INCIDENT 2026-08-28 07:14:16 trigger: php_rss=1819MB ================================================================== load: 2.52 2.14 1.58 20/630 1562466 ncpu:10 mem_avail: 8224MB/13777MB (59.7%) swap_used:580MB swapout:0/s blocked(D):0 running:17 iowait:0.1% steal:0.0% php: 19 procs / 1819MB heaviest user: alison (13 procs, 1168MB) apache: 44 procs tcp_estab: 94 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1586 alison 12 1195 root 251 1187 nobody 43 777 madalice 4 576 mailman 20 411 netdata 7 220 wp-toolkit 3 118 cpanellogin 1 107 dovenull 6 65 evolution 6 63 mailnull 3 47 named 1 43 lowrange 2 28 dovecot 3 28 kurri 2 27 zabbix 1 26 polkitd 1 23 infinium 1 14 candyfabcom 1 14 --- php workers by user --- USER PROCS RSS_MB alison 12 1227 madalice 4 576 evolution 2 85 root 1 30 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6353 MB Active(file): 4230 MB Inactive(file): 1911 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 698 MB CommitLimit: 10984 MB Committed_AS: 9785 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 04:55:36 12188 /usr/bin/imunify-agent-proxy 1561859 root 00:41 59036 /opt/imunify360/venv/bin/python3 -m imav.run --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 1624240 4.8 Ssl 04:55:05 /usr/sbin/mariadbd 508924 1 netdata 179912 1.9 Ssl 04:54:34 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 529388 527476 root 179404 0.0 S 04:49:58 spamd child 529389 527476 root 160096 0.0 S 04:49:58 spamd child 1561990 510022 madalice 159056 7.2 S 00:33 php-fpm: pool madalice_com_au 1561991 510022 madalice 158668 7.4 S 00:33 php-fpm: pool madalice_com_au 1562403 1559903 alison 147460 110 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 527476 1 root 146680 0.0 Ss 04:51:37 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1562411 1562378 alison 137988 105 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1561993 510022 madalice 136256 3.8 S 00:33 php-fpm: pool madalice_com_au 1561995 510022 madalice 136236 4.0 S 00:33 php-fpm: pool madalice_com_au 1562406 1553983 alison 135520 100 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1562399 1562394 alison 134440 50.5 S 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1562408 1559775 alison 133320 102 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1562404 1562101 alison 132556 98.0 S 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1562414 1526657 alison 128000 95.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1562405 1559803 alison 124016 89.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1562407 1559874 alison 112352 77.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 973642 1353308 cpanellogin 110128 0.0 S 02:51:44 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 1562416 1559811 alison 88272 49.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1562418 1559905 alison 86076 47.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509236 509098 root 71880 0.0 Sl 04:54:31 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1562419 1559529 alison 70788 29.