INCIDENT 2026-09-04 13:58:13 trigger: php_rss=1861MB ================================================================== load: 2.99 1.78 1.69 12/741 1023246 ncpu:10 mem_avail: 6469MB/13777MB (47.0%) swap_used:1776MB swapout:1374/s blocked(D):0 running:13 iowait:0.8% steal:0.0% php: 15 procs / 1861MB heaviest user: customc (7 procs, 1123MB) apache: 62 procs tcp_estab: 91 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3170 nobody 61 995 root 260 972 customc 5 773 madalice 3 441 netdata 8 253 evolution 14 210 alison 6 207 cpanellogin 1 113 dovenull 6 66 wp-toolkit 3 61 dovecot 3 28 mailman 20 26 kurri 1 14 zabbix 1 10 mailnull 2 8 polkitd 1 7 named 1 5 nscd 1 4 dbus 1 2 --- php workers by user --- USER PROCS RSS_MB customc 4 693 madalice 3 441 evolution 3 148 root 1 33 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4362 MB Active(file): 3733 MB Inactive(file): 822 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 534 MB CommitLimit: 10984 MB Committed_AS: 8682 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 3-11:35:46 4260 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3246812 14.4 Ssl 1-23:44:01 /usr/sbin/mariadbd 1023193 1023185 customc 188520 49.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1542443 1 netdata 187900 2.6 Ssl 1-11:35:51 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1023200 1022876 customc 186300 89.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1023190 1022838 customc 182224 47.0 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2654375 2603077 root 180524 0.1 S 11:19:06 spamd child 1022026 2601907 madalice 162448 7.7 S 01:03 php-fpm: pool madalice_com_au 1020773 2601907 madalice 161856 12.2 S 02:19 php-fpm: pool madalice_com_au 2603077 1 root 138460 0.0 Ss 11:34:02 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1022935 2601907 madalice 127408 6.3 S 00:18 php-fpm: pool madalice_com_au 552527 1353308 cpanellogin 115900 0.0 S 01:59:49 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 2654376 2603077 root 110440 0.0 S 11:19:06 spamd child 509266 1 root 104340 0.0 Ss 7-11:38:32 /usr/lib/systemd/systemd-journald 1023146 1022593 evolution 58156 1.8 S 00:05 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1023152 1023151 evolution 42428 3.0 Sl 00:04 /usr/local/bin/wkhtmltopdf --enable-local-file-access --encoding utf-8 --title QUOTATION --header-html /home/evolution/my.evolutionerp. 509236 509098 root 41956 0.0 Sl 7-11:38:32 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1469 1 root 41916 0.1 Ss 67-03:48:27 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1353308 1 root 41504 0.1 Ss 44-11:16:58 cpsrvd (SSL) - waiting for connections 1542981 1542551 netdata 40900 0.1 Sl 1-11:35:47 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1023251 1469 root 39024 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542487 1 wp-toolkit 34288 0.0 Ss 1-11:35:51 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2601907 1 root 34060 0.0 Ss 11:34:47 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 2602226 1 root 27540 0.1 Ssl 11:34:32 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 1023195 1023186 customc 25320 49.