INCIDENT 2026-08-14 13:58:40 trigger: php_rss=2077MB ================================================================== load: 2.88 1.83 1.68 15/640 1935897 ncpu:10 mem_avail: 5705MB/11729MB (48.6%) swap_used:1153MB swapout:143/s blocked(D):0 running:13 iowait:0.0% steal:0.0% php: 18 procs / 2077MB heaviest user: madalice (9 procs, 1688MB) apache: 58 procs tcp_estab: 60 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1895 madalice 9 1773 nobody 57 923 root 236 843 evolution 13 392 netdata 8 265 cpanellogin 1 89 kurri 3 36 mailnull 4 28 dovenull 6 28 wp-toolkit 6 20 mailman 20 15 alison 1 13 zabbix 1 10 dovecot 3 8 named 1 6 nscd 1 4 dbus 1 3 cpanelconnecttrack 1 3 polkitd 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 9 1787 evolution 9 388 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5915 MB Active(file): 4295 MB Inactive(file): 811 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 356 MB CommitLimit: 9960 MB Committed_AS: 10255 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 1404480 root 12:47:24 2676 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 1420296 1 mysql 1940752 17.2 Ssl 12:19:39 /usr/sbin/mariadbd 1935846 1934563 madalice 267084 87.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1935834 1935561 madalice 265472 57.5 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1935835 1935622 madalice 236936 75.0 S 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 216220 2.5 Ssl 46-03:48:42 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1935850 1931218 madalice 208632 77.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1935836 1934548 madalice 196260 64.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1935851 1935068 madalice 195736 60.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1451534 1444234 root 179468 0.0 S 11:21:33 spamd child 1935864 1935049 madalice 146012 118 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 159820 1 root 145976 0.0 Ss 25-04:11:50 /usr/lib/systemd/systemd-journald 1444234 1 root 126428 0.0 Ss 11:35:52 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1910802 1444234 root 119508 0.0 S 30:06 spamd child 1935863 1935626 madalice 109828 81.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1902528 1353308 cpanellogin 91164 0.0 S 39:06 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 1935762 1932510 evolution 69540 2.1 R 00:09 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1935906 1933920 alison 47220 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1353308 1 root 42204 0.0 Ss 23-11:17:12 cpsrvd (SSL) - waiting for connections 1935832 1935064 evolution 42056 2.2 R 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1469 1 root 41892 0.1 Ss 46-03:48:41 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1935810 1935502 evolution 41296 0.5 S 00:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1935833 1935537 evolution 41272 0.5 S 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1935566 1934627 evolution 41208 0.1 S 00:19 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1935811 1935536 evolution 41208 0.6 S 00:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1935708 1935063 evolution 41184 0.1 S 00:11 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1935867 1935050 evolution 40856 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1935866 