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 938582 1 wp-toolkit 68684 0.0 Ss 03:02:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1562464 1562075 evolution 66884 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1561859 1 root 59036 3.9 Ssl 00:41 /opt/imunify360/venv/bin/python3 -m imav.run 1562490 1562065 alison 48692 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 508634 1 named 44680 0.0 Ssl 04:54:39 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 4180059 4180015 evolution 44176 0.0 Ss 07:14:16 /opt/cpanel/ea-php74/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 938585 1 wp-toolkit 43300 0.0 Ss 03:02:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1353308 1 root 42140 0.0 Ss 37-04:32:57 cpsrvd (SSL) - waiting for connections 1562514 1562395 alison 41812 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509098 1 root 40384 0.0 Ss 04:54:32 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion 1469 1 root 37788 0.1 Ss 59-21:04:26 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 526869 1 root 32024 0.0 Ss 04:52:00 lfd - sleeping 481558 1 root 31244 0.1 Ssl 04:56:58 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 510022 1 root 31236 0.0 Ss 04:54:27 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 938444 1 root 28176 0.0 Ss 03:02:11 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 483898 1 zabbix 27432 0.2 Ssl 04:55:48 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 509266 1 root 26768 0.0 Ss 04:54:31 /usr/lib/systemd/systemd-journald 508591 1 polkitd 24284 0.0 Ssl 04:54:39 /usr/lib/polkit-1/polkitd --no-debug 1463 1 root 24268 0.0 Ss 59-21:04:26 tailwatchd 1526657 506832 nobody 23944 0.0 S 09:30 /usr/sbin/httpd -k start 1544443 506832 nobody 23208 0.0 S 04:50 /usr/sbin/httpd -k start 1559898 506832 nobody 23028 0.2 S 02:46 /usr/sbin/httpd -k start 1559775 506832 nobody 22304 0.0 S 02:48 /usr/sbin/httpd -k start 1553983 506832 nobody 22224 0.0 S 04:08 /usr/sbin/httpd -k start 1560031 506832 nobody 22224 0.0 S 02:41 /usr/sbin/httpd -k start 508863 508814 mailman 22196 0.0 S 04:54:37 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:5:8 -s 1544945 506832 nobody 22196 0.0 S 04:19 /usr/sbin/httpd -k start 508851 508814 mailman 22180 0.0 S 04:54:37 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:1:2 -s 508857 508814 mailman 22180 0.0 S 04:54:37 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s 1559473 506832 nobody 22132 0.0 S 03:11 /usr/sbin/httpd -k start 1559874 506832 nobody 22112 0.0 S 02:46 /usr/sbin/httpd -k start 508856 508814 mailman 22104 0.0 S 04:54:37 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s 508855 508814 mailman 22072 0.0 S 04:54:37 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:2:4 -s 508864 508814 mailman 22028 0.0 S 04:54:37 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:6:8 -s 508867 508814 mailman 22012 0.0 S 04:54:37 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s 508858 508814 mailman 21992 0.0 S 04:54:37 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:8 -s 508861 508814 mailman 21992 0.0 S 04:54:37 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:3:8 -s --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 206164 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 305 evolution/portal.evolutionerp.com.au-ssl_log 165 olympic/olympicfencing.com.au-ssl_log 72 otterfencing/otterfencing.com.au-ssl_log 66 corpkicks/corporatekicks.com.au 58 corpkicks/corporatekicks.com.au-ssl_log 48 alison/alisonarts.com.au-ssl_log 22 aaa/aaadownunder.com.au-ssl_log 11 madalice/madalice.com.au-ssl_log 2 (total vhosts taking traffic: 9) --- top client IPs across all vhosts (last 3 min) --- 173 203.54.180.238 