INCIDENT 2026-08-19 13:14:48 trigger: php_procs=29 php_rss=2338MB mysql_conn=28 ================================================================== load: 4.50 2.33 1.84 36/744 2662365 ncpu:10 mem_avail: 4386MB/11729MB (37.4%) swap_used:2158MB swapout:1091/s blocked(D):0 running:35 iowait:0.1% steal:0.0% php: 29 procs / 2338MB heaviest user: vinesit (27 procs, 2161MB) apache: 103 procs tcp_estab: 101 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2763 vinesit 26 1994 nobody 102 1691 root 243 764 netdata 8 252 mailman 20 233 alison 2 124 evolution 9 98 kurri 8 95 cpanellogin 1 61 mailnull 3 32 dovenull 6 25 aaa 2 25 wp-toolkit 6 17 named 1 17 zabbix 1 13 candyfabcom 1 11 kamcool 1 10 dovecot 3 6 nscd 1 3 --- php workers by user --- USER PROCS RSS_MB vinesit 23 1908 evolution 3 143 alison 1 112 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4547 MB Active(file): 2933 MB Inactive(file): 979 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 398 MB CommitLimit: 9960 MB Committed_AS: 12063 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2064673 root 12:03:33 2728 /usr/bin/imunify-agent-proxy 2658119 root 03:47 61996 /opt/imunify360/venv/bin/python3 -m imav.run --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 2830036 11.0 Ssl 4-05:24:12 /usr/sbin/mariadbd 1220 1 netdata 202200 2.5 Ssl 51-03:04:54 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2122939 2112450 root 186768 0.0 S 10:36:20 spamd child 2662321 2658267 alison 119612 44.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2662288 2662226 vinesit 96088 22.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2662282 2662220 vinesit 94104 21.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2662309 2662250 vinesit 93980 20.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2662323 2661822 vinesit 92516 30.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2662287 2662223 vinesit 91976 19.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2662300 2662246 vinesit 91672 20.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2662317 2659299 vinesit 89288 28.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2662304 2662242 vinesit 89220 18.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2662303 2662243 vinesit 87784 23.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2662328 2662161 vinesit 86140 62.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2662307 2662247 vinesit 79004 15.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2662299 2662239 vinesit 78772 16.0 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2662306 2662248 vinesit 77764 15.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2662320 2661685 vinesit 75212 19.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2662315 2661864 vinesit 74080 18.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2662322 2659265 vinesit 72576 17.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2662327 2658607 evolution 70364 18.0 R 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2112450 1 root 65940 0.0 Ss 10:51:16 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2662318 2653967 vinesit 64720 12.