INCIDENT 2026-08-28 06:10:55 trigger: php_rss=1531MB ================================================================== load: 1.78 1.20 1.00 4/593 1348519 ncpu:10 mem_avail: 8524MB/13777MB (61.9%) swap_used:452MB swapout:0/s blocked(D):0 running:3 iowait:0.0% steal:0.0% php: 11 procs / 1531MB heaviest user: madalice (8 procs, 1247MB) apache: 29 procs tcp_estab: 38 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1374 root 254 1254 madalice 8 1247 nobody 28 508 mailman 20 412 netdata 7 221 corpkicks 1 211 wp-toolkit 3 130 cpanellogin 1 95 evolution 6 94 dovenull 6 68 mailnull 3 50 named 1 43 infinium 3 42 lowrange 2 29 dovecot 3 28 zabbix 1 27 kurri 2 27 polkitd 1 24 rpc 1 5 --- php workers by user --- USER PROCS RSS_MB madalice 8 1248 corpkicks 1 212 evolution 2 89 root 1 30 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 7103 MB Active(file): 4948 MB Inactive(file): 2657 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 772 MB CommitLimit: 10984 MB Committed_AS: 8166 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 03:52:14 14364 /usr/bin/imunify-agent-proxy 1297560 root 10:53 3120 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 1407288 3.4 Ssl 03:51:43 /usr/sbin/mariadbd 1348483 1333743 corpkicks 222032 112 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 529388 527476 root 183656 0.0 S 03:46:36 spamd child 1348330 510022 madalice 177424 19.8 R 00:16 php-fpm: pool madalice_com_au 529389 527476 root 175696 0.0 S 03:46:36 spamd child 508924 1 netdata 175624 1.9 Ssl 03:51:12 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 527476 1 root 168424 0.0 Ss 03:48:15 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1334481 510022 madalice 160020 27.0 S 00:52 php-fpm: pool madalice_com_au 1348188 510022 madalice 159536 32.8 S 00:32 php-fpm: pool madalice_com_au 1348329 510022 madalice 158992 21.6 S 00:16 php-fpm: pool madalice_com_au 1348332 510022 madalice 158572 15.1 S 00:16 php-fpm: pool madalice_com_au 1348334 510022 madalice 158456 15.5 S 00:16 php-fpm: pool madalice_com_au 1348326 510022 madalice 158268 22.3 S 00:16 php-fpm: pool madalice_com_au 1348328 510022 madalice 157792 14.7 S 00:16 php-fpm: pool madalice_com_au 973642 1353308 cpanellogin 97804 0.0 S 01:48:22 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 938582 1 wp-toolkit 75032 0.0 Ss 01:58:46 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 509236 509098 root 71420 0.0 Sl 03:51:09 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1348514 1333283 evolution 63592 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 4180059 4180015 evolution 50772 0.0 Ss 06:10:54 /opt/cpanel/ea-php74/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 938585 1 wp-toolkit 49476 0.0 Ss 01:58:46 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 508634 1 named 44724 0.0 Ssl 03:51:17 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 1353308 1 root 42280 0.0 Ss 37-03:29:35 cpsrvd (SSL) - waiting for connections 1469 1 root 41076 0.1 Ss 59-20:01:04 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 509098 1 root 40452 0.0 Ss 03:51:10 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion 938444 1 root 38736 0.0 Ss 01:58:49 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 1348489 1469 root 38604 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 526869 1 root 33152 0.0 Ss 03:48:38 lfd - sleeping 481558 1 root 31980 0.1 Ssl 