INCIDENT 2026-08-14 07:27:15 trigger: php_rss=1614MB ================================================================== load: 1.88 1.40 1.32 13/624 1612825 ncpu:10 mem_avail: 6276MB/11729MB (53.5%) swap_used:990MB swapout:11/s blocked(D):1 running:16 iowait:0.0% steal:0.0% php: 10 procs / 1614MB heaviest user: madalice (9 procs, 1576MB) apache: 52 procs tcp_estab: 61 --- RSS by user (all processes) --- USER PROCS RSS_MB madalice 8 1627 mysql 1 1422 root 234 917 nobody 55 843 netdata 8 269 kurri 4 51 dovenull 6 26 wp-toolkit 6 21 cpanellogin 1 18 mailman 20 15 zabbix 1 13 lowrange 1 13 dovecot 3 8 named 1 6 nscd 1 4 evolution 4 4 cpanelconnecttrack 1 3 polkitd 1 2 mailnull 1 2 dbus 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 8 1634 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5943 MB Active(file): 4685 MB Inactive(file): 741 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 553 MB CommitLimit: 9960 MB Committed_AS: 8654 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 1404480 root 06:15:59 2848 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 1420296 1 mysql 1456288 4.8 Ssl 05:48:14 /usr/sbin/mariadbd 1612778 1611507 madalice 231436 104 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 217980 2.5 Ssl 45-21:17:17 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1612779 1612166 madalice 194100 87.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1451533 1444234 root 184188 0.0 S 04:50:08 spamd child 1451534 1444234 root 179628 0.0 S 04:50:08 spamd child 1612776 1612410 madalice 177664 78.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1444234 1 root 164776 0.0 Ss 05:04:27 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1612784 1612436 madalice 159952 64.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1612783 1611260 madalice 154036 67.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 159820 1 root 108004 0.0 Ss 24-21:40:25 /usr/lib/systemd/systemd-journald 1469 1 root 42180 0.1 Ss 45-21:17:16 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1353308 1 root 41528 0.0 Ss 23-04:45:47 cpsrvd (SSL) - waiting for connections 4922 2431 netdata 40916 0.1 Sl 45-21:17:12 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1612853 1612045 evolution 40648 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2223 1201 root 39352 0.0 Sl 45-21:17:16 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1443709 1 root 31852 0.0 Ss 05:05:02 lfd - sleeping 1612780 1612438 madalice 29116 112 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1612777 1612400 madalice 28948 113 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1612773 1612401 madalice 28864 78.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1609885 1276780 nobody 21524 0.0 S 03:32 /usr/sbin/httpd -k start 1610715 1276780 nobody 20388 0.0 S 02:29 /usr/sbin/httpd -k start 1612029 1276780 nobody 19576 0.1 S 00:59 /usr/sbin/httpd -k start 1609890 1276780 nobody 19524 0.0 S 03:32 /usr/sbin/httpd -k start 1611243 1276780 nobody 19264 0.1 S 01:56 /usr/sbin/httpd -k start 1611528 1353308 cpanellogin 19124 0.0 S 01:36 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 