INCIDENT 2026-08-14 09:40:37 trigger: php_rss=2366MB ================================================================== load: 1.99 1.58 1.52 20/631 1719821 ncpu:10 mem_avail: 5637MB/11729MB (48.1%) swap_used:1033MB swapout:0/s blocked(D):0 running:15 iowait:0.4% steal:0.0% php: 19 procs / 2366MB heaviest user: madalice (12 procs, 2088MB) apache: 45 procs tcp_estab: 54 --- RSS by user (all processes) --- USER PROCS RSS_MB madalice 11 1948 mysql 1 1821 root 237 928 nobody 44 711 evolution 11 310 netdata 8 259 alison 4 52 kurri 3 37 dovenull 6 29 mailnull 3 23 wp-toolkit 6 21 mailman 20 15 zabbix 1 13 cpanellogin 1 13 candyfabcom 1 12 kamcool 1 11 dovecot 3 8 named 1 6 nscd 1 4 cpanelconnecttrack 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 11 1968 evolution 7 306 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6196 MB Active(file): 4617 MB Inactive(file): 700 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 389 MB CommitLimit: 9960 MB Committed_AS: 9990 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 1404480 root 08:29:21 2848 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 1420296 1 mysql 1865060 11.1 Ssl 08:01:36 /usr/sbin/mariadbd 1719767 1719443 madalice 268752 114 S 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1719766 1717312 madalice 265160 111 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1719772 1717479 madalice 216704 99.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 213164 2.5 Ssl 45-23:30:39 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1719771 1716740 madalice 211604 103 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1719768 1719435 madalice 209076 99.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1719769 1716192 madalice 205032 94.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1451533 1444234 root 188480 0.0 S 07:03:30 spamd child 1451534 1444234 root 178228 0.0 S 07:03:30 spamd child 1719778 1716714 madalice 177608 79.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1719776 1719092 madalice 171164 77.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1719777 1719611 madalice 159728 67.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 159820 1 root 153096 0.0 Ss 24-23:53:47 /usr/lib/systemd/systemd-journald 1444234 1 root 130756 0.0 Ss 07:17:49 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1719786 1716677 madalice 99804 63.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1719785 1719628 madalice 93128 56.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1719742 1717941 evolution 72244 6.7 S 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1469 1 root 41644 0.1 Ss 45-23:30:38 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1353308 1 root 41464 0.0 Ss 23-06:59:09 cpsrvd (SSL) - waiting for connections 1719764 1713092 evolution 41052 1.0 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1719787 1716904 evolution 40876 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1719811 1718360 evolution 40728 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1719773 1719627 evolution 39896 1.0 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1719774 1718362 evolution 39668 1.5 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2223 