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1463 1 root 24668 0.0 Ss 67-03:48:27 tailwatchd 1003996 506832 nobody 24624 0.1 S 05:06 /usr/sbin/httpd -k start 1021039 506832 nobody 22560 0.1 S 02:03 /usr/sbin/httpd -k start 1542531 1 wp-toolkit 22228 0.0 Ss 1-11:35:50 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1005077 506832 nobody 21504 0.0 S 03:54 /usr/sbin/httpd -k start 1021735 506832 nobody 21372 0.1 S 01:23 /usr/sbin/httpd -k start 1021857 506832 nobody 21176 0.0 S 01:13 /usr/sbin/httpd -k start 1021836 506832 nobody 21164 0.0 S 01:16 /usr/sbin/httpd -k start 1001949 506832 nobody 20976 0.0 S 06:58 /usr/sbin/httpd -k start 1021054 506832 nobody 20872 0.0 S 02:02 /usr/sbin/httpd -k start 1021702 506832 nobody 20656 0.0 S 01:27 /usr/sbin/httpd -k start 1020327 506832 nobody 20556 0.0 S 02:49 /usr/sbin/httpd -k start 1022806 506832 nobody 19884 0.0 S 00:23 /usr/sbin/httpd -k start 1022007 506832 nobody 19848 0.2 S 01:06 /usr/sbin/httpd -k start 1022839 506832 nobody 19528 0.1 S 00:22 /usr/sbin/httpd -k start 1022876 506832 nobody 19248 0.0 S 00:21 /usr/sbin/httpd -k start 1021052 506832 nobody 19144 0.0 S 02:02 /usr/sbin/httpd -k start 1022420 506832 nobody 18888 0.0 S 00:44 /usr/sbin/httpd -k start 1022837 506832 nobody 18780 0.0 S 00:22 /usr/sbin/httpd -k start 1022593 506832 nobody 18760 0.0 S 00:35 /usr/sbin/httpd -k start 1022835 506832 nobody 18728 0.0 S 00:22 /usr/sbin/httpd -k start 1022318 506832 nobody 18704 0.0 S 00:48 /usr/sbin/httpd -k start 1022497 506832 nobody 18616 0.1 S 00:40 /usr/sbin/httpd -k start 1022875 506832 nobody 18508 0.0 S 00:21 /usr/sbin/httpd -k start 1022807 506832 nobody 18332 0.0 S 00:23 /usr/sbin/httpd -k start 1022808 506832 nobody 18292 0.0 S 00:23 /usr/sbin/httpd -k start 1022432 506832 nobody 18208 0.0 S 00:43 /usr/sbin/httpd -k start 1022865 506832 nobody 18136 0.0 S 00:21 /usr/sbin/httpd -k start 1022832 506832 nobody 18124 0.0 S 00:22 /usr/sbin/httpd -k start 1022862 506832 nobody 18060 0.0 S 00:21 /usr/sbin/httpd -k start 1542982 1542551 netdata 18056 2.1 Sl 1-11:35:47 /usr/libexec/netdata/plugins.d/apps.plugin 1 1022421 506832 nobody 17968 0.0 S 00:44 /usr/sbin/httpd -k start 1022833 506832 nobody 17932 0.0 S 00:22 /usr/sbin/httpd -k start 1022791 506832 nobody 17860 0.0 S 00:24 /usr/sbin/httpd -k start 1022838 506832 nobody 17840 0.0 S 00:22 /usr/sbin/httpd -k start 1022871 506832 nobody 17788 0.0 S 00:21 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 9866382 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min nrg/nrgservices.net.au-ssl_log 245 evolution/my.evolutionerp.com.au-ssl_log 220 aaa/aaadownunder.com.au-ssl_log 217 alison/alisonarts.com.au-ssl_log 158 evolution/portal.evolutionerp.com.au-ssl_log 137 evolution/app.evolutionerp.com.au-ssl_log 98 whiz/whizengineering.com.au-ssl_log 20 madalice/madalice.com.au-ssl_log 15 customc/customcentral.com.au-ssl_log 8 (total vhosts taking traffic: 9) --- top client IPs across all vhosts (last 3 min) --- 374 195.178.110.103 270 203.54.180.238 245 8.229.213.122 98 40.115.94.245 30 103.104.164.114 25 34.12.85.131 12 101.182.108.127 5 103.104.165.99 4 40.77.167.32 4 118.127.40.55 4 1.145.70.156 4 1.144.107.82 4 114.119.130.40 3 52.72.157.105 3 203.123.106.115 --- top request paths across all vhosts (last 3 min) --- 107 POST /functions.php 98 GET /api/getItem/LWFBW2001KG 47 GET /heartbeat.php 41 POST / 32 GET /factory_session_checker.php 26 GET /app/ajax.php 22 GET / 21 POST /wp/ 21 POST /wordpress/ 18 POST /app/ajax/selectFilter.php 17 GET /index.php 17 GET /factory_session_processed_qty.php 16 GET /factory_session_joiner.php 14 POST /wp/index.php 14 POST /wordpress/wp-json/batch/v1 14 POST /wordpress/index.php 14 POST /index.php 