INCIDENT 2026-08-14 12:18:58 trigger: php_rss=2467MB ================================================================== load: 1.56 1.40 1.45 12/627 1851026 ncpu:10 mem_avail: 5301MB/11729MB (45.2%) swap_used:1111MB swapout:86/s blocked(D):0 running:17 iowait:0.1% steal:0.0% php: 14 procs / 2467MB heaviest user: madalice (10 procs, 2078MB) apache: 55 procs tcp_estab: 54 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1808 madalice 8 1650 nobody 54 893 root 234 863 corpkicks 2 301 netdata 8 265 evolution 6 102 kurri 6 77 cpanellogin 1 61 dovenull 6 30 wp-toolkit 6 20 mailman 20 15 alison 1 14 zabbix 1 12 dovecot 3 8 mailnull 2 7 named 1 5 nscd 1 4 dbus 1 3 cpanelconnecttrack 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 8 1659 corpkicks 2 308 evolution 2 102 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5831 MB Active(file): 4319 MB Inactive(file): 726 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 356 MB CommitLimit: 9960 MB Committed_AS: 9203 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 1404480 root 11:07:42 2452 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 1420296 1 mysql 1851504 15.3 Ssl 10:39:57 /usr/sbin/mariadbd 1850987 1848551 corpkicks 278104 76.5 S 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1850978 1850847 madalice 264496 114 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1850984 1849534 madalice 231472 107 S 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 216456 2.5 Ssl 46-02:09:00 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1850979 1850974 madalice 207636 96.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1850982 1846109 madalice 204748 93.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1451533 1444234 root 203732 0.1 S 09:41:51 spamd child 1850986 1850848 madalice 197316 92.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1850985 1848258 madalice 183956 84.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1451534 1444234 root 177328 0.0 S 09:41:51 spamd child 1850990 1849612 madalice 170320 76.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1444234 1 root 126284 0.0 Ss 09:56:10 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 159820 1 root 110564 0.0 Ss 25-02:32:08 /usr/lib/systemd/systemd-journald 1850996 1849548 evolution 68616 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1848615 1353308 cpanellogin 62836 0.4 S 02:40 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 1851021 1849652 corpkicks 46340 0.0 R 00:00 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1469 1 root 41624 0.1 Ss 46-02:08:59 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1353308 1 root 41532 0.0 Ss 23-09:37:30 cpsrvd (SSL) - waiting for connections 1850992 1849653 evolution 40860 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2223 1201 root 37988 0.0 Sl 46-02:08:59 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 4922 2431 netdata 33248 0.1 Sl 46-02:08:55 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1443709 1 root 26152 0.0 Ss 09:56:45 lfd - sleeping 1840741 1276780 nobody 22248 0.0 S 11:18 /usr/sbin/httpd -k start 1846109 1276780 nobody 21296 0.0 S 04:42 /usr/sbin/httpd -k start 1849545 1276780 nobody 19964 0.0 S 01:48 /usr/sbin/httpd -k start 1848296 1276780 nobody 19928 0.0 S 03:00 /usr/sbin/httpd -k start 1849555 1276780 nobody 19880 0.0 S 01:48 /usr/sbin/httpd -k start 1850924 1276780 nobody 19668 0.7 S 00:07 /usr/sbin/httpd -k start 1849660 1276780 nobody 19448 0.0 S 01:46 /usr/sbin/httpd -k start 1849615 1276780 nobody 19356 0.0 S 01:47 /usr/sbin/httpd -k start 1848551 1276780 nobody 19284 0.0 S 02:43 /usr/sbin/httpd -k start 1847979 1276780 nobody 19200 0.0 S 03:27 /usr/sbin/httpd -k start 1848559 1276780 nobody 19120 0.0 S 02:42 /usr/sbin/httpd -k start 1849653 1276780 nobody 19004 0.0 S 01:46 /usr/sbin/httpd -k start 1848397 1276780 nobody 18984 0.0 S 02:54 /usr/sbin/httpd -k start 1849664 1276780 