INCIDENT 2026-09-02 20:16:29 trigger: php_procs=33 php_rss=3416MB mysql_conn=27 ================================================================== load: 4.61 1.56 1.15 38/651 308331 ncpu:10 mem_avail: 6770MB/13777MB (49.1%) swap_used:1296MB swapout:6/s blocked(D):0 running:35 iowait:0.0% steal:0.0% php: 33 procs / 3416MB heaviest user: customc (30 procs, 3258MB) apache: 46 procs tcp_estab: 290 --- RSS by user (all processes) --- USER PROCS RSS_MB customc 30 3338 mysql 1 2207 nobody 45 633 root 243 613 netdata 7 201 madalice 1 155 cpanellogin 1 87 infinium 2 83 mailman 20 36 mailnull 5 27 dovenull 6 26 zabbix 1 18 wp-toolkit 3 18 corpkicks 1 12 dovecot 3 9 named 1 6 nscd 1 4 kurri 1 4 polkitd 1 3 evolution 8 3 --- php workers by user --- USER PROCS RSS_MB customc 29 3320 madalice 1 155 root 1 2 evolution 1 0 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5344 MB Active(file): 5074 MB Inactive(file): 737 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 474 MB CommitLimit: 10984 MB Committed_AS: 10281 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 243603 root 16:28 1240 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 3926885 root 1-17:54:01 7688 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 2260088 13.7 Ssl 06:02:17 /usr/sbin/mariadbd 308249 292089 customc 187700 22.7 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308246 307867 customc 187672 23.5 S 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 508924 1 netdata 186128 2.0 Ssl 5-17:56:51 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 308253 292506 customc 184712 34.0 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308250 308167 customc 175756 22.7 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308257 308205 customc 175220 30.6 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 706071 655564 root 173300 0.0 S 17:38:32 spamd child 308256 259033 customc 170296 26.6 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 293194 3929444 madalice 158852 6.2 S 01:56 php-fpm: pool madalice_com_au 308252 308247 customc 157460 21.5 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308266 292102 customc 156112 26.3 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308254 308201 customc 154724 26.0 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308263 308259 customc 154328 24.0 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308255 308189 customc 145020 25.0 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2900038 655564 root 139156 0.0 S 07:34:28 spamd child 308265 292490 customc 135736 23.0 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308264 308261 customc 120216 17.6 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308282 308174 customc 115856 23.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308283 308190 customc 113624 22.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308268 308260 customc 113472 26.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308269 308262 customc 113284 27.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308271 307857 customc 103516 23.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308280 308202 customc 102288 19.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308270 308206 customc 100736 19.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308281 308203 customc 98620 21.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308258 308208 customc 96280 31.3 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3897570 1353308 cpanellogin 89948 0.0 S 03:00:01 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base default_login_theme cpanel server_locale en 308292 307850 customc 69972 20.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308286 308207 customc 65264 22.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308284 292500 customc 63284 17.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308304 274736 customc 62640 16.