1201 root 39472 0.0 Sl 45-23:30:38 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1719788 1718044 evolution 39320 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 4922 2431 netdata 35716 0.1 Sl 45-23:30:34 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1443709 1 root 29808 0.0 Ss 07:18:24 lfd - sleeping 1717273 1276780 nobody 20268 0.0 S 02:43 /usr/sbin/httpd -k start 1713092 1276780 nobody 20248 0.0 S 08:10 /usr/sbin/httpd -k start 1713070 1276780 nobody 19852 0.0 S 08:10 /usr/sbin/httpd -k start 1717494 1276780 nobody 19824 0.0 S 02:32 /usr/sbin/httpd -k start 1717480 1276780 nobody 19628 0.0 S 02:33 /usr/sbin/httpd -k start 1716275 1276780 nobody 19572 0.0 S 03:57 /usr/sbin/httpd -k start 1717288 1276780 nobody 19556 0.0 S 02:42 /usr/sbin/httpd -k start 1716699 1276780 nobody 19508 0.0 S 03:25 /usr/sbin/httpd -k start 1717479 1276780 nobody 19368 0.0 S 02:33 /usr/sbin/httpd -k start 1716677 1276780 nobody 19312 0.0 S 03:26 /usr/sbin/httpd -k start 1716711 1276780 nobody 19264 0.0 S 03:24 /usr/sbin/httpd -k start 1716192 1276780 nobody 19240 0.0 S 04:01 /usr/sbin/httpd -k start 1717459 1276780 nobody 19212 0.0 S 02:34 /usr/sbin/httpd -k start 1716661 1276780 nobody 19080 0.0 S 03:27 /usr/sbin/httpd -k start 1717941 1276780 nobody 18732 0.0 S 01:54 /usr/sbin/httpd -k start 1718994 1276780 nobody 18640 0.1 S 00:44 /usr/sbin/httpd -k start 1718362 1276780 nobody 18540 0.0 S 01:24 /usr/sbin/httpd -k start 1716731 1276780 nobody 18536 0.0 S 03:23 /usr/sbin/httpd -k start 1718044 1276780 nobody 18292 0.0 S 01:48 /usr/sbin/httpd -k start 1717309 1276780 nobody 18044 0.0 S 02:41 /usr/sbin/httpd -k start 1716904 1276780 nobody 17984 0.0 S 03:13 /usr/sbin/httpd -k start 1716714 1276780 nobody 17664 0.0 S 03:24 /usr/sbin/httpd -k start 1719443 1276780 nobody 17504 0.1 R 00:27 /usr/sbin/httpd -k start 1717312 1276780 nobody 17376 0.0 S 02:41 /usr/sbin/httpd -k start 1717306 1276780 nobody 17348 0.0 S 02:41 /usr/sbin/httpd -k start 1719627 1276780 nobody 17172 0.1 S 00:12 /usr/sbin/httpd -k start 1718360 1276780 nobody 16976 0.0 S 01:24 /usr/sbin/httpd -k start 1471 1 root 16820 0.0 Ss 45-23:30:38 cPhulkd - processor 1719441 1276780 nobody 16748 0.0 S 00:27 /usr/sbin/httpd -k start 1601939 1471 root 16520 0.0 S 02:27:39 cPhulkd - dbprocessor 1717929 1276780 nobody 16420 0.0 S 01:55 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+-------------+-------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+-------------+-------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 1349551 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 1348790 | madalice_wp | madalice_wp | Query | 0 | Preparing | SELECT post_id, meta_key, meta_value FROM AMuqf6qZ_postmeta WHERE post_id IN (31263,19977,31603,27804) ORDER BY meta_id ASC | +---------+-------------+-------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 558 evolution/portal.evolutionerp.com.au-ssl_log 313 alison/alisonarts.com.au-ssl_log 31 alison/alisonarts.com.au 18 aaa/aaadownunder.com.au-ssl_log 15 madalice/madalice.com.au-ssl_log 9 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 574 203.54.180.238 126 103.104.164.114 65 103.104.165.99 