INCIDENT 2026-08-21 15:19:01 trigger: php_rss=1548MB ================================================================== load: 2.08 1.74 1.57 18/648 922547 ncpu:10 mem_avail: 5266MB/11729MB (44.9%) swap_used:2942MB swapout:768/s blocked(D):0 running:24 iowait:0.2% steal:0.0% php: 12 procs / 1548MB heaviest user: madalice (10 procs, 1466MB) apache: 29 procs tcp_estab: 49 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2926 madalice 10 1610 root 241 822 nobody 28 415 netdata 9 251 cpanellogin 1 96 mailman 20 95 evolution 9 70 kurri 3 34 dovenull 6 25 wp-toolkit 6 17 zabbix 1 15 named 1 14 mailnull 2 12 dovecot 3 7 nscd 1 6 cpanelconnecttrack 1 3 dbus 1 2 polkitd 1 1 rpc 1 0 --- php workers by user --- USER PROCS RSS_MB madalice 10 1642 evolution 1 39 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4829 MB Active(file): 1912 MB Inactive(file): 2423 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 920 MB CommitLimit: 9960 MB Committed_AS: 8718 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 267385 root 14:07:44 5080 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 2994836 11.8 Ssl 6-07:28:25 /usr/sbin/mariadbd 922446 919614 madalice 268964 117 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 922443 922431 madalice 258988 115 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 922442 921441 madalice 246980 112 D 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 197580 2.5 Ssl 53-05:09:07 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 922448 917602 madalice 187116 85.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 319521 311538 root 155348 0.0 S 12:41:16 spamd child 853881 311538 root 148844 0.0 S 01:28:11 spamd child 922458 921440 madalice 115072 91.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 922460 920695 madalice 112588 90.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 922459 917548 madalice 111208 88.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 922462 921292 madalice 106564 76.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 922457 920795 madalice 104808 78.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 832144 1353308 cpanellogin 98504 0.0 S 01:55:48 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en docroot /usr/local/cpanel/base cpanel_locale 311538 1 root 97144 0.0 Ss 12:56:15 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2575382 1 root 94484 0.0 Ss 6-07:28:28 /usr/lib/systemd/systemd-journald 2223 1201 root 42716 0.0 Sl 53-05:09:06 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1469 1 root 40672 0.1 Ss 53-05:09:06 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 922461 921281 evolution 40500 4.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 39960 0.0 Ss 30-12:37:37 cpsrvd (SSL) - waiting for connections 4922 2431 netdata 34140 0.1 Sl 53-05:09:02 /usr/libexec/netdata/plugins.d/go.d.plugin 1 922463 911757 madalice 31040 0.0 S 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1463 1 root 22372 0.0 Ss 53-05:09:06 tailwatchd 310731 1 root 22084 0.0 Ss 12:56:47 lfd - sleeping 920804 1276780 nobody 20924 0.0 S 02:15 /usr/sbin/httpd -k start 919896 1276780 nobody 20704 0.0 S 03:58 /usr/sbin/httpd -k start 920795 1276780 nobody 19412 0.0 S 02:16 /usr/sbin/httpd -k start 921294 1276780 nobody 19188 0.0 S 01:41 /usr/sbin/httpd -k start 921441 1276780 nobody 18508 0.0 S 01:34 /usr/sbin/httpd -k start 919701 1276780 nobody 18448 0.0 S 04:02 /usr/sbin/httpd -k start 921292 1276780 nobody 18308 0.0 S 01:41 /usr/sbin/httpd -k start 921388 1276780 nobody 18288 0.0 S 01:37 /usr/sbin/httpd -k start 919614 1276780 nobody 17956 0.0 S 04:15 /usr/sbin/httpd -k start 185104 2431 netdata 17680 2.1 Sl 8-18:45:25 /usr/libexec/netdata/plugins.d/apps.plugin 1 921440 1276780 nobody 17652 0.0 S 01:34 /usr/sbin/httpd -k start 921281 1276780 nobody 17624 0.0 S 01:42 /usr/sbin/httpd -k start 920695 1276780 nobody 17572 0.1 S 02:27 /usr/sbin/httpd -k start 919338 1276780 nobody 16868 0.1 S 04:47 /usr/sbin/httpd -k start 922022 1276780 nobody 16412 0.0 S 00:50 /usr/sbin/httpd -k start 922445 1276780 nobody 16372 0.0 S 00:02 /usr/sbin/httpd -k start 911757 1276780 nobody 16188 0.0 S 14:52 /usr/sbin/httpd -k start 922481 1276780 nobody 15888 0.0 S 00:00 /usr/sbin/httpd -k start 922431 1276780 nobody 15844 0.0 S 00:06 /usr/sbin/httpd -k start 1204 1 zabbix 15580 0.2 Ssl 53-05:09:07 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 917602 1276780 nobody 15480 0.0 S 07:14 /usr/sbin/httpd -k start 2107664 1 named 15028 0.0 Ssl 2-12:56:21 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 922453 1276780 nobody 14496 0.0 S 00:01 /usr/sbin/httpd -k start 1471 1 root 13528 0.0 Ss 53-05:09:06 cPhulkd - processor 917548 1276780 nobody 13528 0.0 S 07:20 /usr/sbin/httpd -k start 405204 1471 root 13416 0.0 S 10:07:50 cPhulkd - dbprocessor 922452 1276780 nobody 13028 0.0 S 00:01 /usr/sbin/httpd -k start 906082 3828812 kurri 12896 0.0 S 22:37 dovecot/imap 922429 1471 root 12632 0.0 S 00:07 cPhulkd - processor - http socket 1276780 1 root 12248 0.0 Ss 15-23:47:42 /usr/sbin/httpd -k start 915427 3828812 kurri 12104 0.0 S 10:29 dovecot/imap 922475 1276780 nobody 10936 0.0 S 00:00 /usr/sbin/httpd -k start 3668761 3828812 kurri 10828 0.0 S 1-05:04:46 dovecot/imap 2107879 1 root 9176 0.0 Ss 2-12:56:20 queueprocd - waiting up to 60s to process a task 918817 27524 root 9148 0.0 Ss 05:03 sshd: evolution [priv] 1059098 3828812 dovenull 8060 0.0 S 7-23:46:12 dovecot/imap-login --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 22751437 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 98 olympic/olympicfencing.com.au-ssl_log 97 evolution/portal.evolutionerp.com.au-ssl_log 94 bigdeals/bigdeals.com.au-ssl_log 80 kurri/kurrimotorinn.com.au-ssl_log 57 customc/customcentral.com.au 43 customc/customcentral.com.au-ssl_log 40 lowrange/lowrange.com.au 18 madalice/madalice.com.au-ssl_log 6 (total vhosts taking traffic: 9) --- top client IPs across all vhosts (last 3 min) --- 169 203.54.180.238 95 20.226.7.189 80 68.155.147.185 80 68.155.146.130 57 172.182.200.96 18 146.70.194.220 5 103.104.164.114 4 165.225.233.109 4 118.127.40.55 3 20.171.51.14 3 193.115.90.9 3 182.239.240.254 2 40.77.167.62 2 114.119.140.234 1 68.67.112.174 --- top request paths across all vhosts (last 3 min) --- 80 GET /autodiscover/autodiscover.xml 47 POST /functions.php 38 GET /factory_session_checker.php 20 GET /factory_session_processed_qty.php 19 GET /factory_session_joiner.php 13 GET /heartbeat.php 11 GET /app/ajax.php 7 POST /quoteditsave.php 7 GET /index.php 5 POST /plugins/pipe/pipetopostsave.php 5 GET / 4 POST /wp-cron.php 4 POST /clienteditsave.php 4 POST /app/ajax/selectFilter.php 4 GET /xmlrpc.php 3 POST /plugins/csvexporter/plugin.php 3 GET /wp-head.php 3 GET /wp-content/plugins/hellopress/wp_filemanager.php 3 GET /wp-content.php 3 GET /this_is_a_new_hello_world.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 47 POST /functions.php 11 GET /app/ajax.php 7 POST /quoteditsave.php 6 GET /index.php 5 POST /plugins/pipe/pipetopostsave.php 4 POST /clienteditsave.php 4 POST /app/ajax/selectFilter.php 3 POST /plugins/csvexporter/plugin.php 2 POST /logsave.php 2 POST /itemModify.php 2 POST /app/ajax/selectFilterSingle.php 2 POST /app/ajax.php -- last 10 requests -- 203.54.180.238 - - [21/Aug/2026:15:18:38 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29270" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi 40.77.167.62 - - [21/Aug/2026:15:18:41 +1000] "GET /index.php?page=activities&keyword=animeyuzu+page+2 HTTP/1.1" 200 5271 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing. 203.54.180.238 - - [21/Aug/2026:15:18:43 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29432&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 103.104.164.114 - - [21/Aug/2026:15:18:45 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 203.54.180.238 - - [21/Aug/2026:15:18:47 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=activities&date=21-08-2026&keyword=ak" "Mozilla/5.0 (Windows NT 10.0; W 203.54.180.238 - - [21/Aug/2026:15:18:51 +1000] "POST /quoteditsave.php?call=addLineItem HTTP/1.1" 200 329 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78653§ionid=0" "Mozilla/5.0 (Windows NT 10.0; 203.54.180.238 - - [21/Aug/2026:15:18:52 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29270&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 40.77.167.62 - - [21/Aug/2026:15:18:54 +1000] "GET /index.php?page=quotedit"eid=34577 HTTP/1.1" 200 5258 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.h 203.54.180.238 - - [21/Aug/2026:15:18:56 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78653§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 203.54.180.238 - - [21/Aug/2026:15:18:57 +1000] "POST /app/ajax/selectFilter.php?call=filterinv&filter=CLPB HTTP/1.1" 200 18246 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78653§ionid=0" "Mozilla/ == olympic/olympicfencing.com.au-ssl_log == -- top paths -- 2 GET / 1 POST /wp-cron.php 1 GET /zoom1.php 1 GET /xx.php 1 GET /xmlrpc.php 1 GET /xda.php 1 GET /ws.php 1 GET /ws81.php 1 GET /ws77.php 1 GET /ws37.php 1 GET /wp-trackback.php 1 GET /wp-the.php -- last 10 requests -- 20.226.7.189 - - [21/Aug/2026:15:18:14 +1000] "GET /ca5.php HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.7.189 - - [21/Aug/2026:15:18:14 +1000] "GET /install.php HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 118.127.40.55 - - [21/Aug/2026:15:18:11 +1000] "POST /wp-cron.php?doing_wp_cron=1787289491.5045900344848632812500 