INCIDENT 2026-09-08 04:40:19 trigger: mem_avail=0.8% load=126.02/10cpu blocked=81 swapout=6461/s php_procs=139 php_rss=7699MB ================================================================== load: 368.28 203.18 88.72 8/955 2328625 ncpu:10 mem_avail: 112MB/13777MB (0.8%) swap_used:4095MB swapout:6461/s blocked(D):81 running:278 iowait:4.9% steal:0.0% php: 139 procs / 7699MB heaviest user: alison (130 procs, 7178MB) apache: 177 procs tcp_estab: 60 --- RSS by user (all processes) --- USER PROCS RSS_MB alison 130 7346 nobody 176 1153 root 312 636 madalice 3 394 netdata 8 187 corpkicks 1 115 wp-toolkit 4 35 evolution 12 8 cpanellogin 1 5 dovecot 3 4 mailnull 26 3 mailman 20 3 dbus 1 2 cpanelconnecttrack 1 2 named 1 1 dovenull 6 1 zabbix 1 0 rpc 1 0 polkitd 1 0 nscd 1 0 --- php workers by user --- USER PROCS RSS_MB alison 130 7367 madalice 3 394 corpkicks 1 115 evolution 4 6 root 1 3 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5620 MB Active(file): 176 MB Inactive(file): 83 MB Dirty: 0 MB Writeback: 1 MB SReclaimable: 207 MB CommitLimit: 10984 MB Committed_AS: 29262 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2328407 root 04:57 4 /bin/sh -c bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || : 2328581 root 00:10 3052 /bin/sh -c bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || : 3926885 root 7-02:22:57 0 /usr/bin/imunify-agent-proxy 4109079 root 3-00:00:35 0 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 3-00:00:35 14804 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress / --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 166870 1 netdata 131212 2.8 Ssl 2-02:23:04 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2328204 2328179 alison 130752 2.2 S 05:59 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327936 2327903 corpkicks 123940 3.1 S 06:13 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 2328081 2327547 alison 117676 0.9 S 06:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327913 2325280 alison 110728 0.8 S 06:14 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328079 2328008 alison 107972 2.5 S 06:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328062 2327689 alison 106540 3.1 S 06:08 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327948 2325326 alison 104812 1.7 S 06:12 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327986 2327975 alison 102436 0.7 S 06:09 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327933 167896 madalice 101164 3.5 S 06:13 php-fpm: pool madalice_com_au 2327932 2327915 alison 99112 2.4 S 06:13 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327974 2327239 alison 98644 1.7 S 06:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327930 167896 madalice 95180 2.9 S 06:14 php-fpm: pool madalice_com_au 2328029 2328006 alison 91432 3.2 S 06:08 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328153 2328141 alison 90436 2.5 S 06:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328095 2328075 alison 89668 1.3 S 06:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327968 2327962 alison 89080 2.0 S 06:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328205 2328176 alison 86620 2.3 S 05:58 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327943 2325275 alison 86256 2.2 S 06:12 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328184 2328165 alison 85944 2.8 S 06:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328191 2328161 alison 85844 2.6 S 05:59 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328255 2327686 alison 85696 2.4 S 05:58 