INCIDENT 2026-08-24 15:52:19 trigger: php_rss=1629MB ================================================================== load: 1.65 1.36 1.46 8/654 89057 ncpu:10 mem_avail: 4823MB/11729MB (41.1%) swap_used:3661MB swapout:0/s blocked(D):0 running:9 iowait:0.1% steal:0.0% php: 8 procs / 1629MB heaviest user: madalice (8 procs, 1629MB) apache: 36 procs tcp_estab: 46 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3079 madalice 8 1658 root 239 840 nobody 35 577 netdata 8 260 mailman 20 92 cpanellogin 1 62 aaa 4 49 alison 4 47 kurri 3 34 mailnull 3 27 dovenull 6 26 evolution 6 23 wp-toolkit 6 18 zabbix 1 15 named 1 11 corpkicks 1 11 kamcool 1 10 dovecot 3 7 nscd 1 6 --- php workers by user --- USER PROCS RSS_MB madalice 8 1667 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5088 MB Active(file): 3549 MB Inactive(file): 637 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 380 MB CommitLimit: 9960 MB Committed_AS: 8400 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3032611 root 14:41:03 2372 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 3153460 10.1 Ssl 9-08:01:46 /usr/sbin/mariadbd 88989 88558 madalice 266808 55.2 S 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 88994 88467 madalice 235732 105 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 88995 88594 madalice 217336 105 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 89022 88582 madalice 212500 95.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 88993 88580 madalice 211820 105 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 88997 88503 madalice 211480 105 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 210780 2.5 Ssl 56-05:42:28 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 89018 88598 madalice 197432 100 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 89023 88504 madalice 196700 94.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3080744 3075441 root 159192 0.0 S 13:19:43 spamd child 3879330 3075441 root 154608 0.0 S 01:53:30 spamd child 2575382 1 root 108604 0.0 Ss 9-08:01:49 /usr/lib/systemd/systemd-journald 3075441 1 root 90484 0.0 Ss 13:29:22 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3418681 1353308 cpanellogin 64272 0.0 S 05:53:28 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 2223 1201 root 63372 0.0 Sl 56-05:42:27 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1469 1 root 39684 0.1 Ss 56-05:42:27 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 4922 2431 netdata 31212 0.1 Sl 56-05:42:23 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1463 1 root 23340 0.0 Ss 56-05:42:27 tailwatchd 1353308 1 root 21392 0.0 Ss 33-13:10:58 cpsrvd (SSL) - waiting for connections 84978 1276780 nobody 21328 0.0 S 02:11 /usr/sbin/httpd -k start 73878 1276780 nobody 21120 0.0 S 02:59 /usr/sbin/httpd -k start 3074682 1 root 20876 0.0 Ss 13:29:56 lfd - sleeping 87949 1276780 nobody 20788 0.0 S 01:51 /usr/sbin/httpd -k start 88576 1276780 nobody 20424 0.6 S 00:48 /usr/sbin/httpd -k start 56962 1276780 nobody 20188 0.0 S 08:16 /usr/sbin/httpd -k start 73437 1276780 nobody 19860 0.0 S 03:39 /usr/sbin/httpd -k start 88582 1276780 nobody 19368 0.0 S 00:48 /usr/sbin/httpd -k start 88580 1276780 nobody 19140 0.1 S 00:48 /usr/sbin/httpd -k start 88542 1276780 nobody 18984 0.0 S 00:50 /usr/sbin/httpd -k start 88399 1276780 nobody 18772 0.0 S 01:03 /usr/sbin/httpd -k start 88503 1276780 nobody 18684 