03:53:36 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 510022 1 root 31312 0.0 Ss 03:51:05 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 483898 1 zabbix 28156 0.2 Ssl 03:52:26 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 509266 1 root 25528 0.0 Ss 03:51:09 /usr/lib/systemd/systemd-journald 508591 1 polkitd 24912 0.0 Ssl 03:51:17 /usr/lib/polkit-1/polkitd --no-debug 1463 1 root 24780 0.0 Ss 59-20:01:04 tailwatchd 508863 508814 mailman 22240 0.0 S 03:51:15 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:5:8 -s 508851 508814 mailman 22224 0.0 S 03:51:15 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:1:2 -s 508857 508814 mailman 22224 0.0 S 03:51:15 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s 508856 508814 mailman 22148 0.0 S 03:51:15 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s 508855 508814 mailman 22116 0.0 S 03:51:15 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:2:4 -s 508864 508814 mailman 22072 0.0 S 03:51:15 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:6:8 -s 508867 508814 mailman 22056 0.0 S 03:51:15 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s 508858 508814 mailman 22036 0.0 S 03:51:15 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:8 -s 508861 508814 mailman 22036 0.0 S 03:51:15 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:3:8 -s 508860 508814 mailman 21964 0.0 S 03:51:15 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:2:8 -s 508865 508814 mailman 21964 0.0 S 03:51:15 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:7:8 -s 508850 508814 mailman 21952 0.0 S 03:51:15 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:2 -s 508854 508814 mailman 21940 0.0 S 03:51:15 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:1:4 -s 508852 508814 mailman 21936 0.0 S 03:51:15 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s 1333748 506832 nobody 21900 0.0 S 02:00 /usr/sbin/httpd -k start 508866 508814 mailman 21832 0.0 S 03:51:15 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s 1333672 506832 nobody 21812 0.0 S 02:02 /usr/sbin/httpd -k start 508853 508814 mailman 21804 0.0 S 03:51:15 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:4 -s 508849 508814 mailman 21768 0.0 S 03:51:15 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s 508859 508814 mailman 21764 0.0 S 03:51:15 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:1:8 -s 508862 508814 mailman 21764 0.0 S 03:51:15 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:4:8 -s 1333283 506832 nobody 21716 0.0 S 02:51 /usr/sbin/httpd -k start 1333690 506832 nobody 21620 0.0 S 02:01 /usr/sbin/httpd -k start 1333735 506832 nobody 21464 0.0 S 02:00 /usr/sbin/httpd -k start 1333738 506832 nobody 21116 0.0 S 02:00 /usr/sbin/httpd -k start 1332884 506832 nobody 21008 0.0 S 03:31 /usr/sbin/httpd -k start 1333785 506832 nobody 20760 0.0 S 01:59 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +-------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +-------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 58470 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +-------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/portal.evolutionerp.com.au-ssl_log 174 evolution/my.evolutionerp.com.au-ssl_log 115 vinesit/westpanel.vinesit.com.au-ssl_log 40 madalice/madalice.com.au-ssl_log 33 customc/customcentral.com.au-ssl_log 7 aaa/aaadownunder.com.au-ssl_log 