11 POST /api/auth/signin 10 POST /itemModify.php 9 POST /wp-json/batch/v1 --- busiest 3 vhosts: top paths + last 10 requests --- == nrg/nrgservices.net.au-ssl_log == -- top paths -- 3 GET / 2 GET /@fs/proc/self/environ 1 GET /.zsh_history 1 GET /wp-config.php.old 1 GET /wp-config.php.bak 1 GET /wp-config.php 1 GET /web/.env 1 GET /web.config 1 GET /@vite/env 1 GET /values.yaml 1 GET /v2/.env 1 GET /v1/graphql -- last 10 requests -- 8.229.213.122 - - [04/Sep/2026:13:57:51 +1000] "GET /configuration.php.bak HTTP/1.1" 404 3417 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 8.229.213.122 - - [04/Sep/2026:13:57:51 +1000] "GET /bootstrap.properties HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +Claude-User@anthropic.com)" 8.229.213.122 - - [04/Sep/2026:13:57:51 +1000] "GET /api/v2/settings HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +ht 8.229.213.122 - - [04/Sep/2026:13:57:51 +1000] "GET /values.yaml HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 8.229.213.122 - - [04/Sep/2026:13:57:51 +1000] "GET /_debugbar/open HTTP/1.1" 404 3417 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 8.229.213.122 - - [04/Sep/2026:13:57:51 +1000] "GET /__debug__/ HTTP/1.1" 404 3417 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing 8.229.213.122 - - [04/Sep/2026:13:57:51 +1000] "GET /_ignition/health-check HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6545.213 Safari/537.3 8.229.213.122 - - [04/Sep/2026:13:57:51 +1000] "GET /api/v2/config HTTP/1.1" 404 3417 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 8.229.213.122 - - [04/Sep/2026:13:57:51 +1000] "GET /telescope/requests HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Slackbot-LinkExpanding/1.0; +ht 8.229.213.122 - - [04/Sep/2026:13:57:55 +1000] "GET /.aider.conf.yml HTTP/1.1" 404 3417 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://www.linkedin.com)" == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 107 POST /functions.php 26 GET /app/ajax.php 18 POST /app/ajax/selectFilter.php 16 GET /index.php 10 POST /itemModify.php 9 POST /plugins/csvexporter/plugin.php 8 POST /quoteditsave.php 5 POST /app/ajax/selectFilterSingle.php 4 POST /clienteditsave.php 4 POST /app/ajax.php 3 POST /purchaseaddsave.php 2 POST /invoiceaddsave.php -- last 10 requests -- 203.54.180.238 - - [04/Sep/2026:13:57:58 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=activities&date=11-09-2026" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 203.54.180.238 - - [04/Sep/2026:13:57:58 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dactivities%26date%3D11-09-2026&call=getUserSetting&caller=ajaxSubmitLocal&seq=11257046883 HTTP/1.1" 200 108 "https://my.evolutio 103.104.164.114 - - [04/Sep/2026:13:57:58 +1000] "POST /invoiceaddsave.php?id=240&call=getClient HTTP/1.1" 200 1021 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&tab=maintab" "Mozilla/5.0 (Windows NT 10.0; Wi 203.54.180.238 - - [04/Sep/2026:13:57:59 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 238 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 203.54.180.238 - - [04/Sep/2026:13:57:59 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=activities&date=11-09-2026" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 103.104.164.114 - - [04/Sep/2026:13:58:00 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&tab=maintab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) App 203.54.180.238 - - [04/Sep/2026:13:58:02 