INCIDENT 2026-09-10 13:24:40 trigger: load=359.51/10cpu ================================================================== load: 359.51 283.91 140.22 5/761 1838498 ncpu:10 mem_avail: 10064MB/13777MB (73.1%) swap_used:1854MB swapout:595/s blocked(D):0 running:7 iowait:7.6% steal:0.0% php: 17 procs / 819MB heaviest user: madalice (8 procs, 336MB) apache: 145 procs tcp_estab: 77 --- RSS by user (all processes) --- USER PROCS RSS_MB nobody 144 1764 root 263 948 mysql 1 535 madalice 8 338 speedlin 2 230 netdata 8 180 olympic 1 130 evolution 5 65 aaa 3 35 mailman 20 31 dovenull 6 17 cpanellogin 1 16 zabbix 1 14 mailnull 3 14 wp-toolkit 3 11 lowrange 1 11 corpkicks 1 11 candyfabcom 1 11 kurri 1 10 dovecot 3 8 --- php workers by user --- USER PROCS RSS_MB madalice 8 339 speedlin 2 231 olympic 1 130 evolution 3 64 root 1 0 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 1338 MB Active(file): 587 MB Inactive(file): 669 MB Dirty: 8 MB Writeback: 0 MB SReclaimable: 198 MB CommitLimit: 10984 MB Committed_AS: 10498 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 9-11:02:16 4644 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 1832926 1 mysql 548160 29.9 Ssl 00:10 /usr/sbin/mariadbd 1834469 1834361 root 175896 26.2 Ss 00:08 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/perl/542/bin/spamd --allowed-ips=127.0.0.1,::1 --max-chil 1838451 1834469 root 167952 0.0 S 00:01 spamd child 1838449 1834469 root 167948 0.0 S 00:01 spamd child 1821136 167896 madalice 151216 2.8 D 09:38 php-fpm: pool madalice_com_au 1838413 1826834 speedlin 147456 30.7 S 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1838448 1826938 olympic 133844 112 S 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 166870 1 netdata 125444 2.8 Ssl 4-11:02:22 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1838456 1818574 speedlin 98972 65.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1838454 1829363 evolution 69132 13.0 D 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 167562 166914 netdata 36700 0.1 Sl 4-11:02:17 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1353308 1 root 35944 0.0 Ss 50-10:43:28 cpsrvd (SSL) - waiting for connections 1833790 1353308 root 34000 0.0 S 00:09 cpaneld - serving 127.0.0.1 1833780 1353308 root 33996 0.0 S 00:09 cpsrvd (SSL) - waiting for connections 1833793 1353308 root 33940 0.0 S 00:09 cpaneld - serving 127.0.0.1 1833797 1353308 root 33924 0.0 S 00:09 cpaneld - serving 127.0.0.1 1833799 1353308 root 33876 0.0 S 00:09 cpaneld - serving 127.0.0.1 1833776 1353308 root 33044 0.0 S 00:09 whostmgrd - serving 1.144.107.82 1830672 167896 madalice 31276 1.9 S 04:34 php-fpm: pool madalice_com_au 1830673 167896 madalice 31260 1.8 S 04:32 php-fpm: pool madalice_com_au 1830525 167896 madalice 29324 2.5 S 06:06 php-fpm: pool madalice_com_au 1830602 167896 madalice 29088 2.2 S 05:20 php-fpm: pool madalice_com_au 1830475 167896 madalice 28744 2.7 S 06:13 php-fpm: pool madalice_com_au 1830600 167896 madalice 24500 2.5 S 05:22 php-fpm: pool madalice_com_au 1830586 167896 madalice 24432 2.4 S 05:32 php-fpm: pool madalice_com_au 1828478 506832 nobody 20844 0.0 S 08:56 /usr/sbin/httpd -k start 1830506 1463 root 20364 2.3 S 06:08 tailwatchd - chkservd - spamd check 1830000 506832 nobody 20344 0.9 S 08:19 /usr/sbin/httpd -k start 1828475 506832 nobody 19576 0.6 S 08:56 /usr/sbin/httpd -k start 167566 166914 netdata 19360 2.2 Sl 