INCIDENT 2026-08-19 09:21:55 trigger: php_rss=1732MB mysql_conn=16 ================================================================== load: 3.45 3.21 2.84 19/699 2440480 ncpu:10 mem_avail: 5066MB/11729MB (43.2%) swap_used:2303MB swapout:534/s blocked(D):0 running:16 iowait:0.1% steal:0.0% php: 18 procs / 1732MB heaviest user: madalice (12 procs, 1438MB) apache: 63 procs tcp_estab: 73 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2545 madalice 11 1364 nobody 78 1191 root 241 896 evolution 15 356 mailman 20 326 netdata 8 249 alison 4 75 named 1 46 dovenull 6 25 cpanellogin 1 21 wp-toolkit 6 17 mailnull 1 14 zabbix 1 13 aaa 1 13 lowrange 1 11 kurri 1 11 dovecot 3 6 nscd 1 3 cpanelconnecttrack 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 11 1391 evolution 6 293 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4941 MB Active(file): 3641 MB Inactive(file): 670 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 402 MB CommitLimit: 9960 MB Committed_AS: 10267 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2064673 root 08:10:40 2208 /usr/bin/imunify-agent-proxy 2416674 root 21:55 1336 /bin/sh -c bash -c "sleep $((RANDOM % 1800))" ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 2606520 10.2 Ssl 4-01:31:19 /usr/sbin/mariadbd 2440391 2439864 madalice 218648 67.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2440392 2439005 madalice 207592 66.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 202248 2.5 Ssl 50-23:12:01 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2122938 2112450 root 184340 0.0 S 06:43:27 spamd child 2440403 2437905 madalice 182360 78.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2575382 1 root 166616 0.0 Ss 4-01:31:22 /usr/lib/systemd/systemd-journald 2440405 2439886 madalice 147852 63.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2122939 2112450 root 146952 0.0 S 06:43:27 spamd child 2440419 2440411 madalice 131000 104 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2440422 2440412 madalice 117488 101 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2440415 2440407 madalice 112260 94.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2440429 2440310 madalice 109988 81.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2440428 2438438 madalice 103492 72.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2440434 2439575 madalice 96764 59.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2440423 2440409 madalice 82400 51.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2112450 1 root 73656 0.0 Ss 06:58:23 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2440401 2439831 evolution 67900 8.0 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2440394 2440344 evolution 67384 4.6 R 00:03 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2107664 1 named 47676 0.0 Ssl 06:59:15 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 2223 1201 root 45268 0.0 Sl 50-23:12:00 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 2440432 2440365 evolution 43556 5.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2440431 2437074 evolution 43184 4.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 41712 0.0 Ss 28-06:40:31 cpsrvd (SSL) - waiting for connections 2440418 2440417 evolution 40636 9.0 Sl 00:01 /usr/local/bin/wkhtmltopdf --enable-local-file-access --encoding utf-8 --title QUOTATION --header-html /home/evolution/my.evolutionerp. 