026-08-13 05:46:38 L1=0.46 run=6 blk=0 avail=7199 (61.4%) swpO=233 conn=2 myRSS=1901 php=5 phpRSS=400 ap=31 tcp=25 topuser=alison 2026-08-13 05:46:42 L1=0.50 run=1 blk=0 avail=7449 (63.5%) swpO=0 conn=2 myRSS=1901 php=1 phpRSS=40 ap=27 tcp=22 topuser=evolution 2026-08-13 05:46:48 L1=0.62 run=6 blk=0 avail=7227 (61.6%) swpO=0 conn=2 myRSS=1901 php=3 phpRSS=333 ap=25 tcp=53 topuser=alison 2026-08-13 05:46:52 L1=0.57 run=6 blk=0 avail=7438 (63.4%) swpO=0 conn=2 myRSS=1901 php=6 phpRSS=222 ap=27 tcp=31 topuser=alison 2026-08-13 05:46:58 L1=0.93 run=2 blk=0 avail=7100 (60.5%) swpO=0 conn=4 myRSS=1901 php=3 phpRSS=426 ap=31 tcp=25 topuser=corpkicks 2026-08-13 05:47:03 L1=0.85 run=18 blk=0 avail=6225 (53.1%) swpO=0 conn=16 myRSS=1901 php=17 phpRSS=1763 ap=28 tcp=57 topuser=alison