INCIDENT 2026-09-04 12:50:01 trigger: php_procs=31 php_rss=3018MB mysql_conn=23 ================================================================== load: 8.18 2.99 1.87 31/759 747997 ncpu:10 mem_avail: 5649MB/13777MB (41.0%) swap_used:1718MB swapout:853/s blocked(D):2 running:32 iowait:0.1% steal:0.0% php: 31 procs / 3018MB heaviest user: alison (20 procs, 2514MB) apache: 70 procs tcp_estab: 82 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3163 alison 20 2487 nobody 69 1427 root 259 1020 evolution 17 316 netdata 8 247 madalice 1 124 corpkicks 1 74 dovenull 6 65 wp-toolkit 3 61 cpanellogin 1 58 dovecot 3 28 kurri 2 27 mailman 20 26 mailnull 3 16 lowrange 1 15 zabbix 1 10 polkitd 1 8 named 1 5 nscd 1 3 --- php workers by user --- USER PROCS RSS_MB alison 20 2506 evolution 7 238 madalice 1 124 corpkicks 1 76 root 1 33 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5605 MB Active(file): 3626 MB Inactive(file): 974 MB Dirty: 66 MB Writeback: 0 MB SReclaimable: 592 MB CommitLimit: 10984 MB Committed_AS: 11153 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 747824 root 00:02 3076 /bin/sh -c bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || : 3926885 root 3-10:27:35 4504 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3239532 14.2 Rsl 1-22:35:50 /usr/sbin/mariadbd 2654375 2603077 root 181216 0.1 S 10:10:55 spamd child 1542443 1 netdata 180888 2.6 Ssl 1-10:27:40 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 747763 747543 alison 161864 27.2 S 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 747742 747010 alison 161652 28.2 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 747759 745772 alison 161068 26.8 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 747750 747012 alison 158380 25.8 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 747753 747542 alison 158168 26.2 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 747745 747127 alison 157948 26.4 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 747765 747175 alison 151768 24.6 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 747783 747781 alison 147924 41.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 747770 747575 alison 147496 25.2 S 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2603077 1 root 145772 0.0 Ss 10:25:51 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 747760 747011 alison 144216 24.6 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 747786 746978 alison 144136 40.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 747475 2601907 madalice 127340 5.7 S 00:19 php-fpm: pool madalice_com_au 747807 747171 alison 123764 49.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 747784 747780 alison 122592 30.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 747789 747114 alison 115332 29.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2654376 2603077 root 113280 0.0 S 10:10:55 spamd child 747801 746683 alison 105180 37.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 747800 746284 alison 92228 31.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 747885 746275 corpkicks 90892 34.0 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 509266 1 root 85608 0.0 Ss 7-10:30:21 /usr/lib/systemd/systemd-journald 552527 1353308 cpanellogin 60300 0.0 S 51:38 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 748012 747794 evolution 59632 8.0 S 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 747991 747769 alison 59036 15.