INCIDENT 2026-08-14 11:01:24 trigger: php_rss=2780MB mysql_conn=16 ================================================================== load: 1.62 1.58 1.41 30/658 1786412 ncpu:10 mem_avail: 5060MB/11729MB (43.1%) swap_used:1222MB swapout:972/s blocked(D):0 running:20 iowait:0.4% steal:0.0% php: 15 procs / 2780MB heaviest user: madalice (14 procs, 2703MB) apache: 64 procs tcp_estab: 67 --- RSS by user (all processes) --- USER PROCS RSS_MB madalice 13 2572 mysql 1 1741 nobody 64 1055 root 242 958 netdata 8 254 evolution 7 108 olympic 1 87 corpkicks 2 84 alison 5 79 kurri 4 49 cpanellogin 1 47 dovenull 6 29 wp-toolkit 6 20 mailnull 3 15 mailman 20 15 vinesit 1 12 zabbix 1 11 dovecot 3 8 named 1 5 nscd 1 4 --- php workers by user --- USER PROCS RSS_MB madalice 13 2610 evolution 3 122 olympic 1 88 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6035 MB Active(file): 2778 MB Inactive(file): 1926 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 374 MB CommitLimit: 9960 MB Committed_AS: 10351 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 1404480 root 09:50:08 2500 /usr/bin/imunify-agent-proxy 1784812 root 01:23 1324 /bin/sh -c bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 1420296 1 mysql 1783300 13.4 Ssl 09:22:23 /usr/sbin/mariadbd 1786350 1785853 madalice 269072 56.2 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1786364 1785411 madalice 264252 75.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1786361 1782787 madalice 263300 77.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1786365 1785376 madalice 246680 72.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1786356 1779837 madalice 212548 65.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 210548 2.5 Ssl 46-00:51:26 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1786363 1784289 madalice 206268 64.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1451533 1444234 root 202848 0.1 S 08:24:17 spamd child 1786362 1784294 madalice 202620 63.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1786357 1785812 madalice 198088 62.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1786367 1783330 madalice 183592 56.0 S 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1786360 1785412 madalice 181664 56.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 159820 1 root 181048 0.0 Ss 25-01:14:34 /usr/lib/systemd/systemd-journald 1786359 1785860 madalice 177044 53.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1786366 1785400 madalice 172812 51.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1451534 1444234 root 162820 0.0 S 08:24:17 spamd child 1444234 1 root 126548 0.0 Ss 08:38:36 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1786375 1784266 olympic 94656 32.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1783629 1353308 corpkicks 54152 0.1 S 02:48 webmaild - serving 1.145.84.81 1754806 1353308 cpanellogin 48668 0.0 S 37:28 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 1786411 1784293 evolution 45396 7.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1786442 1785857 evolution 40816 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1786429 1785863 evolution 40576 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2223 1201 root 40364 0.0 Sl 46-00:51:25 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 39880 0.0 Ss 23-08:19:56 cpsrvd (SSL) - waiting for connections 1469 1 root 38620 0.1 Ss 46-00:51:25 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 4922 2431 netdata 33864 0.1 Sl 46-00:51:21 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1783636 3651864 corpkicks 32120 0.4 S 02:48 php-fpm: pool user_corpkicks 1786453 1785414 evolution 29516 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1443709 1 root 26344 0.0 Ss 08:39:11 lfd - sleeping 1767687 3828812 alison 23340 