INCIDENT 2026-09-09 13:40:57 trigger: php_procs=43 php_rss=2543MB mysql_conn=28 ================================================================== load: 1.96 1.69 1.48 48/788 979377 ncpu:10 mem_avail: 6432MB/13777MB (46.7%) swap_used:1304MB swapout:533/s blocked(D):0 running:45 iowait:0.1% steal:0.0% php: 43 procs / 2543MB heaviest user: vinesit (34 procs, 2176MB) apache: 153 procs tcp_estab: 159 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2647 vinesit 36 2402 nobody 152 2356 root 247 967 mailman 20 290 netdata 8 246 madalice 1 163 evolution 15 157 wp-toolkit 3 116 dovenull 6 28 cpanellogin 1 20 polkitd 1 17 candyfabcom 1 11 aaa 1 11 kurri 1 10 mailnull 2 9 dovecot 3 9 zabbix 1 8 nscd 1 5 named 1 5 --- php workers by user --- USER PROCS RSS_MB vinesit 34 2170 evolution 7 192 madalice 1 163 root 1 2 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6194 MB Active(file): 4878 MB Inactive(file): 958 MB Dirty: 4 MB Writeback: 0 MB SReclaimable: 535 MB CommitLimit: 10984 MB Committed_AS: 14691 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 8-11:18:33 3632 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2330591 1 mysql 2711028 15.5 Ssl 1-08:55:30 /usr/sbin/mariadbd 166870 1 netdata 196144 2.8 Ssl 3-11:18:39 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 795800 2730373 root 171452 0.1 S 50:00 spamd child 963212 167896 madalice 168352 12.0 R 01:37 php-fpm: pool madalice_com_au 2746767 2730373 root 167332 0.0 S 11:15:04 spamd child 2730373 1 root 127816 0.0 Ss 11:18:09 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2328754 1 root 116652 0.0 Ss 1-08:55:40 /usr/lib/systemd/systemd-journald 979304 979260 vinesit 94232 65.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979287 978625 vinesit 92672 58.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979298 979256 vinesit 89780 55.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979291 979243 vinesit 89632 54.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979284 979172 vinesit 87668 50.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979286 979139 vinesit 86844 48.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979281 979171 vinesit 86212 47.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979309 979272 vinesit 80412 47.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979313 979056 vinesit 78588 47.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979282 963574 vinesit 77064 40.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979289 979241 vinesit 75264 39.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979350 979315 vinesit 73244 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979297 979251 vinesit 69640 28.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979294 979248 vinesit 66944 26.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979301 979264 vinesit 65800 28.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979303 979262 vinesit 65612 25.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979295 979253 vinesit 65524 24.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2495258 1 wp-toolkit 65508 0.0 Ss 12:27:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 979290 979242 vinesit 65240 24.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979293 979245 vinesit 64552 23.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979296 979252 vinesit 64172 22.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979292 979244 vinesit 63860 23.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979360 979316 vinesit 63644 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979306 979268 vinesit 60456 18.