INCIDENT 2026-08-14 13:47:38 trigger: php_rss=2214MB ================================================================== load: 3.07 1.73 1.64 20/608 1926696 ncpu:10 mem_avail: 5761MB/11729MB (49.1%) swap_used:1148MB swapout:0/s blocked(D):0 running:19 iowait:0.0% steal:0.0% php: 14 procs / 2214MB heaviest user: madalice (12 procs, 2152MB) apache: 33 procs tcp_estab: 53 --- RSS by user (all processes) --- USER PROCS RSS_MB madalice 11 1976 mysql 1 1897 root 236 841 nobody 32 530 netdata 8 265 cpanellogin 1 88 kurri 4 49 evolution 5 45 dovenull 6 29 wp-toolkit 6 20 mailman 20 15 mailnull 3 14 alison 1 13 candyfabcom 1 12 zabbix 1 10 dovecot 3 8 named 1 6 nscd 1 4 dbus 1 3 cpanelconnecttrack 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 11 1998 evolution 2 62 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5997 MB Active(file): 4610 MB Inactive(file): 574 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 358 MB CommitLimit: 9960 MB Committed_AS: 8743 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 1404480 root 12:36:22 2740 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 1420296 1 mysql 1942940 16.9 Ssl 12:08:37 /usr/sbin/mariadbd 1926614 1925015 madalice 227644 71.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 215584 2.5 Ssl 46-03:37:40 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1926616 1925224 madalice 215536 71.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1926619 1925520 madalice 203488 95.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1926620 1925010 madalice 197568 93.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1926618 1925988 madalice 188188 57.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1926612 1925997 madalice 184632 80.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1451534 1444234 root 179668 0.0 S 11:10:31 spamd child 159820 1 root 140356 0.0 Ss 25-04:00:48 /usr/lib/systemd/systemd-journald 1444234 1 root 126448 0.0 Ss 11:24:50 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1926641 1925986 madalice 122904 47.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1910802 1444234 root 119528 0.0 S 19:04 spamd child 1926624 1925820 madalice 103456 35.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1902528 1353308 cpanellogin 90252 0.0 S 28:04 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 1926657 1926622 madalice 69412 30.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1353308 1 root 42092 0.0 Ss 23-11:06:10 cpsrvd (SSL) - waiting for connections 1469 1 root 42044 0.1 Ss 46-03:37:39 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2223 1201 root 38264 0.0 Sl 46-03:37:39 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 4922 2431 netdata 33848 0.1 Sl 46-03:37:35 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1926611 1925966 madalice 28860 77.