INCIDENT 2026-08-26 14:12:13 trigger: php_rss=1637MB ================================================================== load: 4.64 3.61 3.27 9/627 1296579 ncpu:10 mem_avail: 5334MB/11729MB (45.5%) swap_used:1442MB swapout:0/s blocked(D):0 running:13 iowait:0.2% steal:0.0% php: 8 procs / 1637MB heaviest user: madalice (7 procs, 1597MB) apache: 45 procs tcp_estab: 47 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2422 madalice 7 1672 root 239 954 nobody 44 775 netdata 8 252 mailman 20 214 cpanellogin 1 62 evolution 7 56 dovenull 6 46 wp-toolkit 6 20 mailnull 4 20 dovecot 3 19 lowrange 1 14 candyfabcom 1 14 alison 1 14 zabbix 1 11 kurri 1 7 named 1 6 nscd 1 4 dbus 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 7 1693 evolution 1 39 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5602 MB Active(file): 3731 MB Inactive(file): 1099 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 417 MB CommitLimit: 9960 MB Committed_AS: 8612 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 1296226 root 00:18 60364 /opt/imunify360/venv/bin/python3 -m imav.run 2703186 root 13:00:56 5768 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2362432 1 mysql 2480400 16.5 Ssl 1-10:40:56 /usr/sbin/mariadbd 1296528 1295791 madalice 262888 116 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1296531 1295703 madalice 251736 106 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1296524 1260499 madalice 241240 113 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1296525 1294719 madalice 240220 114 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 196764 2.5 Ssl 58-04:02:22 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1065018 2938778 root 190788 0.1 S 01:00:08 spamd child 2575382 1 root 164876 0.0 Ss 11-06:21:43 /usr/lib/systemd/systemd-journald 2956399 2938778 root 140248 0.0 S 11:42:14 spamd child 2938778 1 root 95428 0.0 Ss 11:48:44 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1199520 1353308 cpanellogin 63924 0.0 S 25:30 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 1296226 1 root 60364 8.0 Ssl 00:18 /opt/imunify360/venv/bin/python3 -m imav.run 1353308 1 root 42100 0.0 Ss 35-11:30:52 cpsrvd (SSL) - waiting for connections 1296547 1296535 evolution 40872 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2223 1201 root 39660 0.0 Sl 58-04:02:21 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 4922 2431 netdata 34356 0.1 Sl 58-04:02:17 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1469 1 root 26168 0.1 Ss 58-04:02:21 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1296526 1295130 madalice 25440 115 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1260916 1276780 nobody 22560 0.0 S 08:20 /usr/sbin/httpd -k start 1260499 1276780 nobody 22228 0.0 S 08:47 /usr/sbin/httpd -k start 1463 1 root 22216 0.0 Ss 58-04:02:21 tailwatchd 1278066 1276780 nobody 22204 0.0 S 05:07 /usr/sbin/httpd -k start 1278089 1276780 nobody 21776 0.1 S 05:07 /usr/sbin/httpd -k start 1278043 1276780 nobody 21632 0.0 S 05:08 /usr/sbin/httpd -k start 1279468 1276780 nobody 21444 0.0 S 03:42 /usr/sbin/httpd -k start 2938201 1 root 21424 0.0 Ss 11:49:18 lfd - sleeping 1277293 1276780 nobody 21360 0.0 S 05:48 /usr/sbin/httpd -k start 1277461 1276780 nobody 20892 0.0 S 05:41 /usr/sbin/httpd -k start 1280737 1276780 nobody 20584 0.0 S 02:20 /usr/sbin/httpd -k start 1280334 1276780 nobody 20480 0.0 S 02:42 /usr/sbin/httpd -k start 