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 276309 1353308 infinium 56280 0.0 S 07:58 webmaild - serving 1.41.252.211 308348 259198 customc 54896 16.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308313 308248 customc 54664 12.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308314 308173 customc 53580 10.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 308340 308188 customc 53492 12.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 509236 509098 root 46864 0.0 Sl 5-17:56:48 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 42104 0.1 Ss 42-17:35:14 cpsrvd (SSL) - waiting for connections 1469 1 root 41788 0.1 Ss 65-10:06:43 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 509266 1 root 34412 0.0 Ss 5-17:56:48 /usr/lib/systemd/systemd-journald 276311 654808 infinium 29268 0.0 S 07:58 php-fpm: pool user_infinium 308382 308187 customc 27900 2.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 259033 506832 nobody 23048 0.1 S 13:20 /usr/sbin/httpd -k start 259198 506832 nobody 21336 0.0 S 13:00 /usr/sbin/httpd -k start 274736 506832 nobody 21244 0.0 S 10:27 /usr/sbin/httpd -k start 292089 506832 nobody 20328 0.0 S 04:20 /usr/sbin/httpd -k start 292102 506832 nobody 20232 0.0 S 04:17 /usr/sbin/httpd -k start 292490 506832 nobody 20032 0.0 S 03:28 /usr/sbin/httpd -k start 292506 506832 nobody 19396 0.0 S 03:26 /usr/sbin/httpd -k start 307867 506832 nobody 19260 0.1 S 00:43 /usr/sbin/httpd -k start 483898 1 zabbix 18836 0.2 Ssl 5-17:58:05 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 307857 506832 nobody 18000 0.0 S 00:44 /usr/sbin/httpd -k start 509671 508992 netdata 18000 2.1 Sl 5-17:56:46 /usr/libexec/netdata/plugins.d/apps.plugin 1 292500 506832 nobody 17812 0.0 S 03:27 /usr/sbin/httpd -k start 307858 506832 nobody 16876 0.0 S 00:44 /usr/sbin/httpd -k start 307850 506832 nobody 15988 0.0 S 00:45 /usr/sbin/httpd -k start 308187 506832 nobody 15940 0.1 S 00:08 /usr/sbin/httpd -k start 308189 506832 nobody 15928 0.1 S 00:08 /usr/sbin/httpd -k start 308167 506832 nobody 15920 0.2 S 00:10 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+----------------------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+----------------------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 1124596 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 1124595 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | +---------+----------------------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 104 customc/customcentral.com.au-ssl_log 60 evolution/portal.evolutionerp.com.au-ssl_log 25 speedlin/speedlinefencing.com.au 22 speedlin/speedlinefencing.com.au-ssl_log 17 olympic/olympicfencing.com.au 9 madalice/madalice.com.au-ssl_log 4 (total vhosts taking traffic: 7) --- top client IPs across all vhosts (last 3 min) --- 104 40.115.94.245 59 35.194.227.252 37 52.139.44.162 25 203.54.180.238 9 169.58.234.134 1 66.249.68.66 1 168.144.160.242 1 164.90.192.229 1 129.146.119.181 1 114.119.146.16 1 114.119.130.40 1 104.131.14.110 --- top request paths across all vhosts (last 3 min) --- 32 GET /api/getItem/LWFB2001KG 25 GET /heartbeat.php 20 GET /api/getItem/LWPB2001KG 3 POST /wp-login.php 3 GET /sss.php 3 GET /dev.php 2 GET /xmini4.php 2 GET /xc.php 2 GET /wp-load.php 2 GET /w.php 2 GET /wp-content/uploads/ 2 GET /wp_blog_footer.php 2 GET /wefile.php 2 GET /store/hand-painted-nike-af1-afl-port-adelaide2020/ 2 GET /robot.php 2 GET /info.php/new.php 2 GET /gulu.php 2 GET /dk.php 2 GET /api/getItem/SHSG656520 2 GET /api/getItem/SHSG656516 --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 32 GET /api/getItem/LWFB2001KG 20 GET /api/getItem/LWPB2001KG 2 GET /api/getItem/SHSG656520 2 GET /api/getItem/SHSG656516 2 GET /api/getItem/SHSG3030208 1 GET /api/getItem/SHSP5050608 1 GET /api/getItem/SHSH2525308 1 GET /api/getItem/SHSG8989508 1 GET /api/getItem/SHSG8989358 1 GET /api/getItem/SHSG8989258 1 GET /api/getItem/SHSG8989208 1 GET /api/getItem/SHSG7575508 -- last 10 requests -- 