INCIDENT 2026-08-20 09:57:49 trigger: swapout=3509/s ================================================================== load: 3.05 2.76 2.85 3/1301 3650165 ncpu:10 mem_avail: 6095MB/11729MB (52.0%) swap_used:2550MB swapout:3509/s blocked(D):1 running:6 iowait:10.6% steal:0.0% php: 5 procs / 373MB heaviest user: evolution (4 procs, 215MB) apache: 42 procs tcp_estab: 54 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2909 nobody 41 733 root 859 717 netdata 8 248 evolution 11 237 madalice 1 159 mailman 20 114 kurri 8 93 cpanellogin 1 72 cpanelphpmyadmin 7 63 dovenull 6 25 wp-toolkit 6 19 zabbix 1 13 named 1 13 lowrange 1 11 alison 1 11 nscd 1 7 dovecot 3 7 mailnull 1 5 cpanelconnecttrack 1 3 --- php workers by user --- USER PROCS RSS_MB evolution 4 215 madalice 1 161 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6017 MB Active(file): 1287 MB Inactive(file): 4568 MB Dirty: 546 MB Writeback: 0 MB SReclaimable: 421 MB CommitLimit: 9960 MB Committed_AS: 7877 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3248642 root 08:46:33 4952 /usr/bin/imunify-agent-proxy 3650000 evolution 00:14 2108 cp -R /home/evolution/my.evolutionerp.com.au/companies/304-1705884103/2025-11-24-02-22-18 /home/evolution/my.evolutionerp.com.au/companies/304-1705884103 --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 2978128 10.9 Ssl 5-02:07:13 /usr/sbin/mariadbd 1220 1 netdata 202472 2.5 Ssl 51-23:47:55 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3298114 3290507 root 179376 0.0 S 07:22:14 spamd child 3650116 3644190 madalice 176064 81.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3298115 3290507 root 97528 0.0 S 07:22:14 spamd child 2575382 1 root 81068 0.0 Ss 5-02:07:16 /usr/lib/systemd/systemd-journald 3290507 1 root 74668 0.0 Ss 07:35:03 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3141574 1353308 cpanellogin 73624 0.0 S 09:57:40 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base default_login_theme cpanel server_locale en 3650133 3648985 evolution 67108 14.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3648984 3647966 evolution 67012 0.5 S 00:31 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2223 1201 root 43468 0.0 Sl 51-23:47:54 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 3650180 3647956 evolution 43448 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3649985 3647188 evolution 43128 0.2 S 00:16 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3650095 3647111 evolution 43100 0.5 S 00:07 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1469 1 root 36448 0.1 Ss 51-23:47:54 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3648320 2111550 cpanelphpmyadmin 29620 0.2 S 01:23 php-fpm: pool cpanelphpmyadmin 3648319 2111550 cpanelphpmyadmin 27392 0.1 S 01:23 php-fpm: pool cpanelphpmyadmin 4922 2431 netdata 26104 0.1 Sl 51-23:47:50 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1463 1 root 23524 0.0 Ss 51-23:47:54 tailwatchd 3645294 1276780 nobody 23472 0.1 S 04:41 /usr/sbin/httpd -k start 3289952 1 root 22428 0.0 Ss 07:35:36 lfd - sleeping 3641169 1276780 nobody 22344 0.0 S 08:13 /usr/sbin/httpd -k start 3647886 1276780 nobody 21188 0.0 S 01:52 /usr/sbin/httpd -k start 3644190 1276780 nobody 20880 0.0 S 05:46 /usr/sbin/httpd -k start 3648420 1276780 nobody 20876 0.1 S 01:17 /usr/sbin/httpd -k start 3646203 1276780 nobody 20616 0.1 S 03:39 /usr/sbin/httpd -k start 3647111 1276780 nobody 20592 0.0 S 02:42 /usr/sbin/httpd -k start 