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327970 2327961 alison 85188 1.0 S 06:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328295 2328291 alison 84940 2.7 S 05:56 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328173 2327159 alison 84204 2.7 S 06:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327877 2325189 alison 84040 0.6 S 06:18 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327934 2326421 alison 83812 0.9 S 06:13 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327953 2327004 alison 83620 0.8 S 06:11 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328169 2327917 alison 83612 2.6 S 06:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327956 2327950 alison 83456 1.2 S 06:11 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328094 2328013 alison 80696 0.8 S 06:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327959 2327919 alison 78296 1.0 S 06:11 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328090 2327160 alison 76712 1.3 S 06:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328117 2327682 alison 76612 2.0 S 06:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328152 2328140 alison 76472 2.4 S 06:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328067 2327177 alison 75856 1.0 S 06:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328099 2327178 alison 75344 2.5 S 06:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328060 2326711 alison 74208 1.1 S 06:08 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328105 2328100 alison 73236 2.3 S 06:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327982 2327977 alison 72876 1.5 S 06:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328068 2327688 alison 72132 1.2 S 06:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327937 2327229 alison 71244 0.7 S 06:13 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328085 2328012 alison 70852 2.4 S 06:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328762 167845 wp-toolkit 70848 6.7 D 00:04 /usr/bin/sw-engine -d auto_prepend_file=/usr/local/cpanel/3rdparty/wp-toolkit/scripts/scheduled-task-prepend-file.php /usr/local/cpanel 2328128 2327904 alison 70692 2.8 S 06:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328082 2328014 alison 69276 2.4 S 06:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328112 2327684 alison 68004 0.8 S 06:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327880 2327244 alison 67508 0.5 S 06:18 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328203 2328181 alison 67404 2.4 S 05:59 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328211 2328177 alison 67324 2.9 S 05:58 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328186 2328166 alison 67180 2.8 S 06:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328078 2328015 alison 66900 2.7 S 06:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328125 2328119 alison 65784 1.8 S 06:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328127 2328123 alison 65480 1.6 S 06:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327949 2327175 alison 65320 0.8 S 06:12 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328143 2327921 alison 65164 2.5 S 06:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328084 2327892 alison 65008 2.9 S 06:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328098 2327221 alison 63712 2.6 S 06:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2327969 2327685 alison 62984 0.9 S 06:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328063 2327570 alison 62264 1.4 