40.115.94.245 - - [02/Sep/2026:20:15:51 +1000] "GET /api/getItem/SHSG5050408 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:15:51 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:15:51 +1000] "GET /api/getItem/SHSG5050508 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:15:52 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:15:52 +1000] "GET /api/getItem/SHSP5050608 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:15:52 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:15:52 +1000] "GET /api/getItem/SHSG6565608 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:15:53 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:15:53 +1000] "GET /api/getItem/SHSG7575358 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:20:15:53 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" == customc/customcentral.com.au-ssl_log == -- top paths -- 1 POST /wp-login.php 1 GET /website_backup.zst 1 GET /website_backup.zip 1 GET /website_backup.tar.xz 1 GET /website_backup.tar.bz2 1 GET /website_backup.rar 1 GET /website_backup.gz 1 GET /website_backup.bz2 1 GET /website_backup.7z 1 GET /web_backup.zst 1 GET /web_backup.zip 1 GET /web_backup.tgz -- last 10 requests -- 35.194.227.252 - - [02/Sep/2026:20:16:28 +1000] "GET /recovery.tar.gz HTTP/1.1" 404 73460 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:16:27 +1000] "GET /full_backup.sql.gz HTTP/1.1" 404 73463 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:16:27 +1000] "GET /bkp.tar.bz2 HTTP/1.1" 404 73456 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:16:28 +1000] "GET /website_backup.rar HTTP/1.1" 404 73463 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:16:30 +1000] "GET /website_backup.bz2 HTTP/1.1" 404 73461 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:16:30 +1000] "GET /backup_full.bz2 HTTP/1.1" 404 73460 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:16:28 +1000] "GET /backup_full.tar.bz2 HTTP/1.1" 404 73464 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:16:29 +1000] "GET /site_backup.tar.xz HTTP/1.1" 404 73463 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:16:29 +1000] "GET /site_backup.bz2 HTTP/1.1" 404 73460 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.194.227.252 - - [02/Sep/2026:20:16:29 +1000] "GET /site_backup.sql.gz HTTP/1.1" 404 73463 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 25 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [02/Sep/2026:20:15:19 +1000] "GET /heartbeat.php?sentAt=1788344119&bytes=106,151,247,55&_=1788342075678 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:20:15:22 +1000] "GET /heartbeat.php?sentAt=1788344123&bytes=106,151,247,59&_=1788324351736 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:20:15:29 +1000] "GET /heartbeat.php?sentAt=1788344129&bytes=106,151,247,65&_=1788342075679 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:20:15:32 +1000] "GET /heartbeat.php?sentAt=1788344133&bytes=106,151,247,69&_=1788324351737 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:20:15:39 +1000] "GET /heartbeat.php?sentAt=1788344139&bytes=106,151,247,75&_=1788342075680 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:20:15:42 +1000] "GET /heartbeat.php?sentAt=1788344143&bytes=106,151,247,79&_=1788324351738 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:20:15:49 +1000] "GET /heartbeat.php?sentAt=1788344149&bytes=106,151,247,85&_=1788342075681 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:20:15:52 +1000] "GET /heartbeat.php?sentAt=1788344153&bytes=106,151,247,89&_=1788324351739 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:20:15:59 +1000] "GET /heartbeat.php?sentAt=1788344159&bytes=106,151,247,95&_=1788342075682 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:20:16:02 +1000] "GET /heartbeat.php?sentAt=1788344163&bytes=106,151,247,99&_=1788324351740 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" --- last 30 samples (run-up to this incident) --- 