HTTP/1.1" 200 1 "-" "WordPress/6.9.7; https://www.olympicfencing.com.au" 20.226.7.189 - - [21/Aug/2026:15:18:14 +1000] "GET /radio.php HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.7.189 - - [21/Aug/2026:15:18:15 +1000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.7.189 - - [21/Aug/2026:15:18:15 +1000] "GET /wp-signin.php HTTP/1.1" 403 13 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.7.189 - - [21/Aug/2026:15:18:15 +1000] "GET /Ov-Simple1.php HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.7.189 - - [21/Aug/2026:15:18:16 +1000] "GET /fm.php HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.7.189 - - [21/Aug/2026:15:18:16 +1000] "GET /ftde.php HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 20.226.7.189 - - [21/Aug/2026:15:18:16 +1000] "GET /hplfuns.php HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 38 GET /factory_session_checker.php 20 GET /factory_session_processed_qty.php 19 GET /factory_session_joiner.php 13 GET /heartbeat.php 1 GET /wp-content/plugins/hellopress/wp_filemanager.php 1 GET /this_is_a_new_hello_world.php 1 GET /lang.php 1 GET /index.php -- last 10 requests -- 203.54.180.238 - - [21/Aug/2026:15:18:39 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 127 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [21/Aug/2026:15:18:39 +1000] "GET /factory_session_joiner.php?id=34807 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [21/Aug/2026:15:18:40 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [21/Aug/2026:15:18:40 +1000] "GET /heartbeat.php?sentAt=1787289520&bytes=106,135,223,176&_=1787283556651 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [21/Aug/2026:15:18:41 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [21/Aug/2026:15:18:43 +1000] "GET /factory_session_joiner.php?id=34805 HTTP/1.1" 200 86 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [21/Aug/2026:15:18:43 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 124 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [21/Aug/2026:15:18:45 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [21/Aug/2026:15:18:46 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [21/Aug/2026:15:18:50 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 127 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb --- last 30 samples (run-up to this incident) --- 2026-08-21 15:16:40 L1=1.93 run=2 blk=0 avail=6315 (53.8%) swpO=0 conn=1 myRSS=2954 php=1 phpRSS=124 ap=24 tcp=20 topuser=evolution 2026-08-21 15:16:40 L1=1.93 run=3 blk=1 avail=6313 (53.8%) swpO=0 conn=1 myRSS=2954 php=1 phpRSS=124 ap=24 tcp=20 topuser=evolution 2026-08-21 15:16:50 L1=2.35 run=9 blk=1 avail=6087 (51.9%) swpO=526 conn=1 myRSS=2945 php=4 phpRSS=457 ap=25 tcp=27 topuser=madalice 2026-08-21 15:16:50 L1=2.35 run=8 blk=0 avail=6077 (51.8%) swpO=526 conn=1 myRSS=2945 php=4 phpRSS=465 ap=25 tcp=27 topuser=madalice 2026-08-21 15:17:00 L1=2.29 run=2 blk=0 avail=6385 (54.4%) swpO=151 conn=2 myRSS=2943 php=1 phpRSS=75 ap=25 tcp=26 topuser=aaa 2026-08-21 15:17:00 L1=2.29 run=3 blk=0 avail=6377 (54.4%) swpO=151 conn=1 myRSS=2943 php=1 phpRSS=76 ap=25 tcp=31 topuser=aaa 