INCIDENT 2026-09-09 13:58:19 trigger: mysql_conn=16 ================================================================== load: 4.00 2.09 1.75 20/687 1038127 ncpu:10 mem_avail: 7504MB/13777MB (54.5%) swap_used:1333MB swapout:0/s blocked(D):0 running:16 iowait:0.1% steal:0.0% php: 20 procs / 1288MB heaviest user: tubesupplies (15 procs, 1090MB) apache: 84 procs tcp_estab: 88 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2647 nobody 83 1325 tubesupplies 15 1275 root 246 1010 mailman 20 284 netdata 8 245 madalice 1 156 wp-toolkit 3 106 evolution 11 42 dovenull 6 28 kurri 2 23 mailnull 3 22 polkitd 1 17 cpanellogin 1 13 kamcool 1 10 dovecot 3 9 zabbix 1 8 nscd 1 5 named 1 5 cpanelconnecttrack 1 4 --- php workers by user --- USER PROCS RSS_MB tubesupplies 15 1313 madalice 1 156 evolution 3 39 root 1 2 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6075 MB Active(file): 4510 MB Inactive(file): 1092 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 519 MB CommitLimit: 10984 MB Committed_AS: 10366 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 8-11:35:56 3632 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2330591 1 mysql 2711108 15.6 Ssl 1-09:12:53 /usr/sbin/mariadbd 166870 1 netdata 194652 2.8 Ssl 3-11:36:02 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 795800 2730373 root 168024 0.1 S 01:07:23 spamd child 1037257 167896 madalice 160168 11.1 S 00:45 php-fpm: pool madalice_com_au 2746767 2730373 root 160088 0.0 S 11:32:27 spamd child 1038066 1036303 tubesupplies 153264 127 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1038059 1038049 tubesupplies 147628 61.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1038061 1038048 tubesupplies 142468 58.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1038064 1038053 tubesupplies 137044 64.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1038068 1037771 tubesupplies 125512 110 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328754 1 root 121932 0.0 Ss 1-09:13:03 /usr/lib/systemd/systemd-journald 2730373 1 root 119448 0.0 Ss 11:35:32 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1038065 1036588 tubesupplies 112844 48.0 S 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1038069 1035987 tubesupplies 87976 61.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1038101 1038018 tubesupplies 86124 53.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1038073 1038019 tubesupplies 81920 55.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1038070 1037178 tubesupplies 81772 51.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1038104 1036589 tubesupplies 75248 49.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1038074 1036167 tubesupplies 72728 45.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1038075 1038006 tubesupplies 66364 33.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1038103 1036546 tubesupplies 61244 28.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2495258 1 wp-toolkit 59304 0.0 Ss 12:44:27 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 509236 509098 root 43184 0.0 Sl 12-11:38:42 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1469 1 root 41924 0.1 Ss 72-03:48:37 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2495169 1 wp-toolkit 41884 0.0 Ss 12:44:27 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1353308 1 root 41820 0.0 Ss 49-11:17:08 cpsrvd (SSL) - waiting for connections 