INCIDENT 2026-09-09 07:50:53 trigger: php_procs=31 php_rss=1844MB mysql_conn=29 ================================================================== load: 7.19 2.61 1.60 37/673 3855793 ncpu:10 mem_avail: 7755MB/13777MB (56.3%) swap_used:1255MB swapout:83/s blocked(D):0 running:29 iowait:0.0% steal:0.0% php: 31 procs / 1844MB heaviest user: aaa (27 procs, 1709MB) apache: 73 procs tcp_estab: 68 --- RSS by user (all processes) --- USER PROCS RSS_MB aaa 33 2153 mysql 1 2066 nobody 72 1292 root 243 946 mailman 20 358 netdata 8 244 wp-toolkit 3 133 madalice 1 132 cpanellogin 1 96 dovenull 6 27 lowrange 2 23 polkitd 1 22 evolution 10 13 kurri 1 11 mailnull 2 10 dovecot 3 9 zabbix 1 8 named 1 6 nscd 1 5 cpanelconnecttrack 1 4 --- php workers by user --- USER PROCS RSS_MB aaa 33 2232 madalice 1 132 evolution 3 23 root 1 2 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 7177 MB Active(file): 5043 MB Inactive(file): 1630 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 750 MB CommitLimit: 10984 MB Committed_AS: 13210 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 8-05:28:30 3492 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2330591 1 mysql 2112760 12.9 Ssl 1-03:05:27 /usr/sbin/mariadbd 166870 1 netdata 191264 2.8 Ssl 3-05:28:36 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2746766 2730373 root 188324 0.0 S 05:25:01 spamd child 2730373 1 root 175880 0.0 Ss 05:28:06 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2746767 2730373 root 167368 0.0 S 05:25:01 spamd child 3855677 167896 madalice 135792 44.3 S 00:03 php-fpm: pool madalice_com_au 3452013 1353308 cpanellogin 98940 0.0 S 01:55:00 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 3855754 3843855 aaa 98536 67.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855748 3855277 aaa 97960 34.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855734 3840002 aaa 94844 31.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855740 3855695 aaa 92736 31.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855732 3839009 aaa 92040 31.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855733 3855213 aaa 88864 29.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855753 3855417 aaa 88184 27.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855743 3843854 aaa 86568 26.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855737 3855644 aaa 86464 27.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855742 3838270 aaa 85788 26.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855739 3842375 aaa 83756 24.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855749 3839638 aaa 82096 24.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855751 3840055 aaa 82032 23.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855752 3839198 aaa 80532 22.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855735 3855642 aaa 77640 20.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855738 3840064 aaa 77208 21.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2495258 1 wp-toolkit 76724 0.0 Ss 06:37:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 3855736 3855643 aaa 74220 21.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855741 3855684 aaa 73680 19.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855746 3855392 aaa 69624 19.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855755 3843867 aaa 68428 37.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855747 3855271 aaa 67920 18.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855750 3855672 aaa 67808 18.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855744 3855384 aaa 66316 17.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855758 3855259 aaa 63704 29.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855784 3855645 aaa 62388 28.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855757 3855393 aaa 60284 26.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855756 3855278 aaa 56792 22.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855775 3843861 aaa 55316 18.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855786 3855438 aaa 53440 16.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2495169 1 wp-toolkit 50832 0.0 Ss 06:37:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 3855790 3843863 aaa 49584 12.