1469 1 root 40464 0.1 Ss 50-23:12:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2440402 2439551 evolution 39472 1.0 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2440433 2440311 evolution 39448 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2434571 3828812 alison 38616 0.4 S 05:43 dovecot/imap 4922 2431 netdata 32208 0.1 Sl 50-23:11:56 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1463 1 root 25768 0.0 Ss 50-23:12:00 tailwatchd 2111676 1 root 24364 0.0 Ss 06:58:53 lfd - sleeping 2432037 1276780 nobody 22808 0.2 S 08:35 /usr/sbin/httpd -k start 2433317 1276780 nobody 22292 0.0 S 07:02 /usr/sbin/httpd -k start 2434034 1353308 cpanellogin 22168 0.0 S 06:15 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base server_locale en default_login_theme cpanel 2434290 1276780 nobody 22116 0.0 S 05:58 /usr/sbin/httpd -k start 2438469 1276780 nobody 22092 0.2 S 02:02 /usr/sbin/httpd -k start 2435210 1276780 nobody 21996 0.0 S 05:03 /usr/sbin/httpd -k start 2437074 1276780 nobody 21976 0.0 S 03:17 /usr/sbin/httpd -k start 2437569 1276780 nobody 21700 0.0 S 02:53 /usr/sbin/httpd -k start 2434516 1276780 nobody 21464 0.0 S 05:47 /usr/sbin/httpd -k start 2439070 1276780 nobody 21168 0.0 S 01:39 /usr/sbin/httpd -k start 2437032 1276780 nobody 21116 0.0 S 03:19 /usr/sbin/httpd -k start 2437905 1276780 nobody 21108 0.4 S 02:37 /usr/sbin/httpd -k start 2437033 1276780 nobody 21068 0.0 S 03:19 /usr/sbin/httpd -k start 2433359 1276780 nobody 20764 0.0 S 07:01 /usr/sbin/httpd -k start 2436372 1276780 nobody 20748 0.0 S 04:02 /usr/sbin/httpd -k start 2437075 1276780 nobody 20620 0.0 S 03:17 /usr/sbin/httpd -k start 2439384 1276780 nobody 20584 0.1 S 01:18 /usr/sbin/httpd -k start 2435253 1276780 nobody 20456 0.0 S 05:02 /usr/sbin/httpd -k start 2437906 1276780 nobody 20276 0.0 S 02:37 /usr/sbin/httpd -k start 2439544 1276780 nobody 20112 0.1 S 01:06 /usr/sbin/httpd -k start 2437077 1276780 nobody 20092 0.0 S 03:17 /usr/sbin/httpd -k start 2439067 1276780 nobody 20016 0.1 S 01:39 /usr/sbin/httpd -k start 2439543 1276780 nobody 19868 0.0 S 01:06 /usr/sbin/httpd -k start 2439005 1276780 nobody 19832 0.1 S 01:41 /usr/sbin/httpd -k start 2439571 1276780 nobody 19804 0.0 S 01:04 /usr/sbin/httpd -k start 2439578 1276780 nobody 19548 0.0 S 01:04 /usr/sbin/httpd -k start 2436767 1276780 nobody 19208 0.0 S 03:34 /usr/sbin/httpd -k start 2439575 1276780 nobody 19048 0.0 S 01:04 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 11196297 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 779 evolution/portal.evolutionerp.com.au-ssl_log 312 madalice/madalice.com.au-ssl_log 222 speedlin/speedlinefencing.com.au-ssl_log 90 olytis/tis.com.au-ssl_log 57 aaa/aaadownunder.com.au-ssl_log 22 corpkicks/corporatekicks.com.au-ssl_log 2 alison/alisonarts.com.au-ssl_log 1 corpkicks/2025.corporatekicks.com.au-ssl_log 1 evolution/support.evolutionerp.com.au-ssl_log 1 otter2/otterfencing.net.au-ssl_log 1 (total vhosts taking traffic: 11) --- top client IPs across all vhosts (last 3 min) --- 619 203.54.180.238 117 20.169.136.165 112 103.104.165.99 112 103.104.164.114 90 68.155.154.236 68 120.150.225.142 65 150.228.163.144 60 185.177.72.70 57 40.80.82.167 42 1.145.73.14 27 182.239.240.254 19 180.181.236.49 16 1.144.107.82 9 150.228.151.51 5 185.177.72.5 --- top