1280320 1276780 nobody 20272 0.0 S 02:43 /usr/sbin/httpd -k start 185104 2431 netdata 20140 2.1 Sl 13-17:38:40 /usr/libexec/netdata/plugins.d/apps.plugin 1 1294736 1276780 nobody 20044 0.0 S 01:50 /usr/sbin/httpd -k start 1295130 1276780 nobody 19852 0.0 S 01:17 /usr/sbin/httpd -k start 1280319 1276780 nobody 19816 0.0 S 02:43 /usr/sbin/httpd -k start 1295123 1276780 nobody 19516 0.0 S 01:18 /usr/sbin/httpd -k start 1294719 1276780 nobody 19452 0.0 S 01:51 /usr/sbin/httpd -k start 1294894 1276780 nobody 19412 0.1 S 01:38 /usr/sbin/httpd -k start 1280333 1276780 nobody 19388 0.0 S 02:42 /usr/sbin/httpd -k start 1295682 1276780 nobody 19352 0.1 S 00:48 /usr/sbin/httpd -k start 1295405 1276780 nobody 19076 0.2 S 01:03 /usr/sbin/httpd -k start 1279863 1276780 nobody 19032 0.0 S 03:15 /usr/sbin/httpd -k start 1295398 1276780 nobody 18972 0.1 S 01:04 /usr/sbin/httpd -k start 1295705 1276780 nobody 18888 0.0 S 00:47 /usr/sbin/httpd -k start 1295397 1276780 nobody 18796 0.0 S 01:04 /usr/sbin/httpd -k start 1295406 1276780 nobody 18572 0.1 S 01:03 /usr/sbin/httpd -k start 1295683 1276780 nobody 18560 0.1 S 00:48 /usr/sbin/httpd -k start 1295791 1276780 nobody 18524 0.1 S 00:42 /usr/sbin/httpd -k start 1295512 1276780 nobody 18432 0.0 S 00:57 /usr/sbin/httpd -k start 1296286 1276780 nobody 18132 0.0 S 00:16 /usr/sbin/httpd -k start 1295408 1276780 nobody 17848 0.0 S 01:03 /usr/sbin/httpd -k start 1295790 1276780 nobody 17624 0.0 S 00:42 /usr/sbin/httpd -k start 1295768 1276780 nobody 17264 0.0 S 00:43 /usr/sbin/httpd -k start 1295513 1276780 nobody 17248 0.0 S 00:57 /usr/sbin/httpd -k start 1295704 1276780 nobody 17164 0.0 S 00:47 /usr/sbin/httpd -k start 1295703 1276780 nobody 17028 0.0 S 00:47 /usr/sbin/httpd -k start 1295769 1276780 nobody 16672 0.0 S 00:43 /usr/sbin/httpd -k start 1280499 1276780 nobody 16576 0.1 S 02:35 /usr/sbin/httpd -k start 1295407 1276780 nobody 16448 0.3 S 01:03 /usr/sbin/httpd -k start 1296285 1276780 nobody 16376 0.0 S 00:16 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 7897708 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 475 vinesit/vinesit.com.au-ssl_log 172 evolution/portal.evolutionerp.com.au-ssl_log 103 olympic/olympicfencing.com.au-ssl_log 98 speedlin/speedlinefencing.com.au-ssl_log 89 alison/testing.alisonarts.com.au-ssl_log 80 evolution/evolutionerp.com.au-ssl_log 75 nrg/nrgservices.net.au-ssl_log 65 madalice/madalice.com.au-ssl_log 19 olympic/olympicfencing.com.au 16 alison/alisonarts.com.au-ssl_log 3 infinium/infinium.net.au-ssl_log 1 (total vhosts taking traffic: 12) --- top client IPs across all vhosts (last 3 min) --- 230 203.54.180.238 168 195.178.110.102 155 52.139.37.240 93 150.228.163.253 78 45.148.10.60 65 93.123.109.167 61 195.178.110.108 56 103.104.165.99 47 93.123.109.164 39 1.145.102.184 38 203.40.84.196 38 182.239.240.254 34 103.104.164.114 24 101.166.96.210 14 2001:8004:14b3:854f:1498:95de:b1fa:17b5 --- top request paths across all vhosts (last 3 min) --- 185 POST /functions.php 108 GET /wp/wp/v2/posts/999999 78 GET /app/ajax.php 51 GET /heartbeat.php 49 GET /index.php 48 POST /wp/ 34 POST /plugins/csvexporter/plugin.php 32 POST /wp/index.php 24 GET /factory_session_checker.php 21 POST / 18 GET / 17 POST /wp//wp-json/batch/v1 17 POST /app/ajax/selectFilter.php 16 POST /wp/wp-json/Batch/v1 16 POST /wp/wp-json/batch/v1 16 POST /quoteditsave.php 16 POST //functions.php 15 POST /wp/wordpress/wp-json/batch/v1 