3 infinium/infinium.net.au-ssl_log 3 corpkicks/2025.corporatekicks.com.au-ssl_log 2 corpkicks/corporatekicks.com.au-ssl_log 2 alison/alisonarts.com.au-ssl_log 1 bigdeals/bigdeals.com.au-ssl_log 1 olympic/olympicfencing.com.au-ssl_log 1 tubesupplies/tubesupplies.com.au-ssl_log 1 (total vhosts taking traffic: 13) --- top client IPs across all vhosts (last 3 min) --- 260 203.54.180.238 60 74.248.24.12 20 103.104.164.114 7 103.104.165.99 4 118.127.40.55 3 136.144.35.107 3 104.196.115.188 2 50.6.207.27 2 40.77.167.73 2 197.15.48.26 2 194.116.184.179 2 136.144.35.120 2 114.119.131.88 2 101.182.108.127 1 66.249.73.167 --- top request paths across all vhosts (last 3 min) --- 68 GET /factory_session_checker.php 36 POST /functions.php 34 GET /heartbeat.php 34 GET /factory_session_processed_qty.php 34 GET /factory_session_joiner.php 26 GET /app/ajax.php 11 GET /index.php 10 POST /clienteditsave.php 6 POST /app/ajax/selectFilterSingle.php 6 POST /app/ajax/selectFilter.php 6 POST /app/ajax.php 5 POST /plugins/csvexporter/plugin.php 4 POST /wp-cron.php 4 POST /logsave.php 4 POST /app/templates/ajax.php 4 GET /store/custom-rabbitohs-kids/ 4 GET / 3 GET /wp-login.php 2 POST /wp-login.php 2 POST /invoiceaddsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 68 GET /factory_session_checker.php 34 GET /heartbeat.php 34 GET /factory_session_processed_qty.php 34 GET /factory_session_joiner.php 2 GET /uploadsave.php 1 POST /uploadsave.php 1 GET /index.php -- last 10 requests -- 203.54.180.238 - - [28/Aug/2026:06:10:40 +1000] "GET /factory_session_joiner.php?id=34911 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [28/Aug/2026:06:10:40 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [28/Aug/2026:06:10:40 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:06:10:40 +1000] "GET /heartbeat.php?sentAt=1787861440&bytes=106,144,153,192&_=1787810681441 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [28/Aug/2026:06:10:43 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:06:10:42 +1000] "GET /heartbeat.php?sentAt=1787861442&bytes=106,144,153,194&_=1787835391998 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [28/Aug/2026:06:10:44 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [28/Aug/2026:06:10:44 +1000] "GET /factory_session_joiner.php?id=34926 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [28/Aug/2026:06:10:46 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:06:10:48 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 36 POST /functions.php 26 GET /app/ajax.php 10 POST /clienteditsave.php 10 GET /index.php 6 POST /app/ajax/selectFilterSingle.php 6 POST /app/ajax/selectFilter.php 6 POST /app/ajax.php 5 POST /plugins/csvexporter/plugin.php 4 POST /logsave.php 4 POST /app/templates/ajax.php 2 POST /invoiceaddsave.php -- last 10 requests -- 203.54.180.238 - - [28/Aug/2026:06:09:48 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=14136" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 103.104.165.99 - - [28/Aug/2026:06:09:59 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?modules=projects&page=deliveries&runsheet_date=2026-09-01&branch=1" "Mozilla 103.104.164.114 - - [28/Aug/2026:06:10:02 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&tab=maintab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) App 203.54.180.238 - - [28/Aug/2026:06:10:03 