INCIDENT 2026-08-14 11:11:58 trigger: php_rss=1798MB mysql_conn=19 ================================================================== load: 0.87 1.43 1.48 20/630 1795626 ncpu:10 mem_avail: 6076MB/11729MB (51.8%) swap_used:1185MB swapout:0/s blocked(D):0 running:18 iowait:0.0% steal:0.0% php: 14 procs / 1798MB heaviest user: madalice (12 procs, 1553MB) apache: 48 procs tcp_estab: 49 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1782 madalice 12 1697 root 237 934 nobody 46 747 corpkicks 3 291 netdata 8 262 evolution 7 109 alison 2 53 kurri 4 50 cpanellogin 1 47 dovenull 6 31 wp-toolkit 6 20 mailman 20 15 aaa 1 12 zabbix 1 10 dovecot 3 8 mailnull 2 7 named 1 5 nscd 1 4 cpanelconnecttrack 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 12 1727 corpkicks 1 209 evolution 3 143 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6082 MB Active(file): 3559 MB Inactive(file): 1665 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 374 MB CommitLimit: 9960 MB Committed_AS: 9709 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 1404480 root 10:00:42 2500 /usr/bin/imunify-agent-proxy 1784812 root 11:57 1324 /bin/sh -c bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 1420296 1 mysql 1825312 13.8 Ssl 09:32:57 /usr/sbin/mariadbd 1795585 1794243 corpkicks 239120 67.0 R 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1795575 1795557 madalice 233408 67.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1795571 1795553 madalice 219260 69.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 212500 2.5 Ssl 46-01:02:00 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1451533 1444234 root 202848 0.1 S 08:34:51 spamd child 1795570 1795552 madalice 186024 60.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 159820 1 root 183600 0.0 Ss 25-01:25:08 /usr/lib/systemd/systemd-journald 1795573 1795555 madalice 180612 56.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1795574 1795556 madalice 180532 52.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1795580 1793702 madalice 179456 77.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1795583 1788652 madalice 177764 76.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1795581 1794224 madalice 166556 78.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1451534 1444234 root 162820 0.0 S 08:34:51 spamd child 1444234 1 root 126548 0.0 Ss 08:49:10 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1795584 1794639 madalice 125476 51.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1795587 1794240 madalice 104896 80.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1795582 1791490 madalice 104208 36.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1795586 1793713 madalice 81692 51.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1795593 1793701 evolution 68204 15.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1794918 1353308 corpkicks 52376 0.2 S 00:56 webmaild - serving 1.145.84.81 1754806 1353308 cpanellogin 48596 0.0 S 48:02 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 1795604 1794226 evolution 40816 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2223 1201 root 40364 0.0 Sl 46-01:01:59 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1767688 3828812 alison 40144 0.1 S 32:25 dovecot/imap 1353308 1 root 39992 0.0 Ss 23-08:30:30 cpsrvd (SSL) - waiting for connections 1795655 1795550 