0.2 S 21:51 dovecot/imap 1782979 1276780 nobody 21124 0.0 S 03:34 /usr/sbin/httpd -k start 1785265 1276780 nobody 20668 0.1 S 01:02 /usr/sbin/httpd -k start 1785419 1276780 nobody 20380 0.2 S 00:52 /usr/sbin/httpd -k start 1784288 1276780 nobody 20352 0.0 S 02:04 /usr/sbin/httpd -k start 1785412 1276780 nobody 20344 0.0 S 00:52 /usr/sbin/httpd -k start 1783683 1276780 nobody 20160 0.0 S 02:45 /usr/sbin/httpd -k start 1784289 1276780 nobody 20120 0.1 S 02:04 /usr/sbin/httpd -k start 1785838 1276780 nobody 19960 0.1 S 00:32 /usr/sbin/httpd -k start 1784294 1276780 nobody 19944 0.0 S 02:04 /usr/sbin/httpd -k start 1785853 1276780 nobody 19520 0.1 S 00:31 /usr/sbin/httpd -k start 1785837 1276780 nobody 19332 0.4 S 00:32 /usr/sbin/httpd -k start 1783667 1276780 nobody 19216 0.0 S 02:46 /usr/sbin/httpd -k start 1784266 1276780 nobody 19192 0.0 S 02:05 /usr/sbin/httpd -k start 1785377 1276780 nobody 19092 0.0 S 00:55 /usr/sbin/httpd -k start 1783330 1276780 nobody 18988 0.1 S 03:09 /usr/sbin/httpd -k start 1785245 1276780 nobody 18720 0.0 S 01:03 /usr/sbin/httpd -k start 1785411 1276780 nobody 18696 0.0 S 00:52 /usr/sbin/httpd -k start 1782787 1276780 nobody 18588 0.0 S 03:49 /usr/sbin/httpd -k start 1784262 1276780 nobody 18588 0.0 S 02:05 /usr/sbin/httpd -k start 1785854 1276780 nobody 18524 0.1 S 00:31 /usr/sbin/httpd -k start 1785264 1276780 nobody 18456 0.0 S 01:02 /usr/sbin/httpd -k start 1785827 1276780 nobody 18428 0.0 S 00:33 /usr/sbin/httpd -k start 1785841 1276780 nobody 18428 0.1 S 00:32 /usr/sbin/httpd -k start 1785380 1276780 nobody 18380 0.0 S 00:54 /usr/sbin/httpd -k start 1785376 1276780 nobody 18372 0.0 S 00:55 /usr/sbin/httpd -k start 1785864 1276780 nobody 18372 0.0 S 00:31 /usr/sbin/httpd -k start 1785267 1276780 nobody 18352 0.0 S 01:02 /usr/sbin/httpd -k start 1785840 1276780 nobody 18276 0.1 S 00:32 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- 1785419 D - /usr/sbin/httpd -k start 1786408 D - /usr/sbin/httpd -k start 1786444 D - /usr/sbin/httpd -k start --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 1885882 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 478 evolution/portal.evolutionerp.com.au-ssl_log 326 lowrange/lowrange.com.au-ssl_log 88 madalice/madalice.com.au-ssl_log 18 corpkicks/corporatekicks.com.au-ssl_log 14 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 513 203.54.180.238 88 4.223.171.122 81 103.104.164.114 55 103.104.165.99 45 203.221.33.39 43 116.91.223.103 26 180.181.236.49 15 120.19.183.39 13 182.239.240.254 8 2600:1900:4120:ceed:0:a3f:: 7 2001:4479:6401:2c00:108c:e048:f1dc:4e6 6 1.145.73.14 5 150.228.151.9 5 147.161.213.98 5 1.145.84.81 --- top request paths across all vhosts (last 3 min) --- 185 POST /functions.php 143 GET /factory_session_checker.php 74 GET /factory_session_processed_qty.php 74 GET /factory_session_joiner.php 67 GET /app/ajax.php 44 GET /heartbeat.php 42 POST /app/ajax/selectFilter.php 30 POST /quoteditsave.php 27 GET /index.php 18 POST /clienteditsave.php 14 POST /plugins/csvexporter/plugin.php 14 POST /app/ajax.php 13 POST /itemModify.php 11 POST //functions.php 11 POST /app/ajax/selectFilterSingle.php 11 GET //app/ajax.php 8 POST /jobeditsave.php 7 GET / 5 POST /logsave.php 4 POST /invoiceaddsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 185 POST /functions.php 67 GET /app/ajax.php 42 POST /app/ajax/selectFilter.php 30 POST /quoteditsave.php 25 GET /index.php 18 POST /clienteditsave.php 14 POST /plugins/csvexporter/plugin.php 14 POST /app/ajax.php 13 POST /itemModify.php 11 POST //functions.php 11 POST /app/ajax/selectFilterSingle.php 11 GET //app/ajax.php -- last 10 requests -- 203.54.180.238 - - [14/Aug/2026:11:01:20 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 103.104.165.99 - - [14/Aug/2026:11:01:21 