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855793 3855623 aaa 49532 11.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855803 3855687 aaa 47280 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855807 3855698 aaa 47280 0.0 S 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855791 3855696 aaa 47000 9.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509236 509098 root 45184 0.0 Sl 12-05:31:16 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 42932 0.0 Ss 49-05:09:42 cpsrvd (SSL) - waiting for connections 1469 1 root 41864 0.1 Ss 71-21:41:11 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3855819 3855691 aaa 41524 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3855804 3855694 evolution 40584 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3855810 3855690 evolution 40564 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3855823 3855697 aaa 35792 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2495193 1 root 35700 0.0 Ss 06:37:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 2729805 1 root 34908 0.0 Ss 05:28:32 lfd - sleeping 167562 166914 netdata 34904 0.1 Sl 3-05:28:31 /usr/libexec/netdata/plugins.d/go.d.plugin 1 2495282 1 root 29144 0.1 Ssl 06:36:59 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 1463 1 root 24848 0.0 Ss 71-21:41:11 tailwatchd 3840065 506832 nobody 23108 0.1 S 01:46 /usr/sbin/httpd -k start 2495134 1 polkitd 22840 0.0 Ssl 06:37:02 /usr/lib/polkit-1/polkitd --no-debug 3843861 506832 nobody 22840 0.1 S 00:50 /usr/sbin/httpd -k start 3838270 506832 nobody 22752 0.0 S 04:27 /usr/sbin/httpd -k start 3839638 506832 nobody 22512 0.1 S 02:30 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4438282 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 386 evolution/portal.evolutionerp.com.au-ssl_log 256 aaa/aaadownunder.com.au-ssl_log 176 aaa/aaadownunder.com.au 31 madalice/madalice.com.au-ssl_log 4 olympic/olympicfencing.com.au-ssl_log 2 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 431 203.54.180.238 224 213.209.159.84 107 103.104.165.99 42 120.154.88.130 40 116.91.221.245 16 182.239.240.254 7 103.104.164.114 6 1.141.176.34 4 207.46.13.102 4 1.125.108.183 3 165.225.233.87 3 118.127.40.55 2 198.98.59.181 2 1.145.95.162 2 114.119.130.40 --- top request paths across all vhosts (last 3 min) --- 124 POST /functions.php 103 GET /factory_session_checker.php 74 GET /app/ajax.php 53 GET /heartbeat.php 52 GET /factory_session_joiner.php 51 GET /factory_session_processed_qty.php 34 GET /index.php 22 POST /plugins/csvexporter/plugin.php 16 POST /app/ajax/selectFilterSingle.php 16 POST /app/ajax.php 15 GET //app/ajax.php 14 POST /clienteditsave.php 8 POST /app/ajax/selectFilter.php 7 POST /logsave.php 7 GET /index.php/2020/10/25/magenta-screw-piles-part-1/ 7 GET /index.php/2020/09/25/cardiff-piers/ 7 GET /index.php/2020/09/21/waratah-piers/ 6 POST //clienteditsave.php 6 GET /index.php/2022/01/ 6 GET /index.php/2019/06/04/underpinning-a-5year-old-house/ --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 124 POST /functions.php 74 GET /app/ajax.php 30 GET /index.php 22 POST /plugins/csvexporter/plugin.php 16 POST /app/ajax/selectFilterSingle.php 16 POST /app/ajax.php 15 GET //app/ajax.php 14 POST /clienteditsave.php 8 POST /app/ajax/selectFilter.php 7 POST /logsave.php 6 POST //clienteditsave.php 5 POST /quoteditsave.php -- last 10 requests -- 103.104.165.99 - - [09/Sep/2026:07:50:45 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=19727619199 HTTP/1.1" 200 98 "https://my.evolutionerp.com.au/inde 103.104.165.99 - - [09/Sep/2026:07:50:45 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dpurchaseadd%26purchaseid%3D11311&call=getUserSetting&caller=ajaxSubmitLocal&seq=18570734305 HTTP/1.1" 200 165 "https://my.evolut 207.46.13.102 - - [09/Sep/2026:07:50:46 +1000] "GET /index.php?page=activities&keyword=rays+vs+braves HTTP/1.1" 200 5390 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.c 103.104.165.99 - - [09/Sep/2026:07:50:47 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=11311" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 203.54.180.238 - - [09/Sep/2026:07:50:47 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79231" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K 103.104.165.99 - - [09/Sep/2026:07:50:47 