evolution 39456 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1469 1 root 38628 0.1 Ss 46-01:01:59 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1795654 1793663 evolution 38528 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 4922 2431 netdata 34224 0.1 Sl 46-01:01:55 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1783636 3651864 corpkicks 34100 0.1 S 13:22 php-fpm: pool user_corpkicks 1443709 1 root 26372 0.0 Ss 08:49:45 lfd - sleeping 1787998 1276780 nobody 20916 0.0 S 08:56 /usr/sbin/httpd -k start 1789305 1276780 nobody 20240 0.0 S 07:20 /usr/sbin/httpd -k start 1791490 1276780 nobody 20068 0.0 S 04:56 /usr/sbin/httpd -k start 1792256 1276780 nobody 19920 0.0 S 03:57 /usr/sbin/httpd -k start 1793663 1276780 nobody 19904 0.0 S 02:06 /usr/sbin/httpd -k start 1793708 1276780 nobody 19880 0.0 S 02:04 /usr/sbin/httpd -k start 1794224 1276780 nobody 19812 0.0 S 01:36 /usr/sbin/httpd -k start 1794240 1276780 nobody 19812 0.0 S 01:35 /usr/sbin/httpd -k start 1793710 1276780 nobody 19228 0.0 S 02:04 /usr/sbin/httpd -k start 1788652 1276780 nobody 19128 0.0 S 08:09 /usr/sbin/httpd -k start 1793682 1276780 nobody 18980 0.0 S 02:05 /usr/sbin/httpd -k start 1791481 1276780 nobody 18880 0.0 S 04:57 /usr/sbin/httpd -k start 1794200 1276780 nobody 18876 0.0 S 01:38 /usr/sbin/httpd -k start 1794246 1276780 nobody 18864 0.0 S 01:35 /usr/sbin/httpd -k start 1793702 1276780 nobody 18648 0.0 S 02:04 /usr/sbin/httpd -k start 1794690 1276780 nobody 18564 0.1 S 01:08 /usr/sbin/httpd -k start 1794226 1276780 nobody 18308 0.0 S 01:36 /usr/sbin/httpd -k start 1793713 1276780 nobody 18056 0.0 S 02:04 /usr/sbin/httpd -k start 1794227 1276780 nobody 17992 0.0 S 01:36 /usr/sbin/httpd -k start 1793701 1276780 nobody 17932 0.0 S 02:04 /usr/sbin/httpd -k start 1794473 1276780 nobody 17932 0.0 S 01:18 /usr/sbin/httpd -k start 1794242 1276780 nobody 17772 0.0 S 01:35 /usr/sbin/httpd -k start 1794243 1276780 nobody 17676 0.0 S 01:35 /usr/sbin/httpd -k start 1795197 1276780 nobody 17584 0.0 S 00:36 /usr/sbin/httpd -k start 1794863 1276780 nobody 17336 0.0 S 00:58 /usr/sbin/httpd -k start 1793249 1276780 nobody 17076 0.0 S 02:38 /usr/sbin/httpd -k start 1794639 1276780 nobody 16868 0.0 S 01:09 /usr/sbin/httpd -k start 1794488 1276780 nobody 16692 0.0 S 01:17 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 1963688 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 729 evolution/portal.evolutionerp.com.au-ssl_log 365 olympic/olympicfencing.com.au-ssl_log 14 madalice/madalice.com.au-ssl_log 9 (total vhosts taking traffic: 4) --- top client IPs across all vhosts (last 3 min) --- 726 203.54.180.238 132 103.104.164.114 64 116.91.223.103 49 150.228.151.9 40 120.19.183.39 30 103.104.165.99 21 203.221.33.39 11 180.181.236.49 7 147.161.213.98 6 193.189.100.202 5 1.145.84.81 4 192.42.116.96 4 182.239.240.254 3 192.42.116.113 3 1.145.73.14 --- top request paths across all vhosts (last 3 min) --- 260 POST /functions.php 141 GET /app/ajax.php 139 GET /factory_session_checker.php 70 GET /factory_session_processed_qty.php 69 GET /factory_session_joiner.php 66 GET /index.php 66 GET /heartbeat.php 36 POST /plugins/csvexporter/plugin.php 24 POST /clienteditsave.php 24 GET //app/ajax.php 22 POST /app/ajax/selectFilter.php 21 POST /quoteditsave.php 20 POST /app/ajax.php 18 POST /app/ajax/selectFilterSingle.php 16 