INCIDENT 2026-08-14 11:33:46 trigger: php_rss=1550MB ================================================================== load: 3.02 1.92 1.66 17/625 1813514 ncpu:10 mem_avail: 6264MB/11729MB (53.4%) swap_used:1173MB swapout:0/s blocked(D):0 running:17 iowait:0.0% steal:0.0% php: 12 procs / 1550MB heaviest user: madalice (11 procs, 1521MB) apache: 50 procs tcp_estab: 54 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1810 madalice 11 1700 root 234 983 nobody 48 773 netdata 8 262 alison 5 64 cpanellogin 1 47 evolution 5 43 kurri 3 38 dovenull 6 31 wp-toolkit 6 20 mailman 20 15 kamcool 1 11 zabbix 1 10 dovecot 3 8 mailnull 2 7 named 1 5 nscd 1 4 cpanelconnecttrack 1 3 polkitd 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 11 1722 evolution 2 28 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6229 MB Active(file): 4248 MB Inactive(file): 1086 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 370 MB CommitLimit: 9960 MB Committed_AS: 9194 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 1404480 root 10:22:30 2456 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 1420296 1 mysql 1854440 14.5 Ssl 09:54:45 /usr/sbin/mariadbd 1813437 1813050 madalice 233996 108 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1813439 1807225 madalice 221668 103 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 213000 2.5 Ssl 46-01:23:48 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1451533 1444234 root 200412 0.1 S 08:56:39 spamd child 1813443 1812243 madalice 197640 94.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 159820 1 root 191536 0.0 Ss 25-01:46:56 /usr/lib/systemd/systemd-journald 1813450 1813112 madalice 190644 84.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1813438 1811792 madalice 189228 88.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1813442 1813099 madalice 183352 87.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1813446 1813108 madalice 182288 87.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1813447 1813051 madalice 179868 81.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1451534 1444234 root 177500 0.0 S 08:56:39 spamd child 1813449 1813034 madalice 170248 79.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1813448 1813049 madalice 146496 75.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1444234 1 root 126336 0.0 Ss 09:10:58 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1813481 1813107 madalice 83496 61.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1813526 1812245 madalice 59280 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1754806 1353308 cpanellogin 48872 0.0 S 01:09:50 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 2223 1201 root 39928 0.0 Sl 46-01:23:47 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 39788 0.0 Ss 23-08:52:18 cpsrvd (SSL) - waiting for connections 1469 1 root 38168 0.1 Ss 46-01:23:47 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1813550 1813103 evolution 34084 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 4922 2431 netdata 33732 0.1 Sl 46-01:23:43 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1813294 1353308 root 32560 0.0 S 00:20 whostmgrd - serving 1.145.84.81 1443709 1 