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979299 979265 vinesit 60356 18.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979308 979269 vinesit 59840 18.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979307 979266 vinesit 59576 18.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979311 979271 vinesit 59504 17.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979382 976807 vinesit 59428 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979312 979270 vinesit 58952 17.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979310 979273 vinesit 58824 16.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979371 978739 vinesit 58400 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979302 979261 vinesit 57704 16.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 979377 978638 evolution 57064 0.0 S 00:00 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 979279 979250 evolution 57044 4.5 S 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 979388 962850 vinesit 54212 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2495169 1 wp-toolkit 46256 0.0 Ss 12:27:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 509236 509098 root 43536 0.0 Sl 12-11:21:19 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 42280 0.0 Ss 49-10:59:45 cpsrvd (SSL) - waiting for connections 1469 1 root 41924 0.1 Ss 72-03:31:14 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 979280 979258 evolution 38636 1.5 S 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 167562 166914 netdata 32368 0.1 Sl 3-11:18:34 /usr/libexec/netdata/plugins.d/go.d.plugin 1 2495193 1 root 31344 0.0 Ss 12:27:04 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 2729805 1 root 29360 0.0 Ss 11:18:35 lfd - sleeping 2495282 1 root 27420 0.1 Ssl 12:27:02 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 979300 979263 vinesit 23520 62.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1463 1 root 23308 0.0 Ss 72-03:31:14 tailwatchd 944048 506832 nobody 22948 0.1 S 06:55 /usr/sbin/httpd -k start 925456 506832 nobody 22872 0.1 S 12:01 /usr/sbin/httpd -k start 943926 506832 nobody 22856 0.0 S 07:02 /usr/sbin/httpd -k start 949310 506832 nobody 22828 0.0 S 05:51 /usr/sbin/httpd -k start 943862 506832 nobody 21652 0.0 S 07:04 /usr/sbin/httpd -k start 961482 506832 nobody 21516 0.0 S 03:42 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+----------------------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+----------------------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 6682502 | root | 108-1481181613 | Execute | 1 | Sending data | SELECT dispatchitems.*, dispatch.date, dispatch.status, jobInventory.parentid, jobInventory.referenceid FROM dispatch, dispatchitems, jobInventory WHERE dispatchitems.dispatchid=dispatch.id AND dispatch.jobid='29638' AND dispatchitems.j | | 6682556 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | | 6682553 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 6682552 | root | 108-1481181613 | Execute | 0 | Sending data | SELECT srcid, sum(qty) as qty from projectAssign where jobid = ? AND src='jobitems' AND activityid > 0 GROUP by srcid | +---------+----------------------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 826 evolution/portal.evolutionerp.com.au-ssl_log 404 vinesit/vinesit.com.au 55 vinesit/vinesit.com.au-ssl_log 30 madalice/madalice.com.au-ssl_log 20 aaa/aaadownunder.com.au-ssl_log 4 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 859 203.54.180.238 91 103.104.164.114 90 116.91.221.245 54 103.104.165.99 41 165.225.233.87 39 118.127.40.55 36 203.54.162.106 34 109.105.210.90 24 109.105.210.88 22 109.105.210.89 18 182.239.240.254 