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1443709 1 root 25928 0.0 Ss 11:25:25 lfd - sleeping 1923993 1276780 nobody 22484 0.0 S 03:15 /usr/sbin/httpd -k start 1923514 1276780 nobody 21772 0.0 S 03:57 /usr/sbin/httpd -k start 1921731 1276780 nobody 21148 0.0 S 06:24 /usr/sbin/httpd -k start 1924410 1276780 nobody 19988 0.0 S 02:48 /usr/sbin/httpd -k start 1925520 1276780 nobody 19820 0.1 S 01:21 /usr/sbin/httpd -k start 1925810 1276780 nobody 19776 0.0 S 00:59 /usr/sbin/httpd -k start 1925966 1276780 nobody 19736 0.0 S 00:46 /usr/sbin/httpd -k start 1925016 1276780 nobody 19692 0.1 S 02:06 /usr/sbin/httpd -k start 1925243 1276780 nobody 19636 0.0 S 01:43 /usr/sbin/httpd -k start 1925224 1276780 nobody 18900 0.0 S 01:46 /usr/sbin/httpd -k start 1925015 1276780 nobody 18824 0.0 S 02:06 /usr/sbin/httpd -k start 1925820 1276780 nobody 18564 0.0 S 00:58 /usr/sbin/httpd -k start 1925942 1276780 nobody 18528 0.0 S 00:48 /usr/sbin/httpd -k start 1925964 1276780 nobody 18400 0.1 S 00:46 /usr/sbin/httpd -k start 1925952 1276780 nobody 18368 0.0 S 00:47 /usr/sbin/httpd -k start 1925986 1276780 nobody 18348 0.0 S 00:45 /usr/sbin/httpd -k start 1925933 1276780 nobody 18204 0.0 S 00:49 /usr/sbin/httpd -k start 1925010 1276780 nobody 18200 0.0 S 02:07 /usr/sbin/httpd -k start 1925997 1276780 nobody 18160 0.0 S 00:45 /usr/sbin/httpd -k start 1925965 1276780 nobody 18124 0.0 S 00:46 /usr/sbin/httpd -k start 1925953 1276780 nobody 17908 0.0 S 00:47 /usr/sbin/httpd -k start 1925963 1276780 nobody 16972 0.0 S 00:46 /usr/sbin/httpd -k start 1926298 1471 root 15972 0.0 S 00:22 cPhulkd - processor - http socket 1925969 1276780 nobody 15808 0.1 S 00:46 /usr/sbin/httpd -k start 1925486 1276780 nobody 15656 0.0 S 01:22 /usr/sbin/httpd -k start 1925988 1276780 nobody 15636 0.0 S 00:45 /usr/sbin/httpd -k start 1925998 1276780 nobody 15608 0.0 S 00:45 /usr/sbin/httpd -k start 1925989 1276780 nobody 15604 0.0 S 00:45 /usr/sbin/httpd -k start 1601939 1471 root 15420 0.0 S 06:34:40 cPhulkd - dbprocessor 1471 1 root 15060 0.0 Ss 46-03:37:39 cPhulkd - processor 1926622 1276780 nobody 15016 0.0 S 00:02 /usr/sbin/httpd -k start 1926653 1276780 nobody 14952 1.0 S 00:01 /usr/sbin/httpd -k start 1463 1 root 14512 0.0 Ss 46-03:37:39 tailwatchd 185104 2431 netdata 14208 2.0 Sl 1-17:13:58 /usr/libexec/netdata/plugins.d/apps.plugin 1 1860569 3828812 alison 13984 0.0 S 01:18:20 dovecot/imap 1926654 1276780 nobody 13624 0.0 S 00:01 /usr/sbin/httpd -k start 1926722 1276780 nobody 13624 0.0 S 00:00 /usr/sbin/httpd -k start 1926595 3828812 candyfabcom 13252 0.0 S 00:07 dovecot/imap --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 3053910 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 509 evolution/portal.evolutionerp.com.au-ssl_log 169 alison/alisonarts.com.au-ssl_log 63 madalice/madalice.com.au-ssl_log 41 olympic/olympicfencing.com.au-ssl_log 7 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 358 203.54.180.238 148 103.104.165.99 58 104.28.192.94 31 4.223.165.84 29 124.190.136.22 29 116.91.223.103 28 103.104.164.114 24 149.167.177.17 20 120.19.183.39 10 147.161.215.89 9 1.145.73.14 8 180.181.236.49 4 147.161.213.98 4 118.127.40.55 3 49.195.16.162 --- top request paths across all vhosts (last 3 min) --- 221 POST /functions.php 98 GET /app/ajax.php 60 GET /factory_session_checker.php 45 GET /heartbeat.php 32 GET /index.php 30 POST /wp-login.php 30 GET /factory_session_processed_qty.php 30 GET /factory_session_joiner.php 29 POST /xmlrpc.php 23 POST /plugins/csvexporter/plugin.php 20 POST /clienteditsave.php 18 POST /quoteditsave.php 15 GET /plugins/fensa/fensa-ajax.php 14 POST /app/ajax/selectFilterSingle.php 13 POST /app/ajax.php 10 POST /plugins/fencecosting/plugin.php 6 GET /store/pink-butterfly-blossom-af1-shoes/ 5 POST /logsave.php 5 POST /invoiceaddsave.php 5 GET //app/ajax.