15 POST /blog/ 14 POST /wp/wp-json/batch/v1/ --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 185 POST /functions.php 78 GET /app/ajax.php 41 GET /index.php 34 POST /plugins/csvexporter/plugin.php 17 POST /app/ajax/selectFilter.php 16 POST /quoteditsave.php 16 POST //functions.php 14 POST /clienteditsave.php 13 POST /inveditsave.php 11 POST /app/ajax/selectFilterSingle.php 10 POST /itemModify.php 9 POST /app/ajax.php -- last 10 requests -- 103.104.164.114 - - [26/Aug/2026:14:12:09 +1000] "POST /clienteditsave.php?call=getSettings HTTP/1.1" 200 60 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=4656%2Findex.php%3Fpage%3Dinvoiceadd&invoic 103.104.164.114 - - [26/Aug/2026:14:12:09 +1000] "POST /clienteditsave.php?clientid=44&call=getCategoryDiscounts HTTP/1.1" 200 25 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=4656%2Findex.php%3Fpag 103.104.165.99 - - [26/Aug/2026:14:12:10 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 103.104.164.114 - - [26/Aug/2026:14:12:10 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=4656%2Findex.php%3Fpage%3Dinvoiceadd&invoiceid=46 150.228.163.253 - - [26/Aug/2026:14:12:10 +1000] "POST /inveditsave.php?call=fetch_inventory HTTP/1.1" 200 2150 "https://my.evolutionerp.com.au/index.php?page=inventory&string=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 150.228.163.253 - - [26/Aug/2026:14:12:11 +1000] "GET /index.php?page=invedit&id=2256 HTTP/1.1" 200 34622 "https://my.evolutionerp.com.au/index.php?page=inventory&string=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple 103.104.164.114 - - [26/Aug/2026:14:12:11 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 15807 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=4656%2Findex.php%3Fpage%3Dinvoiceadd&invoice 150.228.163.253 - - [26/Aug/2026:14:12:11 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=invedit&id=2256&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [26/Aug/2026:14:12:12 +1000] "POST //functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au//index.php?page=jobedit&id=29521&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64 150.228.163.253 - - [26/Aug/2026:14:12:12 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinvedit%26id%3D2256%26tab%3Dgeneraltab&call=getUserSetting&caller=ajaxSubmitLocal&seq=15570214824 HTTP/1.1" 200 109 "https://my == vinesit/vinesit.com.au-ssl_log == -- top paths -- 108 GET /wp/wp/v2/posts/999999 15 POST /wp/ 10 POST /wp/index.php 6 POST /wp/wordpress/wp-json/batch/v1 5 POST /wp/wp-json/Batch/v1 5 POST /wp/wp-json/batch/v1/ 5 POST /wp/wp-json/batch/v1 5 POST /wp//wp-json/batch/v1 5 POST /wp/blog/wp-json/batch/v1 3 POST / 2 GET /wp/wp/v2/pages 2 GET /wp/ -- last 10 requests -- 195.178.110.102 - - [26/Aug/2026:14:11:54 +1000] "GET /wp/wp/v2/posts/999999?author_exclude=1%29+AND+1%3D0+UNION+ALL%0Cselect+999999%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2 195.178.110.102 - - [26/Aug/2026:14:11:54 +1000] "GET /wp/wp/v2/posts/999999?author_exclude=1%29+AND+1%3D0+UNION+ALL%0CSeLeCt+999999%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2 195.178.110.102 - - [26/Aug/2026:14:11:54 +1000] "GET /wp/wp/v2/posts/999999?author_exclude=1%29+AND+1%3D0+UNION+ALL%0C%2F%2A%2150000SELECT%2A%2F+999999%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d3031 195.178.110.102 - - [26/Aug/2026:14:11:55 +1000] "GET /wp/wp/v2/posts/999999?author_exclude=1%29+AND+1%3D0+UNION+ALL%0C%2F%2A%2144444SELECT%2A%2F+999999%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d3031 195.178.110.102 - - [26/Aug/2026:14:11:56 +1000] "GET /wp/wp/v2/posts/999999?author_exclude=1%29+AND+1%3D0+UNION+ALL%0C%2F%2A%21SELECT%2A%2F+999999%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d303120303 195.178.110.102 - - [26/Aug/2026:14:11:56 +1000] "GET /wp/wp/v2/posts/999999?author_exclude=1%29+AND+1%3D0+UNION+ALL+SELECT+999999%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C0 118.127.40.55 - - [26/Aug/2026:14:11:57 +1000] "POST /?wordfence_syncAttackData=1787717517.6081 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://www.vinesit.com.au" 195.178.110.102 - - [26/Aug/2026:14:11:57 +1000] "GET /wp/wp/v2/posts/999999?author_exclude=1%29+AND+1%3D0+UNION+ALL+SELECT+999999%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C0 195.178.110.102 - - [26/Aug/2026:14:11:59 +1000] "GET /wp/wp/v2/posts/999999?author_exclude=1%29+AND+1%3D0+UNION+ALL+SELECT+999999%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C0 195.178.110.102 - - [26/Aug/2026:14:12:00 +1000] "GET /wp/wp/v2/posts/999999?author_exclude=1%29+AND+1%3D0+UNION+ALL+SELECT+999999%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C0 == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 51 GET /heartbeat.php 24 GET /factory_session_checker.php 13 GET /factory_session_processed_qty.php 13 GET /factory_session_joiner.php 1 POST /factory_functions.php 1 GET /index.php -- last 10 requests -- 203.54.180.238 - - [26/Aug/2026:14:11:55 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 129 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [26/Aug/2026:14:11:55 +1000] "GET /heartbeat.php?sentAt=1787717513&bytes=106,142,103,137&_=1787708770161 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [26/Aug/2026:14:11:56 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [26/Aug/2026:14:11:59 +1000] "GET /heartbeat.php?sentAt=1787717519&bytes=106,142,103,143&_=1787662771581 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [26/Aug/2026:14:12:01 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [26/Aug/2026:14:12:02 +1000] "GET /heartbeat.php?sentAt=1787717523&bytes=106,142,103,147&_=1787717052782 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=8 203.54.180.238 - - [26/Aug/2026:14:12:04 +1000] "GET /heartbeat.php?sentAt=1787717524&bytes=106,142,103,148&_=1787631308005 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [26/Aug/2026:14:12:05 +1000] "GET /factory_session_joiner.php?id=34792 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [26/Aug/2026:14:12:06 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 129 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [26/Aug/2026:14:12:05 +1000] "GET /heartbeat.php?sentAt=1787717523&bytes=106,142,103,147&_=1787708770162 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 --- last 30 samples (run-up to this incident) --- 2026-08-26 14:09:52 L1=2.66 run=4 blk=0 avail=6609 (56.4%) swpO=0 conn=5 myRSS=2421 php=4 phpRSS=305 ap=44 tcp=39 topuser=speedlin 2026-08-26 14:09:52 L1=2.66 run=5 blk=0 avail=6638 (56.6%) swpO=0 conn=5 myRSS=2421 php=3 phpRSS=260 ap=44 tcp=38 topuser=speedlin 2026-08-26 14:10:02 L1=3.43 run=6 blk=0 avail=6516 (55.6%) swpO=0 conn=5 myRSS=2421 php=4 phpRSS=407 ap=42 tcp=38 topuser=speedlin 2026-08-26 14:10:02 L1=3.43 run=5 blk=0 avail=6463 (55.1%) swpO=0 conn=5 myRSS=2421 php=5 