request paths across all vhosts (last 3 min) --- 266 POST /functions.php 149 GET /app/ajax.php 125 GET /factory_session_checker.php 64 GET /factory_session_processed_qty.php 64 GET /factory_session_joiner.php 61 POST /app/ajax/selectFilter.php 60 POST /quoteditsave.php 57 GET /index.php 57 GET /heartbeat.php 29 POST /app/ajax.php 28 POST /app/ajax/selectFilterSingle.php 27 POST /plugins/csvexporter/plugin.php 24 POST /itemModify.php 17 POST //functions.php 14 GET / 12 GET /plugins/fensa/fensa-ajax.php 10 POST /plugins/pipe/pipetopostsave.php 8 POST /purchaseaddsave.php 7 POST /billaddsave.php 6 POST / --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 266 POST /functions.php 149 GET /app/ajax.php 61 POST /app/ajax/selectFilter.php 60 POST /quoteditsave.php 56 GET /index.php 29 POST /app/ajax.php 28 POST /app/ajax/selectFilterSingle.php 27 POST /plugins/csvexporter/plugin.php 24 POST /itemModify.php 17 POST //functions.php 12 GET /plugins/fensa/fensa-ajax.php 10 POST /plugins/pipe/pipetopostsave.php -- last 10 requests -- 203.54.180.238 - - [19/Aug/2026:09:21:53 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78536§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 203.54.180.238 - - [19/Aug/2026:09:21:53 +1000] "GET /index.php?page=jobregister HTTP/1.1" 200 14683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/20100101 Firefox/153.0" 203.54.180.238 - - [19/Aug/2026:09:21:53 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Geck 203.54.180.238 - - [19/Aug/2026:09:21:53 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 22704 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78536§ionid=0" "Mozilla/5.0 (Windows NT 10.0; 103.104.165.99 - - [19/Aug/2026:09:21:53 +1000] "POST /purchaseaddsave.php?save=1 HTTP/1.1" 302 20 "https://my.evolutionerp.com.au/index.php?page=purchaseadd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 103.104.165.99 - - [19/Aug/2026:09:21:53 +1000] "GET /index.php?page=purchaseadd&purchaseid=11223 HTTP/1.1" 200 66751 "https://my.evolutionerp.com.au/index.php?page=purchaseadd" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 103.104.165.99 - - [19/Aug/2026:09:21:54 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=11223" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 103.104.165.99 - - [19/Aug/2026:09:21:54 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=10000380212 HTTP/1.1" 200 94 "https://my.evolutionerp.com.au/index 103.104.165.99 - - [19/Aug/2026:09:21:54 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=16949764577 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/inde 103.104.165.99 - - [19/Aug/2026:09:21:54 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Dpurchaseadd%26purchaseid%3D11223&call=getUserSetting&caller=ajaxSubmitLocal&seq=18601832315 HTTP/1.1" 200 116 == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 125 GET /factory_session_checker.php 64 GET /factory_session_processed_qty.php 64 GET /factory_session_joiner.php 57 GET /heartbeat.php 1 POST /portal/register 1 GET /index.php -- last 10 requests -- 203.54.180.238 - - [19/Aug/2026:09:21:47 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [19/Aug/2026:09:21:47 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [19/Aug/2026:09:21:50 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [19/Aug/2026:09:21:50 