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 747728 746993 evolution 58424 2.3 S 00:06 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 747920 747867 evolution 56292 28.0 R 00:01 git reset --hard origin/staging 509236 509098 root 42024 0.0 Sl 7-10:30:21 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 41444 0.1 Ss 44-10:08:47 cpsrvd (SSL) - waiting for connections 1469 1 root 41104 0.1 Ss 67-02:40:16 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542981 1542551 netdata 40920 0.1 Sl 1-10:27:36 /usr/libexec/netdata/plugins.d/go.d.plugin 1 747802 747563 evolution 38348 1.5 S 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 747788 747561 evolution 37008 0.6 S 00:03 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 747787 747559 evolution 36916 1.0 S 00:03 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 747925 746984 evolution 36696 4.0 S 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 747803 747562 evolution 36312 1.5 S 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1542487 1 wp-toolkit 34288 0.0 Ss 1-10:27:40 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2601907 1 root 34136 0.0 Ss 10:26:36 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 745789 506832 nobody 28212 0.0 S 02:15 /usr/sbin/httpd -k start 2602226 1 root 27552 0.1 Ssl 10:26:21 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 727763 506832 nobody 26800 0.0 S 06:36 /usr/sbin/httpd -k start 744305 506832 nobody 26548 0.0 S 03:38 /usr/sbin/httpd -k start 745801 506832 nobody 26532 0.0 S 02:14 /usr/sbin/httpd -k start 746612 506832 nobody 26336 0.0 S 01:12 /usr/sbin/httpd -k start 746682 506832 nobody 26080 0.1 S 01:10 /usr/sbin/httpd -k start 746984 506832 nobody 25412 0.0 S 00:45 /usr/sbin/httpd -k start 747127 506832 nobody 24968 0.0 S 00:37 /usr/sbin/httpd -k start 746995 506832 nobody 24724 0.0 S 00:44 /usr/sbin/httpd -k start 746303 506832 nobody 24696 0.0 S 01:39 /usr/sbin/httpd -k start 1463 1 root 24624 0.0 Ss 67-02:40:16 tailwatchd 747114 506832 nobody 24488 0.0 S 00:38 /usr/sbin/httpd -k start 746302 506832 nobody 24108 0.0 S 01:39 /usr/sbin/httpd -k start 747173 506832 nobody 24088 0.0 S 00:35 /usr/sbin/httpd -k start 746978 506832 nobody 24064 0.0 S 00:46 /usr/sbin/httpd -k start 746297 506832 nobody 24020 0.0 S 01:39 /usr/sbin/httpd -k start 747795 506832 nobody 23592 0.0 S 00:03 /usr/sbin/httpd -k start 747015 506832 nobody 23468 0.0 S 00:43 /usr/sbin/httpd -k start 745788 506832 nobody 23348 0.0 S 02:15 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+----------------------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+----------------------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 9502399 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | | 9502395 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | | 9502394 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+----------------------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min alison/alisonarts.com.au-ssl_log 240 evolution/my.evolutionerp.com.au-ssl_log 207 evolution/portal.evolutionerp.com.au-ssl_log 177 corpkicks/corporatekicks.com.au-ssl_log 128 aaa/aaadownunder.com.au-ssl_log 117 corpkicks/corporatekicks.com.au 101 evolution/app.evolutionerp.com.au-ssl_log 95 madalice/madalice.com.au-ssl_log 2 vinesit/vinesit.com.au-ssl_log 1 (total vhosts taking traffic: 