1611573 1276780 nobody 19116 0.0 S 01:33 /usr/sbin/httpd -k start 1612438 1276780 nobody 19072 0.1 S 00:25 /usr/sbin/httpd -k start 1612430 1276780 nobody 18780 0.1 S 00:25 /usr/sbin/httpd -k start 1611228 1276780 nobody 18716 0.0 S 01:57 /usr/sbin/httpd -k start 1609891 1276780 nobody 18688 0.0 S 03:32 /usr/sbin/httpd -k start 1612046 1276780 nobody 18680 0.1 S 00:57 /usr/sbin/httpd -k start 1611571 1276780 nobody 18672 0.0 S 01:33 /usr/sbin/httpd -k start 1612437 1276780 nobody 18332 0.1 S 00:25 /usr/sbin/httpd -k start 1612166 1276780 nobody 18140 0.1 S 00:43 /usr/sbin/httpd -k start 1610716 1276780 nobody 18108 0.0 S 02:29 /usr/sbin/httpd -k start 1612429 1276780 nobody 18064 0.1 S 00:25 /usr/sbin/httpd -k start 1612180 1276780 nobody 17876 0.0 S 00:41 /usr/sbin/httpd -k start 1611428 1276780 nobody 17872 0.0 S 01:42 /usr/sbin/httpd -k start 1612428 1276780 nobody 17628 0.1 S 00:25 /usr/sbin/httpd -k start 1612400 1276780 nobody 17588 0.1 S 00:27 /usr/sbin/httpd -k start 1612401 1276780 nobody 17560 0.1 S 00:27 /usr/sbin/httpd -k start 1612434 1276780 nobody 17468 0.1 S 00:25 /usr/sbin/httpd -k start 1612439 1276780 nobody 17424 0.0 S 00:25 /usr/sbin/httpd -k start 1612295 1276780 nobody 17412 0.0 S 00:32 /usr/sbin/httpd -k start 1612399 1276780 nobody 17368 0.1 S 00:27 /usr/sbin/httpd -k start 1611507 1276780 nobody 17172 0.0 S 01:38 /usr/sbin/httpd -k start 1611260 1276780 nobody 17120 0.0 S 01:55 /usr/sbin/httpd -k start 1601939 1471 root 16800 0.0 S 14:17 cPhulkd - dbprocessor 1610761 1276780 nobody 16776 0.1 S 02:23 /usr/sbin/httpd -k start 1612414 1276780 nobody 16184 0.0 S 00:26 /usr/sbin/httpd -k start 1612035 1276780 nobody 15760 0.0 S 00:58 /usr/sbin/httpd -k start 1612284 1276780 nobody 15688 0.0 S 00:33 /usr/sbin/httpd -k start 1471 1 root 15616 0.0 Ss 45-21:17:16 cPhulkd - processor 1612043 1276780 nobody 15592 0.0 S 00:57 /usr/sbin/httpd -k start 1612377 1276780 nobody 15584 0.0 S 00:29 /usr/sbin/httpd -k start 1612410 1276780 nobody 15532 0.0 S 00:26 /usr/sbin/httpd -k start 1612436 1276780 nobody 15488 0.0 S 00:25 /usr/sbin/httpd -k start 1611110 1276780 nobody 15472 0.0 S 02:08 /usr/sbin/httpd -k start 1611113 1276780 nobody 15472 0.0 S 02:08 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 348168 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 488 lowrange/lowrange.com.au-ssl_log 415 evolution/portal.evolutionerp.com.au-ssl_log 230 bigdeals/bigdeals.com.au 139 aaa/aaadownunder.com.au-ssl_log 16 madalice/madalice.com.au-ssl_log 6 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 415 104.155.99.55 243 203.54.180.238 230 103.104.165.99 139 20.215.70.187 117 149.167.177.17 54 175.36.227.212 47 180.181.236.49 12 103.104.164.114 4 1.145.73.14 3 87.58.206.98 3 185.241.208.154 3 124.190.136.22 3 116.91.223.103 2 91.92.243.248 2 207.46.13.102 --- top request paths across all vhosts (last 3 min) --- 131 GET /app/ajax.php 124 POST /functions.php 100 GET /factory_session_checker.php 69 GET /cgi-sys/suspendedpage.cgi 52 GET /factory_session_processed_qty.php 52 GET /factory_session_joiner.php 49 GET /index.php 38 POST /plugins/csvexporter/plugin.php 26 GET /heartbeat.php 24 POST /clienteditsave.php 22 POST /app/ajax.php 21 GET / 19 POST /app/ajax/selectFilterSingle.php 15 GET /fetch 13 POST /plugins/fencecosting/plugin.php 12 POST /logsave.php 11 POST /app/ajax/selectFilter.php 11 HEAD /index.php 8 POST / 6 POST /jobeditsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 131 GET /app/ajax.php 124 POST /functions.php 48 GET /index.php 38 POST /plugins/csvexporter/plugin.php 24 POST /clienteditsave.php 22 POST /app/ajax.php 19 POST /app/ajax/selectFilterSingle.php 13 POST /plugins/fencecosting/plugin.php 12 POST /logsave.php 11 POST /app/ajax/selectFilter.php 11 HEAD /index.php 6 POST /jobeditsave.php -- last 10 requests -- 149.167.177.17 - - [14/Aug/2026:07:27:09 +1000] "GET /index.php?page=jobedit&id=12001 HTTP/1.1" 200 205058 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, 149.167.177.17 - - [14/Aug/2026:07:27:10 +1000] "POST /logsave.php?call=getHistory&id=12001&module=job HTTP/1.1" 200 478 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12001" "Mozilla/5.0 (Windows NT 10.0; Win 149.167.177.17 - - [14/Aug/2026:07:27:10 +1000] "POST /clienteditsave.php?call=getSettings HTTP/1.1" 200 60 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12001" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 149.167.177.17 - - [14/Aug/2026:07:27:10 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 2854 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12001" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe 149.167.177.17 - - [14/Aug/2026:07:27:11 +1000] "POST /plugins/fencecosting/plugin.php HTTP/1.1" 200 3913 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12001" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW 180.181.236.49 - - [14/Aug/2026:07:27:11 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinvedit%26id%3D2808%26tab%3Dgeneraltab&call=getUserSetting&caller=ajaxSubmitLocal&seq=11387676645 HTTP/1.1" 200 110 "https://my. 149.167.177.17 - - [14/Aug/2026:07:27:10 +1000] "POST /clienteditsave.php?clientid=5340&call=getCategoryDiscounts HTTP/1.1" 200 265 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12001" "Mozilla/5.0 (Windows N 149.167.177.17 - - [14/Aug/2026:07:27:11 +1000] "GET /app/ajax.php?cn=&furi=true&uri=&call=getUserSetting&caller=ajaxSubmitLocal&seq=17230469255 HTTP/1.1" 200 242 "https://my.evolutionerp.com.au/index.php?page=jobedit&id 149.167.177.17 - - [14/Aug/2026:07:27:11 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=15977758281 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/index 149.167.177.17 - - [14/Aug/2026:07:27:11 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=10986637450 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/inde == lowrange/lowrange.com.au-ssl_log == -- top paths -- 15 GET /fetch 15 GET / 8 POST / 3 POST /api 2 POST /api/run 2 POST /api/exec 2 GET /system 2 GET /run 2 GET /debug 2 GET /cgi-bin/test 2 GET /api/system 2 GET /api/ping -- last 10 requests -- 104.155.99.55 - - [14/Aug/2026:07:27:14 +1000] "GET /fetch?uri=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot. 104.155.99.55 - - [14/Aug/2026:07:27:15 +1000] "GET /fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https:/ 104.155.99.55 - - [14/Aug/2026:07:27:15 +1000] "GET /fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 404 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1. 