4-11:02:17 /usr/libexec/netdata/plugins.d/apps.plugin 1 1828466 506832 nobody 18888 0.4 S 08:56 /usr/sbin/httpd -k start 1828970 506832 nobody 18708 0.0 S 08:50 /usr/sbin/httpd -k start 1828393 506832 nobody 18692 0.2 S 08:57 /usr/sbin/httpd -k start 1834295 1830506 root 18676 0.1 S 00:08 /usr/local/cpanel/scripts/restartsrv_spamd --restart --hard --attempt 1 1828482 506832 nobody 18524 0.0 S 08:56 /usr/sbin/httpd -k start 1829262 506832 nobody 18476 0.6 S 08:47 /usr/sbin/httpd -k start 1829357 506832 nobody 18384 0.7 S 08:46 /usr/sbin/httpd -k start 1828401 506832 nobody 18332 0.0 S 08:57 /usr/sbin/httpd -k start 1828399 506832 nobody 18080 0.3 S 08:57 /usr/sbin/httpd -k start 1829358 506832 nobody 17868 0.6 S 08:46 /usr/sbin/httpd -k start 1829351 506832 nobody 17740 0.7 S 08:46 /usr/sbin/httpd -k start 1829363 506832 nobody 17620 0.5 S 08:46 /usr/sbin/httpd -k start 1829361 506832 nobody 17544 0.3 S 08:46 /usr/sbin/httpd -k start 1828476 506832 nobody 17016 0.0 S 08:56 /usr/sbin/httpd -k start 1829360 506832 nobody 16956 0.6 S 08:46 /usr/sbin/httpd -k start 1829365 506832 nobody 16956 0.6 S 08:46 /usr/sbin/httpd -k start 1828464 506832 nobody 16856 1.0 S 08:56 /usr/sbin/httpd -k start 1829255 506832 nobody 16832 0.6 S 08:47 /usr/sbin/httpd -k start 1833759 1353308 cpanellogin 16640 0.2 S 00:09 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale default_login_theme cpanel server_locale en 1830483 506832 nobody 16552 0.7 S 06:11 /usr/sbin/httpd -k start 1829362 506832 nobody 16368 0.2 S 08:46 /usr/sbin/httpd -k start 1829354 506832 nobody 16344 0.5 S 08:46 /usr/sbin/httpd -k start 1828477 506832 nobody 16168 0.3 S 08:56 /usr/sbin/httpd -k start 1829094 506832 nobody 16116 0.1 S 08:49 /usr/sbin/httpd -k start 1828395 506832 nobody 16004 0.0 S 08:57 /usr/sbin/httpd -k start 1828394 506832 nobody 15768 0.2 S 08:57 /usr/sbin/httpd -k start 1828397 506832 nobody 15604 0.0 S 08:57 /usr/sbin/httpd -k start 1829359 506832 nobody 15604 0.6 S 08:46 /usr/sbin/httpd -k start 1828474 506832 nobody 15600 0.0 S 08:56 /usr/sbin/httpd -k start 1828392 506832 nobody 15592 0.0 S 08:57 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- 1838454 D - /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1838467 D - /usr/sbin/httpd -k start --- mariadb processlist (non-sleeping) --- +-----+------------+------------+---------+------+----------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +-----+------------+------------+---------+------+----------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 400 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 345 | olympic_wp | olympic_wp | Query | 0 | Statistics | SELECT a.*, g.slug AS `group` FROM nqNZ24_actionscheduler_actions a LEFT JOIN nqNZ24_actionscheduler_groups g ON a.group_id=g.group_id WHERE a.action_id=40866 | +-----+------------+------------+---------+------+----------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 46 evolution/my.evolutionerp.com.au-ssl_log 38 olympic/olympicfencing.com.au 20 madalice/madalice.com.au-ssl_log 5 evolution/portal.evolutionerp.com.au-ssl_log 2 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 46 40.115.94.245 26 203.54.180.238 17 185.190.143.21 9 147.161.213.71 4 34.165.225.103 2 103.104.165.99 2 103.104.164.114 1 207.46.13.87 1 165.225.233.87 1 1.145.125.62 1 114.119.143.14 1 101.166.96.210 --- top request paths across all vhosts (last 3 