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=14211" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 203.54.180.238 - - [04/Sep/2026:13:58:03 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=activities&date=11-09-2026&company=jbl" "Mozilla/5.0 (Windows NT 10.0; 203.54.180.238 - - [04/Sep/2026:13:58:05 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=invedit&id=3980&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x 203.54.180.238 - - [04/Sep/2026:13:58:05 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79136§ionid=9842" "Mozilla/5.0 (Windows NT 10.0; W == aaa/aaadownunder.com.au-ssl_log == -- top paths -- 21 POST /wp/ 21 POST /wordpress/ 14 POST /wp/index.php 14 POST /wordpress/index.php 9 GET /wp/ 8 POST /auth/callback 7 POST /wp/wp-json/Batch/v1 7 POST /wp/wp-json/batch/v1/ 7 POST /wp/wp-json/batch/v1 7 POST /wp//wp-json/batch/v1 7 POST /wp/wordpress/wp-json/batch/v1 7 POST /wp/blog/wp-json/batch/v1 -- last 10 requests -- 195.178.110.103 - - [04/Sep/2026:13:58:07 +1000] "POST /wordpress/index.php?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 401 53 "https://cpcalendars.aaadownunder.com.au/wordpress/wp-admin/" "WordPress/6.4.3" 195.178.110.103 - - [04/Sep/2026:13:58:07 +1000] "POST /wordpress/?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 401 53 "https://cpcalendars.aaadownunder.com.au/wordpress/wp-admin/" "WordPress/6.4.3" 195.178.110.103 - - [04/Sep/2026:13:58:07 +1000] "POST /wordpress/?rest_route=/batch%2Fv1 HTTP/1.1" 401 53 "https://cpcalendars.aaadownunder.com.au/wordpress/wp-admin/" "WordPress/6.4.3" 195.178.110.103 - - [04/Sep/2026:13:58:08 +1000] "POST /wordpress/?rest_route=/batch/v1 HTTP/1.1" 401 53 "https://cpcalendars.aaadownunder.com.au/wordpress/wp-admin/" "WordPress/6.4.3" 195.178.110.103 - - [04/Sep/2026:13:58:08 +1000] "POST /wordpress/wp-json/batch/v1 HTTP/1.1" 401 53 "https://cpcalendars.aaadownunder.com.au/wordpress/wp-admin/" "WordPress/6.4.3" 195.178.110.103 - - [04/Sep/2026:13:58:08 +1000] "POST /wordpress/wp-json/Batch/v1 HTTP/1.1" 401 53 "https://cpcalendars.aaadownunder.com.au/wordpress/wp-admin/" "WordPress/6.4.3" 195.178.110.103 - - [04/Sep/2026:13:58:09 +1000] "POST /wordpress//wp-json/batch/v1 HTTP/1.1" 401 53 "https://cpcalendars.aaadownunder.com.au/wordpress/wp-admin/" "WordPress/6.4.3" 195.178.110.103 - - [04/Sep/2026:13:58:09 +1000] "POST /wordpress/wp-json/batch/v1/ HTTP/1.1" 401 53 "https://cpcalendars.aaadownunder.com.au/wordpress/wp-admin/" "WordPress/6.4.3" 195.178.110.103 - - [04/Sep/2026:13:58:09 +1000] "POST /wordpress/blog/wp-json/batch/v1 HTTP/1.1" 401 53 "https://cpcalendars.aaadownunder.com.au/wordpress/wp-admin/" "WordPress/6.4.3" 195.178.110.103 - - [04/Sep/2026:13:58:10 +1000] "POST /wordpress/wordpress/wp-json/batch/v1 HTTP/1.1" 401 53 "https://cpcalendars.aaadownunder.com.au/wordpress/wp-admin/" "WordPress/6.4.3" --- last 30 samples (run-up to this incident) --- 2026-09-04 13:55:45 L1=1.50 run=2 blk=0 avail=7640 (55.5%) swpO=0 conn=5 myRSS=3198 php=7 phpRSS=489 ap=33 tcp=44 topuser=madalice 2026-09-04 13:55:52 L1=1.66 run=3 blk=0 avail=7656 (55.6%) swpO=0 conn=1 myRSS=3198 php=5 phpRSS=402 ap=34 tcp=50 topuser=tubesupplies 2026-09-04 13:55:55 L1=1.66 run=4 blk=0 avail=7098 (51.5%) swpO=0 conn=5 myRSS=3198 php=9 phpRSS=1041 ap=37 tcp=52 topuser=madalice 2026-09-04 13:56:02 L1=1.48 run=3 blk=0 avail=7534 (54.7%) swpO=3 conn=1 myRSS=3198 php=6 phpRSS=544 ap=35 