phpRSS=484 ap=42 tcp=37 topuser=speedlin 2026-08-26 14:10:12 L1=3.29 run=2 blk=0 avail=6866 (58.5%) swpO=0 conn=5 myRSS=2421 php=0 phpRSS=0 ap=35 tcp=33 topuser=- 2026-08-26 14:10:12 L1=3.29 run=2 blk=0 avail=6853 (58.4%) swpO=0 conn=5 myRSS=2421 php=0 phpRSS=0 ap=35 tcp=36 topuser=- 2026-08-26 14:10:22 L1=3.16 run=3 blk=0 avail=6841 (58.3%) swpO=0 conn=5 myRSS=2421 php=1 phpRSS=9 ap=35 tcp=44 topuser=evolution 2026-08-26 14:10:22 L1=3.16 run=4 blk=0 avail=6827 (58.2%) swpO=0 conn=5 myRSS=2421 php=2 phpRSS=70 ap=35 tcp=44 topuser=evolution 2026-08-26 14:10:32 L1=3.06 run=2 blk=0 avail=6834 (58.3%) swpO=0 conn=5 myRSS=2421 php=1 phpRSS=33 ap=38 tcp=40 topuser=evolution 2026-08-26 14:10:32 L1=3.06 run=2 blk=0 avail=6800 (58.0%) swpO=0 conn=5 myRSS=2421 php=1 phpRSS=34 ap=38 tcp=39 topuser=evolution 2026-08-26 14:10:42 L1=2.83 run=2 blk=0 avail=6850 (58.4%) swpO=0 conn=5 myRSS=2421 php=1 phpRSS=43 ap=37 tcp=35 topuser=vinesit 2026-08-26 14:10:42 L1=2.83 run=2 blk=0 avail=6862 (58.5%) swpO=0 conn=5 myRSS=2421 php=0 phpRSS=0 ap=37 tcp=35 topuser=- 2026-08-26 14:10:52 L1=2.39 run=2 blk=0 avail=6841 (58.3%) swpO=0 conn=1 myRSS=2421 php=1 phpRSS=53 ap=34 tcp=33 topuser=vinesit 2026-08-26 14:10:52 L1=2.39 run=1 blk=0 avail=6871 (58.6%) swpO=0 conn=5 myRSS=2421 php=0 phpRSS=0 ap=34 tcp=40 topuser=- 2026-08-26 14:11:02 L1=2.40 run=2 blk=0 avail=6846 (58.4%) swpO=0 conn=1 myRSS=2421 php=1 phpRSS=55 ap=36 tcp=29 topuser=vinesit 2026-08-26 14:11:02 L1=2.40 run=2 blk=0 avail=6835 (58.3%) swpO=0 conn=2 myRSS=2421 php=1 phpRSS=65 ap=35 tcp=28 topuser=vinesit 2026-08-26 14:11:12 L1=2.27 run=7 blk=0 avail=6715 (57.3%) swpO=0 conn=1 myRSS=2421 php=3 phpRSS=162 ap=38 tcp=42 topuser=speedlin 2026-08-26 14:11:12 L1=2.27 run=2 blk=0 avail=6791 (57.9%) swpO=0 conn=2 myRSS=2421 php=1 phpRSS=78 ap=38 tcp=40 topuser=vinesit 2026-08-26 14:11:22 L1=2.15 run=3 blk=0 avail=6566 (56.0%) swpO=0 conn=1 myRSS=2421 php=3 phpRSS=326 ap=42 tcp=43 topuser=olympic 2026-08-26 14:11:22 L1=2.21 run=4 blk=0 avail=6692 (57.1%) swpO=0 conn=2 myRSS=2421 php=2 phpRSS=179 ap=42 tcp=42 topuser=olympic 2026-08-26 14:11:32 L1=2.28 run=3 blk=0 avail=6526 (55.6%) swpO=0 conn=1 myRSS=2421 php=3 phpRSS=270 ap=55 tcp=47 topuser=olympic 2026-08-26 14:11:32 L1=2.50 run=8 blk=0 avail=6471 (55.2%) swpO=0 conn=2 myRSS=2421 php=6 phpRSS=385 ap=55 tcp=46 topuser=olympic 2026-08-26 14:11:42 L1=2.38 run=3 blk=0 avail=6699 (57.1%) swpO=0 conn=1 myRSS=2421 php=4 phpRSS=164 ap=49 tcp=42 topuser=evolution 2026-08-26 14:11:42 L1=2.59 run=3 blk=0 avail=6705 (57.2%) swpO=0 conn=2 myRSS=2421 php=4 phpRSS=186 ap=48 tcp=43 topuser=evolution 2026-08-26 14:11:52 L1=3.62 run=19 blk=0 avail=6356 (54.2%) swpO=1 conn=3 myRSS=2422 php=9 phpRSS=537 ap=44 tcp=46 topuser=madalice 2026-08-26 14:11:52 L1=3.62 run=7 blk=0 avail=6479 (55.2%) swpO=1 conn=2 myRSS=2422 php=5 phpRSS=455 ap=44 tcp=47 topuser=madalice 2026-08-26 14:12:02 L1=4.64 run=13 blk=0 avail=5803 (49.5%) swpO=0 conn=3 myRSS=2422 php=11 phpRSS=1270 ap=45 tcp=45 topuser=madalice 2026-08-26 14:12:02 L1=4.64 run=17 blk=0 avail=5754 (49.1%) swpO=0 conn=12 myRSS=2422 php=13 phpRSS=1387 ap=45 tcp=44 topuser=madalice 2026-08-26 14:12:13 L1=4.64 run=13 blk=0 avail=5334 (45.5%) swpO=0 conn=9 myRSS=2422 php=8 phpRSS=1637 ap=45 tcp=47 topuser=madalice 2026-08-26 14:12:13 L1=4.64 run=12 blk=0 avail=5377 (45.8%) swpO=0 conn=6 myRSS=2422 php=7 phpRSS=1525 ap=45 tcp=49 topuser=madalice