104.155.99.55 - - [14/Aug/2026:07:27:15 +1000] "GET /fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://deve 104.155.99.55 - - [14/Aug/2026:07:27:15 +1000] "GET /fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 404 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; 104.155.99.55 - - [14/Aug/2026:07:27:15 +1000] "GET /fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.c 104.155.99.55 - - [14/Aug/2026:07:27:15 +1000] "GET /fetch?dest=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support 104.155.99.55 - - [14/Aug/2026:07:27:15 +1000] "GET /fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Finfo HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon 104.155.99.55 - - [14/Aug/2026:07:27:15 +1000] "GET /fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://de 104.155.99.55 - - [14/Aug/2026:07:27:15 +1000] "GET /fetch?target=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F HTTP/1.1" 404 - "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/suppo == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 100 GET /factory_session_checker.php 52 GET /factory_session_processed_qty.php 52 GET /factory_session_joiner.php 26 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [14/Aug/2026:07:27:02 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [14/Aug/2026:07:27:02 +1000] "GET /factory_session_joiner.php?id=34584 HTTP/1.1" 200 92 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [14/Aug/2026:07:27:02 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [14/Aug/2026:07:27:04 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:07:27:05 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:07:27:05 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:07:27:06 +1000] "GET /factory_session_joiner.php?id=34583 HTTP/1.1" 200 92 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [14/Aug/2026:07:27:06 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [14/Aug/2026:07:27:06 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:07:27:08 +1000] "GET /heartbeat.php?sentAt=1786656428&bytes=106,126,54,172&_=1786655425015 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" --- last 30 samples (run-up to this incident) --- 2026-08-14 07:24:46 L1=1.31 run=2 blk=0 avail=7914 (67.5%) swpO=0 conn=1 myRSS=1413 php=2 phpRSS=82 ap=30 tcp=38 topuser=evolution 2026-08-14 07:24:55 L1=1.35 run=2 blk=0 avail=7935 (67.7%) swpO=0 conn=1 myRSS=1413 php=1 phpRSS=16 ap=36 tcp=44 topuser=evolution 2026-08-14 07:24:56 L1=1.35 run=1 blk=0 avail=7928 (67.6%) swpO=0 conn=1 myRSS=1413 php=1 phpRSS=29 ap=37 tcp=43 topuser=evolution 2026-08-14 07:25:05 L1=1.36 run=3 blk=0 avail=7870 (67.1%) swpO=0 conn=1 myRSS=1413 php=2 phpRSS=133 ap=36 tcp=42 topuser=corpkicks 2026-08-14 07:25:06 L1=1.36 run=2 blk=0 avail=7683 (65.5%) swpO=0 conn=3 myRSS=1413 php=2 phpRSS=305 ap=37 tcp=45 topuser=corpkicks 2026-08-14 07:25:15 L1=1.15 run=2 blk=0 avail=7857 (67.0%) swpO=0 conn=1 