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 221 POST /functions.php 98 GET /app/ajax.php 28 GET /index.php 23 POST /plugins/csvexporter/plugin.php 20 POST /clienteditsave.php 18 POST /quoteditsave.php 15 GET /plugins/fensa/fensa-ajax.php 14 POST /app/ajax/selectFilterSingle.php 13 POST /app/ajax.php 10 POST /plugins/fencecosting/plugin.php 5 POST /logsave.php 5 POST /invoiceaddsave.php -- last 10 requests -- 203.54.180.238 - - [14/Aug/2026:13:47:37 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78409§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win 203.54.180.238 - - [14/Aug/2026:13:47:37 +1000] "GET /plugins/fensa/fensa-ajax.php?function_name=load_fensa_modal HTTP/1.1" 200 357 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78409§ionid=0" "Mozi 203.54.180.238 - - [14/Aug/2026:13:47:37 +1000] "GET /plugins/fensa/fensa-ajax.php?function_name=quote_item_icon"e_id=78409"e_type=3"e_item=639572"e_cat=13 HTTP/1.1" 200 113 "https://my.evolutionerp.com.a 203.54.180.238 - - [14/Aug/2026:13:47:37 +1000] "GET /plugins/fensa/fensa-ajax.php?function_name=quote_item_icon"e_id=78409"e_type=3"e_item=639573"e_cat=13 HTTP/1.1" 200 112 "https://my.evolutionerp.com.a 203.54.180.238 - - [14/Aug/2026:13:47:37 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=15570223818 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/index 203.54.180.238 - - [14/Aug/2026:13:47:37 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=12216154173 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/inde 203.54.180.238 - - [14/Aug/2026:13:47:37 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Dquotedit%26quoteid%3D78409%26sectionid%3D0&call=getUserSetting&caller=ajaxSubmitLocal&seq=13184999620 HTTP/1.1 203.54.180.238 - - [14/Aug/2026:13:47:37 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dquotedit%26quoteid78409&call=getUserSetting&caller=ajaxSubmitLocal&seq=12175513256 HTTP/1.1" 200 100 "https://my.evolutionerp.co 203.54.180.238 - - [14/Aug/2026:13:47:38 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 285 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29365&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [14/Aug/2026:13:47:38 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dquotedit%26quoteid%3D78409%26sectionid%3D0&call=getUserSetting&caller=ajaxSubmitLocal&seq=15226738455 HTTP/1.1" 200 171 "https:/ == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 60 GET /factory_session_checker.php 45 GET /heartbeat.php 30 GET /factory_session_processed_qty.php 30 GET /factory_session_joiner.php 4 GET /index.php -- last 10 requests -- 203.54.180.238 - - [14/Aug/2026:13:47:20 +1000] "GET /heartbeat.php?sentAt=1786679240&bytes=106,126,143,200&_=1786678296959 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [14/Aug/2026:13:47:24 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:13:47:25 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:13:47:25 +1000] "GET /heartbeat.php?sentAt=1786679243&bytes=106,126,143,203&_=1786676060263 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [14/Aug/2026:13:47:27 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 130 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [14/Aug/2026:13:47:27 +1000] "GET /factory_session_joiner.php?id=34611 HTTP/1.1" 200 95 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [14/Aug/2026:13:47:29 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [14/Aug/2026:13:47:29 +1000] "GET /factory_session_joiner.php?id=34613 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [14/Aug/2026:13:47:29 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:13:47:30 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 == alison/alisonarts.com.au-ssl_log == -- top paths -- 29 POST /xmlrpc.php 29 POST /wp-login.php 2 POST / 1 GET /sitemap.xml.gz 1 GET /2019/03/page/18/ 1 GET /2019/03/page/18 -- last 10 requests -- 104.28.192.94 - - [14/Aug/2026:13:46:55 +1000] "POST /xmlrpc.php HTTP/1.1" 503 6561 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.28.192.94 - - [14/Aug/2026:13:46:57 +1000] "POST /wp-login.php HTTP/1.1" 503 6561 "https://alisonarts.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/121.0" 104.28.192.94 - - [14/Aug/2026:13:46:59 +1000] "POST /xmlrpc.php HTTP/1.1" 503 6561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.28.192.94 - - [14/Aug/2026:13:47:02 +1000] "POST /wp-login.php HTTP/1.1" 503 6561 "https://alisonarts.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120. 104.28.192.94 - - [14/Aug/2026:13:47:04 +1000] "POST /xmlrpc.php HTTP/1.1" 503 6561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/121.0" 104.28.192.94 - - [14/Aug/2026:13:47:06 +1000] "POST /wp-login.php HTTP/1.1" 503 6561 "https://alisonarts.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/121.0" 104.28.192.94 - - [14/Aug/2026:13:47:08 +1000] "POST /xmlrpc.php HTTP/1.1" 503 6561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/121.0" 104.28.192.94 - - [14/Aug/2026:13:47:11 +1000] "POST /wp-login.php HTTP/1.1" 503 6561 "https://alisonarts.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/121.0" 104.28.192.94 - - [14/Aug/2026:13:47:13 +1000] "POST /xmlrpc.php HTTP/1.1" 503 6561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.28.192.94 - - [14/Aug/2026:13:47:15 +1000] "POST /wp-login.php HTTP/1.1" 503 6561 "https://alisonarts.com.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120. --- last 30 samples (run-up to this incident) --- 2026-08-14 13:45:16 L1=1.06 run=3 blk=0 avail=7274 (62.0%) swpO=0 conn=2 myRSS=1897 php=4 phpRSS=365 ap=34 tcp=36 topuser=alison 2026-08-14 13:45:17 L1=1.06 run=3 blk=0 avail=7343 (62.6%) swpO=0 conn=3 myRSS=1897 php=3 phpRSS=265 ap=34 tcp=34 topuser=madalice 2026-08-14 13:45:26 L1=1.20 run=1 blk=0 avail=7530 (64.2%) swpO=0 conn=2 myRSS=1897 php=1 phpRSS=11 ap=33 tcp=37 topuser=evolution 2026-08-14 13:45:27 L1=1.20 run=3 blk=0 avail=7508 (64.0%) swpO=0 conn=3 myRSS=1897 php=2 phpRSS=84 ap=33 tcp=36 topuser=evolution 2026-08-14 13:45:36 L1=1.16 run=1 blk=0 avail=7517 (64.1%) swpO=0 conn=2 myRSS=1897 php=0 phpRSS=0 ap=36 tcp=35 topuser=- 