144 103.104.165.99 106 20.151.129.194 66 20.104.50.220 61 35.196.162.79 58 1.145.102.184 49 14.1.95.251 24 175.36.227.212 20 213.209.159.84 10 147.161.213.78 8 20.220.204.93 8 1.145.16.82 6 103.104.164.114 4 118.127.40.55 3 52.167.144.140 --- top request paths across all vhosts (last 3 min) --- 85 POST /functions.php 73 GET /app/ajax.php 53 GET /factory_session_checker.php 39 GET /heartbeat.php 37 GET /index.php 25 POST /plugins/csvexporter/plugin.php 25 GET /factory_session_processed_qty.php 25 GET /factory_session_joiner.php 12 POST /plugins/fencecosting/plugin.php 12 POST /app/ajax/selectFilterSingle.php 12 POST /app/ajax.php 11 POST /jobeditsave.php 10 POST /quoteditsave.php 10 POST /clienteditsave.php 6 POST /app/ajax/selectFilter.php 6 GET / 5 POST /wp-login.php 4 POST /portal/register 4 POST /itemModify.php 4 POST /inveditsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 85 POST /functions.php 73 GET /app/ajax.php 27 GET /index.php 25 POST /plugins/csvexporter/plugin.php 12 POST /plugins/fencecosting/plugin.php 12 POST /app/ajax/selectFilterSingle.php 12 POST /app/ajax.php 11 POST /jobeditsave.php 10 POST /quoteditsave.php 10 POST /clienteditsave.php 6 POST /app/ajax/selectFilter.php 4 POST /itemModify.php -- last 10 requests -- 103.104.165.99 - - [28/Aug/2026:07:14:09 +1000] "POST /uploadsave.php?call=fupload&ind=0&comp=0 HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36929" "Mozilla/5.0 (Windows NT 10.0; Win6 103.104.165.99 - - [28/Aug/2026:07:14:09 +1000] "POST /uploadsave.php?call=fupload&ind=1&comp=0 HTTP/1.1" 200 242 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36929" "Mozilla/5.0 (Windows NT 10.0; Win6 14.1.95.251 - - [28/Aug/2026:07:14:11 +1000] "GET /index.php?page=jobregister HTTP/1.1" 200 17140 "https://my.evolutionerp.com.au/index.php?page=inventory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K 14.1.95.251 - - [28/Aug/2026:07:14:11 +1000] "POST /jobeditsave.php?call=filter HTTP/1.1" 200 2692 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 14.1.95.251 - - [28/Aug/2026:07:14:11 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 4478 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 175.36.227.212 - - [28/Aug/2026:07:14:08 +1000] "GET /index.php?page=quotedit"eid=78863§ionid=0 HTTP/1.1" 200 203270 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78863" "Mozilla/5.0 (Windows NT 175.36.227.212 - - [28/Aug/2026:07:14:11 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78863§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win 14.1.95.251 - - [28/Aug/2026:07:14:11 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Djobregister&call=getUserSetting&caller=ajaxSubmitLocal&seq=17034202677 HTTP/1.1" 200 93 "https://my.evolutionerp.com.au/index.php?p 14.1.95.251 - - [28/Aug/2026:07:14:11 +1000] "GET /app/ajax.php?cn=tsExportSettingsjob&furi=false&uri=%2F&call=getUserSetting&caller=ajaxSubmitLocal&seq=15263937236 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/index. 