min) --- 21 POST /functions.php 11 GET /index.php 3 GET /logoff.php 3 GET /app/ajax.php 3 GET / 2 GET /heartbeat.php 2 GET /api/getItem/SHSG404016-DP25-24-DI-110 1 GET /wp-includes/widgets/ 1 GET /wp-includes/sitemaps/providers/ 1 GET /wp-includes/PHPMailer/ 1 GET /wp-includes/js/plupload/ 1 GET /wp-includes/js/codemirror/ 1 GET /wp-includes/js/ 1 GET /wp-includes/IXR/ 1 GET /wp-includes/images/ 1 GET /wp-content/uploads/ 1 GET /wp-content/upgrade/ 1 GET /wp-content/themes/ 1 GET /wp-content/plugins/ 1 GET /wp-content/languages/ --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 2 GET /api/getItem/SHSG404016-DP25-24-DI-110 1 GET /api/getItem/SHSG909020-8 1 GET /api/getItem/SHSG898950-8 1 GET /api/getItem/SHSG898935-8 1 GET /api/getItem/SHSG898930-8 1 GET /api/getItem/SHSG898920-8 1 GET /api/getItem/SHSG656520-DP25-8 1 GET /api/getItem/SHSG505016-SP25-8 1 GET /api/getItem/SHSG505016-SP19-8 1 GET /api/getItem/SHSG505016-DP25-8-DI 1 GET /api/getItem/SHSG505016-DP25-8 1 GET /api/getItem/SHSG505016-DP19-8 -- last 10 requests -- 40.115.94.245 - - [10/Sep/2026:13:24:38 +1000] "GET /api/getItem/CLPGNSTD45315KK HTTP/1.1" 200 1540 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:13:24:38 +1000] "GET /api/getItem/SHSG505016-DP25-8 HTTP/1.1" 200 1548 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:13:24:39 +1000] "GET /api/getItem/CLPGNSTD50250KK HTTP/1.1" 200 1539 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:13:24:39 +1000] "GET /api/getItem/SHSG505016-DP25-8-DI HTTP/1.1" 200 1397 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:13:24:39 +1000] "GET /api/getItem/CLPGNSTD50315KK HTTP/1.1" 200 1541 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:13:24:39 +1000] "GET /api/getItem/SHSG505016-SP19-8 HTTP/1.1" 200 1532 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:13:24:39 +1000] "GET /api/getItem/CLHGNSTD32315KK HTTP/1.1" 200 1546 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:13:24:40 +1000] "GET /api/getItem/SHSG505016-SP25-8 HTTP/1.1" 200 1549 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:13:24:40 +1000] "GET /api/getItem/CLHGNSTD40250KK HTTP/1.1" 200 1547 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:13:24:40 +1000] "GET /api/getItem/SHSG656520-DP25-8 HTTP/1.1" 200 1414 "-" "RestSharp/106.13.0.0" == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 21 POST /functions.php 11 GET /index.php 3 GET /logoff.php 3 GET /app/ajax.php -- last 10 requests -- 203.54.180.238 - - [10/Sep/2026:13:24:26 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79300§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win64 1.145.125.62 - - [10/Sep/2026:13:24:27 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=6965§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x 103.104.165.99 - - [10/Sep/2026:13:24:30 +1000] "GET /index.php HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php?page=clientlist" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko 203.54.180.238 - - [10/Sep/2026:13:24:27 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78322" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple 165.225.233.87 - - [10/Sep/2026:13:24:28 +1000] "GET /index.php?page=report HTTP/1.1" 500 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 147.161.213.71 - - [10/Sep/2026:13:24:31 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dsiteedit%26siteid%3D4272&call=getUserSetting&caller=ajaxSubmitLocal&seq=16656854600 