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=mfstatus" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 203.54.180.238 - - [28/Aug/2026:06:10:05 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=28785&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 40.77.167.73 - - [28/Aug/2026:06:10:16 +1000] "GET /index.php?page=quotedit"eid=78462§ionid=0 HTTP/1.1" 200 5274 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.c 203.54.180.238 - - [28/Aug/2026:06:10:18 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=activities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/ 203.54.180.238 - - [28/Aug/2026:06:10:22 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=28785&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [28/Aug/2026:06:10:25 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 284 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=28937&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [28/Aug/2026:06:10:25 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=28785&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; == vinesit/westpanel.vinesit.com.au-ssl_log == -- top paths -- 1 GET /xda.php 1 GET /wp-mail.php 1 GET /wp-includes/SimplePie/wp-login.php 1 GET /wp-includes/customize/index.php 1 GET /w.php 1 GET /wp-cron.php 1 GET /wp-content/themes/admin.php 1 GET /wp-content.php 1 GET /wp-content/cong.php 1 GET /wp-admin/images/admin.php 1 GET /wp-admin/css/wp-login.php 1 GET /wp-admin/css/colors/modern/ -- last 10 requests -- 74.248.24.12 - - [28/Aug/2026:06:10:39 +1000] "GET /wp-admin/css/admin.php HTTP/1.1" 500 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.248.24.12 - - [28/Aug/2026:06:10:39 +1000] "GET /config.php HTTP/1.1" 500 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.248.24.12 - - [28/Aug/2026:06:10:40 +1000] "GET /php.php HTTP/1.1" 403 13 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.248.24.12 - - [28/Aug/2026:06:10:41 +1000] "GET /init.php HTTP/1.1" 500 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.248.24.12 - - [28/Aug/2026:06:10:42 +1000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 500 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.248.24.12 - - [28/Aug/2026:06:10:42 +1000] "GET /1.php HTTP/1.1" 500 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.248.24.12 - - [28/Aug/2026:06:10:43 +1000] "GET /about.php HTTP/1.1" 500 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.248.24.12 - - [28/Aug/2026:06:10:44 +1000] "GET /ioxi-o.php HTTP/1.1" 500 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.248.24.12 - - [28/Aug/2026:06:10:45 +1000] "GET /alfa.php HTTP/1.1" 403 13 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.248.24.12 - - [28/Aug/2026:06:10:45 +1000] "GET /edit.php HTTP/1.1" 500 718 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" --- last 30 samples (run-up to this incident) --- 2026-08-28 06:08:26 L1=0.93 run=1 blk=0 avail=9568 (69.4%) swpO=0 conn=1 myRSS=1360 php=4 phpRSS=390 ap=20 tcp=28 topuser=madalice 2026-08-28 06:08:34 L1=0.85 run=1 blk=0 avail=9572 (69.5%) swpO=0 conn=1 myRSS=1360 php=4 phpRSS=390 ap=18 tcp=35 topuser=madalice 2026-08-28 06:08:36 L1=0.78 run=1 blk=0 avail=9571 (69.5%) swpO=0 conn=1 myRSS=1360 php=4 phpRSS=390 ap=18 tcp=34 topuser=madalice 2026-08-28 06:08:44 L1=0.72 run=2 blk=0 avail=9813 (71.2%) swpO=0 conn=1 myRSS=1360 php=2 phpRSS=80 ap=21 tcp=43 topuser=evolution 2026-08-28 06:08:46 L1=0.66 run=3 