1931524 evolution 39660 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2223 1201 root 38208 0.0 Sl 46-03:48:41 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 4922 2431 netdata 33700 0.1 Sl 46-03:48:37 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1443709 1 root 25868 0.0 Ss 11:36:27 lfd - sleeping 1935065 1276780 nobody 21380 0.1 S 00:55 /usr/sbin/httpd -k start 1931524 1276780 nobody 21044 0.0 S 05:27 /usr/sbin/httpd -k start 1931218 1276780 nobody 20896 0.0 S 05:47 /usr/sbin/httpd -k start 1931531 1276780 nobody 20804 0.0 S 05:27 /usr/sbin/httpd -k start 1934246 1276780 nobody 20668 0.0 S 01:51 /usr/sbin/httpd -k start 1931523 1276780 nobody 20536 0.0 S 05:27 /usr/sbin/httpd -k start 1935067 1276780 nobody 19624 0.1 S 00:55 /usr/sbin/httpd -k start 1933967 1276780 nobody 19536 0.0 S 02:20 /usr/sbin/httpd -k start 1931448 1276780 nobody 19480 0.0 S 05:30 /usr/sbin/httpd -k start 1932510 1276780 nobody 19440 0.0 S 04:28 /usr/sbin/httpd -k start 1935069 1276780 nobody 19236 0.0 S 00:55 /usr/sbin/httpd -k start 1934627 1276780 nobody 19120 0.0 S 01:20 /usr/sbin/httpd -k start 1934059 1276780 nobody 19064 0.1 S 02:11 /usr/sbin/httpd -k start 1934548 1276780 nobody 18872 0.0 S 01:25 /usr/sbin/httpd -k start 1930703 1276780 nobody 18664 0.0 S 06:28 /usr/sbin/httpd -k start 1935064 1276780 nobody 18560 0.0 S 00:55 /usr/sbin/httpd -k start 1935049 1276780 nobody 18416 0.0 S 00:56 /usr/sbin/httpd -k start 1935063 1276780 nobody 18352 0.0 S 00:55 /usr/sbin/httpd -k start 1933584 1276780 nobody 18020 0.0 S 02:57 /usr/sbin/httpd -k start 1934325 1276780 nobody 17896 0.1 S 01:42 /usr/sbin/httpd -k start 1935486 1276780 nobody 17836 0.1 S 00:22 /usr/sbin/httpd -k start 1935558 1276780 nobody 17816 0.0 S 00:19 /usr/sbin/httpd -k start 1935562 1276780 nobody 17804 0.1 S 00:19 /usr/sbin/httpd -k start 1935615 1276780 nobody 17408 0.1 S 00:18 /usr/sbin/httpd -k start 1935628 1276780 nobody 17260 0.1 S 00:18 /usr/sbin/httpd -k start 1935620 1276780 nobody 17128 0.1 S 00:18 /usr/sbin/httpd -k start 1935623 1276780 nobody 17116 0.2 S 00:18 /usr/sbin/httpd -k start 1935068 1276780 nobody 17048 0.0 S 00:55 /usr/sbin/httpd -k start 1933920 1276780 nobody 16924 0.0 S 02:23 /usr/sbin/httpd -k start 1934359 1276780 nobody 16744 0.0 S 01:40 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 3132839 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 606 evolution/portal.evolutionerp.com.au-ssl_log 145 alison/alisonarts.com.au-ssl_log 35 aaa/aaadownunder.com.au-ssl_log 24 alison/alisonarts.com.au 19 madalice/madalice.com.au-ssl_log 8 olympic/olympicfencing.com.au-ssl_log 1 (total vhosts taking traffic: 7) --- top client IPs across all vhosts (last 3 min) --- 408 203.54.180.238 153 103.104.165.99 127 103.104.164.114 53 68.221.73.131 30 116.91.223.103 17 120.19.183.39 11 147.161.215.89 7 147.161.213.98 5 182.239.240.254 5 180.181.236.49 5 121.43.146.23 2 40.77.167.26 2 20.68.122.222 2 114.119.137.101 1 81.244.200.203 --- top request paths across all vhosts (last 3 min) --- 217 POST /functions.php 137 GET /app/ajax.php 76 GET /index.php 49 GET /heartbeat.php 32 GET /factory_session_checker.php 31 POST /plugins/csvexporter/plugin.php 29 POST /clienteditsave.php 25 POST /quoteditsave.php 24 POST /app/ajax.php 17 POST /jobeditsave.php 17 GET /factory_session_joiner.php 16 GET /factory_session_processed_qty.php 15 POST /app/ajax/selectFilterSingle.php 12 POST /logsave.php 10 POST /itemModify.php 9 POST /portal/register 7 POST /dispatchsave.php 4 POST /plugins/fencecosting/plugin.php 4 POST /invoiceaddsave.php 4 GET /plugins/fensa/fensa-ajax.