INCIDENT 2026-09-06 14:45:52 trigger: php_procs=33 php_rss=2555MB mysql_conn=26 ================================================================== load: 4.10 2.50 2.07 42/699 2714571 ncpu:10 mem_avail: 8254MB/13777MB (59.9%) swap_used:2216MB swapout:199/s blocked(D):1 running:31 iowait:4.9% steal:0.0% php: 33 procs / 2555MB heaviest user: alison (25 procs, 2219MB) apache: 74 procs tcp_estab: 80 --- RSS by user (all processes) --- USER PROCS RSS_MB alison 26 2442 mysql 1 1204 nobody 73 1200 root 248 740 netdata 8 244 mailman 20 140 madalice 1 135 customc 1 99 aaa 1 95 wp-toolkit 3 60 dovenull 6 53 mailnull 3 39 dovecot 3 21 named 1 16 cpanellogin 1 13 zabbix 1 11 evolution 11 11 polkitd 1 9 kurri 1 9 nscd 1 4 --- php workers by user --- USER PROCS RSS_MB alison 26 2498 madalice 1 135 customc 1 100 root 1 23 aaa 1 22 evolution 3 0 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 8564 MB Active(file): 3737 MB Inactive(file): 3828 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 568 MB CommitLimit: 10984 MB Committed_AS: 13068 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 5-12:23:27 5792 /usr/bin/imunify-agent-proxy 4109079 root 1-10:01:05 1716 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 1-10:01:05 47004 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress / --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2987918 1 mysql 1231804 2.8 Ssl 19:09:22 /usr/sbin/mariadbd 166870 1 netdata 185908 2.6 Ssl 12:23:33 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 220206 168913 root 179524 0.0 S 12:07:35 spamd child 2714477 2714447 alison 156660 42.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714479 2714057 alison 153200 40.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714459 2714449 alison 151712 44.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714502 2699621 alison 140928 106 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714211 167896 madalice 138964 6.2 S 00:21 php-fpm: pool madalice_com_au 2714491 2714466 alison 138472 55.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714480 2714134 alison 135100 33.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714481 2714444 alison 133212 36.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714490 2714467 alison 126884 47.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714484 2714136 alison 125988 45.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714489 2714463 alison 119092 45.5 S 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714511 2714475 alison 116316 79.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714504 2712122 customc 115964 43.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2714494 2699611 alison 111508 38.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714493 2714476 alison 107892 38.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714496 2713810 alison 104668 33.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714500 2714071 alison 103620 33.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714501 2697664 alison 100704 62.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 168913 1 root 95316 0.0 Ss 12:22:23 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2714503 2714464 alison 83848 47.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714505 2714465 alison 79892 50.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714510 2714470 alison 79808 50.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714507 2714469 alison 78404 42.