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 129 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [19/Aug/2026:09:21:50 +1000] "GET /factory_session_joiner.php?id=34697 HTTP/1.1" 200 79 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [19/Aug/2026:09:21:52 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 124 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [19/Aug/2026:09:21:52 +1000] "GET /factory_session_joiner.php?id=34707 HTTP/1.1" 200 94 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [19/Aug/2026:09:21:51 +1000] "GET /heartbeat.php?sentAt=1787095310&bytes=106,132,233,14&_=1787088569048 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [19/Aug/2026:09:21:52 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [19/Aug/2026:09:21:52 +1000] "GET /heartbeat.php?sentAt=1787095312&bytes=106,132,233,16&_=1787092227496 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" == madalice/madalice.com.au-ssl_log == -- top paths -- 10 GET / 6 POST / 4 POST /wp-admin/admin-ajax.php 4 GET /store/custom-afl-carlton-kids/ 1 GET /zxz.php 1 GET /xmrlpc.php 1 GET /xmlrpc.php 1 GET /xampp 1 GET /www.php 1 GET /wso.php 1 GET /wp.php 1 GET /wp-mail.php -- last 10 requests -- 177.128.212.111 - - [19/Aug/2026:09:21:46 +1000] "GET /mep_tag/party/ HTTP/1.1" 200 28612 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 102.210.18.60 - - [19/Aug/2026:09:21:46 +1000] "GET /mep_tag/sneaker-lab/ HTTP/1.1" 200 28619 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 2001:8004:14b3:854f:e9ee:d12e:2428:2eb4 - - [19/Aug/2026:09:21:46 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 51 "https://madalice.com.au/wp-admin/edit.php?post_type=shop_order" "Mozilla/5.0 (Windows NT 10.0; Win 190.82.135.85 - - [19/Aug/2026:09:21:47 +1000] "GET /mep_tag/custom/ HTTP/1.1" 200 28611 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 138.117.220.212 - - [19/Aug/2026:09:21:47 +1000] "GET /store/design-your-own-sports-team-sneakers/ HTTP/1.1" 200 48711 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/14 179.183.226.186 - - [19/Aug/2026:09:21:47 +1000] "GET /mep_tag/birthday/ HTTP/1.1" 200 28611 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 185.177.72.70 - - [19/Aug/2026:09:21:47 +1000] "GET /aws-codecommit HTTP/1.1" 404 30570 "-" "curl/8.7.1" 81.162.244.239 - - [19/Aug/2026:09:21:47 +1000] "GET /mep_tag/childs/ HTTP/1.1" 200 28614 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" 185.177.72.70 - - [19/Aug/2026:09:21:51 +1000] "GET /%2eenv%2eold HTTP/1.1" 404 30572 "-" "curl/8.7.1" 47.82.201.228 - - [19/Aug/2026:09:21:52 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/mep_tag/sneaker-lab/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/53 --- last 30 samples (run-up to this incident) --- 2026-08-19 09:19:34 L1=3.55 run=2 blk=0 avail=6206 (52.9%) swpO=309 conn=2 myRSS=2552 php=1 phpRSS=66 ap=55 tcp=48 topuser=evolution 2026-08-19 09:19:36 L1=3.55 run=4 blk=0 avail=6094 (52.0%) swpO=281 conn=3 myRSS=2552 php=3 phpRSS=245 ap=54 tcp=46 topuser=madalice 2026-08-19 09:19:44 L1=3.39 run=8 blk=0 avail=6188 (52.8%) swpO=0 conn=2 myRSS=2552 php=4 phpRSS=263 ap=45 tcp=47 topuser=evolution 2026-08-19 09:19:46 L1=3.39 run=3 blk=0 avail=6126 (52.2%) swpO=0 conn=3 myRSS=2552 php=2 phpRSS=268 ap=44 tcp=48 topuser=madalice 2026-08-19 09:19:54 L1=3.26 run=4 blk=0 avail=5912 (50.4%) swpO=0 conn=3 