50 20.104.78.132 50 116.91.223.103 14 124.190.136.22 13 182.239.240.254 9 180.181.236.49 7 1.145.73.14 3 184.72.121.156 3 165.225.233.109 3 157.55.39.194 3 150.228.151.9 2 91.92.243.248 2 54.86.66.252 --- top request paths across all vhosts (last 3 min) --- 208 POST /functions.php 132 GET /app/ajax.php 121 GET /factory_session_checker.php 62 GET /index.php 62 GET /heartbeat.php 62 GET /factory_session_processed_qty.php 61 GET /factory_session_joiner.php 30 POST /plugins/csvexporter/plugin.php 23 POST /app/ajax.php 19 POST /app/ajax/selectFilterSingle.php 17 POST /quoteditsave.php 14 POST /clienteditsave.php 10 GET /plugins/fensa/fensa-ajax.php 7 POST /app/ajax/selectFilter.php 6 POST /logsave.php 6 POST /dispatchsave.php 6 GET //app/ajax.php 3 POST /wp-login.php 3 POST /plugins/fencecosting/plugin.php 3 POST /jobeditsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 208 POST /functions.php 132 GET /app/ajax.php 58 GET /index.php 30 POST /plugins/csvexporter/plugin.php 23 POST /app/ajax.php 19 POST /app/ajax/selectFilterSingle.php 17 POST /quoteditsave.php 14 POST /clienteditsave.php 10 GET /plugins/fensa/fensa-ajax.php 7 POST /app/ajax/selectFilter.php 6 POST /logsave.php 6 POST /dispatchsave.php -- last 10 requests -- 203.54.180.238 - - [14/Aug/2026:09:40:35 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=invedithist&id=7988&string=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 203.54.180.238 - - [14/Aug/2026:09:40:35 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinvedithist%26id%3D7988%26string%3D&call=getUserSetting&caller=ajaxSubmitLocal&seq=13490943304 HTTP/1.1" 200 108 "https://my.evo 203.54.180.238 - - [14/Aug/2026:09:40:36 +1000] "POST /inveditsave.php?call=filterStockMovement HTTP/1.1" 200 1766 "https://my.evolutionerp.com.au/index.php?page=invedithist&id=7988&string=" "Mozilla/5.0 (Windows NT 10.0 1.145.73.14 - - [14/Aug/2026:09:40:36 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=32127" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe 1.145.73.14 - - [14/Aug/2026:09:40:36 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36619" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe 203.54.180.238 - - [14/Aug/2026:09:40:37 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78390§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 203.54.180.238 - - [14/Aug/2026:09:40:37 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=invedithist&id=7988&string=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 203.54.180.238 - - [14/Aug/2026:09:40:34 +1000] "GET /index.php?page=jobedit&id=29362 HTTP/1.1" 200 173187 "https://my.evolutionerp.com.au/index.php?page=jobadd"eid=78395" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) A 203.54.180.238 - - [14/Aug/2026:09:40:35 +1000] "POST /logsave.php?call=getHistory&id=29362&module=job HTTP/1.1" 200 432 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29362" "Mozilla/5.0 (Windows NT 10.0; Win 103.104.164.114 - - [14/Aug/2026:09:40:38 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 121 GET /factory_session_checker.php 62 GET /heartbeat.php 62 GET /factory_session_processed_qty.php 61 GET /factory_session_joiner.php 4 GET /index.php 