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 220207 168913 root 75796 0.0 S 12:07:35 spamd child 2714514 2714434 alison 72764 33.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714512 2714471 alison 71308 31.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714513 2714462 alison 69848 28.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714509 2714468 alison 67868 26.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714515 2714076 alison 63288 20.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2714564 2713815 alison 59676 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4109105 4109079 root 47004 1.6 Sl 1-10:01:05 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 1353308 1 root 42140 0.1 Ss 46-12:04:39 cpsrvd (SSL) - waiting for connections 1469 1 root 41932 0.1 Ss 69-04:36:08 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 167562 166914 netdata 37480 0.1 Sl 12:23:28 /usr/libexec/netdata/plugins.d/go.d.plugin 1 509236 509098 root 34580 0.0 Sl 9-12:26:13 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 166645 1 wp-toolkit 32296 0.0 Ss 12:23:37 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1463 1 root 24196 0.0 Ss 69-04:36:08 tailwatchd 167896 1 root 23968 0.0 Ss 12:23:25 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 167845 1 wp-toolkit 23688 0.0 Ss 12:23:26 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 2681370 506832 nobody 22676 0.0 S 07:31 /usr/sbin/httpd -k start 2697664 506832 nobody 21564 0.0 S 04:11 /usr/sbin/httpd -k start 2714137 506832 nobody 20248 0.1 S 00:30 /usr/sbin/httpd -k start 2698381 506832 nobody 20132 0.0 S 03:05 /usr/sbin/httpd -k start 2699225 506832 nobody 19748 0.0 S 01:39 /usr/sbin/httpd -k start 2698382 506832 nobody 19644 0.0 S 03:05 /usr/sbin/httpd -k start 2714140 506832 nobody 19424 0.1 S 00:30 /usr/sbin/httpd -k start 2714074 506832 nobody 19276 0.0 S 00:31 /usr/sbin/httpd -k start 2699611 506832 nobody 19188 0.0 S 00:53 /usr/sbin/httpd -k start 2714148 506832 nobody 18976 0.0 S 00:30 /usr/sbin/httpd -k start 2714072 506832 nobody 18956 0.0 S 00:31 /usr/sbin/httpd -k start 2699612 506832 nobody 18400 0.0 S 00:53 /usr/sbin/httpd -k start 2699622 506832 nobody 18288 0.0 S 00:52 /usr/sbin/httpd -k start 2714077 506832 nobody 17944 0.0 S 00:31 /usr/sbin/httpd -k start 2712122 506832 nobody 17924 0.0 S 00:41 /usr/sbin/httpd -k start 2714144 506832 nobody 17864 0.1 S 00:30 /usr/sbin/httpd -k start 2713805 506832 nobody 17852 0.0 S 00:40 /usr/sbin/httpd -k start 2714076 506832 nobody 17852 0.1 S 00:31 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+-----------------+-----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+-----------------+-----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 528392 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 528370 | alison_wp_jihlc | alison_wp_z9crm | Query | 0 | starting | SELECT option_value FROM zNZUUL_options WHERE option_name = 'wpforms_square_connections' LIMIT 1 | +--------+-----------------+-----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min alison/alisonarts.com.au-ssl_log 119 customc/customcentral.com.au-ssl_log 117 evolution/app.evolutionerp.com.au-ssl_log 79 aaa/aaadownunder.com.au-ssl_log 5 madalice/madalice.com.au-ssl_log 4 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 113 161.33.202.176 96 145.241.125.52 79 40.115.94.245 43 118.127.40.55 2 114.119.150.154 2 114.119.145.175 2 114.119.143.14 2 109.236.48.208 1 91.245.74.31 1 18.218.118.203 1 114.119.159.70 1 114.119.131.88 1 103.185.74.134 --- top request paths across all vhosts (last 3 min) --- 136 GET /wp-admin/index.php 70 POST /wp-login.php 35 POST / 8 POST /wp-cron.php 4 GET /wp-login.php 3 GET /store/harley-davidson-hand-painted-vans-sz11/ 2 GET /api/getItem/IPC2525 2 GET /api/getItem/GEB12-DL 2 GET / 1 GET /wp-json/wp/v2/users/me 1 GET /store/hand-painted-vans-slip-on-shoes-joker/ 1 GET /custom-painted-miners-self-rescuer-artefact/ 1 GET /custom-painted-miners-self-rescuer-artefact 1 GET /custom-painted-harness-racing-trotting-helmet/ 1 GET /custom-painted-harness-racing-trotting-helmet 1 GET /api/getItem/SPHDG15040 1 GET /api/getItem/SGC-100 1 GET /api/getItem/S6 1 GET /api/getItem/S5 1 GET /api/getItem/RGW90 --- busiest 3 vhosts: top paths + last 10 requests --- == alison/alisonarts.com.au-ssl_log == -- top paths -- 62 GET /wp-admin/index.php 32 POST /wp-login.php 23 POST / 2 GET /wp-login.php 1 GET /custom-painted-miners-self-rescuer-artefact/ 1 GET /custom-painted-miners-self-rescuer-artefact 1 GET /custom-painted-harness-racing-trotting-helmet/ 1 GET /custom-painted-harness-racing-trotting-helmet -- last 10 requests -- 145.241.125.52 - - [06/Sep/2026:14:45:38 +1000] "GET /wp-login.php?redirect_to=https%3A%2F%2Falisonarts.com.au%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 7427 "https://alisonarts.com.au/wp-login.php" "Mozilla/5.0 (X11 145.241.125.52 - - [06/Sep/2026:14:45:40 +1000] "GET /wp-admin/index.php HTTP/1.1" 302 - "https://alisonarts.com.au/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:92.0) Gecko/20100101 Firefox/92.0" 145.241.125.52 - - [06/Sep/2026:14:45:41 +1000] "GET /wp-login.php?redirect_to=https%3A%2F%2Falisonarts.com.au%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 7427 "https://alisonarts.com.au/wp-login.php" "Mozilla/5.0 (X11 145.241.125.52 - - [06/Sep/2026:14:45:43 +1000] "POST /wp-login.php HTTP/1.1" 503 18946 "https://alisonarts.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chr 145.241.125.52 - - [06/Sep/2026:14:45:46 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 18946 "https://alisonarts.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gec 145.241.125.52 - - [06/Sep/2026:14:45:48 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 18946 "https://alisonarts.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gec 145.241.125.52 - - [06/Sep/2026:14:45:50 +1000] "POST /wp-login.php HTTP/1.1" 503 18033 "https://alisonarts.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90 118.127.40.55 - - [06/Sep/2026:14:45:51 +1000] "POST /?wordfence_syncAttackData=1788669950.9769 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://alisonarts.com.au" 118.127.40.55 - - [06/Sep/2026:14:45:51 +1000] "POST /?wordfence_syncAttackData=1788669950.9266 HTTP/1.1" 200 13725 "-" "WordPress/7.1; https://alisonarts.com.au" 118.127.40.55 - - [06/Sep/2026:14:45:51 +1000] "POST /?wordfence_syncAttackData=1788669950.9994 HTTP/1.1" 200 13725 "-" "WordPress/7.1; https://alisonarts.com.au" == customc/customcentral.com.au-ssl_log == -- top paths -- 74 GET /wp-admin/index.php 37 POST /wp-login.php 12 POST / 7 POST /wp-cron.php 1 GET /wp-login.php 1 GET /wp-json/wp/v2/users/me 1 GET / -- last 10 requests -- 161.33.202.176 - - [06/Sep/2026:14:45:42 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 18949 "https://customcentral.com.au/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0 118.127.40.55 - - [06/Sep/2026:14:45:42 +1000] "POST /?wordfence_syncAttackData=1788669942.7791 