1038137 1469 root 38976 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1038123 1469 root 38972 0.0 S 00:01 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1038132 1469 root 38972 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1038141 1469 root 38972 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1038138 1469 root 38952 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1038142 1469 root 38948 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 167562 166914 netdata 32356 0.1 Sl 3-11:35:57 /usr/libexec/netdata/plugins.d/go.d.plugin 1 2729805 1 root 29380 0.0 Ss 11:35:58 lfd - sleeping 1038170 1469 root 29180 0.0 R 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2495193 1 root 27624 0.0 Ss 12:44:27 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 2495282 1 root 26836 0.1 Rsl 12:44:25 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 1463 1 root 23024 0.0 Ss 72-03:48:37 tailwatchd 1019205 506832 nobody 22900 0.0 S 04:40 /usr/sbin/httpd -k start 1017129 506832 nobody 22524 0.0 S 07:23 /usr/sbin/httpd -k start 1019218 506832 nobody 22156 0.1 S 04:39 /usr/sbin/httpd -k start 1020361 506832 nobody 21952 0.0 S 03:23 /usr/sbin/httpd -k start 1035605 506832 nobody 21856 0.1 S 02:22 /usr/sbin/httpd -k start 1035580 506832 nobody 21848 0.0 S 02:23 /usr/sbin/httpd -k start 1036303 506832 nobody 21540 0.1 S 01:41 /usr/sbin/httpd -k start 1020368 506832 nobody 21356 0.0 S 03:22 /usr/sbin/httpd -k start 1020326 506832 nobody 21300 0.0 S 03:26 /usr/sbin/httpd -k start 1036905 506832 nobody 21300 0.0 S 01:01 /usr/sbin/httpd -k start 1019878 506832 nobody 21288 0.0 S 04:00 /usr/sbin/httpd -k start 1035518 506832 nobody 21260 0.1 S 02:26 /usr/sbin/httpd -k start 1035987 506832 nobody 21064 0.1 S 01:54 /usr/sbin/httpd -k start 1035407 506832 nobody 21012 0.0 S 02:39 /usr/sbin/httpd -k start 1035997 506832 nobody 20880 0.0 S 01:53 /usr/sbin/httpd -k start 1035604 506832 nobody 20708 0.1 S 02:22 /usr/sbin/httpd -k start 1036304 506832 nobody 20704 0.0 S 01:41 /usr/sbin/httpd -k start 1036306 506832 nobody 20676 0.1 S 01:41 /usr/sbin/httpd -k start 1036640 506832 nobody 20560 0.0 S 01:19 /usr/sbin/httpd -k start 1018956 506832 nobody 20384 0.0 S 04:58 /usr/sbin/httpd -k start 1036589 506832 nobody 20208 0.0 S 01:21 /usr/sbin/httpd -k start 1036168 506832 nobody 20104 0.0 S 01:42 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+-----------------------+-----------------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+-----------------------+-----------------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 6818397 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 6818375 | tubesupplies_wp_wfe9g | tubesupplies_wp_2gzao | Query | 0 | Commit | INSERT INTO `7QNYeM0E_options` (`option_name`, `option_value`, `autoload`) VALUES ('_elementor_design_system_sync_css_meta', 'a:2:{s:4:\"time\";i:1788926300;i:0;b:0;}', 'auto') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES | +---------+-----------------------+-----------------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 517 evolution/portal.evolutionerp.com.au-ssl_log 350 corpkicks/corporatekicks.com.au-ssl_log 168 tubesupplies/tubesupplies.com.au-ssl_log 166 evolution/evolutionerp.com.au-ssl_log 12 madalice/madalice.com.au-ssl_log 6 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 644 203.54.180.238 173 35.234.11.225 164 34.52.197.159 82 116.91.221.245 