2 POST /factory_functions.php 1 PATCH /api/pickings.php -- last 10 requests -- 203.54.180.238 - - [14/Aug/2026:09:40:29 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [14/Aug/2026:09:40:29 +1000] "GET /factory_session_joiner.php?id=34542 HTTP/1.1" 200 94 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [14/Aug/2026:09:40:30 +1000] "GET /heartbeat.php?sentAt=1786664430&bytes=106,126,85,238&_=1786602373551 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [14/Aug/2026:09:40:31 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:09:40:31 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 130 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [14/Aug/2026:09:40:31 +1000] "GET /factory_session_joiner.php?id=34552 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [14/Aug/2026:09:40:32 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:09:40:32 +1000] "GET /heartbeat.php?sentAt=1786664432&bytes=106,126,85,240&_=1786663239118 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [14/Aug/2026:09:40:33 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:09:40:34 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb == alison/alisonarts.com.au-ssl_log == -- top paths -- 2 GET /zi-936.php 2 GET /ws13.php 1 GET /xyn.php 1 GET /xx.php 1 GET /wp-includes/js/jquery/ 1 GET /w1px.php 1 GET /sky.php 1 GET /sf.php 1 GET /SDsadqwrf.php 1 GET /scxy.php 1 GET /robots.txt 1 GET /puc.php -- last 10 requests -- 20.104.78.132 - - [14/Aug/2026:09:38:44 +1000] "GET /ai.php HTTP/1.1" 404 49207 "-" "-" 20.104.78.132 - - [14/Aug/2026:09:38:46 +1000] "GET /w1px.php HTTP/1.1" 404 49207 "-" "-" 20.104.78.132 - - [14/Aug/2026:09:38:49 +1000] "GET /zi-936.php?p= HTTP/1.1" 301 - "-" "-" 20.104.78.132 - - [14/Aug/2026:09:38:50 +1000] "GET /zi-936.php HTTP/1.1" 404 49207 "-" "-" 20.104.78.132 - - [14/Aug/2026:09:38:52 +1000] "GET /dcsgumnm.php HTTP/1.1" 404 49207 "-" "-" 20.104.78.132 - - [14/Aug/2026:09:38:54 +1000] "GET /wp-includes/js/jquery/ HTTP/1.1" 404 49207 "-" "-" 20.104.78.132 - - [14/Aug/2026:09:38:56 +1000] "GET /php.php?p= HTTP/1.1" 403 13 "-" "-" 20.104.78.132 - - [14/Aug/2026:09:38:57 +1000] "GET /sf.php HTTP/1.1" 403 13 "-" "-" 69.63.184.10 - - [14/Aug/2026:09:38:56 +1000] "GET /robots.txt HTTP/1.1" 200 297 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 20.104.78.132 - - [14/Aug/2026:09:38:57 +1000] "GET /xx.php HTTP/1.1" 404 49207 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-14 09:38:17 L1=1.86 run=3 blk=0 avail=7367 (62.8%) swpO=0 conn=2 myRSS=1826 php=1 phpRSS=69 ap=50 tcp=47 topuser=evolution 2026-08-14 09:38:17 L1=1.86 run=4 blk=0 avail=7289 (62.1%) swpO=0 conn=3 myRSS=1826 php=3 phpRSS=206 ap=49 tcp=48 topuser=evolution 2026-08-14 09:38:27 L1=1.66 run=3 blk=0 avail=7103 (60.6%) swpO=0 conn=2 myRSS=1826 php=3 phpRSS=441 ap=45 tcp=38 topuser=evolution 2026-08-14 09:38:27 L1=1.66 run=1 blk=0 avail=7447 (63.5%) swpO=0 conn=3 myRSS=1826 php=1 phpRSS=40 ap=44 tcp=39 topuser=evolution 2026-08-14 09:38:37 L1=1.63 run=2 blk=0 avail=7416 (63.2%) swpO=0 conn=2 myRSS=1826 php=1 phpRSS=104 ap=39 tcp=41 topuser=alison 2026-08-14 09:38:37 L1=1.63 run=2 blk=0 avail=7391 (63.0%) swpO=0 conn=2 myRSS=1826 php=1 phpRSS=40 