myRSS=1413 php=1 phpRSS=97 ap=39 tcp=32 topuser=madalice 2026-08-14 07:25:16 L1=1.15 run=2 blk=0 avail=7768 (66.2%) swpO=0 conn=3 myRSS=1413 php=1 phpRSS=191 ap=38 tcp=33 topuser=madalice 2026-08-14 07:25:25 L1=1.62 run=6 blk=0 avail=7560 (64.5%) swpO=0 conn=1 myRSS=1413 php=4 phpRSS=415 ap=48 tcp=41 topuser=corpkicks 2026-08-14 07:25:26 L1=1.62 run=1 blk=0 avail=7866 (67.1%) swpO=0 conn=3 myRSS=1413 php=0 phpRSS=0 ap=47 tcp=41 topuser=- 2026-08-14 07:25:35 L1=1.44 run=1 blk=0 avail=7902 (67.4%) swpO=0 conn=1 myRSS=1413 php=0 phpRSS=0 ap=40 tcp=46 topuser=- 2026-08-14 07:25:36 L1=1.44 run=1 blk=0 avail=7901 (67.4%) swpO=0 conn=3 myRSS=1413 php=0 phpRSS=0 ap=40 tcp=45 topuser=- 2026-08-14 07:25:45 L1=1.53 run=1 blk=0 avail=7835 (66.8%) swpO=0 conn=1 myRSS=1413 php=0 phpRSS=0 ap=47 tcp=47 topuser=- 2026-08-14 07:25:46 L1=1.53 run=4 blk=0 avail=7832 (66.8%) swpO=0 conn=3 myRSS=1413 php=1 phpRSS=39 ap=46 tcp=43 topuser=evolution 2026-08-14 07:25:55 L1=1.44 run=4 blk=0 avail=7730 (65.9%) swpO=0 conn=2 myRSS=1413 php=1 phpRSS=169 ap=42 tcp=36 topuser=corpkicks 2026-08-14 07:25:56 L1=1.44 run=2 blk=0 avail=7837 (66.8%) swpO=0 conn=3 myRSS=1413 php=1 phpRSS=66 ap=41 tcp=35 topuser=evolution 2026-08-14 07:26:05 L1=1.44 run=1 blk=0 avail=7911 (67.5%) swpO=0 conn=2 myRSS=1414 php=0 phpRSS=0 ap=36 tcp=30 topuser=- 2026-08-14 07:26:06 L1=1.44 run=3 blk=0 avail=7861 (67.0%) swpO=0 conn=2 myRSS=1414 php=1 phpRSS=89 ap=35 tcp=35 topuser=aaa 2026-08-14 07:26:15 L1=1.22 run=2 blk=0 avail=7874 (67.1%) swpO=0 conn=2 myRSS=1417 php=2 phpRSS=113 ap=32 tcp=36 topuser=evolution 2026-08-14 07:26:16 L1=1.22 run=1 blk=0 avail=7928 (67.6%) swpO=0 conn=2 myRSS=1417 php=0 phpRSS=0 ap=32 tcp=39 topuser=- 2026-08-14 07:26:25 L1=1.11 run=1 blk=0 avail=7906 (67.4%) swpO=0 conn=2 myRSS=1418 php=0 phpRSS=0 ap=37 tcp=32 topuser=- 2026-08-14 07:26:26 L1=1.11 run=6 blk=0 avail=7783 (66.4%) swpO=0 conn=2 myRSS=1418 php=2 phpRSS=191 ap=36 tcp=30 topuser=otterfencing 2026-08-14 07:26:35 L1=1.17 run=4 blk=0 avail=7682 (65.5%) swpO=0 conn=2 myRSS=1418 php=6 phpRSS=406 ap=33 tcp=41 topuser=evolution 2026-08-14 07:26:36 L1=1.17 run=3 blk=0 avail=7787 (66.4%) swpO=0 conn=2 myRSS=1418 php=6 phpRSS=296 ap=33 tcp=41 topuser=evolution 2026-08-14 07:26:45 L1=1.15 run=3 blk=0 avail=7706 (65.7%) swpO=0 conn=2 myRSS=1419 php=3 phpRSS=262 ap=40 tcp=47 topuser=madalice 2026-08-14 07:26:46 L1=1.15 run=1 blk=0 avail=7867 (67.1%) swpO=0 conn=2 myRSS=1419 php=0 phpRSS=0 ap=40 tcp=51 topuser=- 2026-08-14 07:26:55 L1=1.28 run=3 blk=0 avail=7613 (64.9%) swpO=0 conn=2 myRSS=1421 php=3 phpRSS=147 ap=68 tcp=62 topuser=evolution 2026-08-14 07:26:56 L1=1.28 run=2 blk=0 avail=7620 (65.0%) swpO=0 conn=2 myRSS=1421 php=3 phpRSS=146 ap=67 tcp=60 topuser=evolution 2026-08-14 07:27:05 L1=1.39 run=2 blk=0 avail=7744 (66.0%) swpO=0 conn=2 myRSS=1422 php=1 phpRSS=35 ap=58 tcp=50 topuser=evolution 2026-08-14 07:27:06 L1=1.39 run=1 blk=0 avail=7709 (65.7%) swpO=0 conn=2 myRSS=1422 php=1 phpRSS=66 ap=57 tcp=55 topuser=evolution 2026-08-14 07:27:15 L1=1.88 run=16 blk=1 avail=6276 (53.5%) swpO=11 conn=9 myRSS=1422 php=10 phpRSS=1614 ap=52 tcp=61 topuser=madalice