INCIDENT 2026-08-28 06:25:19 trigger: php_rss=1563MB ================================================================== load: 0.74 1.07 1.12 7/589 1399282 ncpu:10 mem_avail: 8458MB/13777MB (61.4%) swap_used:453MB swapout:0/s blocked(D):0 running:8 iowait:0.0% steal:0.0% php: 10 procs / 1563MB heaviest user: madalice (8 procs, 1483MB) apache: 28 procs tcp_estab: 57 --- RSS by user (all processes) --- USER PROCS RSS_MB madalice 8 1414 mysql 1 1390 root 252 1257 nobody 27 475 mailman 20 412 netdata 7 225 wp-toolkit 3 130 cpanellogin 1 101 dovenull 6 68 evolution 5 61 infinium 4 56 mailnull 3 49 named 1 43 zabbix 1 28 dovecot 3 28 kurri 2 27 polkitd 1 24 vinesit 1 14 corpkicks 1 14 lowrange 1 13 --- php workers by user --- USER PROCS RSS_MB madalice 8 1423 evolution 1 49 root 1 30 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 7111 MB Active(file): 5109 MB Inactive(file): 2503 MB Dirty: 162 MB Writeback: 0 MB SReclaimable: 769 MB CommitLimit: 10984 MB Committed_AS: 7983 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 04:06:39 14348 /usr/bin/imunify-agent-proxy 1297560 root 25:18 3120 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 1385386 root 00:18 3220 /bin/sh -c bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || : --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 1424092 3.5 Ssl 04:06:08 /usr/sbin/mariadbd 1399238 510022 madalice 227068 131 R 00:01 php-fpm: pool madalice_com_au 1399241 510022 madalice 212128 131 S 00:01 php-fpm: pool madalice_com_au 1399243 510022 madalice 210280 133 R 00:01 php-fpm: pool madalice_com_au 1399246 510022 madalice 188468 91.0 R 00:01 php-fpm: pool madalice_com_au 529388 527476 root 182796 0.0 S 04:01:01 spamd child 508924 1 netdata 179196 1.9 Ssl 04:05:37 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 529389 527476 root 174836 0.0 S 04:01:01 spamd child 1399245 510022 madalice 168880 92.0 R 00:01 php-fpm: pool madalice_com_au 527476 1 root 167380 0.0 Ss 04:02:40 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1399239 510022 madalice 159484 133 R 00:01 php-fpm: pool madalice_com_au 1399234 510022 madalice 135712 68.5 S 00:02 php-fpm: pool madalice_com_au 1399240 510022 madalice 126828 123 S 00:01 php-fpm: pool madalice_com_au 973642 1353308 cpanellogin 104076 0.0 S 02:02:47 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 938582 1 wp-toolkit 75032 0.0 Ss 02:13:11 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 509236 509098 root 71420 0.0 Sl 04:05:34 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 4180059 4180015 evolution 50740 0.0 Ss 06:25:19 /opt/cpanel/ea-php74/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 938585 1 wp-toolkit 49472 0.0 Ss 02:13:11 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 508634 1 named 44724 0.0 Ssl 04:05:42 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 1353308 1 root 42280 0.0 Ss 37-03:44:00 cpsrvd (SSL) - waiting for connections 1469 1 root 41044 0.1 Ss 59-20:15:29 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 509098 1 root 40452 0.0 Ss 04:05:35 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion 938444 1 root 38728 0.0 Ss 02:13:14 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 1399250 1469 root 38576 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 526869 1 root 33124 0.0 Ss 04:03:03 lfd - sleeping 481558 1 root 31980 0.1 Ssl 04:08:01 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 510022 1 root 31316 0.0 Ss 04:05:30 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 483898 1 