3646598 1276780 nobody 20580 0.0 S 03:11 /usr/sbin/httpd -k start 3647129 1276780 nobody 20524 0.0 S 02:41 /usr/sbin/httpd -k start 3648366 1276780 nobody 20500 0.1 S 01:20 /usr/sbin/httpd -k start 3646234 1276780 nobody 20444 0.0 S 03:37 /usr/sbin/httpd -k start 3646655 1276780 nobody 20152 0.0 S 03:10 /usr/sbin/httpd -k start 3647190 1276780 nobody 20036 0.0 S 02:40 /usr/sbin/httpd -k start 3647850 1276780 nobody 19856 0.0 S 01:56 /usr/sbin/httpd -k start 3647191 1276780 nobody 19824 0.0 S 02:40 /usr/sbin/httpd -k start 3647955 1276780 nobody 19628 0.0 S 01:50 /usr/sbin/httpd -k start 3646658 1276780 nobody 19588 0.0 S 03:10 /usr/sbin/httpd -k start 3649033 1276780 nobody 19588 0.2 S 00:30 /usr/sbin/httpd -k start 3647972 1276780 nobody 19568 0.0 S 01:49 /usr/sbin/httpd -k start 3648801 1276780 nobody 19492 0.1 S 00:46 /usr/sbin/httpd -k start 3647900 1276780 nobody 19452 0.1 S 01:51 /usr/sbin/httpd -k start 3648206 1276780 nobody 19272 0.0 S 01:31 /usr/sbin/httpd -k start 3648413 1276780 nobody 19076 0.0 S 01:18 /usr/sbin/httpd -k start 3649227 1276780 nobody 18936 0.0 S 00:27 /usr/sbin/httpd -k start 185104 2431 netdata 18892 2.1 Sl 7-13:24:13 /usr/libexec/netdata/plugins.d/apps.plugin 1 1353308 1 root 18892 0.0 Ss 29-07:16:25 cpsrvd (SSL) - waiting for connections 3647966 1276780 nobody 18588 0.0 S 01:49 /usr/sbin/httpd -k start 3649984 1276780 nobody 18380 0.0 S 00:16 /usr/sbin/httpd -k start 3647838 1276780 nobody 18248 0.0 S 01:57 /usr/sbin/httpd -k start 3648887 1276780 nobody 18096 0.0 S 00:40 /usr/sbin/httpd -k start 3648426 1276780 nobody 17952 0.0 S 01:16 /usr/sbin/httpd -k start 3648423 1276780 nobody 17336 0.0 S 01:16 /usr/sbin/httpd -k start 3649032 1276780 nobody 17332 0.0 S 00:30 /usr/sbin/httpd -k start 3647188 1276780 nobody 17292 0.0 S 02:40 /usr/sbin/httpd -k start 3648419 1276780 nobody 16960 0.0 S 01:17 /usr/sbin/httpd -k start 3647956 1276780 nobody 16928 0.1 S 01:50 /usr/sbin/httpd -k start 3648792 1276780 nobody 16904 0.0 S 00:47 /usr/sbin/httpd -k start 3648985 1276780 nobody 16768 0.0 S 00:31 /usr/sbin/httpd -k start 3648935 1276780 nobody 16520 0.0 S 00:36 /usr/sbin/httpd -k start 3649272 1276780 nobody 16268 0.0 S 00:21 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- 3380614 D - [kworker/u256:1+flush-8:0] 3650116 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi --- mariadb processlist (non-sleeping) --- +----------+------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 16110420 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 16110335 | root | 304-1779936994 | Execute | 0 | Sending data | SELECT sum(qty) as qty FROM purchaseitems,purchases WHERE purchaseitems.reqitemid='8' AND purchaseitems.purchaseid=purchases.id AND purchaseitems.status='1' AND purchases.status>'0' | +----------+------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 826 evolution/portal.evolutionerp.com.au-ssl_log 328 madalice/madalice.com.au-ssl_log 11 (total vhosts taking traffic: 3) --- top client IPs across all vhosts (last 3 min) --- 651 203.54.180.238 191 103.104.165.99 109 103.104.164.114 71 1.144.107.82 33 150.228.243.234 28 182.239.240.254 28 180.181.236.49 25 101.182.108.127 8 2001:8004:14b3:854f:344b:1ac8:7204:4a50 8 175.36.227.212 6 147.161.213.98 2 40.77.167.48 2 40.77.167.254 2 120.150.225.142 1 52.167.144.163 --- top request paths across all vhosts (last 3 min) --- 345 POST /functions.php 140 GET /app/ajax.php 123 GET /factory_session_checker.php 77 GET /index.php 62 GET /factory_session_processed_qty.php 62 GET /factory_session_joiner.php 52 GET /heartbeat.php 41 POST /plugins/csvexporter/plugin.php 28 POST /clienteditsave.php 27 POST /app/ajax.php 25 POST /app/ajax/selectFilterSingle.php 20 POST /quoteditsave.php 13 POST //functions.php 11 POST /logsave.php 10 POST /purchaseaddsave.php 10 POST /jobeditsave.php 10 GET //app/ajax.php 10 GET / 9 POST /wp-admin/admin-ajax.php 8 POST /app/ajax/selectFilter.