root 26352 0.0 Ss 09:11:33 lfd - sleeping 1809139 1276780 nobody 20708 0.0 S 05:02 /usr/sbin/httpd -k start 1809111 1276780 nobody 20496 0.0 S 05:03 /usr/sbin/httpd -k start 1809146 1276780 nobody 20164 0.0 S 05:02 /usr/sbin/httpd -k start 1809141 1276780 nobody 19688 0.0 S 05:02 /usr/sbin/httpd -k start 1809975 1276780 nobody 19600 0.0 S 04:08 /usr/sbin/httpd -k start 1812242 1276780 nobody 19496 0.0 S 01:36 /usr/sbin/httpd -k start 1808165 1276780 nobody 19488 0.0 S 06:18 /usr/sbin/httpd -k start 1807225 1276780 nobody 19484 0.0 S 07:36 /usr/sbin/httpd -k start 1812243 1276780 nobody 19256 0.0 S 01:36 /usr/sbin/httpd -k start 1812619 1276780 nobody 18492 0.0 S 01:04 /usr/sbin/httpd -k start 1812228 1276780 nobody 18392 0.0 S 01:37 /usr/sbin/httpd -k start 1812220 1276780 nobody 18376 0.0 S 01:38 /usr/sbin/httpd -k start 1813112 1276780 nobody 18272 0.0 S 00:31 /usr/sbin/httpd -k start 1813110 1276780 nobody 18108 0.1 S 00:31 /usr/sbin/httpd -k start 1811485 1276780 nobody 18040 0.0 S 02:36 /usr/sbin/httpd -k start 1812706 1276780 nobody 17880 0.0 S 01:00 /usr/sbin/httpd -k start 1812582 1276780 nobody 17860 0.0 S 01:08 /usr/sbin/httpd -k start 1813104 1276780 nobody 17488 0.0 S 00:31 /usr/sbin/httpd -k start 1812625 1276780 nobody 17300 0.0 S 01:03 /usr/sbin/httpd -k start 1813054 1276780 nobody 16964 0.0 S 00:32 /usr/sbin/httpd -k start 1812244 1276780 nobody 16952 0.0 S 01:36 /usr/sbin/httpd -k start 1811671 1276780 nobody 16936 0.0 S 02:21 /usr/sbin/httpd -k start 1813034 1276780 nobody 16680 0.0 S 00:33 /usr/sbin/httpd -k start 1812985 1276780 nobody 16472 0.0 S 00:38 /usr/sbin/httpd -k start 1813108 1276780 nobody 16292 0.0 S 00:31 /usr/sbin/httpd -k start 1811792 1276780 nobody 16280 0.1 S 02:11 /usr/sbin/httpd -k start 1813053 1276780 nobody 16152 0.0 S 00:32 /usr/sbin/httpd -k start 1812245 1276780 nobody 16004 0.0 S 01:36 /usr/sbin/httpd -k start 1813056 1276780 nobody 15948 0.0 S 00:32 /usr/sbin/httpd -k start 1812474 1276780 nobody 15896 0.0 S 01:17 /usr/sbin/httpd -k start 1813049 1276780 nobody 15880 0.0 S 00:32 /usr/sbin/httpd -k start 1812735 1276780 nobody 15852 0.0 S 00:56 /usr/sbin/httpd -k start 1813105 1276780 nobody 15844 0.0 S 00:31 /usr/sbin/httpd -k start 1812626 1276780 nobody 15824 0.0 S 01:03 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 2147352 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 2147351 | root | 108-1481181613 | Execute | 0 | Sending data | SELECT staff.*, sessions.status AS session_status, sessions_shop_order_procs.staff_id FROM staff INNER JOIN sessions ON staff.id = sessions.staffid INNER JOIN sessions_shop_order_procs ON sessions.id = sessions_shop_order_procs.session_id WHERE sessions_shop_order_procs.shop_order_pro | +---------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 595 evolution/portal.evolutionerp.com.au-ssl_log 363 whiz/whizengineering.com.au 73 infinium/infinium.net.au 44 infinium/infinium.net.au-ssl_log 41 madalice/madalice.com.au-ssl_log 18 aaa/aaadownunder.com.au-ssl_log 1 (total vhosts taking traffic: 7) --- top client IPs across all vhosts (last 3 min) --- 485 203.54.180.238 153 103.104.164.114 81 20.104.82.183 73 4.232.93.83 68 203.221.33.39 64 