37 147.161.213.78 31 103.104.164.114 19 1.145.107.231 19 103.104.165.99 11 203.54.162.106 9 182.239.240.254 4 165.225.233.87 4 118.127.40.55 3 54.174.58.254 2 54.174.58.251 2 54.174.58.224 --- top request paths across all vhosts (last 3 min) --- 170 POST /functions.php 135 GET /factory_session_checker.php 88 GET /app/ajax.php 70 GET /factory_session_processed_qty.php 70 GET /factory_session_joiner.php 67 GET /heartbeat.php 36 GET /index.php 25 GET //app/ajax.php 21 POST /plugins/csvexporter/plugin.php 21 POST /app/ajax/selectFilterSingle.php 16 POST /app/ajax/selectFilter.php 16 POST /app/ajax.php 11 POST /quoteditsave.php 11 POST /clienteditsave.php 11 GET / 10 POST //itemModify.php 10 POST //clienteditsave.php 10 POST //app/ajax/selectFilter.php 7 POST //functions.php 6 POST //app/ajax.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 170 POST /functions.php 88 GET /app/ajax.php 34 GET /index.php 25 GET //app/ajax.php 21 POST /plugins/csvexporter/plugin.php 21 POST /app/ajax/selectFilterSingle.php 16 POST /app/ajax/selectFilter.php 16 POST /app/ajax.php 11 POST /quoteditsave.php 11 POST /clienteditsave.php 10 POST //itemModify.php 10 POST //clienteditsave.php -- last 10 requests -- 203.54.162.106 - - [09/Sep/2026:13:58:13 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 203.54.180.238 - - [09/Sep/2026:13:58:14 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 2872 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29732&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [09/Sep/2026:13:58:14 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 24584 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29732&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Wi 203.54.180.238 - - [09/Sep/2026:13:58:14 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 238 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 103.104.165.99 - - [09/Sep/2026:13:58:14 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=billreg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 203.54.180.238 - - [09/Sep/2026:13:58:14 +1000] "POST /app/ajax/selectFilter.php?call=filtercontact&filter=ACCESS%20D HTTP/1.1" 200 911 "https://my.evolutionerp.com.au/index.php?page=invedit&id=6568&tab=purchasetab" "Moz 203.54.162.106 - - [09/Sep/2026:13:58:14 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dquotereg&call=getUserSetting&caller=ajaxSubmitLocal&seq=10572463944 HTTP/1.1" 200 160 "https://my.evolutionerp.com.au/index.php? 203.54.180.238 - - [09/Sep/2026:13:58:15 +1000] "POST /app/ajax/selectFilter.php?call=filtercontact&filter=ACCESS%20D HTTP/1.1" 200 911 "https://my.evolutionerp.com.au/index.php?page=invedit&id=6568&tab=purchasetab" "Moz 203.54.162.106 - - [09/Sep/2026:13:58:14 +1000] "POST /quoteditsave.php?call=getTheQuotes HTTP/1.1" 200 12885 "https://my.evolutionerp.com.au/index.php?page=quotereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi 203.54.180.238 - - [09/Sep/2026:13:58:15 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29732&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 135 GET /factory_session_checker.php 70 GET /factory_session_processed_qty.php 70 GET /factory_session_joiner.php 67 GET /heartbeat.php 2 POST /portal/register 2 GET /uploadsave.php 2 GET /index.php 1 POST /uploadsave.php 1 POST /inventory.php -- last 10 requests -- 203.54.180.238 - - [09/Sep/2026:13:58:16 