2026-08-14 13:45:37 L1=1.16 run=2 blk=0 avail=7497 (63.9%) swpO=0 conn=3 myRSS=1897 php=0 phpRSS=0 ap=36 tcp=45 topuser=- 2026-08-14 13:45:46 L1=1.14 run=1 blk=0 avail=7495 (63.9%) swpO=0 conn=2 myRSS=1897 php=0 phpRSS=0 ap=39 tcp=34 topuser=- 2026-08-14 13:45:47 L1=1.14 run=1 blk=0 avail=7503 (64.0%) swpO=0 conn=3 myRSS=1897 php=0 phpRSS=0 ap=38 tcp=34 topuser=- 2026-08-14 13:45:56 L1=1.04 run=5 blk=0 avail=7350 (62.7%) swpO=0 conn=2 myRSS=1897 php=3 phpRSS=215 ap=40 tcp=42 topuser=aaa 2026-08-14 13:45:57 L1=0.96 run=1 blk=0 avail=7490 (63.9%) swpO=0 conn=3 myRSS=1897 php=0 phpRSS=0 ap=40 tcp=34 topuser=- 2026-08-14 13:46:06 L1=0.88 run=3 blk=0 avail=7432 (63.4%) swpO=0 conn=2 myRSS=1897 php=5 phpRSS=271 ap=31 tcp=29 topuser=evolution 2026-08-14 13:46:07 L1=1.29 run=7 blk=0 avail=7415 (63.2%) swpO=0 conn=2 myRSS=1897 php=3 phpRSS=242 ap=30 tcp=32 topuser=madalice 2026-08-14 13:46:16 L1=1.43 run=4 blk=0 avail=7119 (60.7%) swpO=0 conn=2 myRSS=1897 php=5 phpRSS=527 ap=36 tcp=45 topuser=corpkicks 2026-08-14 13:46:17 L1=1.56 run=5 blk=0 avail=7397 (63.1%) swpO=0 conn=2 myRSS=1897 php=2 phpRSS=132 ap=40 tcp=43 topuser=evolution 2026-08-14 13:46:26 L1=1.51 run=1 blk=0 avail=7495 (63.9%) swpO=0 conn=2 myRSS=1897 php=0 phpRSS=0 ap=40 tcp=34 topuser=- 2026-08-14 13:46:27 L1=1.47 run=1 blk=0 avail=7500 (63.9%) swpO=0 conn=2 myRSS=1897 php=0 phpRSS=0 ap=39 tcp=30 topuser=- 2026-08-14 13:46:37 L1=1.35 run=6 blk=0 avail=7446 (63.5%) swpO=0 conn=2 myRSS=1897 php=3 phpRSS=169 ap=36 tcp=34 topuser=evolution 2026-08-14 13:46:37 L1=1.40 run=3 blk=0 avail=7412 (63.2%) swpO=0 conn=2 myRSS=1897 php=1 phpRSS=148 ap=35 tcp=34 topuser=olympic 2026-08-14 13:46:47 L1=1.37 run=1 blk=0 avail=7524 (64.1%) swpO=0 conn=2 myRSS=1897 php=0 phpRSS=0 ap=34 tcp=34 topuser=- 2026-08-14 13:46:48 L1=1.34 run=1 blk=0 avail=7521 (64.1%) swpO=0 conn=2 myRSS=1897 php=1 phpRSS=20 ap=34 tcp=37 topuser=evolution 2026-08-14 13:46:57 L1=2.04 run=6 blk=0 avail=7134 (60.8%) swpO=0 conn=3 myRSS=1897 php=6 phpRSS=341 ap=63 tcp=50 topuser=evolution 2026-08-14 13:46:58 L1=2.19 run=3 blk=0 avail=7124 (60.7%) swpO=0 conn=2 myRSS=1897 php=3 phpRSS=272 ap=62 tcp=50 topuser=madalice 2026-08-14 13:47:07 L1=2.10 run=2 blk=0 avail=7409 (63.2%) swpO=0 conn=3 myRSS=1897 php=0 phpRSS=0 ap=53 tcp=28 topuser=- 2026-08-14 13:47:08 L1=2.01 run=2 blk=0 avail=7261 (61.9%) swpO=0 conn=2 myRSS=1897 php=1 phpRSS=187 ap=52 tcp=29 topuser=corpkicks 2026-08-14 13:47:17 L1=2.01 run=1 blk=0 avail=7489 (63.8%) swpO=0 conn=3 myRSS=1897 php=0 phpRSS=0 ap=43 tcp=35 topuser=- 2026-08-14 13:47:18 L1=1.85 run=2 blk=0 avail=7497 (63.9%) swpO=0 conn=2 myRSS=1897 php=0 phpRSS=0 ap=42 tcp=35 topuser=- 2026-08-14 13:47:27 L1=1.70 run=2 blk=0 avail=7486 (63.8%) swpO=0 conn=3 myRSS=1897 php=1 phpRSS=68 ap=36 tcp=29 topuser=evolution 2026-08-14 13:47:28 L1=1.64 run=2 blk=0 avail=7485 (63.8%) swpO=0 conn=2 myRSS=1897 php=1 phpRSS=60 ap=35 tcp=30 topuser=speedlin 2026-08-14 13:47:37 L1=1.51 run=20 blk=0 avail=6508 (55.5%) swpO=0 conn=3 myRSS=1897 php=10 phpRSS=1315 ap=31 tcp=43 topuser=madalice 2026-08-14 13:47:38 L1=3.07 run=19 blk=0 avail=5761 (49.1%) swpO=0 conn=12 myRSS=1897 php=14 phpRSS=2214 ap=33 tcp=53 topuser=madalice