POST //functions.php 16 POST /dispatchsave.php 9 POST /jobeditsave.php 8 POST /logsave.php 8 POST /itemModify.php 8 POST //clienteditsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 260 POST /functions.php 141 GET /app/ajax.php 53 GET /index.php 36 POST /plugins/csvexporter/plugin.php 24 POST /clienteditsave.php 24 GET //app/ajax.php 22 POST /app/ajax/selectFilter.php 21 POST /quoteditsave.php 20 POST /app/ajax.php 18 POST /app/ajax/selectFilterSingle.php 16 POST //functions.php 16 POST /dispatchsave.php -- last 10 requests -- 103.104.164.114 - - [14/Aug/2026:11:11:55 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=10998871577 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/inde 103.104.164.114 - - [14/Aug/2026:11:11:55 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Dinvoiceadd%26invoiceid%3D4282%26tab%3Dmaintab&call=getUserSetting&caller=ajaxSubmitLocal&seq=12570379585 HTTP 103.104.164.114 - - [14/Aug/2026:11:11:55 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinvoiceadd%26invoiceid%3D4282%26tab%3Dmaintab&call=getUserSetting&caller=ajaxSubmitLocal&seq=17890271777 HTTP/1.1" 200 173 "htt 103.104.164.114 - - [14/Aug/2026:11:11:55 +1000] "POST /clienteditsave.php?call=getSettings HTTP/1.1" 200 63 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=4282&tab=maintab" "Mozilla/5.0 (Windows NT 103.104.164.114 - - [14/Aug/2026:11:11:55 +1000] "POST /clienteditsave.php?clientid=120&call=getCategoryDiscounts HTTP/1.1" 200 25 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=4282&tab=maintab" "Mo 103.104.164.114 - - [14/Aug/2026:11:11:56 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=4282&tab=maintab" "Mozilla/5.0 (Windows NT 10.0; 103.104.164.114 - - [14/Aug/2026:11:11:56 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=invedit&id=24666&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; 150.228.151.9 - - [14/Aug/2026:11:11:56 +1000] "POST /app/ajax/selectFilter.php?call=filterinv&filter= HTTP/1.1" 200 22672 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78399§ionid=0" "Mozilla/5.0 ( 103.104.164.114 - - [14/Aug/2026:11:11:56 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 15664 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=4282&tab=maintab" "Mozilla/5.0 (Windows NT 1 103.104.164.114 - - [14/Aug/2026:11:11:57 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 139 GET /factory_session_checker.php 70 GET /factory_session_processed_qty.php 69 GET /factory_session_joiner.php 66 GET /heartbeat.php 13 GET /index.php 7 POST /portal/register 1 POST /factory_functions.php -- last 10 requests -- 203.54.180.238 - - [14/Aug/2026:11:11:48 +1000] "GET /heartbeat.php?sentAt=1786669906&bytes=106,126,107,82&_=1786663632985 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [14/Aug/2026:11:11:49 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:11:11:48 +1000] "GET /heartbeat.php?sentAt=1786669908&bytes=106,126,107,84&_=1786669818598 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=8" 203.54.180.238 - - [14/Aug/2026:11:11:50 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 130 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [14/Aug/2026:11:11:50 +1000] "GET /factory_session_joiner.php?id=34552 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [14/Aug/2026:11:11:50 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [14/Aug/2026:11:11:50 +1000] "GET /factory_session_joiner.php?id=34600 HTTP/1.1" 200 86 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [14/Aug/2026:11:11:50 +1000] "GET /heartbeat.php?sentAt=1786669910&bytes=106,126,107,86&_=1786602374099 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [14/Aug/2026:11:11:50 +1000] "GET /heartbeat.php?sentAt=1786669910&bytes=106,126,107,86&_=1786669476597 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [14/Aug/2026:11:11:51 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb == olympic/olympicfencing.com.au-ssl_log == -- top paths -- 1 POST /wp-cron.php 1 GET /feed/ 1 GET /feed 1 GET /contact-us/ 1 GET /contact-us 1 GET /comments/feed/ 1 GET /comments/feed 1 GET /careers/ 1 GET /careers 1 GET /accreditations-warrantys/ 1 GET /accreditations-warrantys 1 GET /about-us/ -- last 10 requests -- 193.189.100.202 - - [14/Aug/2026:11:09:53 +1000] "GET /accreditations-warrantys HTTP/1.1" 301 - "https://www.olympicfencing.com.au/accreditations-warrantys" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (K 193.189.100.202 - - [14/Aug/2026:11:09:54 +1000] "GET /accreditations-warrantys/ HTTP/1.1" 200 69157 "https://www.olympicfencing.com.au/accreditations-warrantys" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537. 193.189.100.202 - - [14/Aug/2026:11:09:57 +1000] "GET /careers HTTP/1.1" 301 - "https://www.olympicfencing.com.au/careers" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3198 193.189.100.202 - - [14/Aug/2026:11:09:59 +1000] "GET /careers/ HTTP/1.1" 200 61663 "https://www.olympicfencing.com.au/careers" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0 193.189.100.202 - - [14/Aug/2026:11:10:02 +1000] "GET /comments/feed HTTP/1.1" 301 - "https://www.olympicfencing.com.au/comments/feed" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chro 193.189.100.202 - - [14/Aug/2026:11:10:04 +1000] "GET /comments/feed/ HTTP/1.1" 200 754 "https://www.olympicfencing.com.au/comments/feed" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C 192.42.116.96 - - [14/Aug/2026:11:10:06 +1000] "GET /contact-us HTTP/1.1" 301 - "https://www.olympicfencing.com.au/contact-us" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0. 192.42.116.96 - - [14/Aug/2026:11:10:08 +1000] "GET /contact-us/ HTTP/1.1" 200 66916 "https://www.olympicfencing.com.au/contact-us" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ 192.42.116.96 - - [14/Aug/2026:11:10:11 +1000] "GET /feed HTTP/1.1" 301 - "https://www.olympicfencing.com.au/feed" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3198.58 Safa 192.42.116.96 - - [14/Aug/2026:11:10:13 +1000] "GET /feed/ HTTP/1.1" 200 860 "https://www.olympicfencing.com.au/feed" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3198.58 S --- last 30 samples (run-up to this incident) --- 2026-08-14 11:09:37 L1=1.86 run=2 blk=0 avail=7451 (63.5%) swpO=0 conn=1 myRSS=1782 php=0 phpRSS=0 ap=41 tcp=47 topuser=- 2026-08-14 11:09:38 L1=1.86 run=2 blk=0 avail=7470 (63.7%) swpO=0 conn=1 myRSS=1782 php=2 phpRSS=68 ap=41 tcp=49 topuser=evolution 2026-08-14 11:09:47 L1=1.65 run=1 blk=0 avail=7491 (63.9%) swpO=0 conn=1 myRSS=1782 php=1 phpRSS=39 ap=39 tcp=37 topuser=evolution 2026-08-14 11:09:48 L1=1.65 run=3 blk=0 avail=7415 (63.2%) swpO=0 conn=1 myRSS=1782 php=3 phpRSS=179 ap=38 tcp=38 topuser=evolution 2026-08-14 11:09:57 L1=1.56 run=7 blk=0 