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 345 POST /functions.php 140 GET /app/ajax.php 67 GET /index.php 41 POST /plugins/csvexporter/plugin.php 28 POST /clienteditsave.php 27 POST /app/ajax.php 25 POST /app/ajax/selectFilterSingle.php 20 POST /quoteditsave.php 13 POST //functions.php 11 POST /logsave.php 10 POST /purchaseaddsave.php 10 POST /jobeditsave.php -- last 10 requests -- 103.104.165.99 - - [20/Aug/2026:09:57:48 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=14025015046 HTTP/1.1" 200 98 "https://my.evolutionerp.com.au/inde 103.104.165.99 - - [20/Aug/2026:09:57:48 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Djobedit%26id%3D12048&call=getUserSetting&caller=ajaxSubmitLocal&seq=18121298179 HTTP/1.1" 200 111 "https://my. 203.54.180.238 - - [20/Aug/2026:09:57:48 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch 103.104.165.99 - - [20/Aug/2026:09:57:49 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 2055 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12048" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK 103.104.165.99 - - [20/Aug/2026:09:57:49 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 21839 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12048" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple 103.104.164.114 - - [20/Aug/2026:09:57:49 +1000] "POST /purchaseaddsave.php?save=1 HTTP/1.1" 302 20 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=70004" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 103.104.164.114 - - [20/Aug/2026:09:57:50 +1000] "GET /index.php?page=purchaseadd&purchaseid=70004 HTTP/1.1" 200 72545 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=70004" "Mozilla/5.0 (Windows NT 203.54.180.238 - - [20/Aug/2026:09:57:50 +1000] "POST //jobeditsave.php HTTP/1.1" 302 20 "https://my.evolutionerp.com.au//index.php?page=jobedit&id=29203&tab=invoicingtab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple 103.104.164.114 - - [20/Aug/2026:09:57:51 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=10605248852 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/ind 103.104.164.114 - - [20/Aug/2026:09:57:51 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=13623121433 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/inde == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 123 GET /factory_session_checker.php 62 GET /factory_session_processed_qty.php 62 GET /factory_session_joiner.php 52 GET /heartbeat.php 10 GET /index.php 5 POST /portal/register 5 GET /uploadsave.php 3 POST /uploadsave.php 2 POST /inventory.php 1 POST /factory_functions.php 1 GET /api/deliveries.php 1 GET /api/api-check.php -- last 10 requests -- 203.54.180.238 - - [20/Aug/2026:09:57:40 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [20/Aug/2026:09:57:41 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [20/Aug/2026:09:57:41 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [20/Aug/2026:09:57:41 +1000] "GET /heartbeat.php?sentAt=1787183861&bytes=106,134,66,245&_=1787143291177 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [20/Aug/2026:09:57:45 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [20/Aug/2026:09:57:45 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [20/Aug/2026:09:57:46 +1000] "GET /factory_session_joiner.php?id=34747 HTTP/1.1" 200 94 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [20/Aug/2026:09:57:46 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [20/Aug/2026:09:57:46 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [20/Aug/2026:09:57:45 +1000] "GET /heartbeat.php?sentAt=1787183864&bytes=106,134,66,248&_=1787174400640 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" == madalice/madalice.com.au-ssl_log == -- top paths -- 9 POST /wp-admin/admin-ajax.php 1 GET /brand/doc-marten/ 1 GET / -- last 10 requests -- 2001:8004:14b3:854f:344b:1ac8:7204:4a50 - - [20/Aug/2026:09:55:17 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 51 "https://madalice.com.au/wp-admin/edit.php?post_type=shop_order" "Mozilla/5.0 (Windows NT 10.0; Win 2001:8004:14b3:854f:344b:1ac8:7204:4a50 - - [20/Aug/2026:09:55:27 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 51 "https://madalice.com.au/wp-admin/edit.php?post_type=shop_order" "Mozilla/5.0 (Windows NT 10.0; Win 118.127.40.55 - - [20/Aug/2026:09:55:29 +1000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=17bb97af06 HTTP/1.1" 200 1 "-" "WordPress/7.0.4; https://madalice.com.au" 2001:8004:14b3:854f:344b:1ac8:7204:4a50 - - [20/Aug/2026:09:55:37 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 51 "https://madalice.com.au/wp-admin/edit.php?post_type=shop_order" "Mozilla/5.0 (Windows NT 10.0; Win 220.181.108.82 - - [20/Aug/2026:09:55:40 +1000] "GET /brand/doc-marten/ HTTP/1.1" 200 29605 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" 2001:8004:14b3:854f:344b:1ac8:7204:4a50 - - [20/Aug/2026:09:55:47 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 51 "https://madalice.com.au/wp-admin/edit.php?post_type=shop_order" "Mozilla/5.0 (Windows NT 10.0; Win 116.179.37.186 - - [20/Aug/2026:09:55:54 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/brand/doc-marten/" "Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.bai 2001:8004:14b3:854f:344b:1ac8:7204:4a50 - - [20/Aug/2026:09:55:57 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 51 "https://madalice.com.au/wp-admin/edit.php?post_type=shop_order" "Mozilla/5.0 (Windows NT 10.0; Win 2001:8004:14b3:854f:344b:1ac8:7204:4a50 - - [20/Aug/2026:09:56:07 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 51 "https://madalice.com.au/wp-admin/edit.php?post_type=shop_order" "Mozilla/5.0 (Windows NT 10.0; Win 2001:8004:14b3:854f:344b:1ac8:7204:4a50 - - [20/Aug/2026:09:56:17 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 51 "https://madalice.com.au/wp-admin/edit.php?post_type=shop_order" "Mozilla/5.0 (Windows NT 10.0; Win --- last 30 samples (run-up to this incident) --- 2026-08-20 09:55:28 L1=2.96 run=5 blk=0 avail=5959 (50.8%) swpO=0 conn=3 myRSS=2960 php=3 phpRSS=243 ap=54 tcp=61 topuser=madalice 2026-08-20 09:55:29 L1=2.96 run=3 blk=0 avail=5924 (50.5%) swpO=0 conn=2 myRSS=2960 php=2 phpRSS=248 ap=54 tcp=63 topuser=madalice 2026-08-20 09:55:38 L1=2.58 run=4 blk=0 avail=5950 (50.7%) swpO=0 conn=3 myRSS=2960 php=2 phpRSS=239 ap=50 tcp=50 topuser=madalice 2026-08-20 09:55:39 L1=2.58 run=2 blk=0 avail=5954 (50.8%) swpO=0 conn=2 myRSS=2960 php=1 phpRSS=222 ap=50 