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2650070 1353308 cpanellogin 63240 0.0 S 12:45 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 2661802 2112450 root 62500 0.0 S 00:33 spamd child 2658119 1 root 61996 0.6 Ssl 03:47 /opt/imunify360/venv/bin/python3 -m imav.run 2223 1201 root 61224 0.0 Sl 51-03:04:53 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 2575382 1 root 54028 0.0 Ss 4-05:24:15 /usr/lib/systemd/systemd-journald 1353308 1 root 42140 0.0 Ss 28-10:33:24 cpsrvd (SSL) - waiting for connections 2662296 2662233 vinesit 38012 23.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1469 1 root 33788 0.1 Ss 51-03:04:53 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 4922 2431 netdata 31016 0.1 Sl 51-03:04:49 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1463 1 root 22232 0.0 Ss 51-03:04:53 tailwatchd 2656551 1276780 nobody 21848 0.0 S 05:23 /usr/sbin/httpd -k start 2657513 1276780 nobody 21808 0.0 S 04:30 /usr/sbin/httpd -k start 2658267 1276780 nobody 21712 0.1 S 03:40 /usr/sbin/httpd -k start 2654464 1276780 nobody 21308 0.0 S 07:42 /usr/sbin/httpd -k start 2658607 1276780 nobody 21244 0.1 S 03:20 /usr/sbin/httpd -k start 2657258 1276780 nobody 21208 0.0 S 04:43 /usr/sbin/httpd -k start 2659299 1276780 nobody 21080 0.0 S 02:31 /usr/sbin/httpd -k start 2660291 1276780 nobody 20760 0.2 S 01:52 /usr/sbin/httpd -k start 2111676 1 root 20276 0.0 Ss 10:51:46 lfd - sleeping 2653967 1276780 nobody 20268 0.0 S 08:29 /usr/sbin/httpd -k start 2659265 1276780 nobody 20164 0.0 S 02:32 /usr/sbin/httpd -k start 2659760 1276780 nobody 20052 0.0 S 02:12 /usr/sbin/httpd -k start 2659793 1276780 nobody 20012 0.0 S 02:11 /usr/sbin/httpd -k start 2657514 1276780 nobody 19972 0.0 S 04:30 /usr/sbin/httpd -k start 2660276 1276780 nobody 19952 0.0 S 01:53 /usr/sbin/httpd -k start 2661824 1276780 nobody 19924 0.0 S 00:31 /usr/sbin/httpd -k start 2660379 1276780 nobody 19920 0.1 S 01:50 /usr/sbin/httpd -k start 2659692 1276780 nobody 19668 0.0 S 02:15 /usr/sbin/httpd -k start 2661018 1276780 nobody 19608 0.0 S 01:23 /usr/sbin/httpd -k start 2658922 1276780 nobody 18960 0.0 S 02:56 /usr/sbin/httpd -k start 2659665 1276780 nobody 18888 0.1 S 02:16 /usr/sbin/httpd -k start 2661725 1276780 nobody 18820 0.0 S 00:39 /usr/sbin/httpd -k start 2662160 1276780 nobody 18568 0.1 S 00:08 /usr/sbin/httpd -k start 2662099 1276780 nobody 18512 0.1 S 00:10 /usr/sbin/httpd -k start 2662203 1276780 nobody 18508 0.1 S 00:06 /usr/sbin/httpd -k start 2659844 1276780 nobody 18424 0.0 S 02:10 /usr/sbin/httpd -k start 2107664 1 named 18288 0.0 Ssl 10:52:08 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 13062792 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 13062791 | root | 108-1481181613 | Execute | 0 | Writing to net | SELECT * FROM staff | +----------+------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 546 evolution/portal.evolutionerp.com.au-ssl_log 351 bigdeals/bigdeals.com.au 277 coscom/coscom.com.au-ssl_log 148 vinesit/vinesit.com.au-ssl_log 133 aaa/aaadownunder.com.au-ssl_log 120 cosgrovecreative/cosgrovecreative.com.au-ssl_log 113 alison/alisonarts.com.au-ssl_log 90 coscom/swms.coscom.com.au 89 alison/alisonarts.com.au 46 madalice/madalice.com.au-ssl_log 5 corpkicks/corporatekicks.com.au-ssl_log 4 olympic/olympicfencing.com.au-ssl_log 3 corpkicks/2025.corporatekicks.com.au-ssl_log 2 tubesupplies/tubesupplies.com.au-ssl_log 