2026-09-02 20:14:08 L1=0.99 run=2 blk=0 avail=9371 (68.0%) swpO=0 conn=1 myRSS=2207 php=4 phpRSS=332 ap=17 tcp=22 topuser=madalice 2026-09-02 20:14:09 L1=0.99 run=3 blk=0 avail=9318 (67.6%) swpO=0 conn=2 myRSS=2207 php=5 phpRSS=412 ap=17 tcp=22 topuser=madalice 2026-09-02 20:14:18 L1=0.91 run=1 blk=0 avail=9511 (69.0%) swpO=0 conn=1 myRSS=2207 php=3 phpRSS=162 ap=17 tcp=28 topuser=madalice 2026-09-02 20:14:19 L1=0.91 run=2 blk=0 avail=9482 (68.8%) swpO=0 conn=2 myRSS=2207 php=5 phpRSS=247 ap=17 tcp=28 topuser=madalice 2026-09-02 20:14:29 L1=1.01 run=5 blk=0 avail=9093 (66.0%) swpO=0 conn=1 myRSS=2207 php=6 phpRSS=668 ap=17 tcp=29 topuser=corpkicks 2026-09-02 20:14:29 L1=1.01 run=3 blk=0 avail=9016 (65.4%) swpO=0 conn=2 myRSS=2207 php=7 phpRSS=773 ap=17 tcp=29 topuser=corpkicks 2026-09-02 20:14:39 L1=0.93 run=5 blk=0 avail=9386 (68.1%) swpO=0 conn=1 myRSS=2207 php=6 phpRSS=354 ap=19 tcp=30 topuser=madalice 2026-09-02 20:14:39 L1=0.93 run=4 blk=0 avail=9333 (67.7%) swpO=0 conn=3 myRSS=2207 php=6 phpRSS=387 ap=19 tcp=29 topuser=madalice 2026-09-02 20:14:49 L1=1.08 run=3 blk=0 avail=9266 (67.3%) swpO=0 conn=1 myRSS=2207 php=6 phpRSS=474 ap=19 tcp=27 topuser=madalice 2026-09-02 20:14:49 L1=1.08 run=1 blk=0 avail=9381 (68.1%) swpO=0 conn=3 myRSS=2207 php=5 phpRSS=322 ap=19 tcp=30 topuser=madalice 2026-09-02 20:14:59 L1=1.00 run=7 blk=0 avail=9091 (66.0%) swpO=0 conn=1 myRSS=2207 php=8 phpRSS=715 ap=18 tcp=24 topuser=madalice 2026-09-02 20:14:59 L1=1.00 run=3 blk=0 avail=9174 (66.6%) swpO=0 conn=3 myRSS=2207 php=7 phpRSS=603 ap=18 tcp=22 topuser=madalice 2026-09-02 20:15:09 L1=1.15 run=2 blk=0 avail=9320 (67.6%) swpO=0 conn=1 myRSS=2207 php=6 phpRSS=427 ap=17 tcp=25 topuser=madalice 2026-09-02 20:15:09 L1=1.15 run=2 blk=0 avail=9319 (67.6%) swpO=0 conn=3 myRSS=2207 php=7 phpRSS=453 ap=17 tcp=25 topuser=madalice 2026-09-02 20:15:19 L1=1.05 run=1 blk=0 avail=9331 (67.7%) swpO=0 conn=1 myRSS=2207 php=6 phpRSS=427 ap=17 tcp=24 topuser=madalice 2026-09-02 20:15:19 L1=1.05 run=1 blk=0 avail=9328 (67.7%) swpO=0 conn=3 myRSS=2207 php=6 phpRSS=427 ap=17 tcp=24 topuser=madalice 2026-09-02 20:15:29 L1=0.89 run=1 blk=0 avail=9381 (68.1%) swpO=0 conn=1 myRSS=2207 php=5 phpRSS=358 ap=15 tcp=21 topuser=madalice 2026-09-02 20:15:29 L1=0.89 run=1 blk=0 avail=9380 (68.1%) swpO=0 conn=3 myRSS=2207 php=5 phpRSS=358 ap=15 tcp=21 topuser=madalice 2026-09-02 20:15:39 L1=0.75 run=1 blk=0 avail=9517 (69.1%) swpO=0 conn=2 myRSS=2207 php=4 phpRSS=198 ap=14 tcp=22 topuser=madalice 2026-09-02 20:15:39 L1=0.75 run=1 blk=0 avail=9516 (69.1%) swpO=0 conn=2 myRSS=2207 php=4 phpRSS=198 ap=14 tcp=22 topuser=madalice 2026-09-02 20:15:49 L1=0.63 run=2 blk=0 avail=9420 (68.4%) swpO=0 conn=2 myRSS=2207 php=5 phpRSS=283 ap=21 tcp=27 topuser=madalice 2026-09-02 20:15:49 L1=0.63 run=3 blk=1 avail=9361 (67.9%) swpO=0 conn=2 myRSS=2207 php=5 phpRSS=327 ap=21 tcp=28 topuser=madalice 2026-09-02 20:15:59 L1=0.54 run=1 blk=0 avail=9486 (68.9%) swpO=0 conn=2 myRSS=2207 php=4 phpRSS=198 ap=19 tcp=24 topuser=madalice 2026-09-02 20:15:59 L1=0.54 run=1 blk=0 avail=9486 (68.9%) swpO=0 conn=2 myRSS=2207 php=4 phpRSS=198 ap=19 tcp=24 topuser=madalice 2026-09-02 20:16:09 L1=0.45 run=1 blk=0 avail=9501 (69.0%) swpO=0 conn=2 myRSS=2207 php=4 phpRSS=198 ap=16 tcp=24 topuser=madalice 2026-09-02 20:16:09 L1=0.45 run=1 blk=0 avail=9501 (69.0%) swpO=0 conn=2 myRSS=2207 php=4 phpRSS=198 ap=16 tcp=24 topuser=madalice 2026-09-02 20:16:19 L1=0.38 run=1 blk=0 avail=9501 (69.0%) swpO=0 conn=2 myRSS=2207 php=4 phpRSS=198 ap=16 tcp=24 topuser=madalice 2026-09-02 20:16:19 L1=0.38 run=1 blk=0 avail=9499 (69.0%) swpO=0 conn=2 myRSS=2207 php=4 phpRSS=198 ap=16 tcp=24 topuser=madalice 2026-09-02 20:16:29 L1=4.61 run=35 blk=0 avail=6770 (49.1%) swpO=6 conn=27 myRSS=2207 php=33 phpRSS=3416 ap=46 tcp=290 topuser=customc 2026-09-02 20:16:29 L1=4.61 run=37 blk=0 avail=6737 (48.9%) swpO=6 conn=28 myRSS=2207 php=33 phpRSS=3502 ap=47 tcp=290 topuser=customc