avail=7222 (61.6%) swpO=0 conn=1 myRSS=1782 php=7 phpRSS=305 ap=66 tcp=51 topuser=evolution 2026-08-14 11:09:58 L1=1.56 run=5 blk=0 avail=7173 (61.2%) swpO=0 conn=1 myRSS=1782 php=9 phpRSS=346 ap=65 tcp=56 topuser=evolution 2026-08-14 11:10:07 L1=1.62 run=3 blk=0 avail=7294 (62.2%) swpO=0 conn=1 myRSS=1782 php=1 phpRSS=102 ap=56 tcp=37 topuser=olympic 2026-08-14 11:10:08 L1=1.62 run=4 blk=0 avail=7368 (62.8%) swpO=0 conn=2 myRSS=1782 php=2 phpRSS=80 ap=55 tcp=37 topuser=olympic 2026-08-14 11:10:17 L1=1.37 run=2 blk=0 avail=7413 (63.2%) swpO=0 conn=2 myRSS=1782 php=1 phpRSS=65 ap=46 tcp=39 topuser=evolution 2026-08-14 11:10:18 L1=1.37 run=6 blk=0 avail=7303 (62.3%) swpO=0 conn=2 myRSS=1782 php=4 phpRSS=273 ap=45 tcp=40 topuser=madalice 2026-08-14 11:10:27 L1=1.39 run=2 blk=1 avail=7217 (61.5%) swpO=0 conn=2 myRSS=1782 php=2 phpRSS=199 ap=58 tcp=53 topuser=olympic 2026-08-14 11:10:28 L1=1.39 run=3 blk=0 avail=7208 (61.5%) swpO=0 conn=2 myRSS=1782 php=2 phpRSS=181 ap=57 tcp=45 topuser=olympic 2026-08-14 11:10:37 L1=1.33 run=4 blk=0 avail=7328 (62.5%) swpO=0 conn=2 myRSS=1782 php=2 phpRSS=172 ap=47 tcp=46 topuser=olympic 2026-08-14 11:10:38 L1=1.33 run=3 blk=0 avail=7363 (62.8%) swpO=0 conn=2 myRSS=1782 php=3 phpRSS=145 ap=47 tcp=49 topuser=evolution 2026-08-14 11:10:47 L1=1.50 run=1 blk=0 avail=7445 (63.5%) swpO=0 conn=2 myRSS=1782 php=0 phpRSS=0 ap=47 tcp=45 topuser=- 2026-08-14 11:10:48 L1=1.50 run=2 blk=0 avail=7342 (62.6%) swpO=0 conn=2 myRSS=1782 php=3 phpRSS=173 ap=47 tcp=54 topuser=evolution 2026-08-14 11:10:57 L1=1.42 run=3 blk=0 avail=7382 (62.9%) swpO=0 conn=2 myRSS=1782 php=2 phpRSS=98 ap=50 tcp=47 topuser=evolution 2026-08-14 11:10:58 L1=1.42 run=5 blk=0 avail=7333 (62.5%) swpO=0 conn=2 myRSS=1782 php=5 phpRSS=232 ap=50 tcp=51 topuser=evolution 2026-08-14 11:11:07 L1=1.67 run=9 blk=0 avail=6970 (59.4%) swpO=0 conn=2 myRSS=1782 php=8 phpRSS=674 ap=50 tcp=46 topuser=madalice 2026-08-14 11:11:08 L1=1.67 run=7 blk=0 avail=7093 (60.5%) swpO=0 conn=7 myRSS=1782 php=8 phpRSS=553 ap=50 tcp=44 topuser=evolution 2026-08-14 11:11:17 L1=1.57 run=6 blk=0 avail=7252 (61.8%) swpO=0 conn=4 myRSS=1782 php=3 phpRSS=261 ap=49 tcp=38 topuser=evolution 2026-08-14 11:11:18 L1=1.57 run=5 blk=0 avail=7342 (62.6%) swpO=0 conn=7 myRSS=1782 php=4 phpRSS=170 ap=48 tcp=40 topuser=evolution 2026-08-14 11:11:27 L1=1.33 run=3 blk=0 avail=7457 (63.6%) swpO=0 conn=4 myRSS=1782 php=0 phpRSS=0 ap=45 tcp=34 topuser=- 2026-08-14 11:11:28 L1=1.33 run=1 blk=0 avail=7452 (63.5%) swpO=0 conn=7 myRSS=1782 php=1 phpRSS=39 ap=44 tcp=35 topuser=evolution 2026-08-14 11:11:37 L1=1.12 run=3 blk=0 avail=7412 (63.2%) swpO=0 conn=4 myRSS=1782 php=1 phpRSS=133 ap=37 tcp=36 topuser=madalice 2026-08-14 11:11:38 L1=1.12 run=2 blk=0 avail=7280 (62.1%) swpO=0 conn=7 myRSS=1782 php=3 phpRSS=311 ap=36 tcp=44 topuser=madalice 2026-08-14 11:11:47 L1=1.03 run=3 blk=0 avail=7402 (63.1%) swpO=0 conn=4 myRSS=1782 php=1 phpRSS=156 ap=35 tcp=30 topuser=madalice 2026-08-14 11:11:48 L1=1.03 run=3 blk=0 avail=7296 (62.2%) swpO=0 conn=7 myRSS=1782 php=3 phpRSS=331 ap=34 tcp=34 topuser=madalice 2026-08-14 11:11:58 L1=0.87 run=18 blk=0 avail=6076 (51.8%) swpO=0 conn=19 myRSS=1782 php=14 phpRSS=1798 ap=48 tcp=49 topuser=madalice 2026-08-14 11:11:58 L1=0.87 run=18 blk=0 avail=5443 (46.4%) swpO=0 conn=16 myRSS=1782 php=18 phpRSS=2553 ap=47 tcp=57 topuser=madalice