2026-08-21 15:17:10 L1=2.09 run=2 blk=0 avail=6214 (53.0%) swpO=0 conn=2 myRSS=2943 php=2 phpRSS=286 ap=24 tcp=24 topuser=corpkicks 2026-08-21 15:17:10 L1=2.09 run=3 blk=0 avail=6205 (52.9%) swpO=0 conn=1 myRSS=2943 php=2 phpRSS=292 ap=24 tcp=24 topuser=corpkicks 2026-08-21 15:17:20 L1=1.92 run=3 blk=0 avail=6283 (53.6%) swpO=100 conn=2 myRSS=2942 php=2 phpRSS=162 ap=30 tcp=35 topuser=customc 2026-08-21 15:17:20 L1=1.92 run=4 blk=0 avail=6275 (53.5%) swpO=100 conn=1 myRSS=2942 php=3 phpRSS=191 ap=30 tcp=35 topuser=customc 2026-08-21 15:17:30 L1=1.84 run=3 blk=0 avail=6345 (54.1%) swpO=0 conn=2 myRSS=2942 php=2 phpRSS=90 ap=33 tcp=34 topuser=customc 2026-08-21 15:17:30 L1=1.84 run=4 blk=0 avail=6331 (54.0%) swpO=0 conn=1 myRSS=2942 php=2 phpRSS=96 ap=33 tcp=36 topuser=customc 2026-08-21 15:17:40 L1=1.63 run=2 blk=0 avail=6406 (54.6%) swpO=7 conn=2 myRSS=2942 php=2 phpRSS=93 ap=26 tcp=29 topuser=customc 2026-08-21 15:17:40 L1=1.63 run=3 blk=0 avail=6392 (54.5%) swpO=7 conn=3 myRSS=2942 php=2 phpRSS=102 ap=26 tcp=31 topuser=customc 2026-08-21 15:17:50 L1=1.54 run=4 blk=0 avail=6424 (54.8%) swpO=0 conn=2 myRSS=2942 php=2 phpRSS=76 ap=24 tcp=29 topuser=evolution 2026-08-21 15:17:50 L1=1.54 run=1 blk=0 avail=6426 (54.8%) swpO=0 conn=3 myRSS=2942 php=1 phpRSS=40 ap=24 tcp=28 topuser=evolution 2026-08-21 15:18:00 L1=1.61 run=2 blk=0 avail=6318 (53.9%) swpO=0 conn=3 myRSS=2942 php=2 phpRSS=183 ap=24 tcp=29 topuser=madalice 2026-08-21 15:18:00 L1=1.61 run=2 blk=0 avail=6310 (53.8%) swpO=0 conn=3 myRSS=2942 php=2 phpRSS=187 ap=24 tcp=29 topuser=madalice 2026-08-21 15:18:10 L1=1.74 run=2 blk=0 avail=6361 (54.2%) swpO=0 conn=3 myRSS=2942 php=2 phpRSS=120 ap=24 tcp=34 topuser=olympic 2026-08-21 15:18:10 L1=1.74 run=1 blk=0 avail=6356 (54.2%) swpO=0 conn=3 myRSS=2942 php=2 phpRSS=127 ap=24 tcp=34 topuser=olympic 2026-08-21 15:18:20 L1=1.70 run=2 blk=0 avail=6334 (54.0%) swpO=0 conn=3 myRSS=2942 php=2 phpRSS=147 ap=25 tcp=28 topuser=customc 2026-08-21 15:18:20 L1=1.70 run=2 blk=0 avail=6325 (53.9%) swpO=0 conn=3 myRSS=2942 php=2 phpRSS=155 ap=25 tcp=28 topuser=customc 2026-08-21 15:18:30 L1=1.67 run=3 blk=0 avail=6033 (51.4%) swpO=42 conn=3 myRSS=2941 php=5 phpRSS=524 ap=26 tcp=37 topuser=otterfencing 2026-08-21 15:18:30 L1=1.67 run=4 blk=0 avail=6024 (51.4%) swpO=42 conn=3 myRSS=2941 php=5 phpRSS=530 ap=26 tcp=35 topuser=otterfencing 2026-08-21 15:18:40 L1=1.49 run=1 blk=0 avail=6457 (55.1%) swpO=98 conn=3 myRSS=2939 php=1 phpRSS=40 ap=20 tcp=28 topuser=evolution 2026-08-21 15:18:41 L1=1.49 run=2 blk=0 avail=6456 (55.0%) swpO=89 conn=2 myRSS=2939 php=1 phpRSS=40 ap=20 tcp=28 topuser=evolution 2026-08-21 15:18:51 L1=1.34 run=1 blk=0 avail=6462 (55.1%) swpO=0 conn=3 myRSS=2939 php=1 phpRSS=40 ap=20 tcp=25 topuser=evolution 2026-08-21 15:18:51 L1=1.34 run=2 blk=0 avail=6461 (55.1%) swpO=0 conn=2 myRSS=2939 php=1 phpRSS=40 ap=20 tcp=25 topuser=evolution 2026-08-21 15:19:01 L1=2.08 run=24 blk=0 avail=5266 (44.9%) swpO=768 conn=13 myRSS=2929 php=12 phpRSS=1548 ap=29 tcp=49 topuser=madalice 2026-08-21 15:19:01 L1=2.08 run=23 blk=1 avail=5244 (44.7%) swpO=782 conn=12 myRSS=2929 php=12 phpRSS=1553 ap=29 tcp=49 topuser=madalice