HTTP/1.1" 200 100 "https://my.evolutionerp.c 147.161.213.71 - - [10/Sep/2026:13:24:31 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 52 "https://my.evolutionerp.com.au/index.php?page=siteedit&siteid=4272" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe 203.54.180.238 - - [10/Sep/2026:13:24:28 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79300§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win64 147.161.213.71 - - [10/Sep/2026:13:24:33 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 52 "https://my.evolutionerp.com.au/index.php?page=report&file=testTagRetest3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) A 147.161.213.71 - - [10/Sep/2026:13:24:33 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dreport%26file%3DtestTagRetest3&call=getUserSetting&caller=ajaxSubmitLocal&seq=16620745594 HTTP/1.1" 200 106 "https://my.evolutio == olympic/olympicfencing.com.au == -- top paths -- 3 GET / 1 GET /wp-includes/widgets/ 1 GET /wp-includes/sitemaps/providers/ 1 GET /wp-includes/PHPMailer/ 1 GET /wp-includes/js/plupload/ 1 GET /wp-includes/js/codemirror/ 1 GET /wp-includes/js/ 1 GET /wp-includes/IXR/ 1 GET /wp-includes/images/ 1 GET /wp-content/uploads/ 1 GET /wp-content/upgrade/ 1 GET /wp-content/themes/ -- last 10 requests -- 185.190.143.21 - - [10/Sep/2026:13:24:24 +1000] "GET /wp-includes/widgets/ HTTP/1.1" 301 298 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.190.143.21 - - [10/Sep/2026:13:24:24 +1000] "GET /wp-content/ HTTP/1.1" 301 289 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.190.143.21 - - [10/Sep/2026:13:24:24 +1000] "GET /wp-content/languages/ HTTP/1.1" 301 299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.190.143.21 - - [10/Sep/2026:13:24:24 +1000] "GET /wp-content/IXR/ HTTP/1.1" 301 293 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.190.143.21 - - [10/Sep/2026:13:24:24 +1000] "GET /wp-content/uploads/ HTTP/1.1" 301 297 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.190.143.21 - - [10/Sep/2026:13:24:25 +1000] "GET /wp-content/upgrade/ HTTP/1.1" 301 297 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.190.143.21 - - [10/Sep/2026:13:24:25 +1000] "GET /wp-content/plugins/ HTTP/1.1" 301 297 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.190.143.21 - - [10/Sep/2026:13:24:25 +1000] "GET /wp-content/themes/ HTTP/1.1" 301 296 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.190.143.21 - - [10/Sep/2026:13:24:25 +1000] "GET /.well-known/ HTTP/1.1" 301 290 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 185.190.143.21 - - [10/Sep/2026:13:24:25 +1000] "GET /uploads/ HTTP/1.1" 301 286 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" --- last 30 samples (run-up to this incident) --- 2026-09-10 13:13:45 L1=2.43 run=7 blk=0 avail=7703 (55.9%) swpO=0 conn=4 myRSS=3005 php=6 phpRSS=319 ap=37 tcp=40 topuser=madalice 2026-09-10 13:13:55 L1=2.51 run=1 blk=0 avail=7797 (56.6%) swpO=0 conn=3 myRSS=3005 php=5 phpRSS=197 ap=46 tcp=47 topuser=madalice 2026-09-10 13:13:55 L1=2.51 run=3 blk=0 avail=7801 (56.6%) swpO=0 conn=4 myRSS=3005 php=6 phpRSS=233 ap=46 tcp=47 topuser=madalice 2026-09-10 13:14:05 L1=2.28 run=3 blk=1 avail=7912 (57.4%) swpO=0 conn=3 myRSS=3005 php=5 phpRSS=197 ap=36 tcp=33 topuser=madalice 2026-09-10 13:14:05 L1=2.28 run=2 blk=0 avail=7911 (57.4%) swpO=0 conn=4 myRSS=3005 php=5 phpRSS=197 ap=36 