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=11193" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 103.104.165.99 - - [14/Aug/2026:11:01:21 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=11147" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 203.54.180.238 - - [14/Aug/2026:11:01:21 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch 203.54.180.238 - - [14/Aug/2026:11:01:21 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78390" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 103.104.165.99 - - [14/Aug/2026:11:01:21 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 1.145.84.81 - - [14/Aug/2026:11:01:22 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=invedit&id=1253&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 203.54.180.238 - - [14/Aug/2026:11:01:22 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 103.104.164.114 - - [14/Aug/2026:11:01:24 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=4345&tab=maintab" "Mozilla/5.0 (Windows NT 10.0; 103.104.164.114 - - [14/Aug/2026:11:01:24 +1000] "POST /quoteditsave.php HTTP/1.1" 302 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=1610" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 143 GET /factory_session_checker.php 74 GET /factory_session_processed_qty.php 74 GET /factory_session_joiner.php 44 GET /heartbeat.php 2 GET /index.php 1 POST /portal/register 1 POST /factory_functions.php 1 PATCH /api/pickings.php -- last 10 requests -- 203.54.180.238 - - [14/Aug/2026:11:01:21 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:11:01:23 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 130 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [14/Aug/2026:11:01:23 +1000] "GET /factory_session_joiner.php?id=34552 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [14/Aug/2026:11:01:24 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [14/Aug/2026:11:01:24 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:11:01:24 +1000] "GET /factory_session_joiner.php?id=34600 HTTP/1.1" 200 86 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [14/Aug/2026:11:01:24 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:11:01:24 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:11:01:25 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [14/Aug/2026:11:01:25 +1000] "GET /factory_session_joiner.php?id=34601 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe == lowrange/lowrange.com.au-ssl_log == -- top paths -- 2 GET /fffm.php 1 GET /Zoo.php 1 GET /zaza.php 1 GET /z60.php 1 GET /xxw.php 1 GET /xwx1.php 1 GET /xrp.php 1 GET /xr.php 1 GET /x.php 1 GET /xml.php 1 GET /wyzer3.php 1 GET /ww1.php -- last 10 requests -- 4.223.171.122 - - [14/Aug/2026:11:01:01 +1000] "GET /shiny.php HTTP/1.1" 404 5749 "-" "-" 4.223.171.122 - - [14/Aug/2026:11:01:02 +1000] "GET /hp2.php HTTP/1.1" 404 5749 "-" "-" 4.223.171.122 - - [14/Aug/2026:11:01:02 +1000] "GET /ors32envu.php HTTP/1.1" 404 5749 "-" "-" 4.223.171.122 - - [14/Aug/2026:11:01:03 +1000] "GET /plugins.php HTTP/1.1" 404 5749 "-" "-" 4.223.171.122 - - [14/Aug/2026:11:01:04 +1000] "GET /modules/mod_simplefileuploadv1.3/elements/i8hqok6nr.php HTTP/1.1" 404 5749 "-" "-" 4.223.171.122 - - [14/Aug/2026:11:01:05 +1000] "GET /un.php HTTP/1.1" 404 5749 "-" "-" 4.223.171.122 - - [14/Aug/2026:11:01:05 +1000] "GET /oxse.php HTTP/1.1" 404 5749 "-" "-" 4.223.171.122 - - [14/Aug/2026:11:01:06 +1000] "GET /coffee.php HTTP/1.1" 404 5749 "-" "-" 4.223.171.122 - - [14/Aug/2026:11:01:07 +1000] "GET /bootstrap.php HTTP/1.1" 404 5749 "-" "-" 4.223.171.122 - - [14/Aug/2026:11:01:07 +1000] "GET /wp-content/themes/about.php HTTP/1.1" 404 5749 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-14 10:59:03 L1=3.46 run=5 blk=0 avail=7039 (60.0%) swpO=0 conn=3 myRSS=1744 php=2 phpRSS=334 ap=54 tcp=59 topuser=corpkicks 