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 217 POST /functions.php 137 GET /app/ajax.php 56 GET /index.php 31 POST /plugins/csvexporter/plugin.php 29 POST /clienteditsave.php 25 POST /quoteditsave.php 24 POST /app/ajax.php 17 POST /jobeditsave.php 15 POST /app/ajax/selectFilterSingle.php 12 POST /logsave.php 10 POST /itemModify.php 7 POST /dispatchsave.php -- last 10 requests -- 103.104.165.99 - - [14/Aug/2026:13:58:33 +1000] "POST /clienteditsave.php?call=getSettings HTTP/1.1" 200 60 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=11937" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 203.54.180.238 - - [14/Aug/2026:13:58:34 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 284 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29339" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) 103.104.165.99 - - [14/Aug/2026:13:58:34 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=11937" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK 103.104.165.99 - - [14/Aug/2026:13:58:33 +1000] "POST /logsave.php?call=getHistory&id=11937&module=job HTTP/1.1" 200 915 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=11937" "Mozilla/5.0 (Windows NT 10.0; Win 103.104.165.99 - - [14/Aug/2026:13:58:34 +1000] "POST /plugins/fencecosting/plugin.php HTTP/1.1" 200 3913 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=11937" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW 103.104.165.99 - - [14/Aug/2026:13:58:33 +1000] "POST /clienteditsave.php?clientid=143&call=getCategoryDiscounts HTTP/1.1" 200 25 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=11937" "Mozilla/5.0 (Windows NT 103.104.165.99 - - [14/Aug/2026:13:58:34 +1000] "GET /app/ajax.php?cn=&furi=true&uri=&call=getUserSetting&caller=ajaxSubmitLocal&seq=16095536435 HTTP/1.1" 200 75 "https://my.evolutionerp.com.au/index.php?page=jobedit&id= 103.104.165.99 - - [14/Aug/2026:13:58:34 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Djobedit%26id%3D11937&call=getUserSetting&caller=ajaxSubmitLocal&seq=16657977025 HTTP/1.1" 200 112 "https://my. 103.104.165.99 - - [14/Aug/2026:13:58:34 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Djobedit%26id%3D11937&call=getUserSetting&caller=ajaxSubmitLocal&seq=12759479500 HTTP/1.1" 200 161 "https://my.evolutionerp.com.a 103.104.165.99 - - [14/Aug/2026:13:58:34 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=14296498736 HTTP/1.1" 200 98 "https://my.evolutionerp.com.au/inde == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 49 GET /heartbeat.php 32 GET /factory_session_checker.php 20 GET /index.php 17 GET /factory_session_joiner.php 16 GET /factory_session_processed_qty.php 9 POST /portal/register 2 POST /factory_functions.php -- last 10 requests -- 203.54.180.238 - - [14/Aug/2026:13:58:31 +1000] "GET /factory_session_joiner.php?id=34612 HTTP/1.1" 200 79 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [14/Aug/2026:13:58:32 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:13:58:33 