182.239.240.254 52 1.145.87.17 47 103.104.165.99 28 1.145.73.14 22 120.19.183.39 12 150.228.151.9 8 180.181.236.49 5 136.70.81.125 5 116.91.223.103 4 139.59.58.229 --- top request paths across all vhosts (last 3 min) --- 208 POST /functions.php 130 GET /factory_session_checker.php 110 GET /app/ajax.php 64 GET /factory_session_processed_qty.php 64 GET /factory_session_joiner.php 61 GET /index.php 50 GET /heartbeat.php 46 POST /quoteditsave.php 26 POST /app/ajax/selectFilterSingle.php 25 POST /app/ajax/selectFilter.php 21 POST /mfreqsave.php 18 POST /app/ajax.php 17 POST /plugins/csvexporter/plugin.php 14 POST /portal/register 10 POST /plugins/fencecosting/plugin.php 10 POST /jobeditsave.php 10 POST //functions.php 9 GET /uploadsave.php 8 POST /clienteditsave.php 7 GET /store/custom-shapeshifter/ --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 208 POST /functions.php 110 GET /app/ajax.php 46 POST /quoteditsave.php 45 GET /index.php 26 POST /app/ajax/selectFilterSingle.php 25 POST /app/ajax/selectFilter.php 21 POST /mfreqsave.php 18 POST /app/ajax.php 17 POST /plugins/csvexporter/plugin.php 10 POST /plugins/fencecosting/plugin.php 10 POST /jobeditsave.php 10 POST //functions.php -- last 10 requests -- 180.181.236.49 - - [14/Aug/2026:11:33:42 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=timesheetHistory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi 203.54.180.238 - - [14/Aug/2026:11:33:43 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=pickingedit&pickingid=37677" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 182.239.240.254 - - [14/Aug/2026:11:33:43 +1000] "GET /index.php?page=mfshoporderdetail&id=5408 HTTP/1.1" 200 28757 "https://my.evolutionerp.com.au/index.php?page=mfshoporders" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 203.54.180.238 - - [14/Aug/2026:11:33:43 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=clienthistory&clientid=10140" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 182.239.240.254 - - [14/Aug/2026:11:33:43 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dmfshoporderdetail%26id%3D5408&call=getUserSetting&caller=ajaxSubmitLocal&seq=13842674748 HTTP/1.1" 200 104 "https://my.evolutio 203.221.33.39 - - [14/Aug/2026:11:33:43 +1000] "POST /itemModify.php?call=getInvMFMeta&modifyid=8607 HTTP/1.1" 200 141 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36709§ionid=all" "Mozilla/5.0 (Wi 203.54.180.238 - - [14/Aug/2026:11:33:43 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 203.221.33.39 - - [14/Aug/2026:11:33:43 +1000] "POST /quoteditsave.php?call=checkForBOMAlternates&id=8607 HTTP/1.1" 200 309 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36709§ionid=all" "Mozilla/5. 203.221.33.39 - - [14/Aug/2026:11:33:43 +1000] "POST /itemModify.php?call=getBOM HTTP/1.1" 200 1077 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36709§ionid=all" "Mozilla/5.0 (Windows NT 10.0; Win6 203.54.180.238 - - [14/Aug/2026:11:33:44 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=43647" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 130 GET /factory_session_checker.php 64 GET /factory_session_processed_qty.php 64 GET /factory_session_joiner.php 50 GET /heartbeat.php 16 GET /index.php 14 POST /portal/register 9 GET /uploadsave.php 6 GET /api/runsheets.php 5 GET /api/api-check.php 2 POST /uploadsave.php 2 POST /inventory.php 1 POST /factory_functions.php -- last 10 requests -- 203.54.180.238 - - [14/Aug/2026:11:33:36 +1000] "GET /factory_session_joiner.php?id=34604 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [14/Aug/2026:11:33:38 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:11:33:38 +1000] "GET /heartbeat.php?sentAt=1786671216&bytes=106,126,112,112&_=1786663633116 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [14/Aug/2026:11:33:40 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:11:33:40 +1000] "GET /heartbeat.php?sentAt=1786671220&bytes=106,126,112,116&_=1786602374230 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [14/Aug/2026:11:33:41 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:11:33:41 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:11:33:43 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:11:33:45 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:11:33:44 +1000] "GET /heartbeat.php?sentAt=1786671225&bytes=106,126,112,121&_=1786670564914 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=8 == whiz/whizengineering.com.au == -- top paths -- 1 GET /Zoo.php 1 GET //zaza.php 1 GET /z60.php 1 GET /xxw.php 1 GET /xwx1.php 1 GET /xrp.php 1 GET /xr.php 1 GET /wyzer3.php 1 GET /ww1.php 1 GET /ws85.php 1 GET //ws77.php 1 GET /wp-trackback.php -- last 10 requests -- 4.232.93.83 - - [14/Aug/2026:11:31:22 +1000] "GET //BDKR28WP.php HTTP/1.1" 404 - "-" "-" 4.232.93.83 - - [14/Aug/2026:11:31:22 +1000] "GET /wp-admin/js/index.php HTTP/1.1" 404 - "-" "-" 4.232.93.83 - - [14/Aug/2026:11:31:22 +1000] "GET /shiny.php HTTP/1.1" 404 - "-" "-" 4.232.93.83 - - [14/Aug/2026:11:31:22 +1000] "GET /hp2.php HTTP/1.1" 404 - "-" "-" 4.232.93.83 - - [14/Aug/2026:11:31:23 +1000] "GET /ors32envu.php HTTP/1.1" 404 - "-" "-" 4.232.93.83 - - [14/Aug/2026:11:31:23 +1000] "GET /plugins.php HTTP/1.1" 404 - "-" "-" 4.232.93.83 - - [14/Aug/2026:11:31:23 +1000] "GET /modules/mod_simplefileuploadv1.3/elements/i8hqok6nr.php HTTP/1.1" 404 - "-" "-" 4.232.93.83 - - [14/Aug/2026:11:31:24 +1000] "GET //un.php HTTP/1.1" 404 - "-" "-" 4.232.93.83 - - [14/Aug/2026:11:31:24 +1000] "GET /oxse.php HTTP/1.1" 404 - "-" "-" 4.232.93.83 - - [14/Aug/2026:11:31:24 +1000] "GET /coffee.php HTTP/1.1" 404 - "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-14 11:31:24 L1=1.36 run=6 blk=0 avail=7383 (62.9%) swpO=0 conn=2 myRSS=1810 php=5 phpRSS=245 ap=39 tcp=42 topuser=evolution 2026-08-14 11:31:25 L1=1.36 run=2 blk=0 avail=7453 (63.5%) swpO=0 conn=2 myRSS=1810 php=2 phpRSS=78 ap=40 tcp=48 topuser=evolution 2026-08-14 11:31:34 L1=1.23 run=4 blk=0 avail=7302 (62.3%) swpO=0 conn=2 myRSS=1810 php=2 phpRSS=249 ap=38 tcp=45 topuser=madalice 2026-08-14 11:31:35 L1=1.23 run=1 blk=0 avail=7479 (63.8%) swpO=0 conn=2 myRSS=1810 php=1 phpRSS=40 ap=38 tcp=49 topuser=evolution 2026-08-14 11:31:44 L1=1.12 run=1 blk=0 avail=7465 (63.6%) swpO=0 conn=2 myRSS=1810 php=1 phpRSS=40 ap=40 tcp=44 topuser=evolution 2026-08-14 11:31:45 L1=1.12 run=3 blk=0 avail=7459 (63.6%) swpO=0 conn=2 myRSS=1810 