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [09/Sep/2026:13:58:16 +1000] "GET /factory_session_joiner.php?id=35229 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [09/Sep/2026:13:58:16 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [09/Sep/2026:13:58:16 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [09/Sep/2026:13:58:16 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 124 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [09/Sep/2026:13:58:16 +1000] "GET /factory_session_joiner.php?id=35230 HTTP/1.1" 200 86 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [09/Sep/2026:13:58:17 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 127 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [09/Sep/2026:13:58:17 +1000] "GET /factory_session_joiner.php?id=35192 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [09/Sep/2026:13:58:17 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [09/Sep/2026:13:58:18 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 == corpkicks/corporatekicks.com.au-ssl_log == -- top paths -- 3 GET / 2 POST /wp-cron.php 2 GET /@fs/proc/self/environ 1 HEAD / 1 GET /wp-config.php.old 1 GET /wp-config.php.bak 1 GET /wp-config.php 1 GET /web/.env 1 GET /@vite/env 1 GET /v2/.env 1 GET /v1/graphql 1 GET /v1/.env -- last 10 requests -- 34.52.197.159 - - [09/Sep/2026:13:58:07 +1000] "GET /actuator/configprops HTTP/1.1" 401 53 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.52.197.159 - - [09/Sep/2026:13:58:07 +1000] "GET /config.php.bak HTTP/1.1" 401 53 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.52.197.159 - - [09/Sep/2026:13:58:07 +1000] "GET /config/secrets.yml HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +Claude-User@ 34.52.197.159 - - [09/Sep/2026:13:58:07 +1000] "GET /actuator/env HTTP/1.1" 401 53 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot)" 34.52.197.159 - - [09/Sep/2026:13:58:07 +1000] "GET /graphql HTTP/1.1" 401 53 "-" "Mozilla/5.0 (compatible; TelegramBot/1.0)" 34.52.197.159 - - [09/Sep/2026:13:58:11 +1000] "GET /.hermes/.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:150.19) Gecko/20100101 Firefox/150.19; compatible; GrokBot/1.0; +https://x.ai/grokbot" 34.52.197.159 - - [09/Sep/2026:13:58:11 +1000] "GET /.codex/config.toml HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.2558.230 Safari/537.36; compatibl 34.52.197.159 - - [09/Sep/2026:13:58:11 +1000] "GET /.hermes/config.yaml HTTP/1.1" 401 53 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Twitterbot/1.0" 34.52.197.159 - - [09/Sep/2026:13:58:11 +1000] "GET /.openclaw/.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/ 34.52.197.159 - - [09/Sep/2026:13:58:20 +1000] "GET /admin HTTP/1.1" 401 53 "-" "Mozilla/5.0 (compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots)" --- last 30 samples (run-up to this incident) --- 2026-09-09 13:55:54 L1=1.05 run=4 blk=0 avail=8358 (60.7%) swpO=0 conn=2 myRSS=2646 php=8 phpRSS=393 ap=35 tcp=44 topuser=madalice 2026-09-09 13:55:59 L1=1.13 run=2 blk=0 avail=8210 (59.6%) swpO=0 conn=3 myRSS=2646 php=5 phpRSS=266 ap=65 tcp=60 topuser=madalice 2026-09-09 13:56:04 L1=1.12 run=3 blk=0 avail=8192 (59.5%) swpO=1 conn=2 myRSS=2646 php=6 phpRSS=330 ap=60 tcp=53 topuser=madalice 2026-09-09 13:56:09 L1=1.03 run=2 blk=0 avail=8219 (59.7%) swpO=1 conn=3 myRSS=2646 php=6 phpRSS=339 ap=56 tcp=54 topuser=madalice 2026-09-09 13:56:14 L1=0.95 run=4 blk=0 avail=8212 (59.6%) swpO=0 conn=2 myRSS=2646 php=9 phpRSS=458 ap=50 tcp=45 topuser=madalice 2026-09-09 13:56:19 L1=0.95 run=2 blk=0 avail=8225 (59.7%) swpO=0 conn=2 myRSS=2646 php=9 phpRSS=459 ap=48 tcp=61 topuser=madalice 2026-09-09 13:56:24 L1=0.87 run=3 blk=0 avail=8349 (60.6%) swpO=0 conn=2 myRSS=2646 php=7 phpRSS=313 ap=45 tcp=47 topuser=evolution 2026-09-09 13:56:29 L1=1.12 run=1 blk=0 avail=8375 (60.8%) swpO=0 conn=2 myRSS=2646 php=4 phpRSS=157 ap=52 tcp=60 topuser=madalice 2026-09-09 13:56:34 L1=1.03 run=5 blk=0 avail=8338 (60.5%) swpO=0 conn=2 myRSS=2646 php=8 phpRSS=321 ap=49 tcp=51 topuser=evolution 2026-09-09 13:56:39 L1=1.03 run=5 blk=0 avail=8337 (60.5%) swpO=0 conn=2 myRSS=2646 php=6 phpRSS=238 ap=50 tcp=67 topuser=madalice 2026-09-09 13:56:44 L1=1.03 run=3 blk=0 avail=8432 (61.2%) swpO=0 conn=3 myRSS=2646 php=8 phpRSS=215 ap=51 tcp=49 topuser=evolution 2026-09-09 13:56:49 L1=1.11 run=5 blk=0 avail=8378 (60.8%) swpO=0 conn=2 myRSS=2646 php=7 phpRSS=216 ap=48 tcp=61 topuser=madalice 2026-09-09 13:56:54 L1=1.10 run=3 blk=0 avail=8148 (59.1%) swpO=0 conn=3 myRSS=2646 php=7 phpRSS=487 ap=48 tcp=50 topuser=evolution 2026-09-09 13:56:59 L1=1.17 run=3 blk=0 avail=8331 (60.5%) swpO=0 conn=2 myRSS=2646 php=6 phpRSS=251 ap=49 tcp=65 topuser=madalice 2026-09-09 13:57:04 L1=1.32 run=4 blk=0 avail=8318 (60.4%) swpO=0 conn=3 myRSS=2646 php=7 phpRSS=287 ap=53 tcp=58 topuser=madalice 2026-09-09 13:57:09 L1=1.21 run=5 blk=0 avail=8218 (59.7%) swpO=0 conn=2 myRSS=2646 php=12 phpRSS=520 ap=53 tcp=65 topuser=evolution 2026-09-09 13:57:14 L1=1.19 run=11 blk=0 avail=8081 (58.7%) swpO=0 conn=3 myRSS=2646 php=13 phpRSS=718 ap=50 tcp=66 topuser=tubesupplies 2026-09-09 13:57:19 L1=1.10 run=3 blk=0 avail=8230 (59.7%) swpO=0 conn=2 myRSS=2646 php=5 phpRSS=255 ap=57 tcp=75 topuser=madalice 2026-09-09 13:57:24 L1=1.09 run=2 blk=0 avail=8244 (59.8%) swpO=0 conn=3 myRSS=2646 php=7 phpRSS=285 ap=63 tcp=58 topuser=evolution 2026-09-09 13:57:29 L1=1.96 run=3 blk=0 avail=8279 (60.1%) swpO=0 conn=2 myRSS=2646 php=5 phpRSS=193 ap=61 tcp=56 topuser=madalice 2026-09-09 13:57:35 L1=1.81 run=16 blk=0 avail=7788 (56.5%) swpO=2 conn=3 myRSS=2646 php=17 phpRSS=1091 ap=60 tcp=69 topuser=tubesupplies 2026-09-09 13:57:39 L1=3.02 run=6 blk=0 avail=7927 (57.5%) swpO=2 conn=2 myRSS=2646 php=15 phpRSS=828 ap=63 tcp=60 topuser=madalice 2026-09-09 13:57:45 L1=3.82 run=16 blk=0 avail=7587 (55.1%) swpO=0 conn=11 myRSS=2646 php=13 phpRSS=1068 ap=60 tcp=57 topuser=tubesupplies 2026-09-09 13:57:49 L1=4.32 run=6 blk=0 avail=7988 (58.0%) swpO=0 conn=2 myRSS=2646 php=11 phpRSS=694 ap=58 tcp=56 topuser=madalice 2026-09-09 13:57:55 L1=4.45 run=6 blk=0 avail=8120 (58.9%) swpO=0 conn=11 myRSS=2647 php=7 phpRSS=487 ap=55 tcp=57 topuser=madalice 2026-09-09 13:57:59 L1=4.18 run=2 blk=0 avail=8139 (59.1%) swpO=0 conn=2 myRSS=2647 php=5 phpRSS=317 ap=53 tcp=72 topuser=madalice 2026-09-09 13:58:05 L1=4.48 run=5 blk=0 avail=7907 (57.4%) swpO=0 conn=11 myRSS=2647 php=8 phpRSS=647 ap=54 tcp=56 topuser=madalice 2026-09-09 13:58:09 L1=4.12 run=8 blk=0 avail=7856 (57.0%) swpO=0 conn=2 myRSS=2647 php=9 phpRSS=660 ap=55 tcp=58 topuser=tubesupplies 2026-09-09 13:58:15 L1=4.35 run=1 blk=0 avail=8287 (60.2%) swpO=0 conn=11 myRSS=2647 php=4 phpRSS=157 ap=54 tcp=77 topuser=madalice 2026-09-09 13:58:19 L1=4.00 run=16 blk=0 avail=7504 (54.5%) swpO=0 conn=16 myRSS=2647 php=20 phpRSS=1288 ap=84 tcp=88 topuser=tubesupplies