15 109.105.210.87 13 2001:8004:14b3:854f:854:48d5:f40d:5331 6 165.225.233.89 4 35.162.67.3 --- top request paths across all vhosts (last 3 min) --- 257 POST /functions.php 179 GET /factory_session_checker.php 147 GET /app/ajax.php 92 GET /factory_session_processed_qty.php 92 GET /factory_session_joiner.php 87 GET /index.php 55 POST /plugins/csvexporter/plugin.php 53 GET /heartbeat.php 28 POST /app/ajax/selectFilterSingle.php 26 POST /quoteditsave.php 25 POST /clienteditsave.php 18 GET /companies/85-1516155235/files/Forms%20and%20Templates/1713410864.html 18 GET /companies/85-1516155235/files/Forms%20and%20Templates/1713397831.html 17 POST /app/ajax/selectFilter.php 17 POST /app/ajax.php 15 GET //app/ajax.php 11 POST /invaddsave.php 10 POST /logsave.php 10 POST /jobeditsave.php 10 POST //functions.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 257 POST /functions.php 147 GET /app/ajax.php 85 GET /index.php 55 POST /plugins/csvexporter/plugin.php 28 POST /app/ajax/selectFilterSingle.php 26 POST /quoteditsave.php 25 POST /clienteditsave.php 18 GET /companies/85-1516155235/files/Forms%20and%20Templates/1713410864.html 18 GET /companies/85-1516155235/files/Forms%20and%20Templates/1713397831.html 17 POST /app/ajax/selectFilter.php 17 POST /app/ajax.php 15 GET //app/ajax.php -- last 10 requests -- 165.225.233.89 - - [09/Sep/2026:13:40:53 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dclientlist&call=getUserSetting&caller=ajaxSubmitLocal&seq=12796895129 HTTP/1.1" 200 92 "https://my.evolutionerp.com.au/index.php 203.54.180.238 - - [09/Sep/2026:13:40:53 +1000] "GET /index.php?page=inveditupload&id=4178&string= HTTP/1.1" 200 33784 "https://my.evolutionerp.com.au/index.php?page=inveditman&id=4178&string=" "Mozilla/5.0 (Windows NT 1 203.54.180.238 - - [09/Sep/2026:13:40:54 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=inveditupload&id=4178&string=" "Mozilla/5.0 (Windows NT 10.0; Win64; x 203.54.162.106 - - [09/Sep/2026:13:40:53 +1000] "POST /quoteditsave.php?save=autosave HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79262" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) App 203.54.180.238 - - [09/Sep/2026:13:40:54 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=19450445211 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/index 203.54.180.238 - - [09/Sep/2026:13:40:54 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=11424603858 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/inde 203.54.180.238 - - [09/Sep/2026:13:40:54 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Dinveditupload%26id%3D4178%26string%3D&call=getUserSetting&caller=ajaxSubmitLocal&seq=11625367847 HTTP/1.1" 200 203.54.180.238 - - [09/Sep/2026:13:40:54 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinveditupload%26id%3D4178%26string%3D&call=getUserSetting&caller=ajaxSubmitLocal&seq=17348060504 HTTP/1.1" 200 110 "https://my.e 203.54.180.238 - - [09/Sep/2026:13:40:54 +1000] "GET /index.php?page=inveditspecs&id=4178&string= HTTP/1.1" 200 12541 "https://my.evolutionerp.com.au/index.php?page=inveditupload&id=4178&string=" "Mozilla/5.0 (Windows NT 165.225.233.89 - - [09/Sep/2026:13:40:54 +1000] "POST /clienteditsave.php?call=getClients HTTP/1.1" 200 59 "https://my.evolutionerp.com.au/index.php?page=clientlist" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 179 GET /factory_session_checker.php 92 GET /factory_session_processed_qty.php 92 GET /factory_session_joiner.php 53 GET /heartbeat.php 2 GET /index.php -- last 10 requests -- 203.54.180.238 - - [09/Sep/2026:13:40:54 +1000] "GET /factory_session_joiner.php?id=35229 