tcp=33 topuser=madalice 2026-09-10 13:14:15 L1=2.15 run=4 blk=0 avail=7868 (57.1%) swpO=0 conn=3 myRSS=3005 php=8 phpRSS=368 ap=29 tcp=32 topuser=madalice 2026-09-10 13:14:15 L1=2.15 run=8 blk=0 avail=7875 (57.2%) swpO=0 conn=4 myRSS=3005 php=8 phpRSS=375 ap=29 tcp=32 topuser=madalice 2026-09-10 13:14:25 L1=2.05 run=6 blk=0 avail=7650 (55.5%) swpO=0 conn=3 myRSS=3005 php=9 phpRSS=500 ap=35 tcp=36 topuser=madalice 2026-09-10 13:14:25 L1=2.05 run=6 blk=0 avail=7714 (56.0%) swpO=0 conn=4 myRSS=3005 php=8 phpRSS=481 ap=35 tcp=35 topuser=madalice 2026-09-10 13:14:35 L1=2.11 run=4 blk=0 avail=7717 (56.0%) swpO=0 conn=3 myRSS=3005 php=8 phpRSS=481 ap=34 tcp=37 topuser=madalice 2026-09-10 13:14:35 L1=2.11 run=6 blk=0 avail=7709 (56.0%) swpO=0 conn=4 myRSS=3005 php=8 phpRSS=487 ap=34 tcp=37 topuser=madalice 2026-09-10 13:14:45 L1=2.10 run=7 blk=0 avail=7675 (55.7%) swpO=0 conn=3 myRSS=3005 php=9 phpRSS=523 ap=38 tcp=43 topuser=madalice 2026-09-10 13:14:45 L1=2.10 run=7 blk=0 avail=7673 (55.7%) swpO=0 conn=4 myRSS=3005 php=9 phpRSS=535 ap=38 tcp=43 topuser=madalice 2026-09-10 13:14:55 L1=2.72 run=3 blk=0 avail=7590 (55.1%) swpO=1 conn=5 myRSS=3005 php=8 phpRSS=540 ap=44 tcp=47 topuser=madalice 2026-09-10 13:14:55 L1=2.72 run=3 blk=0 avail=7584 (55.1%) swpO=1 conn=4 myRSS=3005 php=8 phpRSS=546 ap=44 tcp=46 topuser=madalice 2026-09-10 13:15:06 L1=2.99 run=11 blk=1 avail=7293 (52.9%) swpO=0 conn=5 myRSS=3005 php=20 phpRSS=1150 ap=45 tcp=120 topuser=alison 2026-09-10 13:15:06 L1=2.99 run=16 blk=0 avail=7280 (52.8%) swpO=0 conn=4 myRSS=3005 php=22 phpRSS=1133 ap=45 tcp=120 topuser=alison 2026-09-10 13:15:16 L1=6.53 run=24 blk=0 avail=5976 (43.4%) swpO=1197 conn=24 myRSS=2975 php=24 phpRSS=2336 ap=72 tcp=53 topuser=alison 2026-09-10 13:15:16 L1=6.53 run=30 blk=0 avail=6025 (43.7%) swpO=1197 conn=20 myRSS=2975 php=24 phpRSS=2438 ap=72 tcp=53 topuser=alison 2026-09-10 13:15:26 L1=7.74 run=55 blk=0 avail=3862 (28.0%) swpO=4467 conn=56 myRSS=2960 php=59 phpRSS=5696 ap=80 tcp=111 topuser=alison 2026-09-10 13:15:29 L1=12.01 run=61 blk=0 avail=3617 (26.3%) swpO=4633 conn=46 myRSS=2937 php=54 phpRSS=5670 ap=90 tcp=71 topuser=alison 2026-09-10 13:15:37 L1=15.53 run=73 blk=0 avail=4862 (35.3%) swpO=1414 conn=42 myRSS=2939 php=68 phpRSS=4679 ap=100 tcp=93 topuser=alison 2026-09-10 13:15:40 L1=20.05 run=84 blk=0 avail=3419 (24.8%) swpO=0 conn=65 myRSS=2940 php=75 phpRSS=6345 ap=100 tcp=89 topuser=alison 2026-09-10 13:15:47 L1=32.50 run=99 blk=1 avail=1764 (12.8%) swpO=11203 conn=74 myRSS=2829 php=89 phpRSS=8511 ap=130 tcp=49 topuser=alison 2026-09-10 13:15:50 L1=32.50 run=111 blk=1 avail=1493 (10.8%) swpO=11499 conn=74 myRSS=2828 php=99 phpRSS=8765 ap=130 tcp=77 topuser=alison 2026-09-10 13:15:59 L1=47.05 run=83 blk=34 avail=514 (3.7%) swpO=17148 conn=110 myRSS=2574 php=118 phpRSS=10968 ap=161 tcp=36 topuser=alison 2026-09-10 13:16:01 L1=47.05 run=15 blk=86 avail=447 (3.2%) swpO=29403 conn=109 myRSS=2390 php=122 phpRSS=10545 ap=156 tcp=36 topuser=alison 2026-09-10 13:16:29 L1=99.78 run=124 blk=6 avail=132 (1.0%) swpO=14224 conn=110 myRSS=2062 php=138 phpRSS=7474 ap=158 tcp=143 topuser=alison 2026-09-10 13:16:47 L1=140.49 run=210 blk=169 avail=238 (1.7%) swpO=6739 conn=109 myRSS=2062 php=138 phpRSS=7472 ap=158 tcp=143 topuser=alison 2026-09-10 13:24:40 L1=359.51 run=7 blk=0 avail=10064(73.1%) swpO=595 conn=7 myRSS=535 php=17 phpRSS=819 ap=145 tcp=77 topuser=madalice