S 06:07 /opt/cpanel/ea-php82/root/usr/bin/php-cgi --- processes in D state (uninterruptible IO) --- 836 Ds - /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only 654163 Ds - queueprocd - process next queued task 1284642 D - dovecot/imap 1807284 D - dovecot/imap 1859125 Ds - lfd - scanning log files 2326018 D - [kworker/9:0+events] 2327672 D - /usr/bin/python3 /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common 2328190 D - php-fpm: pool madalice_com_au 2328378 D - /sbin/exim -bpc 2328410 D - [kworker/8:1+events] 2328448 D - lfd - child closing 2328497 D - /usr/sbin/httpd -k start 2328509 D - /usr/sbin/httpd -k start 2328514 D - /usr/sbin/httpd -k start 2328529 D - /usr/sbin/httpd -k start 2328530 D - /usr/sbin/httpd -k start 2328531 D - /usr/sbin/httpd -k start 2328541 D - /usr/sbin/httpd -k start 2328542 D - /usr/sbin/httpd -k start 2328754 Ds - /usr/lib/systemd/systemd-journald 2328755 D - tailwatchd - chkservd 2328762 D - /usr/bin/sw-engine -d auto_prepend_file=/usr/local/cpanel/3rdparty/wp-toolkit/scripts/scheduled-task-prepend-file.php /usr/local/cpanel/3rdparty/wp-toolkit/plib/s 2328783 D - php-fpm: pool madalice_com_au 2328784 D - /usr/sbin/httpd -k start 2328799 D - /usr/sbin/httpd -k start 2328803 D - /usr/sbin/httpd -k start 2328804 D - /usr/sbin/httpd -k start 2328807 D - /usr/sbin/httpd -k start 2328810 D - /usr/sbin/httpd -k start 2328817 D - php-fpm: pool madalice_com_au --- mariadb processlist (non-sleeping) --- ERROR 2002 (HY000): Can't connect to local server through socket '/var/lib/mysql/mysql.sock' (111) --- lock waits --- ERROR 2002 (HY000): Can't connect to local server through socket '/var/lib/mysql/mysql.sock' (111) --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min alison/alisonarts.com.au 81 evolution/my.evolutionerp.com.au-ssl_log 6 (total vhosts taking traffic: 2) --- top client IPs across all vhosts (last 3 min) --- 81 213.209.159.133 3 115.129.56.130 2 206.83.118.182 1 103.104.165.99 --- top request paths across all vhosts (last 3 min) --- 3 GET /index.php 2 POST /functions.php 2 GET /simtars-30-years-custom-hard-hat/ 2 GET /patina-custom-painted-car-doors/ 2 GET /miners-hard-hat-custom-airbrush-painted-new-hope-group/ 2 GET /full-brimmed-custom-hard-hat/ 2 GET /custom-painted-skateboard-skull-design/ 2 GET /custom-painted-mad-hatter-surfboard/ 2 GET /custom-painted-harley-davidson-skateboard/ 2 GET /custom-painted-a-f-o-kids-transformers-theme/ 2 GET /custom-paint-and-airbrush-gallery/page/2/ 2 GET /custom-airbrush-painted-skateboard/ 2 GET /custom-airbrush-painted-longboard-surfboard/ 2 GET /cfmeu-custom-hard-hats/ 2 GET /category/work/custom-airbrush-painted-hard-hats/ 2 GET /author/admin_5hers2dv/ 1 GET /triumph-thunderbird-airbrushed-with-matching-custom-helmet/ 1 GET /triumph-silver-jubilee-full-custom-paint/ 1 GET /traditional-silver-flames-airbrushed-on-harley/ 1 GET /miners-custo-hard-hats/ --- busiest 3 vhosts: top paths + last 10 requests --- == alison/alisonarts.com.au == -- top paths -- 2 GET /simtars-30-years-custom-hard-hat/ 2 GET /patina-custom-painted-car-doors/ 2 GET /miners-hard-hat-custom-airbrush-painted-new-hope-group/ 2 GET /full-brimmed-custom-hard-hat/ 2 GET /custom-painted-skateboard-skull-design/ 2 GET /custom-painted-mad-hatter-surfboard/ 2 GET /custom-painted-harley-davidson-skateboard/ 2 GET /custom-painted-a-f-o-kids-transformers-theme/ 2 GET /custom-paint-and-airbrush-gallery/page/2/ 2 GET /custom-airbrush-painted-skateboard/ 2 GET /custom-airbrush-painted-longboard-surfboard/ 2 GET /cfmeu-custom-hard-hats/ -- last 10 requests -- 213.209.159.133 - - [08/Sep/2026:04:45:16 +1000] "GET /simtars-30-years-custom-hard-hat/ HTTP/1.1" 301 307 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)" 213.209.159.133 - - [08/Sep/2026:04:45:16 +1000] "GET /custom-airbrush-painted-longboard-surfboard/ HTTP/1.1" 301 318 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)" 213.209.159.133 - - [08/Sep/2026:04:45:16 +1000] "GET /cfmeu-custom-hard-hats/ HTTP/1.1" 301 297 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)" 213.209.159.133 - - [08/Sep/2026:04:45:16 +1000] "GET /custom-paint-and-airbrush-gallery/page/2/ HTTP/1.1" 301 315 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)" 213.209.159.133 - - [08/Sep/2026:04:45:16 +1000] "GET /custom-painted-skateboard-skull-design/ HTTP/1.1" 301 313 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)" 213.209.159.133 - - [08/Sep/2026:04:45:16 +1000] "GET /custom-airbrush-painted-skateboard/ HTTP/1.1" 301 309 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)" 213.209.159.133 - - [08/Sep/2026:04:45:16 +1000] "GET /custom-painted-mad-hatter-surfboard/ HTTP/1.1" 301 310 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)" 213.209.159.133 - - [08/Sep/2026:04:45:16 +1000] "GET /category/work/custom-airbrush-painted-hard-hats/ HTTP/1.1" 301 322 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)" 213.209.159.133 - - [08/Sep/2026:04:45:16 +1000] "GET /custom-paint-and-airbrush-gallery/page/3/ HTTP/1.1" 301 315 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)" 213.209.159.133 - - [08/Sep/2026:04:45:16 +1000] "GET /custom-painted-mad-hatter-surfboard/ HTTP/1.1" 301 310 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)" == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 3 GET /index.php 2 POST /functions.php 1 GET /logoff.php -- last 10 requests -- 115.129.56.130 - - [08/Sep/2026:04:45:21 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 51 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=16645&tab=clienteditpricing" "Mozilla/5.0 (Windows N 115.129.56.130 - - [08/Sep/2026:04:45:20 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 51 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=16645&tab=clienteditpricing" "Mozilla/5.0 (Windows N 206.83.118.182 - - [08/Sep/2026:04:45:17 +1000] "GET /logoff.php?page=quotedit"eid=36517 HTTP/1.1" 302 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36517" "Mozilla/5.0 (Windows NT 10.0; Win64; x 206.83.118.182 - - [08/Sep/2026:04:45:22 +1000] "GET /index.php?page=quotedit"eid=36517 HTTP/1.1" 500 4414 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36517" "Mozilla/5.0 (Windows NT 10.0; Win64; 115.129.56.130 - - [08/Sep/2026:04:45:19 +1000] "GET /index.php?page=quotereg HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php?page=invedit&id=7512&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) App 103.104.165.99 - - [08/Sep/2026:04:45:17 +1000] "GET /index.php HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php?page=activities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko --- last 30 samples (run-up to this incident) --- 2026-09-08 04:37:06 L1=1.43 run=5 blk=1 avail=8818 (64.0%) swpO=0 conn=1 myRSS=2142 php=6 phpRSS=331 ap=69 tcp=25 topuser=madalice 2026-09-08 04:37:06 L1=1.43 run=4 blk=1 avail=8816 (64.0%) swpO=0 conn=2 myRSS=2142 php=6 phpRSS=332 ap=69 tcp=25 topuser=madalice 2026-09-08 04:37:16 L1=1.36 run=1 blk=1 avail=8913 (64.7%) swpO=0 conn=1 myRSS=2143 php=6 phpRSS=308 ap=59 tcp=27 topuser=madalice 2026-09-08 04:37:16 