175.36.227.212 - - [28/Aug/2026:07:14:11 +1000] "GET /plugins/fensa/fensa-ajax.php?function_name=load_fensa_modal HTTP/1.1" 200 357 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78863§ionid=0" "Mozi == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 53 GET /factory_session_checker.php 39 GET /heartbeat.php 25 GET /factory_session_processed_qty.php 25 GET /factory_session_joiner.php 10 GET /index.php 4 POST /portal/register 4 POST /factory_functions.php 3 GET /uploadsave.php 1 POST /uploadsave.php 1 POST /inventory.php -- last 10 requests -- 203.54.180.238 - - [28/Aug/2026:07:13:58 +1000] "GET /factory_session_joiner.php?id=34923 HTTP/1.1" 200 86 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [28/Aug/2026:07:13:59 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:07:14:00 +1000] "GET /heartbeat.php?sentAt=1787865240&bytes=106,144,168,152&_=1787810681821 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [28/Aug/2026:07:14:03 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:07:14:03 +1000] "GET /factory_session_joiner.php?id=34929 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [28/Aug/2026:07:14:03 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [28/Aug/2026:07:14:02 +1000] "GET /heartbeat.php?sentAt=1787865242&bytes=106,144,168,154&_=1787835392378 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [28/Aug/2026:07:14:04 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:07:14:06 +1000] "GET /heartbeat.php?sentAt=1787865245&bytes=106,144,168,157&_=1787865011934 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [28/Aug/2026:07:14:08 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 == olympic/olympicfencing.com.au-ssl_log == -- top paths -- 4 GET /wp-login.php 2 POST /wp-login.php 2 POST /wp-cron.php 2 GET /wp-admin/ 1 POST /v1/graphql 1 POST /graphql 1 POST /api/graphql 1 GET /z9x8c7v6b5-debug-trigger-www.olympicfencing.com.au 1 GET /wtiiy.php 1 GET /wp-style.php 1 GET /wp-json 1 GET /wp-content/plugins/hellopress/wp_filemanager.php -- last 10 requests -- 118.127.40.55 - - [28/Aug/2026:07:13:35 +1000] "POST /wp-cron.php?doing_wp_cron=1787865215.1477169990539550781250 HTTP/1.1" 200 1 "-" "WordPress/6.9.7; https://www.olympicfencing.com.au" 20.220.204.93 - - [28/Aug/2026:07:14:01 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 5749 "-" "-" 20.220.204.93 - - [28/Aug/2026:07:14:02 +1000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 5749 "-" "-" 20.220.204.93 - - [28/Aug/2026:07:14:02 +1000] "GET /Jcrop.php HTTP/1.1" 404 5749 "-" "-" 20.220.204.93 - - [28/Aug/2026:07:14:02 +1000] "GET /gettest.php HTTP/1.1" 404 5749 "-" "-" 20.220.204.93 - - [28/Aug/2026:07:14:03 +1000] "GET /menu.php HTTP/1.1" 404 5749 "-" "-" 20.220.204.93 - - [28/Aug/2026:07:14:03 +1000] "GET /wp-style.php HTTP/1.1" 404 5749 "-" "-" 20.220.204.93 - - [28/Aug/2026:07:14:04 +1000] "GET /67.php HTTP/1.1" 404 5749 "-" "-" 50.6.200.195 - - [28/Aug/2026:07:14:03 +1000] "GET /wp-login.php HTTP/1.1" 200 1614 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 20.220.204.93 - - [28/Aug/2026:07:14:04 +1000] "GET /wtiiy.php HTTP/1.1" 404 5749 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-28 07:11:55 L1=3.63 run=4 blk=1 avail=8516 (61.8%) swpO=0 conn=2 myRSS=1582 php=7 phpRSS=561 ap=137 tcp=51 topuser=evolution 2026-08-28 07:11:55 L1=3.63 run=4 blk=0 avail=8428 (61.2%) swpO=0 conn=3 myRSS=1582 php=8 phpRSS=660 ap=137 tcp=52 topuser=evolution 2026-08-28 07:12:05 L1=3.45 run=1 blk=0 avail=8778 (63.7%) swpO=0 conn=2 myRSS=1583 php=3 phpRSS=229 ap=127 tcp=49 topuser=madalice 2026-08-28 07:12:05 L1=3.18 run=1 blk=0 avail=8777 (63.7%) swpO=0 conn=3 myRSS=1583 php=3 phpRSS=229 ap=127 tcp=48 topuser=madalice 2026-08-28 07:12:15 L1=3.00 run=1 blk=0 avail=8979 (65.2%) swpO=0 conn=2 myRSS=1583 php=2 phpRSS=73 ap=117 tcp=41 topuser=evolution 2026-08-28 07:12:16 L1=2.76 run=1 blk=0 avail=8973 (65.1%) swpO=0 conn=1 myRSS=1583 php=2 phpRSS=73 ap=117 tcp=41 topuser=evolution 2026-08-28 07:12:25 L1=2.78 run=7 blk=0 avail=8906 (64.6%) swpO=0 conn=3 myRSS=1583 php=5 phpRSS=299 ap=107 tcp=43 topuser=madalice 2026-08-28 07:12:26 L1=2.96 run=8 blk=0 avail=8888 (64.5%) swpO=0 conn=1 myRSS=1583 php=4 phpRSS=289 ap=107 tcp=43 topuser=madalice 2026-08-28 07:12:35 L1=2.66 run=5 blk=0 avail=8775 (63.7%) swpO=0 conn=3 myRSS=1584 php=5 phpRSS=498 ap=97 tcp=39 topuser=olympic 2026-08-28 07:12:36 L1=2.66 run=7 blk=0 avail=8731 (63.4%) swpO=0 conn=1 myRSS=1584 php=5 phpRSS=415 ap=97 tcp=40 topuser=olympic 2026-08-28 07:12:46 L1=3.48 run=6 blk=0 avail=8898 (64.6%) swpO=0 conn=3 myRSS=1584 php=8 phpRSS=550 ap=87 tcp=56 topuser=olympic 2026-08-28 07:12:46 L1=3.48 run=16 blk=0 avail=8794 (63.8%) swpO=0 conn=1 myRSS=1584 php=11 phpRSS=756 ap=87 tcp=57 topuser=olympic 2026-08-28 07:12:56 L1=4.20 run=5 blk=0 avail=9062 (65.8%) swpO=0 conn=3 myRSS=1584 php=5 phpRSS=353 ap=77 tcp=57 topuser=madalice 2026-08-28 07:12:56 L1=4.20 run=4 blk=0 avail=8998 (65.3%) swpO=0 conn=1 myRSS=1584 php=6 phpRSS=446 ap=77 tcp=60 topuser=evolution 2026-08-28 07:13:06 L1=3.79 run=2 blk=0 avail=9147 (66.4%) swpO=0 conn=3 myRSS=1585 php=4 phpRSS=296 ap=67 tcp=58 topuser=madalice 2026-08-28 07:13:06 L1=3.79 run=2 blk=0 avail=9089 (66.0%) swpO=0 conn=1 myRSS=1585 php=5 phpRSS=378 ap=67 tcp=58 topuser=madalice 2026-08-28 07:13:16 L1=3.29 run=2 blk=0 avail=9195 (66.7%) swpO=0 conn=3 myRSS=1585 php=5 phpRSS=329 ap=57 tcp=41 topuser=madalice 2026-08-28 07:13:16 L1=3.29 run=1 blk=0 avail=9241 (67.1%) swpO=0 conn=2 myRSS=1585 php=4 phpRSS=269 ap=57 tcp=40 topuser=madalice 2026-08-28 07:13:26 L1=2.78 run=2 blk=0 avail=9317 (67.6%) swpO=0 conn=2 myRSS=1585 php=4 phpRSS=269 ap=47 tcp=36 topuser=madalice 2026-08-28 07:13:26 L1=2.78 run=1 blk=0 avail=9317 (67.6%) swpO=0 conn=2 myRSS=1585 php=4 phpRSS=269 ap=47 tcp=36 topuser=madalice 2026-08-28 07:13:36 L1=3.25 run=2 blk=0 avail=9181 (66.6%) swpO=0 conn=2 myRSS=1585 php=5 phpRSS=402 ap=41 tcp=51 topuser=madalice 2026-08-28 07:13:36 L1=3.25 run=2 blk=0 avail=9180 (66.6%) swpO=0 conn=2 myRSS=1585 php=5 phpRSS=402 ap=41 tcp=51 topuser=madalice 2026-08-28 07:13:46 L1=3.15 run=5 blk=0 avail=8687 (63.1%) swpO=0 conn=2 myRSS=1585 php=10 phpRSS=1091 ap=33 tcp=41 topuser=madalice 2026-08-28 07:13:46 L1=3.15 run=3 blk=0 avail=8773 (63.7%) swpO=0 conn=2 myRSS=1585 php=10 phpRSS=999 ap=33 tcp=41 topuser=madalice 2026-08-28 07:13:56 L1=2.75 run=3 blk=0 avail=8621 (62.6%) swpO=0 conn=2 myRSS=1586 php=10 phpRSS=1133 ap=36 tcp=44 topuser=madalice 2026-08-28 07:13:56 L1=2.75 run=2 blk=0 avail=8738 (63.4%) swpO=0 conn=2 myRSS=1586 php=9 phpRSS=983 ap=36 tcp=45 topuser=madalice 2026-08-28 07:14:06 L1=2.32 run=1 blk=0 avail=8735 (63.4%) swpO=0 conn=2 myRSS=1586 php=9 phpRSS=1002 ap=34 tcp=43 topuser=madalice 2026-08-28 07:14:06 L1=2.32 run=2 blk=0 avail=8697 (63.1%) swpO=0 conn=2 myRSS=1586 php=10 phpRSS=1068 ap=34 tcp=42 topuser=madalice 2026-08-28 07:14:16 L1=2.52 run=17 blk=0 avail=8224 (59.7%) swpO=0 conn=12 myRSS=1586 php=19 phpRSS=1819 ap=44 tcp=94 topuser=alison 2026-08-28 07:14:16 L1=2.52 run=21 blk=0 avail=8157 (59.2%) swpO=0 conn=13 myRSS=1586 php=18 phpRSS=1839 ap=44 tcp=94 topuser=alison