9) --- top client IPs across all vhosts (last 3 min) --- 256 203.54.180.238 217 129.146.188.65 175 195.178.110.103 164 136.108.48.232 95 40.115.94.245 70 180.181.236.49 26 103.104.165.99 13 1.144.107.82 11 147.161.213.98 7 118.127.40.55 5 74.179.70.83 5 147.161.213.110 5 1.145.70.156 3 150.228.243.144 3 122.172.83.187 --- top request paths across all vhosts (last 3 min) --- 120 POST /functions.php 68 GET /factory_session_checker.php 48 GET /api/getItem/LWFB2001KG 35 POST /app/ajax.php 35 GET /heartbeat.php 35 GET /factory_session_processed_qty.php 34 GET /factory_session_joiner.php 27 POST / 16 POST /wp/ 16 GET /index.php 14 POST /index.php 12 POST /wp/index.php 11 POST /app/ajax/selectFilter.php 10 GET / 9 GET /app/ajax.php 7 POST /wp-json/Batch/v1 7 POST /wp-json/batch/v1/ 7 POST /wp-json/batch/v1 7 POST //wp-json/batch/v1 7 POST /blog/wp-json/batch/v1 --- busiest 3 vhosts: top paths + last 10 requests --- == alison/alisonarts.com.au-ssl_log == -- top paths -- 27 POST / 14 POST /index.php 7 POST /wp-json/Batch/v1 7 POST /wp-json/batch/v1/ 7 POST /wp-json/batch/v1 7 POST //wp-json/batch/v1 7 POST /blog/wp-json/batch/v1 6 POST /wordpress/wp-json/batch/v1 3 GET / 2 GET /@fs/proc/self/environ 1 GET /wp-config.php.old 1 GET /wp-config.php.bak -- last 10 requests -- 195.178.110.103 - - [04/Sep/2026:12:50:01 +1000] "POST /wp-json/Batch/v1 HTTP/1.1" 404 3417 "https://cpanel.alisonarts.com.au/wp-admin/" "WordPress/6.4.3" 136.108.48.232 - - [04/Sep/2026:12:49:58 +1000] "GET /login HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.8632.37 Mobile Safari/537.36; compatible; Per 136.108.48.232 - - [04/Sep/2026:12:49:57 +1000] "GET /docker-compose.yml HTTP/1.1" 404 49417 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots)" 195.178.110.103 - - [04/Sep/2026:12:50:02 +1000] "POST //wp-json/batch/v1 HTTP/1.1" 404 3417 "https://cpanel.alisonarts.com.au/wp-admin/" "WordPress/6.4.3" 136.108.48.232 - - [04/Sep/2026:12:49:57 +1000] "GET /actuator/mappings HTTP/1.1" 404 49417 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.2379.243 Safari/537.36 Edg/13 195.178.110.103 - - [04/Sep/2026:12:50:02 +1000] "POST /wp-json/batch/v1/ HTTP/1.1" 404 3417 "https://cpanel.alisonarts.com.au/wp-admin/" "WordPress/6.4.3" 136.108.48.232 - - [04/Sep/2026:12:49:57 +1000] "GET /.hermes/config.yaml HTTP/1.1" 404 49417 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 136.108.48.232 - - [04/Sep/2026:12:49:57 +1000] "GET /.codex/config.toml HTTP/1.1" 404 49417 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 136.108.48.232 - - [04/Sep/2026:12:49:57 +1000] "GET /docker-compose.yaml HTTP/1.1" 404 49417 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 195.178.110.103 - - [04/Sep/2026:12:50:02 +1000] "POST /blog/wp-json/batch/v1 HTTP/1.1" 404 3417 "https://cpanel.alisonarts.com.au/wp-admin/" "WordPress/6.4.3" == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 120 POST /functions.php 35 POST /app/ajax.php 14 GET /index.php 11 POST /app/ajax/selectFilter.php 9 GET /app/ajax.php 4 POST /timesheets.php 4 POST /plugins/csvexporter/plugin.php 3 POST /inveditsave.php 2 POST //functions.php 2 GET / 1 POST /login.php 1 POST /login2save.php -- last 10 requests -- 203.54.180.238 - - [04/Sep/2026:12:49:54 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 203.54.180.238 - - [04/Sep/2026:12:49:54 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=report&file=invstckmovement&itemid=604" "Mozilla/5.0 (Windows NT 10.0; 203.54.180.238 - - [04/Sep/2026:12:49:54 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29491&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 180.181.236.49 - - [04/Sep/2026:12:49:55 +1000] "POST /app/ajax/selectFilter.php?call=filterproject&filter=soft&cursel=51100&curseltext=soft&fromMS=1&include=51100&returnobj=ts_add_jobSelect&isajax=1 HTTP/1.1" 200 800 "h 180.181.236.49 - - [04/Sep/2026:12:49:57 +1000] "POST /app/ajax.php?call=getTSLabourItems&caller=ajaxSubmitLocal HTTP/1.1" 200 56 "https://my.evolutionerp.com.au/index.php?page=timesheetHistory" "Mozilla/5.0 (Windows NT 1.144.107.82 - - [04/Sep/2026:12:50:00 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=14236&tab=filestab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 1.145.70.156 - - [04/Sep/2026:12:50:00 +1000] "GET /index.php?page=quotereg HTTP/1.1" 200 47050 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=37062§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 103.104.165.99 - - [04/Sep/2026:12:50:01 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=11290" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 1.145.70.156 - - [04/Sep/2026:12:50:01 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 1.145.70.156 - - [04/Sep/2026:12:50:02 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dquotereg&call=getUserSetting&caller=ajaxSubmitLocal&seq=17194302902 HTTP/1.1" 200 90 "https://my.evolutionerp.com.au/index.php?pag == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 68 GET /factory_session_checker.php 35 GET /heartbeat.php 35 GET /factory_session_processed_qty.php 34 GET /factory_session_joiner.php 2 GET /index.php 1 POST /factory_functions.php 1 GET /userlogin.php 1 GET / -- last 10 requests -- 203.54.180.238 - - [04/Sep/2026:12:49:51 +1000] "GET /factory_session_joiner.php?id=35136 HTTP/1.1" 200 79 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [04/Sep/2026:12:49:51 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [04/Sep/2026:12:49:51 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [04/Sep/2026:12:49:52 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [04/Sep/2026:12:49:52 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [04/Sep/2026:12:49:55 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [04/Sep/2026:12:49:54 +1000] "GET /heartbeat.php?sentAt=1788490194&bytes=106,154,49,210&_=1788485880146 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [04/Sep/2026:12:49:54 +1000] "GET /heartbeat.php?sentAt=1788490192&bytes=106,154,49,208&_=1788476749976 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [04/Sep/2026:12:49:57 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [04/Sep/2026:12:49:57 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 --- last 30 samples (run-up to this incident) --- 2026-09-04 12:47:41 L1=2.05 run=1 blk=0 avail=8033 (58.3%) swpO=0 conn=3 myRSS=3174 php=2 phpRSS=33 ap=34 tcp=38 topuser=root 2026-09-04 12:47:41 L1=2.05 run=2 blk=0 avail=8000 (58.1%) swpO=0 conn=3 myRSS=3174 php=3 phpRSS=97 ap=34 tcp=37 topuser=corpkicks 2026-09-04 12:47:51 L1=1.89 run=1 blk=0 avail=7668 (55.7%) swpO=0 conn=3 myRSS=3174 php=4 phpRSS=291 ap=60 tcp=49 topuser=madalice 2026-09-04 12:47:51 L1=1.89 run=2 blk=0 avail=7640 (55.5%) swpO=0 conn=3 myRSS=3174 php=5 phpRSS=351 ap=60 tcp=49 topuser=madalice 2026-09-04 12:48:01 