INCIDENT 2026-08-13 06:40:20 trigger: php_rss=1757MB ================================================================== load: 1.00 0.94 0.92 16/645 528471 ncpu:10 mem_avail: 5862MB/11729MB (50.0%) swap_used:1010MB swapout:0/s blocked(D):0 running:14 iowait:0.0% steal:0.0% php: 12 procs / 1757MB heaviest user: madalice (10 procs, 1554MB) apache: 62 procs tcp_estab: 48 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1936 madalice 10 1658 root 239 943 nobody 61 934 netdata 8 252 customc 2 214 evolution 5 73 lowrange 3 37 mailman 20 30 dovenull 6 28 wp-toolkit 6 22 mailnull 3 18 cpanellogin 1 18 zabbix 1 15 kurri 1 11 infinium 1 11 corpkicks 1 11 dovecot 3 9 named 1 7 nscd 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 10 1672 customc 2 219 evolution 1 68 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5992 MB Active(file): 4847 MB Inactive(file): 488 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 492 MB CommitLimit: 9960 MB Committed_AS: 9374 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 342014 root 05:29:03 7328 /usr/bin/imunify-agent-proxy 528182 root 00:19 3060 /bin/sh -c bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || : --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 184574 1 mysql 1970004 4.1 Ssl 10:06:48 /usr/sbin/mariadbd 1220 1 netdata 201148 2.5 Ssl 44-20:30:21 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 528433 527964 madalice 198360 178 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 528434 527959 madalice 194664 172 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 528425 527972 madalice 194476 96.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 528428 527963 madalice 185604 89.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 159820 1 root 185136 0.0 Ss 23-20:53:29 /usr/lib/systemd/systemd-journald 528429 527961 madalice 183700 92.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 528435 527981 madalice 182604 161 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 388651 382990 root 182064 0.0 S 04:06:21 spamd child 528426 527969 madalice 175308 78.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 528432 527965 madalice 173520 83.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 382990 1 root 168748 0.0 Ss 04:17:33 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 528427 527967 madalice 164096 69.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 528437 527994 customc 161732 75.0 S 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 388652 382990 root 151528 0.0 S 04:06:21 spamd child 528431 527971 madalice 136332 57.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 528462 526916 customc 71044 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 528439 527883 evolution 70124 19.0 R 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 42412 0.0 Ss 22-03:58:51 cpsrvd (SSL) - waiting for connections 2223 1201 root 41248 0.0 Sl 44-20:30:20 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 4922 2431 netdata 37304 0.1 Sl 44-20:30:16 /usr/libexec/netdata/plugins.d/go.d.plugin 1 382254 1 root 31988 0.0 Ss 04:18:07 lfd - sleeping 525679 1276780 nobody 21272 0.0 S 03:52 /usr/sbin/httpd -k start 1469 1 root 20964 0.1 Ss 44-20:30:20 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 526521 1276780 nobody 20208 0.0 S 02:44 /usr/sbin/httpd -k start 526916 1276780 nobody 19948 0.0 S 01:56 /usr/sbin/httpd -k start 525469 1353308 cpanellogin 19448 0.0 S 04:17 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 527918 1276780 nobody 19120 0.0 S 00:28 /usr/sbin/httpd -k start 527994 1276780 nobody 18752 0.0 S 00:26 /usr/sbin/httpd -k start 526912 1276780 nobody 18708 0.0 S 01:57 /usr/sbin/httpd -k start 527131 1276780 nobody 18684 0.0 S 01:28 /usr/sbin/httpd -k start 527164 1276780 nobody 18600 0.0 S 01:26 /usr/sbin/httpd -k start 527165 1276780 nobody 18584 0.0 S 01:26 /usr/sbin/httpd -k start 525182 1276780 nobody 18488 0.0 S 04:46 /usr/sbin/httpd -k start 528002 1276780 nobody 17972 0.0 S 00:26 /usr/sbin/httpd -k start 527968 1276780 nobody 17952 0.0 S 00:27 /usr/sbin/httpd -k start 527992 1276780 nobody 17952 0.0 S 00:26 /usr/sbin/httpd -k start 185104 2431 netdata 17860 1.9 Sl 10:06:39 /usr/libexec/netdata/plugins.d/apps.plugin 1 526110 1276780 nobody 17796 0.0 S 03:27 /usr/sbin/httpd -k start 527027 1276780 nobody 17776 0.0 S 01:41 /usr/sbin/httpd -k start 527966 1276780 nobody 17752 0.0 S 00:27 /usr/sbin/httpd -k start 526915 1276780 nobody 17736 0.0 S 01:56 /usr/sbin/httpd -k start 528006 1276780 nobody 17400 0.0 S 00:26 /usr/sbin/httpd -k start 527160 1276780 nobody 17324 0.0 S 01:27 /usr/sbin/httpd -k start 527900 1276780 nobody 17108 0.0 S 00:29 /usr/sbin/httpd -k start 527409 1276780 nobody 17052 0.0 S 01:01 /usr/sbin/httpd -k start 527922 1276780 nobody 16864 0.0 S 00:28 /usr/sbin/httpd -k start 527999 1276780 nobody 16836 0.0 S 00:26 /usr/sbin/httpd -k start 527166 1276780 nobody 16724 0.1 S 01:26 /usr/sbin/httpd -k start 527982 1276780 nobody 16044 0.0 S 00:26 /usr/sbin/httpd -k start 527436 1276780 nobody 15996 0.0 S 01:00 /usr/sbin/httpd -k start 527899 1276780 nobody 15976 0.0 S 00:29 /usr/sbin/httpd -k start 527919 1276780 nobody 15976 0.0 S 00:28 /usr/sbin/httpd -k start 1204 1 zabbix 15968 0.2 Ssl 44-20:30:21 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 527973 1276780 nobody 15912 0.0 S 00:27 /usr/sbin/httpd -k start 527883 1276780 nobody 15812 0.0 S 00:30 /usr/sbin/httpd -k start 527988 1276780 nobody 15736 0.0 S 00:26 /usr/sbin/httpd -k start 528000 1276780 nobody 15736 0.0 S 00:26 /usr/sbin/httpd -k start 528011 1276780 nobody 15700 0.0 S 00:26 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- 121 D - [kswapd0] --- mariadb processlist (non-sleeping) --- +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 302217 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min aaa/aaadownunder.com.au-ssl_log 211 evolution/my.evolutionerp.com.au-ssl_log 190 evolution/portal.evolutionerp.com.au-ssl_log 87 infinium/infinium.net.au-ssl_log 21 madalice/madalice.com.au-ssl_log 13 alison/alisonarts.com.au-ssl_log 2 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 210 34.16.184.1 181 203.54.180.238 74 182.239.240.254 10 175.36.227.212 9 103.104.165.99 7 118.127.40.55 2 8.229.178.225 2 66.102.134.13 2 5.188.67.135 2 216.244.66.240 2 198.235.24.44 2 162.144.21.160 2 162.0.208.45 2 146.88.232.46 2 108.167.161.133 --- top request paths across all vhosts (last 3 min) --- 53 POST /functions.php 38 GET /app/ajax.php 30 GET /index.php 29 GET /factory_session_checker.php 25 GET /heartbeat.php 21 POST /mfreqsave.php 16 GET /fetch 15 GET /factory_session_processed_qty.php 14 POST /app/ajax/selectFilterSingle.php 14 GET /factory_session_joiner.php 11 POST /plugins/csvexporter/plugin.php 7 POST /jobeditsave.php 7 GET /wp-login.php 6 POST /clienteditsave.php 5 POST /wp-login.php 5 GET /store/air-force-1-custom-butterfly-swarovski-diamond-sneakers/ 5 GET / 4 POST /wp-cron.php 4 POST /app/ajax/selectFilter.php 3 POST /logsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == aaa/aaadownunder.com.au-ssl_log == -- top paths -- 16 GET /fetch 3 GET /proxy 3 GET /@fs/proc/self/environ 2 GET /redirect 2 GET /pms 2 GET /@fs/root/.aws/credentials 2 GET /@fs/home/ec2-user/.aws/credentials 2 GET /@fs/etc/passwd 2 GET /api/webhook 2 GET /api/v1/fetch 2 GET /api/proxy 2 GET /api/fetch -- last 10 requests -- 34.16.184.1 - - [13/Aug/2026:06:39:56 +1000] "GET /docker-compose.yml HTTP/1.1" 401 53 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.16.184.1 - - [13/Aug/2026:06:39:56 +1000] "GET /docker-compose.yaml HTTP/1.1" 401 53 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.16.184.1 - - [13/Aug/2026:06:39:56 +1000] "GET /docker-compose.prod.yml HTTP/1.1" 401 53 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 34.16.184.1 - - [13/Aug/2026:06:39:56 +1000] "GET /.azure/credentials HTTP/1.1" 401 53 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.16.184.1 - - [13/Aug/2026:06:39:56 +1000] "GET /telescope/requests HTTP/1.1" 401 53 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.16.184.1 - - [13/Aug/2026:06:39:56 +1000] "GET /_debugbar/open HTTP/1.1" 401 53 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 34.16.184.1 - - [13/Aug/2026:06:39:56 +1000] "GET /log-viewer HTTP/1.1" 401 53 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.16.184.1 - - [13/Aug/2026:06:39:56 +1000] "GET /horizon/dashboard HTTP/1.1" 401 53 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.16.184.1 - - [13/Aug/2026:06:39:56 +1000] "GET /rails/info/properties HTTP/1.1" 401 53 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.16.184.1 - - [13/Aug/2026:06:39:56 +1000] "GET /WEB-INF/web.xml HTTP/1.1" 401 53 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 53 POST /functions.php 38 GET /app/ajax.php 28 GET /index.php 21 POST /mfreqsave.php 14 POST /app/ajax/selectFilterSingle.php 11 POST /plugins/csvexporter/plugin.php 7 POST /jobeditsave.php 6 POST /clienteditsave.php 4 POST /app/ajax/selectFilter.php 3 POST /logsave.php 2 POST /app/ajax.php 1 POST /pickingsave.php -- last 10 requests -- 182.239.240.254 - - [13/Aug/2026:06:40:05 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 11697 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=5449" "Mozilla/5.0 (Windows NT 10.0; Win64; 182.239.240.254 - - [13/Aug/2026:06:40:05 +1000] "POST /mfreqsave.php?shopOrderDetailSave=1 HTTP/1.1" 302 51 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=5449" "Mozilla/5.0 (Windows NT 10.0; Win64; 182.239.240.254 - - [13/Aug/2026:06:40:06 +1000] "GET /index.php?page=mfshoporderdetail&id=5449 HTTP/1.1" 200 28271 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=5449" "Mozilla/5.0 (Windows NT 10.0; 182.239.240.254 - - [13/Aug/2026:06:40:06 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dmfshoporderdetail%26id%3D5449&call=getUserSetting&caller=ajaxSubmitLocal&seq=15031126116 HTTP/1.1" 200 105 "https://my.evolutio 182.239.240.254 - - [13/Aug/2026:06:40:07 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=5449" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 182.239.240.254 - - [13/Aug/2026:06:40:08 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 11697 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=5449" "Mozilla/5.0 (Windows NT 10.0; Win64; 182.239.240.254 - - [13/Aug/2026:06:40:08 +1000] "GET /index.php?page=mfshoporders HTTP/1.1" 200 18169 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=5449" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 182.239.240.254 - - [13/Aug/2026:06:40:08 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dmfshoporders&call=getUserSetting&caller=ajaxSubmitLocal&seq=12336864214 HTTP/1.1" 200 168 "https://my.evolutionerp.com.au/index 182.239.240.254 - - [13/Aug/2026:06:40:09 +1000] "POST /mfreqsave.php?call=fetch HTTP/1.1" 200 30 "https://my.evolutionerp.com.au/index.php?page=mfshoporders" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 182.239.240.254 - - [13/Aug/2026:06:40:10 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=mfshoporders" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 29 GET /factory_session_checker.php 25 GET /heartbeat.php 15 GET /factory_session_processed_qty.php 14 GET /factory_session_joiner.php 2 GET /index.php 1 POST /portal/register 1 POST /factory_functions.php -- last 10 requests -- 203.54.180.238 - - [13/Aug/2026:06:39:47 +1000] "GET /heartbeat.php?sentAt=1786567187&bytes=106,124,218,19&_=1786510909174 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [13/Aug/2026:06:39:48 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [13/Aug/2026:06:39:52 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 139 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [13/Aug/2026:06:39:53 +1000] "GET /factory_session_joiner.php?id=34548 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [13/Aug/2026:06:39:53 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [13/Aug/2026:06:39:54 +1000] "GET /heartbeat.php?sentAt=1786567192&bytes=106,124,218,24&_=1786532341770 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [13/Aug/2026:06:39:57 +1000] "GET /heartbeat.php?sentAt=1786567197&bytes=106,124,218,29&_=1786510909175 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [13/Aug/2026:06:39:59 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [13/Aug/2026:06:40:01 +1000] "GET /heartbeat.php?sentAt=1786567202&bytes=106,124,218,34&_=1786532341771 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [13/Aug/2026:06:40:03 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 139 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb --- last 30 samples (run-up to this incident) --- 2026-08-13 06:37:52 L1=0.79 run=1 blk=0 avail=7550 (64.4%) swpO=2 conn=2 myRSS=1936 php=1 phpRSS=40 ap=19 tcp=21 topuser=evolution 2026-08-13 06:37:59 L1=0.81 run=2 blk=0 avail=7561 (64.5%) swpO=0 conn=1 myRSS=1936 php=0 phpRSS=0 ap=19 tcp=20 topuser=- 2026-08-13 06:38:02 L1=0.82 run=1 blk=0 avail=7552 (64.4%) swpO=0 conn=2 myRSS=1936 php=1 phpRSS=39 ap=19 tcp=19 topuser=evolution 2026-08-13 06:38:09 L1=0.76 run=1 blk=0 avail=7574 (64.6%) swpO=0 conn=1 myRSS=1936 php=0 phpRSS=0 ap=18 tcp=17 topuser=- 2026-08-13 06:38:12 L1=0.70 run=2 blk=0 avail=7571 (64.5%) swpO=0 conn=2 