tcp=41 topuser=madalice 2026-09-04 13:56:05 L1=1.48 run=2 blk=0 avail=7591 (55.1%) swpO=3 conn=5 myRSS=3198 php=8 phpRSS=569 ap=32 tcp=39 topuser=madalice 2026-09-04 13:56:12 L1=1.33 run=4 blk=0 avail=7554 (54.8%) swpO=0 conn=1 myRSS=3198 php=7 phpRSS=542 ap=38 tcp=45 topuser=madalice 2026-09-04 13:56:15 L1=1.33 run=1 blk=0 avail=7547 (54.8%) swpO=0 conn=5 myRSS=3198 php=7 phpRSS=531 ap=38 tcp=44 topuser=madalice 2026-09-04 13:56:22 L1=1.21 run=2 blk=0 avail=7760 (56.3%) swpO=0 conn=1 myRSS=3198 php=3 phpRSS=259 ap=35 tcp=42 topuser=madalice 2026-09-04 13:56:25 L1=1.21 run=2 blk=0 avail=7799 (56.6%) swpO=0 conn=2 myRSS=3198 php=4 phpRSS=228 ap=36 tcp=50 topuser=madalice 2026-09-04 13:56:32 L1=1.10 run=2 blk=0 avail=7836 (56.9%) swpO=0 conn=1 myRSS=3198 php=3 phpRSS=188 ap=35 tcp=37 topuser=madalice 2026-09-04 13:56:35 L1=1.10 run=1 blk=0 avail=7842 (56.9%) swpO=0 conn=2 myRSS=3198 php=3 phpRSS=188 ap=33 tcp=70 topuser=madalice 2026-09-04 13:56:43 L1=1.01 run=2 blk=0 avail=7851 (57.0%) swpO=0 conn=1 myRSS=3198 php=3 phpRSS=190 ap=32 tcp=39 topuser=madalice 2026-09-04 13:56:45 L1=1.01 run=1 blk=0 avail=7860 (57.1%) swpO=0 conn=2 myRSS=3198 php=3 phpRSS=189 ap=32 tcp=66 topuser=madalice 2026-09-04 13:56:53 L1=0.86 run=1 blk=0 avail=7872 (57.1%) swpO=0 conn=1 myRSS=3198 php=3 phpRSS=189 ap=33 tcp=35 topuser=madalice 2026-09-04 13:56:55 L1=0.86 run=2 blk=0 avail=7876 (57.2%) swpO=0 conn=2 myRSS=3198 php=4 phpRSS=229 ap=31 tcp=69 topuser=madalice 2026-09-04 13:57:03 L1=1.03 run=4 blk=0 avail=7801 (56.6%) swpO=0 conn=1 myRSS=3198 php=4 phpRSS=283 ap=34 tcp=43 topuser=madalice 2026-09-04 13:57:05 L1=1.03 run=3 blk=1 avail=7661 (55.6%) swpO=0 conn=2 myRSS=3198 php=4 phpRSS=393 ap=32 tcp=74 topuser=corpkicks 2026-09-04 13:57:13 L1=0.95 run=1 blk=0 avail=7754 (56.3%) swpO=0 conn=1 myRSS=3198 php=4 phpRSS=312 ap=33 tcp=36 topuser=madalice 2026-09-04 13:57:16 L1=0.95 run=2 blk=0 avail=7768 (56.4%) swpO=0 conn=2 myRSS=3198 php=4 phpRSS=312 ap=31 tcp=38 topuser=madalice 2026-09-04 13:57:23 L1=1.12 run=14 blk=0 avail=7739 (56.2%) swpO=0 conn=1 myRSS=3198 php=7 phpRSS=422 ap=31 tcp=45 topuser=madalice 2026-09-04 13:57:26 L1=1.12 run=2 blk=0 avail=7740 (56.2%) swpO=0 conn=1 myRSS=3198 php=5 phpRSS=369 ap=32 tcp=45 topuser=madalice 2026-09-04 13:57:33 L1=1.17 run=5 blk=0 avail=7679 (55.7%) swpO=0 conn=2 myRSS=3198 php=4 phpRSS=346 ap=40 tcp=55 topuser=madalice 2026-09-04 13:57:36 L1=1.17 run=1 blk=0 avail=7700 (55.9%) swpO=0 conn=1 myRSS=3198 php=4 phpRSS=345 ap=39 tcp=37 topuser=madalice 2026-09-04 13:57:43 L1=1.07 run=2 blk=0 avail=7532 (54.7%) swpO=0 conn=2 myRSS=3198 php=6 phpRSS=569 ap=37 tcp=44 topuser=madalice 2026-09-04 13:57:46 L1=1.07 run=1 blk=0 avail=7617 (55.3%) swpO=0 conn=1 myRSS=3198 php=5 phpRSS=467 ap=36 tcp=39 topuser=madalice 2026-09-04 13:57:53 L1=0.98 run=6 blk=0 avail=7081 (51.4%) swpO=0 conn=2 myRSS=3198 php=9 phpRSS=936 ap=64 tcp=53 topuser=customc 2026-09-04 13:57:56 L1=0.98 run=3 blk=0 avail=7317 (53.1%) swpO=0 conn=1 myRSS=3198 php=6 phpRSS=605 ap=62 tcp=61 topuser=madalice 2026-09-04 13:58:03 L1=0.98 run=1 blk=0 avail=7467 (54.2%) swpO=0 conn=2 myRSS=3198 php=5 phpRSS=474 ap=55 tcp=36 topuser=madalice 2026-09-04 13:58:06 L1=0.98 run=2 blk=0 avail=7417 (53.8%) swpO=0 conn=1 myRSS=3198 php=6 phpRSS=576 ap=52 tcp=38 topuser=madalice 2026-09-04 13:58:13 L1=2.99 run=13 blk=0 avail=6469 (47.0%) swpO=1374 conn=9 myRSS=3170 php=15 phpRSS=1861 ap=62 tcp=91 topuser=customc