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://customcentral.com.au" 118.127.40.55 - - [06/Sep/2026:14:45:43 +1000] "POST /wp-cron.php?doing_wp_cron=1788669943.4833259582519531250000 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://customcentral.com.au" 161.33.202.176 - - [06/Sep/2026:14:45:44 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 18949 "https://customcentral.com.au/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0 161.33.202.176 - - [06/Sep/2026:14:45:45 +1000] "POST /wp-login.php HTTP/1.1" 503 18036 "https://customcentral.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) 161.33.202.176 - - [06/Sep/2026:14:45:46 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 18949 "https://customcentral.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Ge 161.33.202.176 - - [06/Sep/2026:14:45:47 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 18949 "https://customcentral.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Ge 161.33.202.176 - - [06/Sep/2026:14:45:48 +1000] "POST /wp-login.php HTTP/1.1" 503 18036 "https://customcentral.com.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko 161.33.202.176 - - [06/Sep/2026:14:45:50 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 18949 "https://customcentral.com.au/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0 161.33.202.176 - - [06/Sep/2026:14:45:51 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 18949 "https://customcentral.com.au/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0 == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 2 GET /api/getItem/IPC2525 2 GET /api/getItem/GEB12-DL 1 GET /api/getItem/SPHDG15040 1 GET /api/getItem/SGC-100 1 GET /api/getItem/S6 1 GET /api/getItem/S5 1 GET /api/getItem/RGW90 1 GET /api/getItem/RGW80 1 GET /api/getItem/RGW160 1 GET /api/getItem/RGW120 1 GET /api/getItem/RGW117T 1 GET /api/getItem/RGW100 -- last 10 requests -- 40.115.94.245 - - [06/Sep/2026:14:44:11 +1000] "GET /api/getItem/IPC32NB HTTP/1.1" 200 1491 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:14:44:12 +1000] "GET /api/getItem/IPC3825 HTTP/1.1" 200 1467 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:14:44:12 +1000] "GET /api/getItem/IPC4040-1 HTTP/1.1" 404 111 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:14:44:12 +1000] "GET /api/getItem/IPC40NB HTTP/1.1" 200 1342 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:14:44:13 +1000] "GET /api/getItem/IPC5050 HTTP/1.1" 200 1740 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:14:44:13 +1000] "GET /api/getItem/IPC50NB HTTP/1.1" 200 1498 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:14:44:14 +1000] "GET /api/getItem/IPC6516 HTTP/1.1" 200 1480 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:14:44:14 +1000] "GET /api/getItem/IPC6565 HTTP/1.1" 200 1469 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:14:44:14 +1000] "GET /api/getItem/IPC7550 HTTP/1.1" 200 1321 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:14:44:15 +1000] "GET /api/getItem/IPC7575 HTTP/1.1" 200 1473 "-" "RestSharp/106.13.0.0" --- last 30 samples (run-up to this incident) --- 2026-09-06 14:43:31 L1=2.03 run=2 blk=1 avail=10126(73.5%) swpO=0 conn=1 myRSS=1211 php=7 phpRSS=366 ap=15 tcp=26 topuser=alison 2026-09-06 14:43:31 L1=2.03 run=3 blk=1 avail=10123(73.5%) swpO=0 conn=3 myRSS=1211 php=7 phpRSS=367 ap=15 tcp=26 topuser=alison 2026-09-06 14:43:41 L1=1.95 run=3 blk=1 avail=10328(75.0%) swpO=0 conn=2 myRSS=1211 php=6 phpRSS=145 ap=14 tcp=28 topuser=alison 2026-09-06 14:43:41 L1=1.95 