0.0 S 00:51 /usr/sbin/httpd -k start 88535 1276780 nobody 18668 0.0 S 00:50 /usr/sbin/httpd -k start 88547 1276780 nobody 18660 0.0 S 00:49 /usr/sbin/httpd -k start 88556 1276780 nobody 18516 0.0 S 00:49 /usr/sbin/httpd -k start 88550 1276780 nobody 18180 0.0 S 00:49 /usr/sbin/httpd -k start 185104 2431 netdata 18108 2.1 Sl 11-19:18:46 /usr/libexec/netdata/plugins.d/apps.plugin 1 88558 1276780 nobody 18044 0.0 S 00:49 /usr/sbin/httpd -k start 88574 1276780 nobody 18024 0.0 S 00:48 /usr/sbin/httpd -k start 88497 1276780 nobody 17980 0.0 S 00:52 /usr/sbin/httpd -k start 88598 1276780 nobody 17960 0.0 S 00:48 /usr/sbin/httpd -k start 88553 1276780 nobody 17948 0.0 S 00:49 /usr/sbin/httpd -k start 88575 1276780 nobody 17948 0.0 S 00:48 /usr/sbin/httpd -k start 88551 1276780 nobody 17916 0.0 S 00:49 /usr/sbin/httpd -k start 88467 1276780 nobody 17624 0.0 S 00:53 /usr/sbin/httpd -k start 88504 1276780 nobody 17500 0.0 S 00:51 /usr/sbin/httpd -k start 88589 1276780 nobody 17012 0.0 S 00:48 /usr/sbin/httpd -k start 88594 1276780 nobody 16788 0.0 S 00:48 /usr/sbin/httpd -k start 88569 1276780 nobody 16720 0.0 S 00:48 /usr/sbin/httpd -k start 88538 1276780 nobody 16644 0.0 S 00:50 /usr/sbin/httpd -k start 88567 1276780 nobody 16524 0.0 S 00:48 /usr/sbin/httpd -k start 88571 1276780 nobody 16360 0.0 S 00:48 /usr/sbin/httpd -k start 88570 1276780 nobody 16308 0.0 S 00:48 /usr/sbin/httpd -k start 88595 1276780 nobody 16156 0.0 S 00:48 /usr/sbin/httpd -k start 1204 1 zabbix 15864 0.2 Ssl 56-05:42:28 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 1471 1 root 14488 0.0 Ss 56-05:42:27 cPhulkd - processor 3517461 1471 root 13756 0.0 S 04:08:03 cPhulkd - dbprocessor 38344 3828812 aaa 13484 0.0 S 15:32 dovecot/imap 89027 1471 root 13388 0.0 S 00:01 cPhulkd - processor - http socket 88869 3828812 alison 12800 0.0 S 00:19 dovecot/imap --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 27766100 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 223 madalice/madalice.com.au-ssl_log 35 evolution/evolutionerp.com.au 22 evolution/evolutionerp.com.au-ssl_log 18 evolution/portal.evolutionerp.com.au-ssl_log 11 corpkicks/corporatekicks.com.au-ssl_log 3 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 90 203.54.180.238 46 150.228.163.253 46 103.104.165.99 25 2001:8004:14b3:854f:74b5:2cd9:2b7:278e 19 180.181.236.49 16 20.52.41.200 11 103.104.164.114 10 101.182.108.127 9 182.239.240.254 5 118.127.40.55 2 114.119.131.88 1 93.46.24.112 1 92.205.58.210 1 91.134.242.90 1 68.178.170.161 --- top request paths across all vhosts (last 3 min) --- 106 POST /functions.php 29 GET /app/ajax.php 22 POST /wp-login.php 19 GET /index.php 15 POST /plugins/csvexporter/plugin.php 13 POST /wp-admin/admin-ajax.php 11 POST /quoteditsave.php 11 GET /heartbeat.php 7 POST /app/ajax/selectFilter.php 6 POST /app/ajax.php 5 POST /inveditsave.php 4 POST /plugins/fencecosting/plugin.php 4 POST /itemModify.php 4 POST /app/ajax/selectFilterSingle.php 4 GET /wp-json/wc-admin/options 4 GET /store/hand-painted-nike-af1-afl-north-melbourne/ 3 POST /wp-cron.php 2 POST /jobeditsave.php 2 POST /clienteditsave.php 2 GET /wp-json/wc-analytics/products/reviews --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 106 POST /functions.php 29 GET /app/ajax.php 19 GET /index.php 15 POST /plugins/csvexporter/plugin.php 11 POST /quoteditsave.php 7 POST /app/ajax/selectFilter.php 6 POST /app/ajax.php 