nobody 18872 0.0 S 01:46 /usr/sbin/httpd -k start 1849652 1276780 nobody 18772 0.0 S 01:46 /usr/sbin/httpd -k start 1849655 1276780 nobody 18608 0.0 S 01:46 /usr/sbin/httpd -k start 1849534 1276780 nobody 18600 0.0 S 01:49 /usr/sbin/httpd -k start 1846078 1276780 nobody 18428 0.0 S 04:46 /usr/sbin/httpd -k start 1849612 1276780 nobody 18380 0.0 S 01:47 /usr/sbin/httpd -k start 1850839 1276780 nobody 18376 0.2 S 00:14 /usr/sbin/httpd -k start 1849609 1276780 nobody 18240 0.0 S 01:47 /usr/sbin/httpd -k start 1849535 1276780 nobody 18200 0.0 S 01:49 /usr/sbin/httpd -k start 1849544 1276780 nobody 18184 0.0 S 01:48 /usr/sbin/httpd -k start 1848258 1276780 nobody 18176 0.0 S 03:01 /usr/sbin/httpd -k start 1849650 1276780 nobody 18160 0.0 S 01:46 /usr/sbin/httpd -k start 1849636 1276780 nobody 17996 0.0 S 01:46 /usr/sbin/httpd -k start 1849527 1276780 nobody 17984 0.0 S 01:50 /usr/sbin/httpd -k start 1849633 1276780 nobody 17980 0.0 S 01:46 /usr/sbin/httpd -k start 1847933 1276780 nobody 17964 0.0 S 03:29 /usr/sbin/httpd -k start 1849621 1276780 nobody 17904 0.0 S 01:47 /usr/sbin/httpd -k start 1849645 1276780 nobody 17748 0.0 S 01:46 /usr/sbin/httpd -k start 1849614 1276780 nobody 17632 0.0 S 01:47 /usr/sbin/httpd -k start 1850958 1276780 nobody 17592 0.1 S 00:06 /usr/sbin/httpd -k start 1846944 1276780 nobody 17416 0.0 S 03:41 /usr/sbin/httpd -k start 1849618 1276780 nobody 17316 0.0 S 01:47 /usr/sbin/httpd -k start 1849619 1276780 nobody 17084 0.0 S 01:47 /usr/sbin/httpd -k start 1849559 1276780 nobody 16944 0.0 S 01:48 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 2400715 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 683 evolution/portal.evolutionerp.com.au-ssl_log 259 evolution/staging.evolutionerp.com.au-ssl_log 139 madalice/madalice.com.au-ssl_log 83 evolution/staging.evolutionerp.com.au 78 customc/customcentral.com.au-ssl_log 56 aaa/aaadownunder.com.au-ssl_log 19 corpkicks/corporatekicks.com.au-ssl_log 5 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 463 203.54.180.238 217 195.178.110.223 91 103.104.164.114 81 116.91.223.103 73 158.158.74.177 71 182.239.240.254 56 4.223.164.152 54 165.225.233.109 50 150.228.151.9 46 103.104.165.99 34 120.19.183.39 24 203.221.33.39 15 147.161.215.89 11 1.145.73.14 9 180.181.236.49 --- top request paths across all vhosts (last 3 min) --- 252 POST /functions.php 128 GET /app/ajax.php 102 GET /factory_session_checker.php 68 GET /index.php 53 GET /heartbeat.php 51 GET /factory_session_processed_qty.php 51 GET /factory_session_joiner.php 41 POST /app/ajax/selectFilter.php 39 POST /plugins/csvexporter/plugin.php 29 POST /app/ajax/selectFilterSingle.php 20 POST /quoteditsave.php 19 POST /app/ajax.php 14 POST /plugins/costupdater/plugin.php 12 POST /purchaseaddsave.php 12 POST /jobeditsave.php 12 POST /clienteditsave.php 10 POST /mfreqsave.php 9 GET /assets/js/notifications.php 9 GET /assets/js/app/ajax.php 6 POST /logsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 252 POST /functions.php 128 GET /app/ajax.php 66 GET /index.php 41 POST /app/ajax/selectFilter.php 39 POST /plugins/csvexporter/plugin.php 29 POST /app/ajax/selectFilterSingle.php 20 POST /quoteditsave.php 19 POST /app/ajax.php 14 POST /plugins/costupdater/plugin.php 12 POST /purchaseaddsave.php 12 POST /jobeditsave.php 12 POST /clienteditsave.php -- last 10 requests -- 182.239.240.254 - - [14/Aug/2026:12:18:52 +1000] "POST /app/ajax/selectFilter.php?call=filterstaffandcontractors&filter=&cursel=&curseltext=&fromMS=1&&nolimit=LIMIT%201000&excludelabour=1&include=40&contactid=503&returno 116.91.223.103 - - [14/Aug/2026:12:18:52 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinvedit%26id%3D2051&call=getUserSetting&caller=ajaxSubmitLocal&seq=17105285837 HTTP/1.1" 200 97 "https://my.evolutionerp.com.au/ 203.54.180.238 - - [14/Aug/2026:12:18:52 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch 203.54.180.238 - - [14/Aug/2026:12:18:52 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78237" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K 182.239.240.254 - - [14/Aug/2026:12:18:53 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=4154" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, 203.54.180.238 - - [14/Aug/2026:12:18:54 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29337&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 116.91.223.103 - - [14/Aug/2026:12:18:54 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 52 "https://my.evolutionerp.com.au/index.php?page=invedit&id=2051" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Ge 203.54.180.238 - - [14/Aug/2026:12:18:55 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=mfstatus" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 203.54.180.238 - - [14/Aug/2026:12:18:56 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch 103.104.165.99 - - [14/Aug/2026:12:18:57 +1000] "POST //functions.php?call=heartbeat HTTP/1.1" 200 284 "https://my.evolutionerp.com.au//index.php?page=jobedit&id=10958&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64 == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 102 GET /factory_session_checker.php 53 GET /heartbeat.php 51 GET /factory_session_processed_qty.php 51 GET /factory_session_joiner.php 1 POST /portal/register 1 GET /index.php -- last 10 requests -- 203.54.180.238 - - [14/Aug/2026:12:18:44 +1000] "GET /factory_session_joiner.php?id=34542 HTTP/1.1" 200 96 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [14/Aug/2026:12:18:45 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 130 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [14/Aug/2026:12:18:45 +1000] "GET /factory_session_joiner.php?id=34552 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [14/Aug/2026:12:18:45 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:12:18:46 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:12:18:49 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:12:18:48 +1000] "GET /heartbeat.php?sentAt=1786673926&bytes=106,126,123,6&_=1786663633387 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [14/Aug/2026:12:18:50 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:12:18:50 +1000] "GET /heartbeat.php?sentAt=1786673930&bytes=106,126,123,10&_=1786602374501 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [14/Aug/2026:12:18:51 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 == evolution/staging.evolutionerp.com.au-ssl_log == -- top paths -- 6 GET /assets/js/notifications.php 6 GET /assets/js/app/ajax.php 6 GET /404.shtml 2 GET /vite.config.ts 2 GET /settings.py 2 GET /secrets.yml 2 GET /secrets.yaml 2 GET /nuxt.config.ts 2 GET /next.config.ts 2 GET /Jenkinsfile 2 GET /Dockerfile 2 GET /docker-compose.yml -- last 10 requests -- 195.178.110.223 - - [14/Aug/2026:12:16:11 +1000] "GET /storage/logs/laravel.log HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [14/Aug/2026:12:16:11 +1000] "GET /error.log HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [14/Aug/2026:12:16:11 +1000] "GET /debug.log HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [14/Aug/2026:12:16:11 +1000] "GET /backup.sql HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [14/Aug/2026:12:16:11 +1000] "GET /dump.sql HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [14/Aug/2026:12:16:11 +1000] "GET /db.sql HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [14/Aug/2026:12:16:13 +1000] "GET /config/settings/production.py HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [14/Aug/2026:12:16:13 +1000] "GET /404.shtml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [14/Aug/2026:12:16:13 +1000] "GET /settings.py HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 195.178.110.223 - - [14/Aug/2026:12:16:13 +1000] "GET /403.shtml HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" --- last 30 samples (run-up to this incident) --- 2026-08-14 12:16:31 L1=1.59 run=1 blk=0 avail=7403 (63.1%) swpO=0 conn=2 myRSS=1815 php=0 phpRSS=0 ap=50 tcp=43 topuser=- 2026-08-14 12:16:38 L1=1.35 run=5 blk=0 avail=7376 (62.9%) swpO=0 conn=2 myRSS=1815 php=3 phpRSS=169 ap=45 tcp=41 topuser=evolution 2026-08-14 12:16:41 L1=1.35 run=4 blk=0 avail=7393 (63.0%) swpO=0 conn=2 myRSS=1815 php=2 phpRSS=115 ap=43 tcp=48 topuser=evolution 2026-08-14 12:16:48 L1=1.60 run=1 blk=0 avail=7430 (63.4%) swpO=0 conn=2 myRSS=1815 php=1 phpRSS=40 ap=44 tcp=34 topuser=evolution 2026-08-14 12:16:51 L1=1.55 run=2 blk=0 avail=7444 (63.5%) swpO=0 conn=2 myRSS=1815 php=1 phpRSS=42 ap=42 tcp=44 topuser=evolution 2026-08-14 12:16:58 L1=1.58 run=1 blk=0 avail=7411 (63.2%) swpO=0 conn=2 myRSS=1815 php=1 phpRSS=40 ap=40 tcp=45 topuser=evolution 2026-08-14 12:17:01 L1=1.46 run=1 blk=0 avail=7437 (63.4%) swpO=0 conn=2 myRSS=1815 php=0 phpRSS=0 ap=37 tcp=41 topuser=- 2026-08-14 12:17:08 L1=1.82 run=3 blk=0 avail=7331 (62.5%) swpO=0 conn=2 myRSS=1815 php=3 phpRSS=175 ap=38 tcp=72 topuser=evolution 2026-08-14 12:17:11 L1=1.76 run=2 blk=0 avail=7018 (59.8%) swpO=0 conn=2 myRSS=1815 php=5 phpRSS=345 ap=66 tcp=119 topuser=evolution 2026-08-14 12:17:18 L1=1.69 run=3 blk=0 avail=6585 (56.1%) swpO=1 conn=2 myRSS=1815 php=2 phpRSS=275 ap=126 tcp=44 topuser=madalice 2026-08-14 12:17:21 L1=1.72 run=6 blk=0 avail=6751 (57.6%) swpO=1 conn=2 myRSS=1815 php=3 phpRSS=150 ap=123 tcp=45 topuser=evolution 2026-08-14 12:17:28 L1=1.82 run=5 blk=0 avail=6820 (58.1%) swpO=0 conn=3 myRSS=1815 php=2 phpRSS=107 ap=116 tcp=50 topuser=alison 2026-08-14 12:17:31 L1=1.68 run=1 blk=0 avail=6891 (58.7%) swpO=0 conn=2 myRSS=1815 php=0 phpRSS=0 ap=113 tcp=53 topuser=- 2026-08-14 12:17:38 L1=1.70 run=2 blk=0 avail=6933 (59.1%) swpO=0 conn=3 myRSS=1815 php=1 phpRSS=40 ap=106 tcp=40 topuser=evolution 2026-08-14 12:17:41 L1=1.73 run=3 blk=0 avail=6813 (58.1%) swpO=0 conn=3 myRSS=1815 php=2 phpRSS=221 ap=103 tcp=47 topuser=alison 2026-08-14 12:17:48 L1=1.75 run=1 blk=0 avail=7004 (59.7%) swpO=0 conn=3 myRSS=1815 php=1 phpRSS=40 ap=96 tcp=45 topuser=evolution 2026-08-14 12:17:52 L1=1.61 run=2 blk=0 avail=7036 (60.0%) swpO=0 conn=3 myRSS=1815 php=0 phpRSS=0 ap=93 tcp=60 topuser=- 2026-08-14 12:17:58 L1=1.88 run=3 blk=0 avail=6862 (58.5%) swpO=0 conn=3 myRSS=1815 php=2 phpRSS=275 ap=86 tcp=50 topuser=madalice 2026-08-14 12:18:02 L1=2.13 run=2 blk=0 avail=7054 (60.1%) swpO=0 conn=3 myRSS=1815 php=1 phpRSS=66 ap=82 tcp=62 topuser=evolution 2026-08-14 12:18:08 L1=1.96 run=2 blk=0 avail=7132 (60.8%) swpO=0 conn=3 myRSS=1815 php=2 phpRSS=84 ap=76 tcp=35 topuser=evolution 2026-08-14 12:18:12 L1=1.80 run=2 blk=0 avail=7185 (61.3%) swpO=0 conn=3 myRSS=1815 php=0 phpRSS=0 ap=72 tcp=41 topuser=- 2026-08-14 12:18:18 L1=1.66 run=4 blk=0 avail=7160 (61.0%) swpO=0 conn=3 myRSS=1815 php=3 phpRSS=152 ap=66 tcp=38 topuser=evolution 2026-08-14 12:18:22 L1=1.60 run=2 blk=0 avail=7253 (61.8%) swpO=0 conn=3 myRSS=1815 php=0 phpRSS=0 ap=62 tcp=48 topuser=- 2026-08-14 12:18:28 L1=1.48 run=3 blk=0 avail=7202 (61.4%) swpO=0 conn=3 myRSS=1815 php=3 phpRSS=186 ap=56 tcp=41 topuser=evolution 2026-08-14 12:18:32 L1=1.36 run=1 blk=0 avail=7321 (62.4%) swpO=0 conn=3 myRSS=1816 php=0 phpRSS=0 ap=52 tcp=46 topuser=- 2026-08-14 12:18:38 L1=1.33 run=3 blk=0 avail=7316 (62.4%) swpO=0 conn=3 myRSS=1816 php=2 phpRSS=108 ap=46 tcp=39 topuser=evolution 2026-08-14 12:18:42 L1=1.30 run=6 blk=0 avail=7200 (61.4%) swpO=0 conn=2 myRSS=1816 php=2 phpRSS=233 ap=42 tcp=47 topuser=madalice 2026-08-14 12:18:48 L1=1.28 run=2 blk=0 avail=7347 (62.6%) swpO=0 conn=3 myRSS=1816 php=1 phpRSS=40 ap=45 tcp=45 topuser=evolution 2026-08-14 12:18:52 L1=1.18 run=1 blk=0 avail=7354 (62.7%) swpO=0 conn=2 myRSS=1816 php=0 phpRSS=0 ap=48 tcp=54 topuser=- 2026-08-14 12:18:58 L1=1.56 run=17 blk=0 avail=5301 (45.2%) swpO=86 conn=12 myRSS=1810 php=14 phpRSS=2467 ap=55 tcp=54 topuser=madalice