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 21983 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=11311" "Mozilla/5.0 (Windows NT 10.0; Win64 103.104.165.99 - - [09/Sep/2026:07:50:48 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=11311" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 182.239.240.254 - - [09/Sep/2026:07:50:51 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=5523" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 103.104.165.99 - - [09/Sep/2026:07:50:51 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 282 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12147&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; 120.154.88.130 - - [09/Sep/2026:07:50:51 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36314§ionid=32259" "Mozilla/5.0 (Windows NT 10.0; == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 103 GET /factory_session_checker.php 53 GET /heartbeat.php 52 GET /factory_session_joiner.php 51 GET /factory_session_processed_qty.php 4 GET /index.php 2 GET /uploadsave.php 1 POST /uploadsave.php 1 POST /inventory.php 1 GET /api/deliveries.php 1 GET /api/api-check.php 1 GET / -- last 10 requests -- 203.54.180.238 - - [09/Sep/2026:07:50:51 +1000] "GET /factory_session_joiner.php?id=35192 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [09/Sep/2026:07:50:51 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [09/Sep/2026:07:50:52 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [09/Sep/2026:07:50:51 +1000] "GET /heartbeat.php?sentAt=1788904247&bytes=106,160,131,55&_=1788899254586 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [09/Sep/2026:07:50:54 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 124 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [09/Sep/2026:07:50:54 +1000] "GET /factory_session_joiner.php?id=35207 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [09/Sep/2026:07:50:54 +1000] "GET /heartbeat.php?sentAt=1788904254&bytes=106,160,131,62&_=1788868263735 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [09/Sep/2026:07:50:54 +1000] "GET /heartbeat.php?sentAt=1788904253&bytes=106,160,131,61&_=1788903298074 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [09/Sep/2026:07:50:56 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [09/Sep/2026:07:50:56 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 == aaa/aaadownunder.com.au-ssl_log == -- top paths -- 5 GET /index.php/2020/10/25/magenta-screw-piles-part-1/ 5 GET /index.php/2020/09/25/cardiff-piers/ 5 GET /index.php/2020/09/21/waratah-piers/ 4 GET /index.php/blog/page/2/ 4 GET /index.php/2025/05/ 4 GET /index.php/2022/03/ 4 GET /index.php/2022/01/ 4 GET /index.php/2021/09/ 4 GET /index.php/2021/07/ 4 GET /index.php/2021/05/04/screw-piles-at-merewether/ 4 GET /index.php/2021/02/23/east-seaham-piers/ 4 GET /index.php/2020/06/11/marks-point-screw-piles/ -- last 10 requests -- 213.209.159.84 - - [09/Sep/2026:07:50:54 +1000] "GET /index.php/2019/10/03/kogarah-sports-oval/ HTTP/1.1" 200 12033 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile S 213.209.159.84 - - [09/Sep/2026:07:50:55 +1000] "GET /index.php/2019/08/29/stabilizing-fireplaces/ HTTP/1.1" 200 12163 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobil 213.209.159.84 - - [09/Sep/2026:07:50:55 +1000] "GET /index.php/2021/05/ HTTP/1.1" 200 10211 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41. 213.209.159.84 - - [09/Sep/2026:07:50:55 +1000] "GET /index.php/2020/09/ HTTP/1.1" 200 10221 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 [ip:93.41. 213.209.159.84 - - [09/Sep/2026:07:50:52 +1000] "GET /index.php/2019/06/04/installing-screw-piles/ HTTP/1.1" 200 12028 "http://aaadownunder.com.au/index.php/2019/06/04/installing-screw-piles/" "Mozilla/5.0 (Linux; Androi 213.209.159.84 - - [09/Sep/2026:07:50:54 +1000] "GET /index.php/2019/11/11/nords-wharf-piers/ HTTP/1.1" 200 12185 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Saf 213.209.159.84 - - [09/Sep/2026:07:50:54 +1000] "GET /index.php/2019/10/02/kurnell/ HTTP/1.1" 200 11923 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 213.209.159.84 - - [09/Sep/2026:07:50:54 +1000] "GET /index.php/2019/10/28/screw-piles-at-narrabeen/ HTTP/1.1" 200 11942 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mob 213.209.159.84 - - [09/Sep/2026:07:50:54 +1000] "GET /index.php/2019/11/11/nords-wharf-piers/ HTTP/1.1" 200 12185 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Saf 213.209.159.84 - - [09/Sep/2026:07:50:54 +1000] "GET /index.php/2019/09/02/wallsend-ambulance-station-stage-2/ HTTP/1.1" 200 12157 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131 --- last 30 samples (run-up to this incident) --- 2026-09-09 07:48:31 L1=0.75 run=1 blk=0 avail=8988 (65.2%) swpO=0 conn=2 myRSS=2069 php=4 phpRSS=137 ap=34 tcp=33 topuser=madalice 2026-09-09 07:48:32 L1=0.75 run=3 blk=0 avail=8966 (65.1%) swpO=0 conn=1 myRSS=2069 php=5 phpRSS=193 ap=33 tcp=33 topuser=madalice 2026-09-09 07:48:42 L1=0.95 run=4 blk=0 avail=8779 (63.7%) swpO=0 conn=2 myRSS=2069 php=10 phpRSS=525 ap=30 tcp=37 topuser=olympic 2026-09-09 07:48:42 L1=0.95 run=1 blk=0 avail=9008 (65.4%) swpO=0 conn=1 myRSS=2069 php=4 phpRSS=137 ap=30 tcp=36 topuser=madalice 2026-09-09 07:48:52 L1=0.80 run=1 blk=0 avail=8986 (65.2%) swpO=0 conn=2 myRSS=2069 php=4 phpRSS=159 ap=28 tcp=36 topuser=madalice 2026-09-09 07:48:52 L1=0.80 run=2 blk=0 avail=8931 (64.8%) swpO=0 conn=1 myRSS=2069 php=5 phpRSS=251 ap=28 tcp=33 topuser=madalice 2026-09-09 07:49:02 L1=0.68 run=3 blk=0 avail=8995 (65.3%) swpO=0 conn=2 myRSS=2069 php=5 phpRSS=216 ap=26 tcp=37 topuser=madalice 2026-09-09 07:49:03 L1=0.68 run=1 blk=0 avail=9002 (65.3%) swpO=0 conn=1 myRSS=2069 php=4 phpRSS=159 ap=28 tcp=40 topuser=madalice 2026-09-09 07:49:12 L1=0.66 run=2 blk=0 avail=8710 (63.2%) swpO=0 conn=2 myRSS=2069 php=6 phpRSS=441 ap=39 tcp=39 topuser=corpkicks 2026-09-09 07:49:13 L1=0.66 run=5 blk=0 avail=8676 (63.0%) swpO=0 conn=1 myRSS=2069 php=6 phpRSS=409 ap=38 tcp=38 topuser=corpkicks 2026-09-09 07:49:22 L1=0.94 run=1 blk=0 avail=8980 (65.2%) swpO=1 conn=1 myRSS=2069 php=8 phpRSS=215 ap=34 tcp=39 topuser=madalice 2026-09-09 07:49:23 L1=0.94 run=2 blk=0 avail=8972 (65.1%) swpO=1 conn=1 myRSS=2069 php=5 phpRSS=174 ap=34 tcp=41 topuser=madalice 2026-09-09 07:49:32 L1=1.02 run=1 blk=0 avail=9125 (66.2%) swpO=0 conn=1 myRSS=2069 php=3 phpRSS=2 ap=29 tcp=32 topuser=root 2026-09-09 07:49:33 L1=1.02 run=3 blk=0 avail=9117 (66.2%) swpO=0 conn=1 myRSS=2069 php=3 phpRSS=2 ap=29 tcp=37 topuser=root 2026-09-09 07:49:42 L1=1.18 run=2 blk=0 avail=8849 (64.2%) swpO=0 conn=1 myRSS=2069 php=6 phpRSS=373 ap=27 tcp=32 topuser=olympic 2026-09-09 07:49:43 L1=1.18 run=3 blk=0 avail=8804 (63.9%) swpO=0 conn=3 myRSS=2069 php=6 phpRSS=426 ap=27 tcp=30 topuser=customc 2026-09-09 07:49:52 L1=1.15 run=3 blk=0 avail=9059 (65.8%) swpO=0 conn=1 myRSS=2069 php=4 phpRSS=134 ap=23 tcp=29 topuser=madalice 2026-09-09 07:49:53 L1=1.15 run=4 blk=0 avail=8973 (65.1%) swpO=0 conn=3 myRSS=2069 php=5 phpRSS=255 ap=23 tcp=27 topuser=madalice 2026-09-09 07:50:02 L1=1.37 run=3 blk=0 avail=8958 (65.0%) swpO=0 conn=1 myRSS=2069 php=8 phpRSS=307 ap=25 tcp=45 topuser=evolution 2026-09-09 07:50:03 L1=1.37 run=4 blk=0 avail=8935 (64.9%) swpO=0 conn=3 myRSS=2069 php=9 phpRSS=347 ap=27 tcp=49 topuser=evolution 2026-09-09 07:50:12 L1=1.61 run=2 blk=0 avail=8952 (65.0%) swpO=0 conn=1 myRSS=2069 php=4 phpRSS=134 ap=37 tcp=33 topuser=madalice 2026-09-09 07:50:13 L1=1.61 run=1 blk=0 avail=8974 (65.1%) swpO=0 conn=3 myRSS=2069 php=4 phpRSS=134 ap=36 tcp=32 topuser=madalice 2026-09-09 07:50:22 L1=1.52 run=5 blk=0 avail=9004 (65.4%) swpO=0 conn=3 myRSS=2069 php=8 phpRSS=210 ap=28 tcp=42 topuser=evolution 2026-09-09 07:50:23 L1=1.52 run=4 blk=0 avail=8890 (64.5%) swpO=0 conn=3 myRSS=2069 php=5 phpRSS=287 ap=29 tcp=40 topuser=madalice 2026-09-09 07:50:32 L1=2.54 run=1 blk=0 avail=8945 (64.9%) swpO=0 conn=3 myRSS=2069 php=4 phpRSS=134 ap=39 tcp=33 topuser=madalice 2026-09-09 07:50:33 L1=2.54 run=20 blk=0 avail=8470 (61.5%) swpO=0 conn=3 myRSS=2069 php=21 phpRSS=1124 ap=38 tcp=93 topuser=aaa 2026-09-09 07:50:42 L1=5.66 run=2 blk=0 avail=8796 (63.8%) swpO=18 conn=3 myRSS=2069 php=5 phpRSS=194 ap=48 tcp=42 topuser=madalice 2026-09-09 07:50:43 L1=5.66 run=1 blk=0 avail=8837 (64.1%) swpO=18 conn=1 myRSS=2069 php=4 phpRSS=134 ap=48 tcp=39 topuser=madalice 2026-09-09 07:50:52 L1=7.19 run=9 blk=0 avail=8390 (60.9%) swpO=83 conn=3 myRSS=2067 php=8 phpRSS=531 ap=74 tcp=59 topuser=aaa 2026-09-09 07:50:53 L1=7.19 run=29 blk=0 avail=7755 (56.3%) swpO=83 conn=29 myRSS=2067 php=31 phpRSS=1844 ap=73 tcp=68 topuser=aaa