5 POST /inveditsave.php 4 POST /plugins/fencecosting/plugin.php 4 POST /itemModify.php 4 POST /app/ajax/selectFilterSingle.php 2 POST /jobeditsave.php -- last 10 requests -- 203.54.180.238 - - [24/Aug/2026:15:52:06 +1000] "POST /itemModify.php?call=getInvMFMeta&modifyid=4093 HTTP/1.1" 200 49 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78706§ionid=0" "Mozilla/5.0 (Wind 203.54.180.238 - - [24/Aug/2026:15:52:07 +1000] "POST /itemModify.php?call=getBOM HTTP/1.1" 200 22 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78706§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [24/Aug/2026:15:52:07 +1000] "POST /quoteditsave.php?call=checkForBOMAlternates&id=4093 HTTP/1.1" 200 39 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78706§ionid=0" "Mozilla/5.0 103.104.165.99 - - [24/Aug/2026:15:52:07 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 280 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=10002&tab=jobeditrcti" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [24/Aug/2026:15:52:07 +1000] "POST /quoteditsave.php?call=loadConfigureModal&id=4093&code=CLGSPT-CUSTOM&client=12257 HTTP/1.1" 200 1143 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=7 180.181.236.49 - - [24/Aug/2026:15:52:08 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=timesheetHistory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi 103.104.164.114 - - [24/Aug/2026:15:52:08 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 103.104.165.99 - - [24/Aug/2026:15:52:14 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36314" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 182.239.240.254 - - [24/Aug/2026:15:52:15 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 150.228.163.253 - - [24/Aug/2026:15:52:16 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=inventory&string=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb == madalice/madalice.com.au-ssl_log == -- top paths -- 13 POST /wp-admin/admin-ajax.php 4 GET /wp-json/wc-admin/options 4 GET /store/hand-painted-nike-af1-afl-north-melbourne/ 2 GET /wp-json/wc-analytics/products/reviews 2 GET /wp-json/wc-analytics/products/count-low-in-stock 2 GET /wp-json/wc-analytics/orders 2 GET /wp-json/wc-analytics/admin/notes 2 GET /store/hand-painted-nike-af1-afl-port-adelaide2020/ 1 GET /wp-admin/post.php 1 GET /wp-admin/edit.php 1 GET /store/graffiti-airmax-90-custom-shoes/ 1 GET /store/croc-charms-bluey/ -- last 10 requests -- 2001:8004:14b3:854f:74b5:2cd9:2b7:278e - - [24/Aug/2026:15:51:50 +1000] "GET /wp-json/wc-analytics/orders?page=1&per_page=1&status%5B0%5D=processing&status%5B1%5D=on-hold&_fields%5B0%5D=id&_locale=user HTTP/1.1" 200 18 " 2001:8004:14b3:854f:74b5:2cd9:2b7:278e - - [24/Aug/2026:15:51:50 +1000] "GET /wp-json/wc-analytics/products/count-low-in-stock?status=publish&page=1&per_page=1&_locale=user HTTP/1.1" 200 17 "https://madalice.com.au/wp-ad 2001:8004:14b3:854f:74b5:2cd9:2b7:278e - - [24/Aug/2026:15:51:50 +1000] "GET /wp-json/wc-admin/options?options=woocommerce_ces_tracks_queue&_locale=user HTTP/1.1" 200 39 "https://madalice.com.au/wp-admin/edit.php?post_ty 52.167.144.140 - - [24/Aug/2026:15:51:50 +1000] "GET /store/croc-charms-bluey/ HTTP/1.1" 200 45588 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome 2001:8004:14b3:854f:74b5:2cd9:2b7:278e - - [24/Aug/2026:15:51:50 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 51 "https://madalice.com.au/wp-admin/edit.php?post_type=shop_order" "Mozilla/5.0 (Windows NT 10.0; Win6 2001:8004:14b3:854f:74b5:2cd9:2b7:278e - - [24/Aug/2026:15:51:50 +1000] "GET /wp-json/wc-analytics/admin/notes?page=1&per_page=25&type=error%2Cupdate&status=unactioned&_locale=user HTTP/1.1" 200 6 "https://madalice.com.a 2001:8004:14b3:854f:74b5:2cd9:2b7:278e - - [24/Aug/2026:15:51:50 +1000] "GET /wp-json/wc-admin/options?options=woocommerce_admin_transient_notices_queue%2Cwoocommerce_admin_install_timestamp&_locale=user HTTP/1.1" 200 73 2001:8004:14b3:854f:74b5:2cd9:2b7:278e - - [24/Aug/2026:15:52:00 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 51 "https://madalice.com.au/wp-admin/edit.php?post_type=shop_order" "Mozilla/5.0 (Windows NT 10.0; Win6 2001:8004:14b3:854f:74b5:2cd9:2b7:278e - - [24/Aug/2026:15:52:10 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 51 "https://madalice.com.au/wp-admin/edit.php?post_type=shop_order" "Mozilla/5.0 (Windows NT 10.0; Win6 114.119.159.70 - - [24/Aug/2026:15:52:10 +1000] "GET /store/hand-painted-nike-af1-afl-north-melbourne/?image=1&wcpr_rating=1&wcpr_page=2&wcpr_verified=1 HTTP/1.1" 404 30670 "https://madalice.com.au/store/hand-painted-nik == evolution/evolutionerp.com.au == -- top paths -- 22 POST /wp-login.php -- last 10 requests -- 47.251.18.238 - - [24/Aug/2026:15:51:21 +1000] "POST /wp-login.php HTTP/1.1" 301 281 "http://myevoerp.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 S 149.202.60.221 - - [24/Aug/2026:15:51:29 +1000] "POST /wp-login.php HTTP/1.1" 301 281 "http://myevoerp.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 121.40.213.179 - - [24/Aug/2026:15:51:33 +1000] "POST /wp-login.php HTTP/1.1" 301 281 "http://myevoerp.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 51.38.237.186 - - [24/Aug/2026:15:51:34 +1000] "POST /wp-login.php HTTP/1.1" 301 281 "http://myevoerp.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 S 102.212.246.41 - - [24/Aug/2026:15:51:41 +1000] "POST /wp-login.php HTTP/1.1" 301 281 "http://myevoerp.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 92.205.58.210 - - [24/Aug/2026:15:51:44 +1000] "POST /wp-login.php HTTP/1.1" 301 281 "http://myevoerp.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 S 152.228.219.218 - - [24/Aug/2026:15:51:47 +1000] "POST /wp-login.php HTTP/1.1" 301 281 "http://myevoerp.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 51.210.10.40 - - [24/Aug/2026:15:51:47 +1000] "POST /wp-login.php HTTP/1.1" 301 281 "http://myevoerp.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Sa 68.178.168.141 - - [24/Aug/2026:15:52:06 +1000] "POST /wp-login.php HTTP/1.1" 301 281 "http://myevoerp.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 93.46.24.112 - - [24/Aug/2026:15:52:12 +1000] "POST /wp-login.php HTTP/1.1" 301 281 "http://myevoerp.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Sa --- last 30 samples (run-up to this incident) --- 2026-08-24 15:49:57 L1=1.23 run=1 blk=0 avail=6298 (53.7%) swpO=0 conn=1 myRSS=3099 php=0 phpRSS=0 ap=22 tcp=28 topuser=- 2026-08-24 15:49:58 L1=1.23 run=1 blk=0 avail=6296 (53.7%) swpO=0 conn=4 myRSS=3099 php=0 phpRSS=0 ap=21 tcp=32 topuser=- 2026-08-24 15:50:07 L1=1.36 run=3 blk=0 avail=6072 (51.8%) swpO=0 conn=1 myRSS=3099 php=1 phpRSS=244 ap=21 tcp=35 topuser=madalice 2026-08-24 15:50:09 L1=1.36 run=5 blk=0 avail=6025 (51.4%) swpO=0 conn=4 myRSS=3099 php=2 phpRSS=322 