myRSS=2552 php=2 phpRSS=450 ap=47 tcp=58 topuser=madalice 2026-08-19 09:19:56 L1=3.26 run=2 blk=0 avail=6060 (51.7%) swpO=0 conn=3 myRSS=2552 php=3 phpRSS=349 ap=47 tcp=56 topuser=madalice 2026-08-19 09:20:04 L1=3.15 run=2 blk=0 avail=6237 (53.2%) swpO=0 conn=3 myRSS=2552 php=2 phpRSS=132 ap=47 tcp=52 topuser=evolution 2026-08-19 09:20:06 L1=3.15 run=3 blk=1 avail=6063 (51.7%) swpO=0 conn=3 myRSS=2552 php=4 phpRSS=352 ap=47 tcp=54 topuser=evolution 2026-08-19 09:20:14 L1=2.75 run=3 blk=0 avail=6118 (52.2%) swpO=0 conn=3 myRSS=2552 php=4 phpRSS=341 ap=44 tcp=57 topuser=madalice 2026-08-19 09:20:16 L1=2.75 run=3 blk=0 avail=6278 (53.5%) swpO=0 conn=2 myRSS=2552 php=3 phpRSS=158 ap=46 tcp=59 topuser=evolution 2026-08-19 09:20:25 L1=2.55 run=5 blk=0 avail=6169 (52.6%) swpO=0 conn=3 myRSS=2552 php=3 phpRSS=236 ap=52 tcp=52 topuser=madalice 2026-08-19 09:20:26 L1=2.55 run=5 blk=0 avail=5980 (51.0%) swpO=0 conn=2 myRSS=2552 php=2 phpRSS=380 ap=51 tcp=55 topuser=madalice 2026-08-19 09:20:35 L1=2.31 run=3 blk=0 avail=6118 (52.2%) swpO=0 conn=3 myRSS=2552 php=2 phpRSS=264 ap=48 tcp=49 topuser=madalice 2026-08-19 09:20:36 L1=2.31 run=3 blk=0 avail=6259 (53.4%) swpO=0 conn=2 myRSS=2552 php=4 phpRSS=157 ap=48 tcp=52 topuser=evolution 2026-08-19 09:20:45 L1=2.18 run=2 blk=0 avail=6286 (53.6%) swpO=0 conn=3 myRSS=2552 php=1 phpRSS=66 ap=46 tcp=51 topuser=evolution 2026-08-19 09:20:46 L1=2.18 run=4 blk=0 avail=6173 (52.6%) swpO=0 conn=2 myRSS=2552 php=3 phpRSS=243 ap=45 tcp=47 topuser=madalice 2026-08-19 09:20:55 L1=2.15 run=5 blk=0 avail=5815 (49.6%) swpO=0 conn=3 myRSS=2552 php=4 phpRSS=562 ap=58 tcp=54 topuser=madalice 2026-08-19 09:20:56 L1=2.15 run=2 blk=0 avail=6257 (53.3%) swpO=0 conn=2 myRSS=2552 php=1 phpRSS=45 ap=57 tcp=52 topuser=madalice 2026-08-19 09:21:05 L1=2.20 run=1 blk=0 avail=6249 (53.3%) swpO=0 conn=3 myRSS=2553 php=1 phpRSS=66 ap=52 tcp=57 topuser=evolution 2026-08-19 09:21:06 L1=2.20 run=8 blk=0 avail=5937 (50.6%) swpO=0 conn=2 myRSS=2553 php=6 phpRSS=492 ap=52 tcp=67 topuser=madalice 2026-08-19 09:21:15 L1=2.63 run=7 blk=0 avail=5749 (49.0%) swpO=0 conn=3 myRSS=2553 php=5 phpRSS=643 ap=60 tcp=60 topuser=madalice 2026-08-19 09:21:16 L1=2.63 run=6 blk=0 avail=5691 (48.5%) swpO=0 conn=5 myRSS=2553 php=5 phpRSS=718 ap=60 tcp=64 topuser=madalice 2026-08-19 09:21:25 L1=2.69 run=6 blk=0 avail=5950 (50.7%) swpO=0 conn=3 myRSS=2553 php=4 phpRSS=455 ap=51 tcp=50 topuser=madalice 2026-08-19 09:21:26 L1=2.69 run=3 blk=0 avail=6254 (53.3%) swpO=0 conn=5 myRSS=2553 php=2 phpRSS=119 ap=50 tcp=49 topuser=madalice 2026-08-19 09:21:35 L1=2.74 run=2 blk=0 avail=6348 (54.1%) swpO=0 conn=3 myRSS=2553 php=1 phpRSS=36 ap=43 tcp=47 topuser=madalice 2026-08-19 09:21:36 L1=2.74 run=4 blk=0 avail=6188 (52.8%) swpO=0 conn=5 myRSS=2553 php=3 phpRSS=268 ap=43 tcp=46 topuser=madalice 2026-08-19 09:21:45 L1=2.94 run=10 blk=0 avail=5966 (50.9%) swpO=0 conn=3 myRSS=2553 php=8 phpRSS=629 ap=41 tcp=48 topuser=madalice 2026-08-19 09:21:46 L1=2.94 run=8 blk=0 avail=5737 (48.9%) swpO=0 conn=5 myRSS=2553 php=6 phpRSS=802 ap=44 tcp=52 topuser=madalice 2026-08-19 09:21:55 L1=3.45 run=16 blk=0 avail=5066 (43.2%) swpO=534 conn=16 myRSS=2545 php=18 phpRSS=1732 ap=63 tcp=73 topuser=madalice 2026-08-19 09:21:56 L1=3.45 run=26 blk=0 avail=4485 (38.2%) swpO=860 conn=15 myRSS=2540 php=21 phpRSS=2384 ap=79 tcp=74 topuser=madalice