blk=2 avail=9618 (69.8%) swpO=0 conn=1 myRSS=1360 php=4 phpRSS=297 ap=25 tcp=45 topuser=madalice 2026-08-28 06:08:54 L1=0.61 run=2 blk=0 avail=9439 (68.5%) swpO=0 conn=2 myRSS=1361 php=4 phpRSS=265 ap=56 tcp=117 topuser=evolution 2026-08-28 06:08:56 L1=0.56 run=3 blk=0 avail=8946 (64.9%) swpO=0 conn=1 myRSS=1361 php=5 phpRSS=315 ap=120 tcp=108 topuser=madalice 2026-08-28 06:09:04 L1=0.52 run=2 blk=0 avail=8800 (63.9%) swpO=0 conn=2 myRSS=1369 php=5 phpRSS=539 ap=113 tcp=49 topuser=corpkicks 2026-08-28 06:09:06 L1=0.55 run=1 blk=0 avail=9054 (65.7%) swpO=0 conn=1 myRSS=1369 php=3 phpRSS=234 ap=111 tcp=42 topuser=madalice 2026-08-28 06:09:14 L1=0.51 run=1 blk=0 avail=9114 (66.2%) swpO=0 conn=2 myRSS=1370 php=3 phpRSS=234 ap=103 tcp=33 topuser=madalice 2026-08-28 06:09:16 L1=0.47 run=1 blk=0 avail=9125 (66.2%) swpO=0 conn=1 myRSS=1370 php=3 phpRSS=234 ap=101 tcp=30 topuser=madalice 2026-08-28 06:09:24 L1=0.43 run=2 blk=0 avail=9313 (67.6%) swpO=0 conn=2 myRSS=1371 php=3 phpRSS=122 ap=93 tcp=34 topuser=evolution 2026-08-28 06:09:26 L1=0.40 run=1 blk=0 avail=9343 (67.8%) swpO=0 conn=1 myRSS=1371 php=2 phpRSS=80 ap=91 tcp=32 topuser=evolution 2026-08-28 06:09:34 L1=0.45 run=2 blk=0 avail=9243 (67.1%) swpO=0 conn=2 myRSS=1371 php=4 phpRSS=278 ap=83 tcp=41 topuser=madalice 2026-08-28 06:09:36 L1=0.49 run=3 blk=0 avail=9201 (66.8%) swpO=0 conn=1 myRSS=1372 php=9 phpRSS=474 ap=81 tcp=43 topuser=evolution 2026-08-28 06:09:44 L1=0.77 run=1 blk=0 avail=9390 (68.2%) swpO=0 conn=2 myRSS=1372 php=3 phpRSS=212 ap=73 tcp=39 topuser=madalice 2026-08-28 06:09:46 L1=0.71 run=1 blk=0 avail=9406 (68.3%) swpO=0 conn=1 myRSS=1373 php=3 phpRSS=212 ap=71 tcp=38 topuser=madalice 2026-08-28 06:09:54 L1=0.65 run=1 blk=0 avail=9574 (69.5%) swpO=0 conn=1 myRSS=1373 php=2 phpRSS=80 ap=63 tcp=29 topuser=evolution 2026-08-28 06:09:56 L1=0.60 run=1 blk=0 avail=9580 (69.5%) swpO=0 conn=1 myRSS=1373 php=2 phpRSS=80 ap=61 tcp=29 topuser=evolution 2026-08-28 06:10:04 L1=0.63 run=4 blk=0 avail=9387 (68.1%) swpO=0 conn=1 myRSS=1373 php=7 phpRSS=458 ap=53 tcp=41 topuser=infinium 2026-08-28 06:10:06 L1=1.06 run=9 blk=0 avail=9235 (67.0%) swpO=0 conn=4 myRSS=1373 php=6 phpRSS=598 ap=51 tcp=38 topuser=tubesupplies 2026-08-28 06:10:14 L1=0.98 run=1 blk=0 avail=9584 (69.6%) swpO=0 conn=1 myRSS=1373 php=3 phpRSS=235 ap=43 tcp=31 topuser=madalice 2026-08-28 06:10:16 L1=0.90 run=1 blk=0 avail=9596 (69.7%) swpO=0 conn=4 myRSS=1373 php=3 phpRSS=235 ap=40 tcp=31 topuser=madalice 2026-08-28 06:10:25 L1=0.83 run=1 blk=0 avail=9402 (68.2%) swpO=0 conn=1 myRSS=1373 php=5 phpRSS=526 ap=32 tcp=40 topuser=madalice 2026-08-28 06:10:27 L1=0.84 run=2 blk=0 avail=9513 (69.1%) swpO=0 conn=4 myRSS=1373 php=4 phpRSS=393 ap=31 tcp=40 topuser=madalice 2026-08-28 06:10:35 L1=0.85 run=2 blk=0 avail=9494 (68.9%) swpO=0 conn=1 myRSS=1373 php=5 phpRSS=480 ap=26 tcp=40 topuser=madalice 2026-08-28 06:10:37 L1=0.87 run=3 blk=0 avail=9508 (69.0%) swpO=0 conn=4 myRSS=1373 php=5 phpRSS=462 ap=27 tcp=41 topuser=madalice 2026-08-28 06:10:45 L1=1.92 run=1 blk=0 avail=8733 (63.4%) swpO=1 conn=1 myRSS=1374 php=10 phpRSS=1254 ap=34 tcp=47 topuser=madalice 2026-08-28 06:10:47 L1=1.76 run=2 blk=0 avail=8711 (63.2%) swpO=1 conn=4 myRSS=1374 php=10 phpRSS=1280 ap=33 tcp=40 topuser=madalice 2026-08-28 06:10:55 L1=1.78 run=3 blk=0 avail=8524 (61.9%) swpO=0 conn=3 myRSS=1374 php=11 phpRSS=1531 ap=29 tcp=38 topuser=madalice