ap=21 tcp=43 topuser=madalice 2026-08-24 15:50:17 L1=1.46 run=3 blk=0 avail=6195 (52.8%) swpO=0 conn=1 myRSS=3099 php=2 phpRSS=130 ap=24 tcp=39 topuser=evolution 2026-08-24 15:50:19 L1=1.46 run=1 blk=0 avail=6260 (53.4%) swpO=0 conn=4 myRSS=3099 php=0 phpRSS=0 ap=24 tcp=39 topuser=- 2026-08-24 15:50:27 L1=1.23 run=2 blk=0 avail=6130 (52.3%) swpO=0 conn=1 myRSS=3099 php=2 phpRSS=179 ap=27 tcp=42 topuser=aaa 2026-08-24 15:50:29 L1=1.23 run=1 blk=0 avail=6219 (53.0%) swpO=0 conn=1 myRSS=3099 php=0 phpRSS=0 ap=31 tcp=48 topuser=- 2026-08-24 15:50:37 L1=1.28 run=1 blk=1 avail=6197 (52.8%) swpO=0 conn=1 myRSS=3099 php=0 phpRSS=0 ap=33 tcp=39 topuser=- 2026-08-24 15:50:39 L1=1.28 run=2 blk=0 avail=6185 (52.7%) swpO=0 conn=1 myRSS=3099 php=1 phpRSS=65 ap=31 tcp=43 topuser=evolution 2026-08-24 15:50:47 L1=1.40 run=4 blk=0 avail=5866 (50.0%) swpO=0 conn=1 myRSS=3099 php=3 phpRSS=450 ap=30 tcp=39 topuser=tubesupplies 2026-08-24 15:50:49 L1=1.40 run=3 blk=0 avail=6224 (53.1%) swpO=0 conn=1 myRSS=3099 php=0 phpRSS=0 ap=29 tcp=36 topuser=- 2026-08-24 15:50:57 L1=1.18 run=2 blk=0 avail=6287 (53.6%) swpO=0 conn=1 myRSS=3099 php=0 phpRSS=0 ap=21 tcp=34 topuser=- 2026-08-24 15:50:59 L1=1.18 run=1 blk=0 avail=6297 (53.7%) swpO=0 conn=1 myRSS=3099 php=0 phpRSS=0 ap=20 tcp=34 topuser=- 2026-08-24 15:51:07 L1=1.07 run=6 blk=0 avail=6131 (52.3%) swpO=0 conn=1 myRSS=3099 php=2 phpRSS=228 ap=20 tcp=29 topuser=madalice 2026-08-24 15:51:09 L1=1.07 run=2 blk=0 avail=5952 (50.7%) swpO=0 conn=1 myRSS=3099 php=2 phpRSS=419 ap=19 tcp=33 topuser=corpkicks 2026-08-24 15:51:17 L1=0.98 run=2 blk=0 avail=6070 (51.8%) swpO=0 conn=1 myRSS=3099 php=1 phpRSS=260 ap=20 tcp=40 topuser=madalice 2026-08-24 15:51:19 L1=0.98 run=3 blk=0 avail=6068 (51.7%) swpO=0 conn=1 myRSS=3099 php=1 phpRSS=260 ap=20 tcp=38 topuser=madalice 2026-08-24 15:51:27 L1=0.90 run=5 blk=0 avail=6214 (53.0%) swpO=0 conn=1 myRSS=3099 php=4 phpRSS=216 ap=20 tcp=40 topuser=madalice 2026-08-24 15:51:29 L1=0.90 run=4 blk=0 avail=5680 (48.4%) swpO=0 conn=5 myRSS=3099 php=4 phpRSS=719 ap=26 tcp=37 topuser=madalice 2026-08-24 15:51:37 L1=0.92 run=2 blk=0 avail=5775 (49.2%) swpO=46 conn=1 myRSS=3098 php=1 phpRSS=132 ap=78 tcp=41 topuser=evolution 2026-08-24 15:51:39 L1=0.92 run=3 blk=0 avail=5711 (48.7%) swpO=46 conn=5 myRSS=3098 php=2 phpRSS=285 ap=76 tcp=38 topuser=evolution 2026-08-24 15:51:47 L1=0.94 run=3 blk=0 avail=5906 (50.4%) swpO=0 conn=1 myRSS=3098 php=2 phpRSS=154 ap=68 tcp=39 topuser=madalice 2026-08-24 15:51:49 L1=0.94 run=4 blk=0 avail=5687 (48.5%) swpO=0 conn=5 myRSS=3098 php=2 phpRSS=393 ap=66 tcp=38 topuser=madalice 2026-08-24 15:51:57 L1=1.32 run=3 blk=0 avail=5755 (49.1%) swpO=590 conn=4 myRSS=3079 php=3 phpRSS=398 ap=58 tcp=45 topuser=customc 2026-08-24 15:51:59 L1=1.32 run=2 blk=0 avail=5956 (50.8%) swpO=590 conn=5 myRSS=3079 php=1 phpRSS=142 ap=56 tcp=37 topuser=evolution 2026-08-24 15:52:07 L1=1.68 run=2 blk=0 avail=6078 (51.8%) swpO=0 conn=4 myRSS=3079 php=1 phpRSS=73 ap=48 tcp=38 topuser=evolution 2026-08-24 15:52:09 L1=1.68 run=2 blk=0 avail=6021 (51.3%) swpO=0 conn=5 myRSS=3079 php=1 phpRSS=142 ap=46 tcp=41 topuser=evolution 2026-08-24 15:52:17 L1=1.65 run=6 blk=0 avail=5956 (50.8%) swpO=0 conn=4 myRSS=3079 php=5 phpRSS=393 ap=38 tcp=43 topuser=madalice 2026-08-24 15:52:19 L1=1.65 run=9 blk=0 avail=4823 (41.1%) swpO=0 conn=9 myRSS=3079 php=8 phpRSS=1629 ap=36 tcp=46 topuser=madalice