zabbix 29052 0.2 Ssl 04:06:51 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 509266 1 root 25792 0.0 Ss 04:05:34 /usr/lib/systemd/systemd-journald 508591 1 polkitd 24912 0.0 Ssl 04:05:42 /usr/lib/polkit-1/polkitd --no-debug 1463 1 root 24784 0.0 Ss 59-20:15:29 tailwatchd 508863 508814 mailman 22240 0.0 S 04:05:40 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:5:8 -s 508851 508814 mailman 22224 0.0 S 04:05:40 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:1:2 -s 508857 508814 mailman 22224 0.0 S 04:05:40 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s 508856 508814 mailman 22148 0.0 S 04:05:40 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s 508855 508814 mailman 22116 0.0 S 04:05:40 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:2:4 -s 508864 508814 mailman 22072 0.0 S 04:05:40 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:6:8 -s 508867 508814 mailman 22056 0.0 S 04:05:40 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s 508858 508814 mailman 22036 0.0 S 04:05:40 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:8 -s 508861 508814 mailman 22036 0.0 S 04:05:40 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:3:8 -s 1368272 506832 nobody 22016 0.0 S 05:26 /usr/sbin/httpd -k start 508860 508814 mailman 21964 0.0 S 04:05:40 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:2:8 -s 508865 508814 mailman 21964 0.0 S 04:05:40 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:7:8 -s 508850 508814 mailman 21952 0.0 S 04:05:40 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:0:2 -s 508854 508814 mailman 21940 0.0 S 04:05:40 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:1:4 -s 508852 508814 mailman 21936 0.0 S 04:05:40 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s 508866 508814 mailman 21832 0.0 S 04:05:40 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s 508853 508814 mailman 21804 0.0 S 04:05:40 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:4 -s 508849 508814 mailman 21768 0.0 S 04:05:40 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=ArchRunner:0:1 -s 508859 508814 mailman 21764 0.0 S 04:05:40 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:1:8 -s 508862 508814 mailman 21764 0.0 S 04:05:40 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:4:8 -s 1367289 506832 nobody 21320 0.0 S 06:53 /usr/sbin/httpd -k start 1384290 506832 nobody 21020 0.0 S 01:57 /usr/sbin/httpd -k start 1384382 506832 nobody 20908 0.0 S 01:49 /usr/sbin/httpd -k start 1383378 506832 nobody 20860 0.0 S 03:24 /usr/sbin/httpd -k start 1384740 506832 nobody 20736 0.0 S 01:09 /usr/sbin/httpd -k start 1384291 506832 nobody 20368 0.1 S 01:57 /usr/sbin/httpd -k start 1384083 506832 nobody 20152 0.0 S 02:18 /usr/sbin/httpd -k start 509640 508992 root 20108 0.0 Sl 04:05:32 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1384402 506832 nobody 19460 0.0 S 01:47 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +-------+-------------+-------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +-------+-------------+-------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 72658 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 72649 | madalice_wp | madalice_wp | Query | 0 | Waiting for table level lock | SELECT option_value FROM AMuqf6qZ_options WHERE option_name = 'forminator_stripe_configuration' LIMIT 1 | | 72648 | madalice_wp | madalice_wp | Query | 0 | Sending data | SELECT option_value FROM AMuqf6qZ_options WHERE option_name LIKE 'wc_square_background_sync_job_%' AND ( option_value LIKE '%\"status\":\"queued\"%' OR option_value LIKE '%\"status\":\"processing\"%' ) ORDER BY option_id ASC LIMIT 1 | | 72645 | madalice_wp | madalice_wp | Query | 0 | Waiting for table level lock | UPDATE `AMuqf6qZ_options` SET `option_value` = 'a:50:{i:0;a:3:{s:9:\"timestamp\";i:1787898320;s:3:\"url\";s:20:\"/asset-manifest.json\";s:10:\"user_agent\";s:111:\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36\";}i:1;a:3:{s:9:\"timest | +-------+-------------+-------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min kamcool/kamcool.com.au-ssl_log 110 evolution/portal.evolutionerp.com.au-ssl_log 107 evolution/my.evolutionerp.com.au-ssl_log 88 olympic/olympicfencing.com.au-ssl_log 80 olytis/tis.com.au-ssl_log 65 olympic/seb-mobile-auth.olympicfencing.com.au-ssl_log 59 aaa/aaadownunder.com.au-ssl_log 13 alison/alisonarts.com.au-ssl_log 5 madalice/madalice.com.au-ssl_log 3 (total vhosts taking traffic: 9) --- top client IPs across all vhosts (last 3 min) --- 123 203.54.180.238 110 52.139.44.162 76 20.104.50.220 65 195.178.110.103 59 158.23.184.117 45 1.158.60.60 19 103.104.165.99 7 14.1.95.251 5 103.104.164.114 3 118.127.40.55 2 40.77.167.77 2 192.250.235.185 2 101.182.108.127 1 91.92.243.239 1 72.47.60.147 --- top request paths across all vhosts (last 3 min) --- 40 POST /functions.php 38 GET /heartbeat.php 26 GET /factory_session_checker.php 15 POST /blog/ 14 GET /factory_session_processed_qty.php 13 GET /factory_session_joiner.php 12 GET /index.php 12 GET /app/ajax.php 10 POST /blog/index.php 7 POST /plugins/csvexporter/plugin.php 6 POST /portal/register 6 POST /jobeditsave.php 6 POST /blog/wordpress/wp-json/batch/v1 5 POST /blog/wp-json/Batch/v1 5 POST /blog/wp-json/batch/v1/ 5 POST /blog/wp-json/batch/v1 5 POST /blog//wp-json/batch/v1 5 POST /blog/blog/wp-json/batch/v1 5 GET / 4 POST /wp-login.php --- busiest 3 vhosts: top paths + last 10 requests --- == kamcool/kamcool.com.au-ssl_log == -- top paths -- 3 GET /admin.php 1 GET /zoo1.php 1 GET /yj09.php 1 GET /xnm-apc.php 1 GET /xiugai.php 1 GET /xamp.php 1 GET /wp.php 1 GET /wp-mails.php 1 GET /w.php 1 GET /wp-content/plugins/hellopress/wp_filemanager.php 1 GET /wp-0.php 1 GET /vpn.php -- last 10 requests -- 52.139.44.162 - - [28/Aug/2026:06:25:00 +1000] "GET /vpn.php HTTP/1.1" 404 5749 "-" "-" 52.139.44.162 - - [28/Aug/2026:06:25:01 +1000] "GET /class-t.api.php HTTP/1.1" 404 5749 "-" "-" 52.139.44.162 - - [28/Aug/2026:06:25:02 +1000] "GET /a.php HTTP/1.1" 404 5749 "-" "-" 52.139.44.162 - - [28/Aug/2026:06:25:02 +1000] "GET /ass.php HTTP/1.1" 404 5749 "-" "-" 52.139.44.162 - - [28/Aug/2026:06:25:03 +1000] "GET /sb.php HTTP/1.1" 404 5749 "-" "-" 52.139.44.162 - - [28/Aug/2026:06:25:03 +1000] "GET /in.php HTTP/1.1" 404 5749 "-" "-" 52.139.44.162 - - [28/Aug/2026:06:25:03 +1000] "GET /ssg.php HTTP/1.1" 404 5749 "-" "-" 52.139.44.162 - - [28/Aug/2026:06:25:04 +1000] "GET /gigi.php HTTP/1.1" 404 5749 "-" "-" 52.139.44.162 - - [28/Aug/2026:06:25:04 +1000] "GET /credit.php HTTP/1.1" 404 5749 "-" "-" 52.139.44.162 - - [28/Aug/2026:06:25:05 +1000] "GET /xnm-apc.php?p= HTTP/1.1" 404 5749 "-" "-" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 38 GET /heartbeat.php 26 GET /factory_session_checker.php 14 GET /factory_session_processed_qty.php 13 GET /factory_session_joiner.php 6 POST /portal/register 4 GET /index.php 2 POST /factory_functions.php 1 POST /login.php 1 GET /userlogin.php 1 GET /logoff.php 1 GET / -- last 10 requests -- 203.54.180.238 - - [28/Aug/2026:06:24:55 