L1=1.36 run=3 blk=1 avail=8912 (64.7%) swpO=0 conn=2 myRSS=2143 php=6 phpRSS=308 ap=59 tcp=27 topuser=madalice 2026-09-08 04:37:26 L1=1.30 run=1 blk=1 avail=8983 (65.2%) swpO=0 conn=1 myRSS=2143 php=6 phpRSS=308 ap=49 tcp=32 topuser=madalice 2026-09-08 04:37:26 L1=1.30 run=2 blk=1 avail=8983 (65.2%) swpO=0 conn=2 myRSS=2143 php=6 phpRSS=308 ap=49 tcp=32 topuser=madalice 2026-09-08 04:37:36 L1=1.26 run=1 blk=1 avail=9303 (67.5%) swpO=0 conn=1 myRSS=2143 php=4 phpRSS=22 ap=39 tcp=31 topuser=root 2026-09-08 04:37:36 L1=1.26 run=2 blk=1 avail=9303 (67.5%) swpO=0 conn=2 myRSS=2143 php=4 phpRSS=22 ap=39 tcp=31 topuser=root 2026-09-08 04:37:46 L1=1.22 run=2 blk=1 avail=9250 (67.1%) swpO=0 conn=1 myRSS=2143 php=6 phpRSS=210 ap=29 tcp=27 topuser=madalice 2026-09-08 04:37:46 L1=1.22 run=3 blk=1 avail=9249 (67.1%) swpO=0 conn=2 myRSS=2143 php=6 phpRSS=210 ap=29 tcp=27 topuser=madalice 2026-09-08 04:37:56 L1=1.26 run=3 blk=1 avail=9301 (67.5%) swpO=0 conn=1 myRSS=2143 php=6 phpRSS=193 ap=24 tcp=33 topuser=madalice 2026-09-08 04:37:56 L1=1.26 run=3 blk=2 avail=9298 (67.5%) swpO=0 conn=2 myRSS=2143 php=6 phpRSS=193 ap=24 tcp=33 topuser=madalice 2026-09-08 04:38:06 L1=1.53 run=1 blk=1 avail=9132 (66.3%) swpO=0 conn=1 myRSS=2144 php=6 phpRSS=335 ap=26 tcp=36 topuser=madalice 2026-09-08 04:38:06 L1=1.53 run=4 blk=1 avail=9130 (66.3%) swpO=0 conn=1 myRSS=2144 php=6 phpRSS=335 ap=26 tcp=36 topuser=madalice 2026-09-08 04:38:16 L1=1.45 run=1 blk=1 avail=9153 (66.4%) swpO=0 conn=1 myRSS=2144 php=6 phpRSS=335 ap=22 tcp=28 topuser=madalice 2026-09-08 04:38:16 L1=1.45 run=2 blk=1 avail=9152 (66.4%) swpO=0 conn=1 myRSS=2144 php=6 phpRSS=335 ap=22 tcp=28 topuser=madalice 2026-09-08 04:38:26 L1=1.38 run=2 blk=1 avail=9318 (67.6%) swpO=0 conn=1 myRSS=2145 php=5 phpRSS=47 ap=18 tcp=28 topuser=alison 2026-09-08 04:38:26 L1=1.38 run=4 blk=1 avail=9439 (68.5%) swpO=0 conn=1 myRSS=2145 php=4 phpRSS=22 ap=18 tcp=28 topuser=root 2026-09-08 04:38:36 L1=2.52 run=1 blk=1 avail=9376 (68.1%) swpO=6 conn=1 myRSS=2145 php=4 phpRSS=22 ap=25 tcp=35 topuser=root 2026-09-08 04:38:36 L1=2.52 run=2 blk=1 avail=9375 (68.1%) swpO=6 conn=1 myRSS=2145 php=4 phpRSS=22 ap=25 tcp=35 topuser=root 2026-09-08 04:38:46 L1=2.44 run=17 blk=1 avail=8654 (62.8%) swpO=236 conn=1 myRSS=2139 php=18 phpRSS=1231 ap=21 tcp=94 topuser=alison 2026-09-08 04:38:46 L1=2.44 run=15 blk=1 avail=8683 (63.0%) swpO=236 conn=1 myRSS=2139 php=18 phpRSS=1236 ap=21 tcp=94 topuser=alison 2026-09-08 04:38:57 L1=5.70 run=31 blk=1 avail=7272 (52.8%) swpO=336 conn=22 myRSS=2130 php=30 phpRSS=2622 ap=47 tcp=51 topuser=alison 2026-09-08 04:38:57 L1=5.70 run=31 blk=1 avail=7286 (52.9%) swpO=336 conn=22 myRSS=2130 php=30 phpRSS=2629 ap=47 tcp=51 topuser=alison 2026-09-08 04:39:14 L1=17.15 run=74 blk=2 avail=4549 (33.0%) swpO=1763 conn=62 myRSS=2101 php=73 phpRSS=6264 ap=85 tcp=95 topuser=alison 2026-09-08 04:39:15 L1=17.15 run=85 blk=1 avail=4358 (31.6%) swpO=2061 conn=59 myRSS=2094 php=74 phpRSS=6425 ap=92 tcp=95 topuser=alison 2026-09-08 04:39:25 L1=29.70 run=118 blk=1 avail=2403 (17.4%) swpO=7237 conn=88 myRSS=2016 php=110 phpRSS=9386 ap=125 tcp=53 topuser=alison 2026-09-08 04:39:25 L1=29.70 run=128 blk=2 avail=2354 (17.1%) swpO=7460 conn=91 myRSS=2012 php=112 phpRSS=9425 ap=126 tcp=52 topuser=alison 2026-09-08 04:40:19 L1=126.02 run=278 blk=81 avail=112 (0.8%) swpO=6461 conn=- myRSS=0 php=139 phpRSS=7699 ap=177 tcp=60 topuser=alison 2026-09-08 04:40:17 L1=126.02 run=276 blk=9 avail=111 (0.8%) swpO=10386 conn=- myRSS=0 php=105 phpRSS=6753 ap=189 tcp=46 topuser=alison