myRSS=1936 php=1 phpRSS=40 ap=17 tcp=18 topuser=evolution 2026-08-13 06:38:19 L1=0.64 run=2 blk=0 avail=7581 (64.6%) swpO=0 conn=1 myRSS=1936 php=0 phpRSS=0 ap=17 tcp=21 topuser=- 2026-08-13 06:38:22 L1=0.67 run=1 blk=0 avail=7552 (64.4%) swpO=0 conn=2 myRSS=1936 php=1 phpRSS=40 ap=18 tcp=29 topuser=evolution 2026-08-13 06:38:29 L1=0.86 run=3 blk=0 avail=7413 (63.2%) swpO=0 conn=1 myRSS=1936 php=2 phpRSS=167 ap=24 tcp=29 topuser=madalice 2026-08-13 06:38:32 L1=0.87 run=1 blk=0 avail=7507 (64.0%) swpO=0 conn=2 myRSS=1936 php=2 phpRSS=52 ap=24 tcp=28 topuser=evolution 2026-08-13 06:38:39 L1=0.96 run=2 blk=0 avail=7480 (63.8%) swpO=0 conn=1 myRSS=1936 php=1 phpRSS=43 ap=27 tcp=36 topuser=evolution 2026-08-13 06:38:42 L1=0.88 run=1 blk=0 avail=7481 (63.8%) swpO=0 conn=2 myRSS=1936 php=1 phpRSS=40 ap=27 tcp=30 topuser=evolution 2026-08-13 06:38:49 L1=0.81 run=2 blk=0 avail=7370 (62.8%) swpO=0 conn=1 myRSS=1936 php=1 phpRSS=206 ap=22 tcp=24 topuser=madalice 2026-08-13 06:38:52 L1=0.75 run=2 blk=0 avail=7537 (64.3%) swpO=0 conn=2 myRSS=1936 php=1 phpRSS=40 ap=20 tcp=30 topuser=evolution 2026-08-13 06:38:59 L1=0.93 run=4 blk=0 avail=7300 (62.2%) swpO=0 conn=3 myRSS=1936 php=2 phpRSS=294 ap=23 tcp=25 topuser=madalice 2026-08-13 06:39:02 L1=0.93 run=3 blk=0 avail=7107 (60.6%) swpO=2 conn=2 myRSS=1936 php=4 phpRSS=484 ap=23 tcp=30 topuser=corpkicks 2026-08-13 06:39:09 L1=0.94 run=2 blk=0 avail=7432 (63.4%) swpO=2 conn=3 myRSS=1936 php=2 phpRSS=137 ap=23 tcp=27 topuser=infinium 2026-08-13 06:39:12 L1=0.94 run=1 blk=0 avail=7514 (64.1%) swpO=0 conn=2 myRSS=1936 php=1 phpRSS=40 ap=23 tcp=26 topuser=evolution 2026-08-13 06:39:19 L1=0.95 run=1 blk=0 avail=7498 (63.9%) swpO=0 conn=3 myRSS=1936 php=0 phpRSS=0 ap=27 tcp=36 topuser=- 2026-08-13 06:39:22 L1=0.95 run=2 blk=0 avail=7435 (63.4%) swpO=0 conn=2 myRSS=1936 php=2 phpRSS=105 ap=29 tcp=33 topuser=evolution 2026-08-13 06:39:30 L1=0.88 run=4 blk=0 avail=7448 (63.5%) swpO=0 conn=3 myRSS=1936 php=2 phpRSS=115 ap=27 tcp=25 topuser=evolution 2026-08-13 06:39:32 L1=0.97 run=4 blk=0 avail=7433 (63.4%) swpO=0 conn=2 myRSS=1936 php=4 phpRSS=204 ap=25 tcp=26 topuser=evolution 2026-08-13 06:39:40 L1=1.05 run=3 blk=0 avail=7507 (64.0%) swpO=0 conn=3 myRSS=1936 php=1 phpRSS=40 ap=24 tcp=24 topuser=evolution 2026-08-13 06:39:42 L1=0.97 run=4 blk=0 avail=7341 (62.6%) swpO=0 conn=2 myRSS=1936 php=5 phpRSS=341 ap=23 tcp=25 topuser=evolution 2026-08-13 06:39:50 L1=1.13 run=1 blk=0 avail=7485 (63.8%) swpO=0 conn=3 myRSS=1936 php=0 phpRSS=0 ap=25 tcp=50 topuser=- 2026-08-13 06:39:52 L1=1.04 run=4 blk=0 avail=7341 (62.6%) swpO=0 conn=2 myRSS=1936 php=1 phpRSS=105 ap=39 tcp=71 topuser=infinium 2026-08-13 06:40:00 L1=1.19 run=1 blk=0 avail=7128 (60.8%) swpO=0 conn=1 myRSS=1936 php=0 phpRSS=0 ap=83 tcp=36 topuser=- 2026-08-13 06:40:02 L1=1.18 run=3 blk=0 avail=7059 (60.2%) swpO=0 conn=2 myRSS=1936 php=3 phpRSS=149 ap=80 tcp=24 topuser=evolution 2026-08-13 06:40:10 L1=1.08 run=3 blk=0 avail=7184 (61.3%) swpO=2 conn=1 myRSS=1936 php=1 phpRSS=43 ap=72 tcp=23 topuser=evolution 2026-08-13 06:40:13 L1=1.00 run=1 blk=0 avail=7211 (61.5%) swpO=2 conn=1 myRSS=1936 php=0 phpRSS=0 ap=70 tcp=25 topuser=- 2026-08-13 06:40:20 L1=1.00 run=14 blk=0 avail=5862 (50.0%) swpO=0 conn=13 myRSS=1936 php=12 phpRSS=1757 ap=62 tcp=48 topuser=madalice