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:06:24:54 +1000] "GET /heartbeat.php?sentAt=1787862294&bytes=106,144,157,22&_=1787862184455 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=5" 203.54.180.238 - - [28/Aug/2026:06:24:59 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [28/Aug/2026:06:24:59 +1000] "GET /factory_session_joiner.php?id=34911 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [28/Aug/2026:06:25:00 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:06:25:00 +1000] "GET /heartbeat.php?sentAt=1787862300&bytes=106,144,157,28&_=1787810681527 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [28/Aug/2026:06:25:02 +1000] "GET /heartbeat.php?sentAt=1787862302&bytes=106,144,157,30&_=1787835392084 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [28/Aug/2026:06:25:05 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:06:25:04 +1000] "GET /heartbeat.php?sentAt=1787862304&bytes=106,144,157,32&_=1787862184456 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=5" 203.54.180.238 - - [28/Aug/2026:06:25:09 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 40 POST /functions.php 12 GET /app/ajax.php 8 GET /index.php 7 POST /plugins/csvexporter/plugin.php 6 POST /jobeditsave.php 3 POST /app/ajax.php 3 GET / 2 POST /clienteditsave.php 1 POST /quoteditsave.php 1 POST /plugins/fencecosting/plugin.php 1 POST /logsave.php 1 POST /login.php -- last 10 requests -- 101.182.108.127 - - [28/Aug/2026:06:24:46 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78859§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win 1.158.60.60 - - [28/Aug/2026:06:24:56 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=dispatchedit&dispatchid=15904" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 103.104.164.114 - - [28/Aug/2026:06:25:00 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=4696%2Findex.php%3Fpage%3Dinvoiceadd&invoiceid=46 203.54.180.238 - - [28/Aug/2026:06:25:03 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 285 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29530&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 103.104.165.99 - - [28/Aug/2026:06:25:03 +1000] "GET /index.php?page=activities HTTP/1.1" 200 33881 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Ge 103.104.165.99 - - [28/Aug/2026:06:25:05 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=activities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 103.104.165.99 - - [28/Aug/2026:06:25:05 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dactivities&call=getUserSetting&caller=ajaxSubmitLocal&seq=16790537204 HTTP/1.1" 200 165 "https://my.evolutionerp.com.au/index.ph 103.104.165.99 - - [28/Aug/2026:06:25:06 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=activities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. 203.54.180.238 - - [28/Aug/2026:06:25:08 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 14.1.95.251 - - [28/Aug/2026:06:25:16 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=2307§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x --- last 30 samples (run-up to this incident) --- 2026-08-28 06:22:50 L1=1.02 run=2 blk=0 avail=9686 (70.3%) swpO=0 conn=2 myRSS=1389 php=4 phpRSS=275 ap=22 tcp=29 topuser=madalice 2026-08-28 06:22:59 L1=1.02 run=3 blk=0 avail=9699 (70.4%) swpO=0 conn=1 myRSS=1389 php=3 phpRSS=236 ap=21 tcp=32 topuser=madalice 2026-08-28 06:23:00 L1=1.02 run=2 blk=0 avail=9595 (69.6%) swpO=0 conn=2 myRSS=1389 php=4 phpRSS=362 ap=21 tcp=36 topuser=madalice 2026-08-28 06:23:09 L1=0.94 