tcp=51 topuser=madalice 2026-08-20 09:55:49 L1=2.26 run=4 blk=0 avail=6003 (51.2%) swpO=0 conn=3 myRSS=2960 php=2 phpRSS=240 ap=41 tcp=53 topuser=madalice 2026-08-20 09:55:49 L1=2.15 run=2 blk=0 avail=6007 (51.2%) swpO=0 conn=2 myRSS=2960 php=1 phpRSS=222 ap=41 tcp=53 topuser=madalice 2026-08-20 09:55:59 L1=2.14 run=3 blk=0 avail=5993 (51.1%) swpO=0 conn=3 myRSS=2960 php=2 phpRSS=226 ap=46 tcp=70 topuser=madalice 2026-08-20 09:55:59 L1=2.13 run=3 blk=0 avail=5952 (50.7%) swpO=0 conn=2 myRSS=2960 php=2 phpRSS=266 ap=46 tcp=70 topuser=madalice 2026-08-20 09:56:09 L1=2.04 run=2 blk=0 avail=5979 (51.0%) swpO=0 conn=4 myRSS=2960 php=1 phpRSS=186 ap=52 tcp=52 topuser=madalice 2026-08-20 09:56:09 L1=2.12 run=2 blk=0 avail=5922 (50.5%) swpO=0 conn=2 myRSS=2960 php=1 phpRSS=249 ap=51 tcp=52 topuser=madalice 2026-08-20 09:56:19 L1=1.95 run=3 blk=0 avail=5965 (50.9%) swpO=0 conn=4 myRSS=2960 php=1 phpRSS=187 ap=48 tcp=61 topuser=madalice 2026-08-20 09:56:19 L1=1.87 run=4 blk=0 avail=5914 (50.4%) swpO=0 conn=2 myRSS=2960 php=1 phpRSS=243 ap=48 tcp=59 topuser=madalice 2026-08-20 09:56:29 L1=1.72 run=5 blk=1 avail=5803 (49.5%) swpO=0 conn=4 myRSS=2961 php=4 phpRSS=412 ap=45 tcp=65 topuser=madalice 2026-08-20 09:56:29 L1=1.90 run=5 blk=1 avail=5692 (48.5%) swpO=0 conn=4 myRSS=2961 php=3 phpRSS=486 ap=47 tcp=65 topuser=madalice 2026-08-20 09:56:39 L1=1.75 run=4 blk=0 avail=5870 (50.0%) swpO=0 conn=4 myRSS=2961 php=2 phpRSS=228 ap=52 tcp=64 topuser=madalice 2026-08-20 09:56:39 L1=1.77 run=3 blk=0 avail=5846 (49.8%) swpO=0 conn=4 myRSS=2961 php=1 phpRSS=235 ap=52 tcp=62 topuser=madalice 2026-08-20 09:56:49 L1=1.63 run=2 blk=0 avail=5923 (50.5%) swpO=0 conn=4 myRSS=2962 php=1 phpRSS=195 ap=47 tcp=60 topuser=madalice 2026-08-20 09:56:49 L1=1.66 run=2 blk=0 avail=5870 (50.0%) swpO=0 conn=4 myRSS=2962 php=1 phpRSS=258 ap=47 tcp=57 topuser=madalice 2026-08-20 09:56:59 L1=1.53 run=3 blk=0 avail=5899 (50.3%) swpO=0 conn=4 myRSS=2962 php=6 phpRSS=396 ap=41 tcp=51 topuser=madalice 2026-08-20 09:56:59 L1=1.64 run=3 blk=0 avail=5998 (51.1%) swpO=0 conn=4 myRSS=2962 php=2 phpRSS=60 ap=40 tcp=53 topuser=evolution 2026-08-20 09:57:09 L1=1.51 run=4 blk=0 avail=5672 (48.4%) swpO=0 conn=5 myRSS=2962 php=4 phpRSS=573 ap=42 tcp=60 topuser=corpkicks 2026-08-20 09:57:09 L1=1.71 run=4 blk=0 avail=5618 (47.9%) swpO=0 conn=4 myRSS=2962 php=3 phpRSS=467 ap=43 tcp=60 topuser=corpkicks 2026-08-20 09:57:19 L1=2.00 run=4 blk=0 avail=5609 (47.8%) swpO=0 conn=5 myRSS=2964 php=4 phpRSS=577 ap=48 tcp=68 topuser=evolution 2026-08-20 09:57:19 L1=2.00 run=2 blk=0 avail=6011 (51.3%) swpO=0 conn=4 myRSS=2965 php=1 phpRSS=65 ap=50 tcp=67 topuser=evolution 2026-08-20 09:57:29 L1=2.55 run=8 blk=0 avail=5600 (47.7%) swpO=0 conn=5 myRSS=2994 php=9 phpRSS=671 ap=52 tcp=64 topuser=madalice 2026-08-20 09:57:30 L1=2.55 run=8 blk=0 avail=5501 (46.9%) swpO=0 conn=6 myRSS=2995 php=8 phpRSS=750 ap=52 tcp=65 topuser=madalice 2026-08-20 09:57:39 L1=2.85 run=4 blk=1 avail=5854 (49.9%) swpO=1455 conn=5 myRSS=2975 php=3 phpRSS=314 ap=50 tcp=51 topuser=madalice 2026-08-20 09:57:40 L1=2.85 run=3 blk=2 avail=5926 (50.5%) swpO=1775 conn=6 myRSS=2968 php=2 phpRSS=107 ap=49 tcp=51 topuser=evolution 2026-08-20 09:57:49 L1=3.05 run=6 blk=1 avail=6095 (52.0%) swpO=3509 conn=4 myRSS=2909 php=5 phpRSS=373 ap=42 tcp=54 topuser=evolution 2026-08-20 09:57:50 L1=3.05 run=6 blk=0 avail=6081 (51.8%) swpO=3349 conn=4 myRSS=2908 php=5 phpRSS=396 ap=42 tcp=54 topuser=evolution