run=4 blk=1 avail=10311(74.8%) swpO=0 conn=3 myRSS=1211 php=6 phpRSS=160 ap=14 tcp=29 topuser=alison 2026-09-06 14:43:51 L1=1.96 run=3 blk=1 avail=10233(74.3%) swpO=0 conn=2 myRSS=1211 php=6 phpRSS=230 ap=15 tcp=27 topuser=madalice 2026-09-06 14:43:51 L1=1.96 run=3 blk=1 avail=10230(74.3%) swpO=0 conn=3 myRSS=1211 php=6 phpRSS=232 ap=15 tcp=27 topuser=madalice 2026-09-06 14:44:01 L1=1.97 run=1 blk=1 avail=10266(74.5%) swpO=0 conn=2 myRSS=1211 php=5 phpRSS=156 ap=16 tcp=25 topuser=madalice 2026-09-06 14:44:01 L1=1.97 run=2 blk=1 avail=10266(74.5%) swpO=0 conn=3 myRSS=1211 php=5 phpRSS=156 ap=16 tcp=26 topuser=madalice 2026-09-06 14:44:11 L1=2.13 run=1 blk=1 avail=10382(75.4%) swpO=0 conn=2 myRSS=1211 php=4 phpRSS=23 ap=16 tcp=26 topuser=root 2026-09-06 14:44:11 L1=2.13 run=2 blk=1 avail=10382(75.4%) swpO=0 conn=3 myRSS=1211 php=4 phpRSS=23 ap=16 tcp=26 topuser=root 2026-09-06 14:44:21 L1=2.11 run=2 blk=1 avail=10216(74.2%) swpO=31 conn=2 myRSS=1210 php=6 phpRSS=228 ap=17 tcp=25 topuser=madalice 2026-09-06 14:44:21 L1=2.11 run=4 blk=1 avail=10213(74.1%) swpO=31 conn=3 myRSS=1210 php=6 phpRSS=229 ap=17 tcp=25 topuser=madalice 2026-09-06 14:44:32 L1=2.01 run=2 blk=1 avail=10254(74.4%) swpO=0 conn=2 myRSS=1210 php=6 phpRSS=197 ap=16 tcp=23 topuser=madalice 2026-09-06 14:44:32 L1=2.01 run=3 blk=1 avail=10247(74.4%) swpO=0 conn=1 myRSS=1210 php=6 phpRSS=202 ap=16 tcp=23 topuser=madalice 2026-09-06 14:44:42 L1=1.93 run=2 blk=1 avail=10198(74.0%) swpO=0 conn=2 myRSS=1210 php=6 phpRSS=251 ap=16 tcp=21 topuser=madalice 2026-09-06 14:44:42 L1=1.93 run=3 blk=1 avail=10190(74.0%) swpO=0 conn=1 myRSS=1210 php=6 phpRSS=258 ap=16 tcp=21 topuser=madalice 2026-09-06 14:44:52 L1=2.09 run=1 blk=1 avail=10232(74.3%) swpO=0 conn=2 myRSS=1210 php=5 phpRSS=178 ap=16 tcp=24 topuser=madalice 2026-09-06 14:44:52 L1=2.09 run=3 blk=1 avail=10232(74.3%) swpO=0 conn=1 myRSS=1210 php=5 phpRSS=178 ap=16 tcp=24 topuser=madalice 2026-09-06 14:45:02 L1=2.00 run=2 blk=1 avail=10151(73.7%) swpO=0 conn=2 myRSS=1210 php=6 phpRSS=211 ap=22 tcp=29 topuser=madalice 2026-09-06 14:45:02 L1=2.00 run=5 blk=1 avail=10149(73.7%) swpO=0 conn=1 myRSS=1210 php=6 phpRSS=211 ap=22 tcp=29 topuser=madalice 2026-09-06 14:45:12 L1=2.23 run=4 blk=1 avail=10041(72.9%) swpO=102 conn=2 myRSS=1207 php=8 phpRSS=396 ap=27 tcp=37 topuser=alison 2026-09-06 14:45:12 L1=2.23 run=7 blk=1 avail=10035(72.8%) swpO=102 conn=1 myRSS=1207 php=8 phpRSS=408 ap=27 tcp=38 topuser=alison 2026-09-06 14:45:22 L1=2.35 run=5 blk=1 avail=9944 (72.2%) swpO=0 conn=2 myRSS=1207 php=9 phpRSS=431 ap=45 tcp=51 topuser=alison 2026-09-06 14:45:22 L1=2.35 run=6 blk=1 avail=9936 (72.1%) swpO=0 conn=1 myRSS=1207 php=9 phpRSS=437 ap=45 tcp=51 topuser=alison 2026-09-06 14:45:32 L1=2.61 run=7 blk=1 avail=9804 (71.2%) swpO=29 conn=2 myRSS=1206 php=8 phpRSS=489 ap=53 tcp=35 topuser=alison 2026-09-06 14:45:32 L1=2.61 run=7 blk=1 avail=9802 (71.1%) swpO=29 conn=5 myRSS=1206 php=8 phpRSS=483 ap=53 tcp=35 topuser=alison 2026-09-06 14:45:42 L1=3.28 run=7 blk=1 avail=9810 (71.2%) swpO=54 conn=5 myRSS=1206 php=10 phpRSS=609 ap=43 tcp=47 topuser=alison 2026-09-06 14:45:42 L1=3.28 run=9 blk=1 avail=9812 (71.2%) swpO=54 conn=6 myRSS=1206 php=10 phpRSS=609 ap=43 tcp=47 topuser=alison 2026-09-06 14:45:52 L1=4.10 run=31 blk=1 avail=8254 (59.9%) swpO=199 conn=26 myRSS=1204 php=33 phpRSS=2555 ap=74 tcp=80 topuser=alison 2026-09-06 14:45:52 L1=4.10 run=28 blk=1 avail=8262 (60.0%) swpO=199 conn=25 myRSS=1204 php=32 phpRSS=2557 ap=74 tcp=82 topuser=alison