L1=1.67 run=1 blk=0 avail=7736 (56.2%) swpO=0 conn=1 myRSS=3174 php=4 phpRSS=291 ap=50 tcp=42 topuser=madalice 2026-09-04 12:48:01 L1=1.67 run=3 blk=0 avail=7705 (55.9%) swpO=0 conn=3 myRSS=3174 php=5 phpRSS=353 ap=50 tcp=42 topuser=madalice 2026-09-04 12:48:11 L1=1.73 run=2 blk=0 avail=7780 (56.5%) swpO=0 conn=1 myRSS=3174 php=4 phpRSS=185 ap=40 tcp=43 topuser=madalice 2026-09-04 12:48:11 L1=1.73 run=1 blk=0 avail=7919 (57.5%) swpO=0 conn=1 myRSS=3174 php=3 phpRSS=157 ap=40 tcp=44 topuser=madalice 2026-09-04 12:48:21 L1=1.76 run=6 blk=0 avail=7834 (56.9%) swpO=0 conn=1 myRSS=3174 php=4 phpRSS=301 ap=34 tcp=57 topuser=corpkicks 2026-09-04 12:48:21 L1=1.76 run=2 blk=0 avail=7933 (57.6%) swpO=0 conn=1 myRSS=3174 php=3 phpRSS=157 ap=34 tcp=57 topuser=madalice 2026-09-04 12:48:31 L1=1.65 run=2 blk=0 avail=7833 (56.9%) swpO=0 conn=1 myRSS=3174 php=4 phpRSS=205 ap=46 tcp=55 topuser=madalice 2026-09-04 12:48:31 L1=1.65 run=2 blk=0 avail=7787 (56.5%) swpO=0 conn=1 myRSS=3174 php=4 phpRSS=248 ap=46 tcp=55 topuser=madalice 2026-09-04 12:48:41 L1=1.63 run=2 blk=0 avail=7780 (56.5%) swpO=0 conn=1 myRSS=3174 php=4 phpRSS=267 ap=45 tcp=34 topuser=madalice 2026-09-04 12:48:41 L1=1.63 run=2 blk=0 avail=7738 (56.2%) swpO=0 conn=1 myRSS=3174 php=4 phpRSS=307 ap=45 tcp=34 topuser=corpkicks 2026-09-04 12:48:51 L1=1.53 run=1 blk=0 avail=7905 (57.4%) swpO=0 conn=1 myRSS=3174 php=3 phpRSS=157 ap=39 tcp=56 topuser=madalice 2026-09-04 12:48:51 L1=1.53 run=3 blk=0 avail=7871 (57.1%) swpO=0 conn=1 myRSS=3174 php=4 phpRSS=222 ap=39 tcp=56 topuser=madalice 2026-09-04 12:49:01 L1=1.60 run=3 blk=0 avail=7869 (57.1%) swpO=0 conn=1 myRSS=3174 php=5 phpRSS=216 ap=46 tcp=43 topuser=madalice 2026-09-04 12:49:01 L1=1.47 run=3 blk=0 avail=7860 (57.1%) swpO=0 conn=1 myRSS=3174 php=4 phpRSS=200 ap=46 tcp=43 topuser=madalice 2026-09-04 12:49:11 L1=1.36 run=4 blk=0 avail=7651 (55.5%) swpO=0 conn=1 myRSS=3174 php=6 phpRSS=532 ap=38 tcp=38 topuser=alison 2026-09-04 12:49:11 L1=1.49 run=4 blk=0 avail=7574 (55.0%) swpO=0 conn=4 myRSS=3174 php=6 phpRSS=609 ap=38 tcp=37 topuser=alison 2026-09-04 12:49:21 L1=2.41 run=3 blk=0 avail=7634 (55.4%) swpO=0 conn=1 myRSS=3174 php=5 phpRSS=423 ap=48 tcp=62 topuser=madalice 2026-09-04 12:49:21 L1=2.30 run=3 blk=0 avail=7676 (55.7%) swpO=0 conn=4 myRSS=3174 php=5 phpRSS=379 ap=48 tcp=54 topuser=madalice 2026-09-04 12:49:31 L1=2.51 run=4 blk=0 avail=7471 (54.2%) swpO=2 conn=1 myRSS=3174 php=7 phpRSS=566 ap=60 tcp=59 topuser=madalice 2026-09-04 12:49:31 L1=2.95 run=7 blk=1 avail=7377 (53.5%) swpO=2 conn=4 myRSS=3174 php=10 phpRSS=735 ap=60 tcp=56 topuser=alison 2026-09-04 12:49:41 L1=3.75 run=9 blk=0 avail=7351 (53.4%) swpO=0 conn=1 myRSS=3174 php=7 phpRSS=506 ap=52 tcp=46 topuser=alison 2026-09-04 12:49:42 L1=3.75 run=4 blk=0 avail=7743 (56.2%) swpO=0 conn=4 myRSS=3174 php=4 phpRSS=250 ap=52 tcp=45 topuser=madalice 2026-09-04 12:49:51 L1=6.08 run=8 blk=0 avail=7325 (53.2%) swpO=101 conn=1 myRSS=3174 php=10 phpRSS=805 ap=62 tcp=56 topuser=corpkicks 2026-09-04 12:49:52 L1=6.08 run=10 blk=0 avail=7218 (52.4%) swpO=101 conn=4 myRSS=3174 php=9 phpRSS=882 ap=61 tcp=57 topuser=corpkicks 2026-09-04 12:50:01 L1=8.18 run=32 blk=2 avail=5649 (41.0%) swpO=853 conn=23 myRSS=3163 php=31 phpRSS=3018 ap=70 tcp=82 topuser=alison 2026-09-04 12:50:02 L1=8.18 run=33 blk=0 avail=5612 (40.7%) swpO=853 conn=19 myRSS=3163 php=30 phpRSS=3006 ap=70 tcp=76 topuser=alison