2 (total vhosts taking traffic: 23) --- top client IPs across all vhosts (last 3 min) --- 803 203.54.180.238 277 20.151.128.234 148 20.106.102.5 133 20.163.43.14 104 168.62.48.100 89 40.80.82.167 61 20.48.236.86 52 20.118.133.132 36 45.156.128.169 35 45.156.128.170 34 45.156.128.168 24 103.104.165.99 23 45.156.128.171 18 150.228.163.144 18 103.104.164.114 --- top request paths across all vhosts (last 3 min) --- 247 POST /functions.php 138 GET /cgi-sys/suspendedpage.cgi 134 GET /factory_session_checker.php 81 GET /app/ajax.php 68 GET /heartbeat.php 67 GET /factory_session_processed_qty.php 67 GET /factory_session_joiner.php 40 GET /index.php 21 POST //functions.php 20 POST /plugins/csvexporter/plugin.php 17 POST /app/ajax/selectFilterSingle.php 16 POST /inveditsave.php 15 POST /app/ajax.php 14 GET / 13 GET //app/ajax.php 12 POST /clienteditsave.php 12 POST /app/ajax/selectFilter.php 11 POST /quoteditsave.php 9 GET /admin.php 8 GET /wp-login.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 247 POST /functions.php 81 GET /app/ajax.php 31 GET /index.php 21 POST //functions.php 20 POST /plugins/csvexporter/plugin.php 17 POST /app/ajax/selectFilterSingle.php 16 POST /inveditsave.php 15 POST /app/ajax.php 13 GET //app/ajax.php 12 POST /clienteditsave.php 12 POST /app/ajax/selectFilter.php 11 POST /quoteditsave.php -- last 10 requests -- 203.54.180.238 - - [19/Aug/2026:13:14:43 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 51 "https://my.evolutionerp.com.au/index.php?page%3Dpurchaseadd%26purchaseid%3D13865" "Mozilla/5.0 (Windows NT 10.0; Win64 150.228.163.144 - - [19/Aug/2026:13:14:43 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=2288§ionid=466" "Mozilla/5.0 (Windows NT 10.0; Wi 203.54.180.238 - - [19/Aug/2026:13:14:44 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78553§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 203.54.180.238 - - [19/Aug/2026:13:14:45 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 284 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29251&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [19/Aug/2026:13:14:45 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 284 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=15173&tab=filestab" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 203.54.180.238 - - [19/Aug/2026:13:14:45 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29408&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 147.161.215.89 - - [19/Aug/2026:13:14:45 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=report&file=testTagRetest3" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 203.54.180.238 - - [19/Aug/2026:13:14:45 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29424&tab=invoicingtab" "Mozilla/5.0 (Windows NT 10.0; Win64 203.54.180.238 - - [19/Aug/2026:13:14:46 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=mfreqedit&id=20740" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0 203.54.180.238 - - [19/Aug/2026:13:14:46 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 134 GET /factory_session_checker.php 68 GET /heartbeat.php 67 GET /factory_session_processed_qty.php 67 GET /factory_session_joiner.php 9 GET /index.php 3 PATCH /api/dispatch-items.php 1 POST /inventory.php 1 POST /factory_functions.php 1 GET /uploadsave.php -- last 10 requests -- 203.54.180.238 - - [19/Aug/2026:13:14:43 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [19/Aug/2026:13:14:43 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [19/Aug/2026:13:14:44 +1000] "GET /factory_session_joiner.php?id=34723 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [19/Aug/2026:13:14:44 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [19/Aug/2026:13:14:43 +1000] "GET /heartbeat.php?sentAt=1787109279&bytes=106,133,31,159&_=1787088570445 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [19/Aug/2026:13:14:45 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [19/Aug/2026:13:14:46 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [19/Aug/2026:13:14:45 +1000] "GET /heartbeat.php?sentAt=1787109282&bytes=106,133,31,162&_=1787056653534 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [19/Aug/2026:13:14:45 +1000] "GET /heartbeat.php?sentAt=1787109280&bytes=106,133,31,160&_=1787109100628 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=8" 203.54.180.238 - - [19/Aug/2026:13:14:46 +1000] "GET /heartbeat.php?sentAt=1787109285&bytes=106,133,31,165&_=1787108835280 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=8" == bigdeals/bigdeals.com.au == -- top paths -- 138 GET /cgi-sys/suspendedpage.cgi 3 GET /ioxi-o.php 3 GET /admin.php 3 GET /adminfuns.php 2 GET /wp-links-opml.php 2 GET /wp-content/themes/admin.php 2 GET /wk/index.php 2 GET /lite.php 2 GET /inputs.php 2 GET /info.php 2 GET /index/function.php 2 GET /goods.php -- last 10 requests -- 20.151.128.234 - - [19/Aug/2026:13:14:16 +1000] "GET /cgi-sys/suspendedpage.cgi HTTP/1.1" 200 7624 "-" "-" 20.151.128.234 - - [19/Aug/2026:13:14:17 +1000] "GET /htaccess.php HTTP/1.1" 302 250 "-" "-" 20.151.128.234 - - [19/Aug/2026:13:14:17 +1000] "GET /cgi-sys/suspendedpage.cgi HTTP/1.1" 200 7624 "-" "-" 20.151.128.234 - - [19/Aug/2026:13:14:17 +1000] "GET /images/wso.php HTTP/1.1" 302 250 "-" "-" 20.151.128.234 - - [19/Aug/2026:13:14:17 +1000] "GET /cgi-sys/suspendedpage.cgi HTTP/1.1" 200 7624 "-" "-" 20.151.128.234 - - [19/Aug/2026:13:14:17 +1000] "GET /index/function.php HTTP/1.1" 302 250 "-" "-" 20.151.128.234 - - [19/Aug/2026:13:14:18 +1000] "GET /cgi-sys/suspendedpage.cgi HTTP/1.1" 200 7624 "-" "-" 20.151.128.234 - - [19/Aug/2026:13:14:18 +1000] "GET /info.php HTTP/1.1" 302 250 "-" "-" 20.151.128.234 - - [19/Aug/2026:13:14:18 +1000] "GET /cgi-sys/suspendedpage.cgi HTTP/1.1" 200 7624 "-" "-" 20.151.128.234 - - [19/Aug/2026:13:14:19 +1000] "GET /profile.php HTTP/1.1" 302 250 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-19 13:12:28 L1=1.28 run=1 blk=0 avail=6046 (51.6%) swpO=0 conn=1 myRSS=2779 php=0 phpRSS=0 ap=46 tcp=51 topuser=- 2026-08-19 13:12:29 L1=1.28 run=3 blk=0 avail=5876 (50.1%) swpO=0 conn=3 myRSS=2779 php=2 phpRSS=224 ap=45 tcp=52 topuser=alison 2026-08-19 13:12:38 L1=1.63 run=5 blk=0 avail=5742 (49.0%) swpO=0 conn=1 myRSS=2779 php=3 phpRSS=305 ap=55 tcp=68 topuser=alison 2026-08-19 13:12:39 L1=1.63 run=5 blk=0 avail=5599 (47.7%) swpO=0 conn=3 myRSS=2779 php=6 phpRSS=384 ap=59 tcp=66 topuser=evolution 2026-08-19 13:12:48 L1=1.61 run=3 blk=0 avail=5978 (51.0%) swpO=0 conn=1 myRSS=2779 php=1 phpRSS=42 ap=52 