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [09/Sep/2026:13:40:54 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [09/Sep/2026:13:40:55 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [09/Sep/2026:13:40:54 +1000] "GET /heartbeat.php?sentAt=1788925254&bytes=106,160,213,70&_=1788868265835 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [09/Sep/2026:13:40:55 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 124 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [09/Sep/2026:13:40:55 +1000] "GET /factory_session_joiner.php?id=35230 HTTP/1.1" 200 86 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [09/Sep/2026:13:40:55 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [09/Sep/2026:13:40:57 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [09/Sep/2026:13:40:57 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [09/Sep/2026:13:40:57 +1000] "GET /factory_session_joiner.php?id=35232 HTTP/1.1" 200 79 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe == vinesit/vinesit.com.au == -- top paths -- 3 GET / 1 GET /wp-json 1 GET /wp-content/plugins/wp-super-cache/readme.txt 1 GET /wp-content/plugins/wps-hide-login/readme.txt 1 GET /wp-content/plugins/wp-optimize/readme.txt 1 GET /wp-content/plugins/wpforms-lite/readme.txt 1 GET /wp-content/plugins/wp-fastest-cache/readme.txt 1 GET /wp-content/plugins/wordpress-seo/readme.txt 1 GET /wp-content/plugins/woocommerce/readme.txt 1 GET /wp-content/plugins/w3-total-cache/readme.txt 1 GET /wp-content/plugins/updraftplus/readme.txt 1 GET /wp-content/plugins/svg-support/readme.txt -- last 10 requests -- 109.105.210.90 - - [09/Sep/2026:13:40:55 +1000] "GET /wp-content/plugins/svg-support/readme.txt HTTP/1.1" 301 312 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 109.105.210.87 - - [09/Sep/2026:13:40:55 +1000] "GET /wp-content/plugins/duplicator/readme.txt HTTP/1.1" 301 311 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 109.105.210.88 - - [09/Sep/2026:13:40:55 +1000] "GET /wp-content/plugins/hostinger/readme.txt HTTP/1.1" 301 310 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 109.105.210.89 - - [09/Sep/2026:13:40:55 +1000] "GET /wp-content/plugins/astra-sites/readme.txt HTTP/1.1" 301 312 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 109.105.210.90 - - [09/Sep/2026:13:40:55 +1000] "GET /wp-content/plugins/ewww-image-optimizer/readme.txt HTTP/1.1" 301 321 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 109.105.210.89 - - [09/Sep/2026:13:40:55 +1000] "GET /wp-content/plugins/disable-comments/readme.txt HTTP/1.1" 301 317 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 109.105.210.87 - - [09/Sep/2026:13:40:55 +1000] "GET /wp-content/plugins/redux-framework/readme.txt HTTP/1.1" 301 316 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 109.105.210.88 - - [09/Sep/2026:13:40:55 +1000] "GET /wp-content/plugins/akismet/readme.txt HTTP/1.1" 301 308 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 109.105.210.90 - - [09/Sep/2026:13:40:55 +1000] "GET /wp-content/plugins/smart-slider-3/readme.txt HTTP/1.1" 301 315 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" 109.105.210.90 - - [09/Sep/2026:13:40:55 +1000] "GET /wp-content/plugins/coming-soon/readme.txt HTTP/1.1" 301 312 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" --- last 30 samples (run-up to this incident) --- 2026-09-09 13:38:33 L1=1.48 run=1 blk=0 avail=8371 (60.8%) swpO=0 conn=2 myRSS=2649 php=4 phpRSS=156 ap=47 tcp=53 topuser=madalice 2026-09-09 13:38:36 L1=1.52 run=2 blk=0 avail=8379 (60.8%) swpO=0 conn=1 myRSS=2649 php=4 phpRSS=156 ap=45 tcp=48 topuser=madalice 2026-09-09 13:38:43 L1=1.40 run=1 blk=0 avail=8380 (60.8%) swpO=0 conn=2 myRSS=2649 php=4 phpRSS=156 ap=44 tcp=53 topuser=madalice 2026-09-09 13:38:46 L1=1.29 run=2 blk=0 avail=8361 (60.7%) swpO=0 conn=1 myRSS=2649 php=5 phpRSS=213 ap=44 tcp=47 topuser=madalice 2026-09-09 13:38:53 L1=1.34 run=4 blk=0 avail=8287 (60.2%) swpO=0 conn=2 myRSS=2649 php=13 phpRSS=502 ap=40 tcp=47 topuser=evolution 2026-09-09 13:38:56 L1=1.56 run=2 blk=1 avail=8356 (60.6%) swpO=0 conn=1 myRSS=2649 php=5 phpRSS=212 ap=43 tcp=53 topuser=madalice 2026-09-09 13:39:03 L1=1.51 run=8 blk=0 avail=8213 (59.6%) swpO=0 conn=2 myRSS=2649 php=4 phpRSS=176 ap=46 tcp=40 topuser=corpkicks 2026-09-09 13:39:06 L1=1.39 run=3 blk=0 avail=8361 (60.7%) swpO=1 conn=1 myRSS=2649 php=6 phpRSS=248 ap=43 tcp=41 topuser=madalice 2026-09-09 13:39:13 L1=1.36 run=2 blk=0 avail=8123 (59.0%) swpO=1 conn=2 myRSS=2649 php=6 phpRSS=452 ap=47 tcp=59 topuser=madalice 2026-09-09 13:39:16 L1=1.57 run=3 blk=0 avail=8102 (58.8%) swpO=0 conn=1 myRSS=2650 php=6 phpRSS=440 ap=48 tcp=59 topuser=madalice 2026-09-09 13:39:23 L1=2.09 run=1 blk=0 avail=7743 (56.2%) swpO=0 conn=2 myRSS=2650 php=9 phpRSS=839 ap=49 tcp=58 topuser=madalice 2026-09-09 13:39:26 L1=2.16 run=1 blk=0 avail=7750 (56.3%) swpO=0 conn=1 myRSS=2650 php=9 phpRSS=839 ap=49 tcp=49 topuser=madalice 2026-09-09 13:39:33 L1=2.15 run=1 blk=0 avail=7779 (56.5%) swpO=0 conn=2 myRSS=2650 php=9 phpRSS=838 ap=46 tcp=42 topuser=madalice 2026-09-09 13:39:36 L1=1.97 run=1 blk=0 avail=7798 (56.6%) swpO=0 conn=1 myRSS=2650 php=9 phpRSS=838 ap=43 tcp=41 topuser=madalice 2026-09-09 13:39:43 L1=1.98 run=3 blk=0 avail=7735 (56.1%) swpO=0 conn=2 myRSS=2650 php=13 phpRSS=1036 ap=40 tcp=44 topuser=madalice 2026-09-09 13:39:46 L1=2.06 run=2 blk=0 avail=7751 (56.3%) swpO=0 conn=1 myRSS=2650 php=11 phpRSS=946 ap=41 tcp=52 topuser=madalice 2026-09-09 13:39:53 L1=2.05 run=5 blk=0 avail=7652 (55.5%) swpO=0 conn=2 myRSS=2650 php=10 phpRSS=981 ap=43 tcp=47 topuser=madalice 2026-09-09 13:39:56 L1=1.97 run=3 blk=0 avail=7694 (55.8%) swpO=0 conn=1 myRSS=2650 php=10 phpRSS=974 ap=44 tcp=52 topuser=madalice 2026-09-09 13:40:03 L1=2.37 run=9 blk=0 avail=7696 (55.9%) swpO=0 conn=2 myRSS=2650 php=11 phpRSS=999 ap=42 tcp=41 topuser=madalice 2026-09-09 13:40:06 L1=2.42 run=9 blk=0 avail=7620 (55.3%) swpO=0 conn=1 myRSS=2650 php=14 phpRSS=1167 ap=40 tcp=48 topuser=madalice 2026-09-09 13:40:13 L1=2.31 run=4 blk=0 avail=7792 (56.6%) swpO=0 conn=1 myRSS=2650 php=9 phpRSS=799 ap=48 tcp=57 topuser=madalice 2026-09-09 13:40:16 L1=2.20 run=4 blk=0 avail=7486 (54.3%) swpO=0 conn=1 myRSS=2650 php=12 phpRSS=1164 ap=54 tcp=65 topuser=madalice 2026-09-09 13:40:23 L1=2.19 run=3 blk=0 avail=7729 (56.1%) swpO=0 conn=1 myRSS=2650 php=10 phpRSS=845 ap=56 tcp=61 topuser=madalice 2026-09-09 13:40:26 L1=2.01 run=1 blk=0 avail=7869 (57.1%) swpO=0 conn=1 myRSS=2650 php=7 phpRSS=616 ap=57 tcp=67 topuser=madalice 2026-09-09 13:40:33 L1=1.93 run=2 blk=0 avail=8237 (59.8%) swpO=0 conn=1 myRSS=2650 php=4 phpRSS=201 ap=57 tcp=44 topuser=madalice 2026-09-09 13:40:37 L1=1.94 run=2 blk=0 avail=8252 (59.9%) swpO=0 conn=2 myRSS=2650 php=5 phpRSS=232 ap=54 tcp=55 topuser=madalice 2026-09-09 13:40:43 L1=1.78 run=4 blk=0 avail=8209 (59.6%) swpO=0 conn=1 myRSS=2650 php=6 phpRSS=320 ap=50 tcp=51 topuser=madalice 2026-09-09 13:40:47 L1=1.88 run=4 blk=0 avail=8214 (59.6%) swpO=0 conn=2 myRSS=2650 php=9 phpRSS=378 ap=52 tcp=64 topuser=evolution 2026-09-09 13:40:53 L1=2.05 run=2 blk=0 avail=8037 (58.3%) swpO=0 conn=1 myRSS=2651 php=7 phpRSS=295 ap=79 tcp=133 topuser=madalice 2026-09-09 13:40:57 L1=1.96 run=45 blk=0 avail=6432 (46.7%) swpO=533 conn=28 myRSS=2649 php=43 phpRSS=2543 ap=153 tcp=159 topuser=vinesit