php=3 phpRSS=113 ap=40 tcp=48 topuser=evolution 2026-08-14 11:31:54 L1=1.27 run=2 blk=0 avail=7390 (63.0%) swpO=0 conn=2 myRSS=1810 php=3 phpRSS=110 ap=45 tcp=39 topuser=evolution 2026-08-14 11:31:55 L1=1.27 run=3 blk=0 avail=7315 (62.4%) swpO=0 conn=2 myRSS=1810 php=3 phpRSS=209 ap=44 tcp=44 topuser=evolution 2026-08-14 11:32:04 L1=1.54 run=1 blk=0 avail=7472 (63.7%) swpO=0 conn=2 myRSS=1810 php=1 phpRSS=40 ap=39 tcp=38 topuser=evolution 2026-08-14 11:32:05 L1=1.54 run=3 blk=0 avail=7427 (63.3%) swpO=0 conn=2 myRSS=1810 php=2 phpRSS=124 ap=38 tcp=41 topuser=infinium 2026-08-14 11:32:14 L1=1.46 run=6 blk=0 avail=7378 (62.9%) swpO=0 conn=3 myRSS=1810 php=3 phpRSS=151 ap=43 tcp=45 topuser=infinium 2026-08-14 11:32:15 L1=1.46 run=4 blk=0 avail=7448 (63.5%) swpO=0 conn=2 myRSS=1810 php=1 phpRSS=34 ap=43 tcp=48 topuser=evolution 2026-08-14 11:32:25 L1=1.31 run=6 blk=0 avail=7201 (61.4%) swpO=0 conn=3 myRSS=1810 php=4 phpRSS=388 ap=41 tcp=40 topuser=madalice 2026-08-14 11:32:25 L1=1.31 run=5 blk=0 avail=7240 (61.7%) swpO=0 conn=3 myRSS=1810 php=3 phpRSS=163 ap=40 tcp=44 topuser=madalice 2026-08-14 11:32:35 L1=1.41 run=2 blk=0 avail=7432 (63.4%) swpO=0 conn=3 myRSS=1810 php=2 phpRSS=105 ap=41 tcp=42 topuser=evolution 2026-08-14 11:32:35 L1=1.41 run=4 blk=0 avail=7363 (62.8%) swpO=0 conn=3 myRSS=1810 php=3 phpRSS=214 ap=40 tcp=44 topuser=alison 2026-08-14 11:32:45 L1=1.65 run=1 blk=0 avail=7458 (63.6%) swpO=0 conn=3 myRSS=1810 php=1 phpRSS=39 ap=43 tcp=47 topuser=evolution 2026-08-14 11:32:46 L1=1.65 run=7 blk=0 avail=7421 (63.3%) swpO=0 conn=3 myRSS=1810 php=1 phpRSS=68 ap=43 tcp=57 topuser=infinium 2026-08-14 11:32:55 L1=1.62 run=2 blk=0 avail=7417 (63.2%) swpO=0 conn=3 myRSS=1810 php=1 phpRSS=39 ap=48 tcp=46 topuser=evolution 2026-08-14 11:32:56 L1=1.62 run=2 blk=0 avail=7354 (62.7%) swpO=0 conn=3 myRSS=1810 php=1 phpRSS=106 ap=47 tcp=50 topuser=infinium 2026-08-14 11:33:05 L1=1.45 run=3 blk=0 avail=7376 (62.9%) swpO=0 conn=3 myRSS=1810 php=2 phpRSS=129 ap=42 tcp=52 topuser=madalice 2026-08-14 11:33:06 L1=1.45 run=3 blk=0 avail=7318 (62.4%) swpO=0 conn=3 myRSS=1810 php=2 phpRSS=203 ap=42 tcp=50 topuser=madalice 2026-08-14 11:33:15 L1=1.70 run=2 blk=0 avail=7199 (61.4%) swpO=0 conn=3 myRSS=1810 php=7 phpRSS=306 ap=62 tcp=76 topuser=evolution 2026-08-14 11:33:16 L1=1.70 run=7 blk=0 avail=7070 (60.3%) swpO=0 conn=3 myRSS=1810 php=5 phpRSS=192 ap=78 tcp=78 topuser=evolution 2026-08-14 11:33:25 L1=2.32 run=2 blk=0 avail=7235 (61.7%) swpO=0 conn=3 myRSS=1810 php=1 phpRSS=40 ap=71 tcp=61 topuser=evolution 2026-08-14 11:33:26 L1=2.46 run=5 blk=0 avail=7128 (60.8%) swpO=0 conn=4 myRSS=1810 php=3 phpRSS=212 ap=70 tcp=68 topuser=madalice 2026-08-14 11:33:35 L1=2.26 run=2 blk=0 avail=7331 (62.5%) swpO=0 conn=3 myRSS=1810 php=1 phpRSS=40 ap=61 tcp=38 topuser=evolution 2026-08-14 11:33:36 L1=2.16 run=1 blk=0 avail=7350 (62.7%) swpO=0 conn=4 myRSS=1810 php=0 phpRSS=0 ap=60 tcp=33 topuser=- 2026-08-14 11:33:45 L1=2.15 run=15 blk=0 avail=6887 (58.7%) swpO=0 conn=3 myRSS=1810 php=12 phpRSS=883 ap=51 tcp=51 topuser=madalice 2026-08-14 11:33:46 L1=3.02 run=17 blk=0 avail=6264 (53.4%) swpO=0 conn=14 myRSS=1810 php=12 phpRSS=1550 ap=50 tcp=54 topuser=madalice