ap=39 tcp=42 topuser=evolution 2026-08-14 09:38:47 L1=1.53 run=3 blk=0 avail=7381 (62.9%) swpO=0 conn=3 myRSS=1826 php=2 phpRSS=137 ap=42 tcp=48 topuser=alison 2026-08-14 09:38:47 L1=1.53 run=3 blk=0 avail=7318 (62.4%) swpO=0 conn=2 myRSS=1826 php=3 phpRSS=232 ap=42 tcp=47 topuser=alison 2026-08-14 09:38:57 L1=1.89 run=6 blk=0 avail=7026 (59.9%) swpO=0 conn=3 myRSS=1826 php=5 phpRSS=573 ap=44 tcp=43 topuser=infinium 2026-08-14 09:38:57 L1=1.89 run=8 blk=0 avail=7096 (60.5%) swpO=0 conn=2 myRSS=1826 php=7 phpRSS=572 ap=44 tcp=42 topuser=customc 2026-08-14 09:39:07 L1=1.91 run=3 blk=0 avail=7309 (62.3%) swpO=0 conn=3 myRSS=1826 php=2 phpRSS=260 ap=36 tcp=38 topuser=madalice 2026-08-14 09:39:07 L1=1.91 run=4 blk=0 avail=7204 (61.4%) swpO=0 conn=2 myRSS=1826 php=4 phpRSS=427 ap=36 tcp=37 topuser=madalice 2026-08-14 09:39:17 L1=1.92 run=3 blk=0 avail=7380 (62.9%) swpO=0 conn=3 myRSS=1826 php=2 phpRSS=141 ap=43 tcp=45 topuser=evolution 2026-08-14 09:39:18 L1=1.92 run=6 blk=0 avail=7316 (62.4%) swpO=0 conn=2 myRSS=1826 php=4 phpRSS=236 ap=43 tcp=43 topuser=evolution 2026-08-14 09:39:27 L1=1.93 run=6 blk=0 avail=7348 (62.6%) swpO=0 conn=3 myRSS=1826 php=3 phpRSS=217 ap=40 tcp=37 topuser=evolution 2026-08-14 09:39:28 L1=1.93 run=3 blk=0 avail=7327 (62.5%) swpO=0 conn=2 myRSS=1826 php=4 phpRSS=285 ap=39 tcp=41 topuser=madalice 2026-08-14 09:39:37 L1=1.79 run=1 blk=0 avail=7491 (63.9%) swpO=0 conn=3 myRSS=1826 php=1 phpRSS=40 ap=37 tcp=40 topuser=evolution 2026-08-14 09:39:38 L1=1.79 run=1 blk=0 avail=7479 (63.8%) swpO=0 conn=3 myRSS=1826 php=2 phpRSS=81 ap=36 tcp=40 topuser=evolution 2026-08-14 09:39:47 L1=1.75 run=3 blk=0 avail=7310 (62.3%) swpO=0 conn=4 myRSS=1826 php=3 phpRSS=271 ap=37 tcp=46 topuser=tubesupplies 2026-08-14 09:39:48 L1=1.75 run=3 blk=0 avail=7315 (62.4%) swpO=0 conn=3 myRSS=1826 php=4 phpRSS=286 ap=37 tcp=49 topuser=tubesupplies 2026-08-14 09:39:57 L1=1.80 run=3 blk=0 avail=7265 (61.9%) swpO=0 conn=4 myRSS=1826 php=3 phpRSS=318 ap=37 tcp=46 topuser=customc 2026-08-14 09:39:58 L1=1.80 run=3 blk=1 avail=7153 (61.0%) swpO=0 conn=3 myRSS=1826 php=5 phpRSS=376 ap=37 tcp=47 topuser=customc 2026-08-14 09:40:07 L1=1.92 run=3 blk=0 avail=7469 (63.7%) swpO=0 conn=4 myRSS=1826 php=1 phpRSS=40 ap=35 tcp=40 topuser=evolution 2026-08-14 09:40:08 L1=1.92 run=1 blk=0 avail=7472 (63.7%) swpO=0 conn=3 myRSS=1826 php=2 phpRSS=81 ap=35 tcp=42 topuser=evolution 2026-08-14 09:40:17 L1=1.78 run=1 blk=0 avail=7395 (63.1%) swpO=0 conn=4 myRSS=1827 php=2 phpRSS=107 ap=42 tcp=45 topuser=evolution 2026-08-14 09:40:18 L1=1.78 run=2 blk=0 avail=7381 (62.9%) swpO=0 conn=3 myRSS=1827 php=3 phpRSS=148 ap=42 tcp=44 topuser=evolution 2026-08-14 09:40:27 L1=1.89 run=2 blk=0 avail=7274 (62.0%) swpO=0 conn=4 myRSS=1827 php=3 phpRSS=236 ap=45 tcp=51 topuser=customc 2026-08-14 09:40:28 L1=1.89 run=3 blk=0 avail=7165 (61.1%) swpO=0 conn=3 myRSS=1827 php=5 phpRSS=405 ap=46 tcp=54 topuser=customc 2026-08-14 09:40:37 L1=1.99 run=15 blk=0 avail=5637 (48.1%) swpO=0 conn=14 myRSS=1827 php=19 phpRSS=2366 ap=45 tcp=54 topuser=madalice 2026-08-14 09:40:38 L1=1.99 run=16 blk=0 avail=5995 (51.1%) swpO=197 conn=12 myRSS=1821 php=16 phpRSS=1928 ap=45 tcp=52 topuser=madalice