run=3 blk=0 avail=9664 (70.1%) swpO=0 conn=1 myRSS=1389 php=3 phpRSS=246 ap=25 tcp=37 topuser=madalice 2026-08-28 06:23:10 L1=0.94 run=1 blk=0 avail=9652 (70.1%) swpO=0 conn=2 myRSS=1389 php=4 phpRSS=275 ap=25 tcp=35 topuser=madalice 2026-08-28 06:23:19 L1=0.87 run=1 blk=0 avail=9679 (70.3%) swpO=0 conn=1 myRSS=1389 php=3 phpRSS=235 ap=23 tcp=36 topuser=madalice 2026-08-28 06:23:20 L1=0.88 run=2 blk=0 avail=9645 (70.0%) swpO=0 conn=2 myRSS=1389 php=4 phpRSS=302 ap=23 tcp=40 topuser=madalice 2026-08-28 06:23:29 L1=0.81 run=1 blk=0 avail=9668 (70.2%) swpO=0 conn=1 myRSS=1389 php=3 phpRSS=236 ap=26 tcp=38 topuser=madalice 2026-08-28 06:23:30 L1=0.82 run=3 blk=0 avail=9606 (69.7%) swpO=0 conn=2 myRSS=1389 php=4 phpRSS=275 ap=27 tcp=49 topuser=madalice 2026-08-28 06:23:39 L1=0.84 run=1 blk=0 avail=9591 (69.6%) swpO=0 conn=1 myRSS=1389 php=3 phpRSS=236 ap=37 tcp=35 topuser=madalice 2026-08-28 06:23:40 L1=0.85 run=3 blk=0 avail=9562 (69.4%) swpO=0 conn=2 myRSS=1389 php=4 phpRSS=276 ap=36 tcp=38 topuser=madalice 2026-08-28 06:23:49 L1=0.78 run=2 blk=0 avail=9748 (70.8%) swpO=0 conn=1 myRSS=1390 php=3 phpRSS=150 ap=29 tcp=37 topuser=evolution 2026-08-28 06:23:50 L1=0.96 run=2 blk=0 avail=9698 (70.4%) swpO=0 conn=2 myRSS=1390 php=7 phpRSS=307 ap=28 tcp=39 topuser=evolution 2026-08-28 06:23:59 L1=1.04 run=2 blk=0 avail=9741 (70.7%) swpO=0 conn=2 myRSS=1390 php=3 phpRSS=140 ap=29 tcp=35 topuser=madalice 2026-08-28 06:24:00 L1=1.04 run=1 blk=0 avail=9654 (70.1%) swpO=0 conn=2 myRSS=1390 php=4 phpRSS=251 ap=29 tcp=38 topuser=madalice 2026-08-28 06:24:09 L1=0.96 run=1 blk=0 avail=9707 (70.5%) swpO=0 conn=2 myRSS=1390 php=3 phpRSS=211 ap=24 tcp=34 topuser=madalice 2026-08-28 06:24:10 L1=0.88 run=2 blk=0 avail=9696 (70.4%) swpO=0 conn=2 myRSS=1390 php=4 phpRSS=251 ap=24 tcp=33 topuser=madalice 2026-08-28 06:24:19 L1=0.81 run=1 blk=0 avail=9661 (70.1%) swpO=0 conn=2 myRSS=1390 php=3 phpRSS=211 ap=28 tcp=39 topuser=madalice 2026-08-28 06:24:20 L1=0.74 run=1 blk=0 avail=9647 (70.0%) swpO=0 conn=2 myRSS=1390 php=4 phpRSS=251 ap=28 tcp=37 topuser=madalice 2026-08-28 06:24:29 L1=0.68 run=3 blk=0 avail=9790 (71.1%) swpO=0 conn=2 myRSS=1390 php=3 phpRSS=117 ap=24 tcp=40 topuser=evolution 2026-08-28 06:24:30 L1=0.63 run=1 blk=0 avail=9797 (71.1%) swpO=0 conn=2 myRSS=1390 php=3 phpRSS=119 ap=23 tcp=42 topuser=evolution 2026-08-28 06:24:39 L1=0.82 run=2 blk=0 avail=9647 (70.0%) swpO=0 conn=2 myRSS=1390 php=3 phpRSS=280 ap=23 tcp=38 topuser=madalice 2026-08-28 06:24:41 L1=0.75 run=1 blk=0 avail=9698 (70.4%) swpO=0 conn=2 myRSS=1390 php=4 phpRSS=251 ap=23 tcp=39 topuser=madalice 2026-08-28 06:24:49 L1=0.69 run=1 blk=0 avail=9686 (70.3%) swpO=0 conn=2 myRSS=1390 php=3 phpRSS=212 ap=25 tcp=44 topuser=madalice 2026-08-28 06:24:51 L1=0.64 run=1 blk=0 avail=9679 (70.3%) swpO=0 conn=2 myRSS=1390 php=4 phpRSS=251 ap=25 tcp=43 topuser=madalice 2026-08-28 06:24:59 L1=0.67 run=3 blk=0 avail=9694 (70.4%) swpO=0 conn=1 myRSS=1390 php=3 phpRSS=212 ap=25 tcp=32 topuser=madalice 2026-08-28 06:25:01 L1=0.69 run=1 blk=0 avail=9806 (71.2%) swpO=0 conn=2 myRSS=1390 php=3 phpRSS=119 ap=23 tcp=33 topuser=evolution 2026-08-28 06:25:09 L1=0.88 run=4 blk=0 avail=9768 (70.9%) swpO=0 conn=1 myRSS=1390 php=2 phpRSS=80 ap=30 tcp=40 topuser=evolution 2026-08-28 06:25:11 L1=0.81 run=4 blk=0 avail=9725 (70.6%) swpO=0 conn=3 myRSS=1390 php=4 phpRSS=178 ap=30 tcp=40 topuser=evolution 2026-08-28 06:25:19 L1=0.74 run=8 blk=0 avail=8458 (61.4%) swpO=0 conn=7 myRSS=1390 php=10 phpRSS=1563 ap=28 tcp=57 topuser=madalice