tcp=53 topuser=vinesit 2026-08-19 13:12:49 L1=1.61 run=5 blk=0 avail=5856 (49.9%) swpO=0 conn=3 myRSS=2779 php=5 phpRSS=294 ap=51 tcp=57 topuser=evolution 2026-08-19 13:12:58 L1=2.31 run=6 blk=0 avail=5759 (49.1%) swpO=0 conn=1 myRSS=2779 php=5 phpRSS=343 ap=55 tcp=71 topuser=aaa 2026-08-19 13:12:59 L1=2.31 run=4 blk=0 avail=5818 (49.6%) swpO=0 conn=3 myRSS=2779 php=4 phpRSS=198 ap=63 tcp=76 topuser=evolution 2026-08-19 13:13:08 L1=2.57 run=6 blk=0 avail=5689 (48.5%) swpO=0 conn=4 myRSS=2779 php=4 phpRSS=416 ap=55 tcp=59 topuser=corpkicks 2026-08-19 13:13:09 L1=2.57 run=3 blk=0 avail=5982 (51.0%) swpO=0 conn=3 myRSS=2779 php=0 phpRSS=0 ap=54 tcp=50 topuser=- 2026-08-19 13:13:18 L1=2.40 run=6 blk=0 avail=5821 (49.6%) swpO=0 conn=4 myRSS=2779 php=4 phpRSS=275 ap=51 tcp=59 topuser=alison 2026-08-19 13:13:19 L1=2.40 run=3 blk=0 avail=5872 (50.1%) swpO=0 conn=3 myRSS=2779 php=5 phpRSS=254 ap=51 tcp=65 topuser=evolution 2026-08-19 13:13:28 L1=2.42 run=7 blk=0 avail=5648 (48.2%) swpO=0 conn=4 myRSS=2779 php=9 phpRSS=611 ap=52 tcp=59 topuser=evolution 2026-08-19 13:13:29 L1=2.42 run=6 blk=0 avail=5835 (49.8%) swpO=0 conn=3 myRSS=2779 php=8 phpRSS=413 ap=52 tcp=60 topuser=evolution 2026-08-19 13:13:38 L1=2.44 run=3 blk=0 avail=5870 (50.1%) swpO=0 conn=4 myRSS=2779 php=3 phpRSS=246 ap=49 tcp=58 topuser=olympic 2026-08-19 13:13:39 L1=2.44 run=1 blk=0 avail=6022 (51.3%) swpO=0 conn=3 myRSS=2779 php=0 phpRSS=0 ap=48 tcp=58 topuser=- 2026-08-19 13:13:48 L1=2.45 run=3 blk=0 avail=5917 (50.5%) swpO=0 conn=4 myRSS=2779 php=2 phpRSS=202 ap=44 tcp=54 topuser=alison 2026-08-19 13:13:49 L1=2.45 run=5 blk=0 avail=5972 (50.9%) swpO=0 conn=3 myRSS=2779 php=2 phpRSS=152 ap=43 tcp=53 topuser=alison 2026-08-19 13:13:58 L1=2.30 run=3 blk=0 avail=5978 (51.0%) swpO=0 conn=4 myRSS=2779 php=1 phpRSS=146 ap=38 tcp=46 topuser=alison 2026-08-19 13:13:59 L1=2.30 run=4 blk=0 avail=5985 (51.0%) swpO=0 conn=3 myRSS=2779 php=4 phpRSS=198 ap=38 tcp=50 topuser=alison 2026-08-19 13:14:08 L1=2.33 run=2 blk=0 avail=6083 (51.9%) swpO=0 conn=1 myRSS=2779 php=1 phpRSS=21 ap=38 tcp=54 topuser=evolution 2026-08-19 13:14:09 L1=2.33 run=6 blk=0 avail=5771 (49.2%) swpO=0 conn=3 myRSS=2779 php=6 phpRSS=509 ap=39 tcp=58 topuser=aaa 2026-08-19 13:14:18 L1=2.43 run=1 blk=0 avail=6255 (53.3%) swpO=0 conn=1 myRSS=2779 php=0 phpRSS=0 ap=47 tcp=62 topuser=- 2026-08-19 13:14:19 L1=2.43 run=9 blk=0 avail=5975 (50.9%) swpO=0 conn=3 myRSS=2779 php=3 phpRSS=301 ap=55 tcp=65 topuser=vinesit 2026-08-19 13:14:28 L1=2.43 run=5 blk=0 avail=5977 (51.0%) swpO=0 conn=1 myRSS=2779 php=2 phpRSS=274 ap=47 tcp=46 topuser=madalice 2026-08-19 13:14:29 L1=2.43 run=2 blk=0 avail=6204 (52.9%) swpO=0 conn=2 myRSS=2779 php=1 phpRSS=86 ap=46 tcp=48 topuser=vinesit 2026-08-19 13:14:38 L1=2.29 run=1 blk=0 avail=6293 (53.7%) swpO=0 conn=1 myRSS=2779 php=0 phpRSS=0 ap=42 tcp=46 topuser=- 2026-08-19 13:14:40 L1=3.15 run=17 blk=0 avail=5694 (48.5%) swpO=0 conn=2 myRSS=2779 php=12 phpRSS=997 ap=42 tcp=96 topuser=vinesit 2026-08-19 13:14:48 L1=4.50 run=35 blk=0 avail=4386 (37.4%) swpO=1091 conn=28 myRSS=2763 php=29 phpRSS=2338 ap=103 tcp=101 topuser=vinesit 2026-08-19 13:14:50 L1=4.38 run=2 blk=0 avail=5932 (50.6%) swpO=1091 conn=2 myRSS=2763 php=1 phpRSS=22 ap=102 tcp=85 topuser=evolution