2026-08-14 10:59:03 L1=3.46 run=7 blk=1 avail=6879 (58.6%) swpO=0 conn=4 myRSS=1744 php=3 phpRSS=508 ap=54 tcp=62 topuser=corpkicks 2026-08-14 10:59:13 L1=3.15 run=3 blk=0 avail=7306 (62.3%) swpO=0 conn=3 myRSS=1745 php=1 phpRSS=92 ap=46 tcp=53 topuser=corpkicks 2026-08-14 10:59:13 L1=3.15 run=2 blk=0 avail=7211 (61.5%) swpO=0 conn=2 myRSS=1745 php=1 phpRSS=189 ap=46 tcp=53 topuser=corpkicks 2026-08-14 10:59:23 L1=3.12 run=4 blk=0 avail=6949 (59.2%) swpO=0 conn=3 myRSS=1745 php=3 phpRSS=285 ap=76 tcp=75 topuser=madalice 2026-08-14 10:59:24 L1=3.12 run=3 blk=0 avail=7134 (60.8%) swpO=0 conn=2 myRSS=1745 php=2 phpRSS=73 ap=76 tcp=76 topuser=evolution 2026-08-14 10:59:33 L1=2.88 run=4 blk=0 avail=7045 (60.1%) swpO=0 conn=3 myRSS=1745 php=2 phpRSS=230 ap=66 tcp=70 topuser=madalice 2026-08-14 10:59:34 L1=2.88 run=4 blk=0 avail=6939 (59.2%) swpO=0 conn=2 myRSS=1745 php=3 phpRSS=366 ap=66 tcp=70 topuser=madalice 2026-08-14 10:59:43 L1=2.73 run=1 blk=0 avail=7256 (61.9%) swpO=0 conn=3 myRSS=1745 php=0 phpRSS=0 ap=59 tcp=63 topuser=- 2026-08-14 10:59:44 L1=2.73 run=4 blk=0 avail=7245 (61.8%) swpO=0 conn=2 myRSS=1745 php=1 phpRSS=23 ap=59 tcp=62 topuser=evolution 2026-08-14 10:59:53 L1=2.31 run=1 blk=0 avail=7327 (62.5%) swpO=0 conn=3 myRSS=1745 php=0 phpRSS=0 ap=49 tcp=54 topuser=- 2026-08-14 10:59:54 L1=2.31 run=2 blk=0 avail=7316 (62.4%) swpO=0 conn=2 myRSS=1745 php=0 phpRSS=0 ap=49 tcp=50 topuser=- 2026-08-14 11:00:03 L1=2.25 run=4 blk=0 avail=7226 (61.6%) swpO=0 conn=6 myRSS=1745 php=4 phpRSS=230 ap=44 tcp=56 topuser=evolution 2026-08-14 11:00:04 L1=2.25 run=2 blk=0 avail=7290 (62.2%) swpO=0 conn=2 myRSS=1745 php=2 phpRSS=89 ap=44 tcp=55 topuser=evolution 2026-08-14 11:00:13 L1=1.98 run=1 blk=0 avail=7383 (63.0%) swpO=0 conn=6 myRSS=1745 php=1 phpRSS=69 ap=42 tcp=53 topuser=evolution 2026-08-14 11:00:14 L1=1.98 run=1 blk=0 avail=7384 (63.0%) swpO=0 conn=2 myRSS=1745 php=1 phpRSS=69 ap=42 tcp=50 topuser=evolution 2026-08-14 11:00:23 L1=1.76 run=1 blk=0 avail=7375 (62.9%) swpO=0 conn=6 myRSS=1745 php=1 phpRSS=69 ap=47 tcp=54 topuser=evolution 2026-08-14 11:00:24 L1=1.76 run=3 blk=0 avail=7373 (62.9%) swpO=0 conn=2 myRSS=1745 php=1 phpRSS=69 ap=47 tcp=54 topuser=evolution 2026-08-14 11:00:33 L1=1.56 run=6 blk=0 avail=7035 (60.0%) swpO=0 conn=6 myRSS=1745 php=4 phpRSS=332 ap=77 tcp=82 topuser=madalice 2026-08-14 11:00:34 L1=1.56 run=6 blk=0 avail=6948 (59.2%) swpO=0 conn=2 myRSS=1745 php=5 phpRSS=432 ap=77 tcp=75 topuser=madalice 2026-08-14 11:00:43 L1=1.40 run=10 blk=0 avail=6419 (54.7%) swpO=0 conn=6 myRSS=1745 php=7 phpRSS=1099 ap=67 tcp=53 topuser=corpkicks 2026-08-14 11:00:44 L1=1.40 run=6 blk=0 avail=6726 (57.3%) swpO=0 conn=2 myRSS=1745 php=3 phpRSS=455 ap=67 tcp=48 topuser=corpkicks 2026-08-14 11:00:53 L1=1.48 run=1 blk=0 avail=7095 (60.5%) swpO=0 conn=6 myRSS=1745 php=0 phpRSS=0 ap=92 tcp=97 topuser=- 2026-08-14 11:00:54 L1=1.48 run=6 blk=0 avail=6944 (59.2%) swpO=0 conn=2 myRSS=1745 php=5 phpRSS=307 ap=92 tcp=95 topuser=madalice 2026-08-14 11:01:03 L1=1.55 run=6 blk=0 avail=6685 (57.0%) swpO=0 conn=6 myRSS=1745 php=5 phpRSS=619 ap=84 tcp=64 topuser=madalice 2026-08-14 11:01:04 L1=1.55 run=7 blk=0 avail=6424 (54.8%) swpO=0 conn=2 myRSS=1745 php=9 phpRSS=996 ap=84 tcp=61 topuser=madalice 2026-08-14 11:01:14 L1=1.55 run=3 blk=0 avail=7014 (59.8%) swpO=0 conn=6 myRSS=1745 php=2 phpRSS=271 ap=74 tcp=57 topuser=corpkicks 2026-08-14 11:01:14 L1=1.55 run=4 blk=0 avail=6868 (58.6%) swpO=0 conn=4 myRSS=1746 php=4 phpRSS=479 ap=74 tcp=59 topuser=corpkicks 2026-08-14 11:01:24 L1=1.62 run=20 blk=0 avail=5060 (43.1%) swpO=972 conn=16 myRSS=1741 php=15 phpRSS=2780 ap=64 tcp=67 topuser=madalice 2026-08-14 11:01:24 L1=1.62 run=24 blk=1 avail=5092 (43.4%) swpO=1000 conn=11 myRSS=1741 php=15 phpRSS=2458 ap=65 tcp=105 topuser=madalice