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [14/Aug/2026:13:58:32 +1000] "GET /heartbeat.php?sentAt=1786679912&bytes=106,126,146,104&_=1786679352235 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=5 203.54.180.238 - - [14/Aug/2026:13:58:34 +1000] "GET /index.php?page=dispatches HTTP/1.1" 200 51841 "https://portal.evolutionerp.com.au/index.php" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko 203.54.180.238 - - [14/Aug/2026:13:58:35 +1000] "POST /portal/register HTTP/1.1" 404 - "https://portal.evolutionerp.com.au/index.php?page=dispatches" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Ge 203.54.180.238 - - [14/Aug/2026:13:58:35 +1000] "GET /index.php?page=dispatches HTTP/1.1" 200 51840 "https://portal.evolutionerp.com.au/index.php" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko 203.54.180.238 - - [14/Aug/2026:13:58:36 +1000] "POST /portal/register HTTP/1.1" 404 - "https://portal.evolutionerp.com.au/index.php?page=dispatches" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Ge 203.54.180.238 - - [14/Aug/2026:13:58:35 +1000] "GET /heartbeat.php?sentAt=1786679913&bytes=106,126,146,105&_=1786676060330 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [14/Aug/2026:13:58:37 +1000] "GET /factory_session_joiner.php?id=34614 HTTP/1.1" 200 79 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe == alison/alisonarts.com.au-ssl_log == -- top paths -- 2 GET /ws13.php 2 GET /wp-ws68.php 2 GET /i99z7zzbwtpteujvv6s8hiCdefault.php 1 GET /yj09.php 1 GET /wp-content/plugins/hellopress/wp_filemanager.php 1 GET /this_is_a_new_hello_world.php 1 GET /sky.php 1 GET /SDsadqwrf.php 1 GET /scxy.php 1 GET /ops.php 1 GET /mgrr.php 1 GET /media.php -- last 10 requests -- 68.221.73.131 - - [14/Aug/2026:13:57:54 +1000] "GET /ws13.php HTTP/1.1" 404 49207 "-" "-" 68.221.73.131 - - [14/Aug/2026:13:57:56 +1000] "GET /btx25.php HTTP/1.1" 404 49207 "-" "-" 68.221.73.131 - - [14/Aug/2026:13:57:58 +1000] "GET /SDsadqwrf.php HTTP/1.1" 404 49207 "-" "-" 68.221.73.131 - - [14/Aug/2026:13:58:01 +1000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 49207 "-" "-" 68.221.73.131 - - [14/Aug/2026:13:58:03 +1000] "GET /BDKR28WP.php HTTP/1.1" 404 49207 "-" "-" 68.221.73.131 - - [14/Aug/2026:13:58:05 +1000] "GET /i99z7zzbwtpteujvv6s8hiCdefault.php?p= HTTP/1.1" 301 - "-" "-" 68.221.73.131 - - [14/Aug/2026:13:58:07 +1000] "GET /i99z7zzbwtpteujvv6s8hiCdefault.php HTTP/1.1" 404 49207 "-" "-" 68.221.73.131 - - [14/Aug/2026:13:58:09 +1000] "GET /sky.php HTTP/1.1" 404 49207 "-" "-" 68.221.73.131 - - [14/Aug/2026:13:58:11 +1000] "GET /1wvekeybd9it2di2vyipgr6Cdefault.php HTTP/1.1" 404 49207 "-" "-" 68.221.73.131 - - [14/Aug/2026:13:58:14 +1000] "GET /a3ampzmbipnkpxeqhqpsanCdefault.php HTTP/1.1" 404 49207 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-14 13:56:11 L1=1.17 run=2 blk=0 avail=7447 (63.5%) swpO=0 conn=2 myRSS=1897 php=1 phpRSS=130 ap=33 tcp=29 topuser=madalice 2026-08-14 13:56:19 L1=1.21 run=2 blk=0 avail=7555 (64.4%) swpO=0 conn=1 myRSS=1897 php=0 phpRSS=0 ap=32 tcp=37 topuser=- 2026-08-14 13:56:22 L1=1.21 run=3 blk=0 avail=7533 (64.2%) swpO=0 conn=2 myRSS=1897 php=1 phpRSS=20 ap=33 tcp=37 topuser=evolution 2026-08-14 13:56:30 L1=1.64 run=5 blk=0 avail=7505 (64.0%) swpO=0 conn=1 myRSS=1897 php=5 phpRSS=167 ap=35 tcp=46 topuser=evolution 2026-08-14 13:56:32 L1=1.64 run=2 blk=0 avail=7441 (63.4%) swpO=0 conn=2 myRSS=1897 php=1 phpRSS=99 ap=37 tcp=45 topuser=madalice 2026-08-14 13:56:40 L1=1.46 run=3 blk=0 avail=7511 (64.0%) swpO=0 conn=1 myRSS=1897 php=1 phpRSS=40 ap=37 tcp=37 topuser=evolution 2026-08-14 13:56:42 L1=1.46 run=2 blk=0 avail=7496 (63.9%) swpO=0 conn=2 myRSS=1897 php=1 phpRSS=67 ap=35 tcp=39 topuser=evolution 2026-08-14 13:56:50 L1=1.31 run=2 blk=0 avail=7450 (63.5%) swpO=0 conn=1 myRSS=1897 php=2 phpRSS=131 ap=36 tcp=41 topuser=alison 2026-08-14 13:56:52 L1=1.31 run=2 blk=0 avail=7519 (64.1%) swpO=0 conn=2 myRSS=1897 php=0 phpRSS=0 ap=36 tcp=40 topuser=- 2026-08-14 13:57:00 L1=1.18 run=1 blk=0 avail=7490 (63.9%) swpO=0 conn=2 myRSS=1897 php=1 phpRSS=40 ap=38 tcp=46 topuser=evolution 2026-08-14 13:57:02 L1=1.18 run=2 blk=0 avail=7429 (63.3%) swpO=0 conn=2 myRSS=1897 php=1 phpRSS=72 ap=42 tcp=45 topuser=alison 2026-08-14 13:57:10 L1=1.24 run=3 blk=0 avail=7114 (60.7%) swpO=0 conn=2 myRSS=1897 php=4 phpRSS=507 ap=37 tcp=41 topuser=corpkicks 2026-08-14 13:57:12 L1=1.24 run=1 blk=0 avail=7498 (63.9%) swpO=0 conn=1 myRSS=1897 php=0 phpRSS=0 ap=38 tcp=38 topuser=- 2026-08-14 13:57:20 L1=1.20 run=1 blk=0 avail=7445 (63.5%) swpO=0 conn=2 myRSS=1897 php=1 phpRSS=40 ap=45 tcp=47 topuser=evolution 2026-08-14 13:57:22 L1=1.20 run=1 blk=0 avail=7448 (63.5%) swpO=0 conn=1 myRSS=1897 php=0 phpRSS=0 ap=45 tcp=47 topuser=- 2026-08-14 13:57:30 L1=1.34 run=3 blk=0 avail=7444 (63.5%) swpO=0 conn=2 myRSS=1897 php=2 phpRSS=88 ap=43 tcp=42 topuser=alison 2026-08-14 13:57:32 L1=1.34 run=5 blk=0 avail=7419 (63.3%) swpO=0 conn=1 myRSS=1897 php=1 phpRSS=65 ap=43 tcp=48 topuser=evolution 2026-08-14 13:57:40 L1=1.28 run=3 blk=0 avail=7365 (62.8%) swpO=0 conn=2 myRSS=1897 php=2 phpRSS=179 ap=39 tcp=43 topuser=alison 2026-08-14 13:57:42 L1=1.28 run=4 blk=0 avail=7249 (61.8%) swpO=0 conn=1 myRSS=1897 php=3 phpRSS=327 ap=39 tcp=48 topuser=madalice 2026-08-14 13:57:50 L1=1.77 run=2 blk=0 avail=7362 (62.8%) swpO=0 conn=2 myRSS=1897 php=1 phpRSS=40 ap=55 tcp=61 topuser=evolution 2026-08-14 13:57:52 L1=1.77 run=1 blk=0 avail=7384 (63.0%) swpO=0 conn=1 myRSS=1897 php=0 phpRSS=0 ap=54 tcp=61 topuser=- 2026-08-14 13:58:00 L1=1.66 run=3 blk=0 avail=7179 (61.2%) swpO=0 conn=5 myRSS=1897 php=4 phpRSS=352 ap=50 tcp=49 topuser=olympic 2026-08-14 13:58:02 L1=1.66 run=5 blk=0 avail=7094 (60.5%) swpO=0 conn=1 myRSS=1897 php=4 phpRSS=441 ap=48 tcp=50 topuser=olympic 2026-08-14 13:58:10 L1=2.23 run=3 blk=0 avail=7293 (62.2%) swpO=0 conn=5 myRSS=1897 php=3 phpRSS=239 ap=45 tcp=43 topuser=alison 2026-08-14 13:58:12 L1=2.23 run=3 blk=0 avail=7378 (62.9%) swpO=0 conn=2 myRSS=1897 php=1 phpRSS=107 ap=44 tcp=38 topuser=alison 2026-08-14 13:58:20 L1=2.12 run=2 blk=0 avail=7370 (62.8%) swpO=0 conn=5 myRSS=1897 php=4 phpRSS=207 ap=42 tcp=62 topuser=evolution 2026-08-14 13:58:22 L1=2.12 run=6 blk=0 avail=7224 (61.6%) swpO=0 conn=2 myRSS=1897 php=9 phpRSS=370 ap=54 tcp=62 topuser=evolution 2026-08-14 13:58:30 L1=2.47 run=5 blk=0 avail=7147 (60.9%) swpO=0 conn=5 myRSS=1897 php=9 phpRSS=435 ap=64 tcp=52 topuser=evolution 2026-08-14 13:58:32 L1=2.47 run=3 blk=0 avail=7198 (61.4%) swpO=0 conn=2 myRSS=1898 php=7 phpRSS=332 ap=62 tcp=56 topuser=evolution 2026-08-14 13:58:40 L1=2.88 run=13 blk=0 avail=5705 (48.6%) swpO=143 conn=14 myRSS=1895 php=18 phpRSS=2077 ap=58 tcp=60 topuser=madalice