INCIDENT 2026-08-28 08:19:30 trigger: php_rss=1638MB ================================================================== load: 1.70 1.66 2.13 2/651 1799967 ncpu:10 mem_avail: 7911MB/13777MB (57.4%) swap_used:742MB swapout:0/s blocked(D):0 running:9 iowait:0.3% steal:0.0% php: 17 procs / 1638MB heaviest user: madalice (7 procs, 998MB) apache: 61 procs tcp_estab: 64 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1844 root 248 1100 nobody 60 1038 madalice 7 998 mailman 20 399 netdata 7 207 olympic 2 199 alison 1 161 infinium 4 160 evolution 7 120 wp-toolkit 3 100 cpanellogin 1 87 dovenull 6 56 lowrange 3 38 mailnull 2 37 named 1 36 candyfabcom 2 28 zabbix 1 25 dovecot 3 23 polkitd 1 20 --- php workers by user --- USER PROCS RSS_MB madalice 7 998 olympic 2 200 alison 1 161 evolution 3 109 root 1 29 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4979 MB Active(file): 4130 MB Inactive(file): 975 MB Dirty: 8 MB Writeback: 0 MB SReclaimable: 539 MB CommitLimit: 10984 MB Committed_AS: 9213 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 06:00:50 11816 /usr/bin/imunify-agent-proxy 1797809 root 02:42 60760 /opt/imunify360/venv/bin/python3 -m imav.run --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 1888404 7.8 Ssl 06:00:19 /usr/sbin/mariadbd 508924 1 netdata 177292 1.9 Ssl 05:59:48 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 529388 527476 root 176192 0.0 S 05:55:12 spamd child 1799836 1799731 alison 164952 15.7 S 00:08 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1799570 510022 madalice 160460 15.6 S 00:30 php-fpm: pool madalice_com_au 529389 527476 root 160108 0.0 S 05:55:12 spamd child 1799736 510022 madalice 158788 15.9 S 00:15 php-fpm: pool madalice_com_au 1799742 510022 madalice 158732 16.3 S 00:15 php-fpm: pool madalice_com_au 1799739 510022 madalice 136156 9.0 S 00:15 php-fpm: pool madalice_com_au 1799748 510022 madalice 136084 9.1 S 00:14 php-fpm: pool madalice_com_au 1799740 510022 madalice 135996 9.0 S 00:15 php-fpm: pool madalice_com_au 1799741 510022 madalice 135956 8.6 S 00:15 php-fpm: pool madalice_com_au 1799905 1799190 olympic 134932 49.5 S 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 527476 1 root 117656 0.0 Ss 05:56:51 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 973642 1353308 cpanellogin 89104 0.0 S 03:56:58 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 1799926 1798719 olympic 74520 32.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509236 509098 root 69376 0.0 Sl 05:59:45 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1797809 1 root 60760 0.9 Ssl 02:42 /opt/imunify360/venv/bin/python3 -m imav.run 938582 1 wp-toolkit 59000 0.0 Ss 04:07:22 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1799279 1353308 infinium 54868 0.2 S 00:54 webmaild - serving 1.41.252.211 1799290 1353308 infinium 54524 0.2 S 00:53 webmaild - serving 1.41.252.211 1799923 1798709 evolution 40724 2.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1799935 1799927 evolution 40688 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 39068 0.0 Ss 37-05:38:11 cpsrvd (SSL) - waiting for connections 508634 1 named 37268 0.0 Ssl 05:59:53 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 938585 1 wp-toolkit 35972 0.0 Ss 04:07:22 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1469 1 root 34488 0.1 Ss 59-22:09:40 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 509098 1 root 32124 0.0 Ss 05:59:46 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion 509266 1 root 31692 0.0 Ss 05:59:45 /usr/lib/systemd/systemd-journald 1799281 938407 infinium 31600 0.2 S 00:54 php-fpm: pool user_infinium 4180059 4180015 evolution 30884 0.0 Ss 08:19:30 /opt/cpanel/ea-php74/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 510022 1 root 30632 0.0 Ss 05:59:41 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 526869 1 root 29384 0.0 Ss 05:57:14 lfd - sleeping 481558 1 root 28692 0.1 Ssl 06:02:12 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 1800001 1799189 evolution 27692 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 483898 1 zabbix 26108 0.2 Ssl 06:01:02 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 1763812 506832 nobody 24780 0.0 S 09:39 /usr/sbin/httpd -k start 1781929 506832 nobody 23212 0.0 S 04:47 /usr/sbin/httpd -k start 1799301 938407 infinium 22992 0.0 S 00:53 php-fpm: pool user_infinium 1463 1 root 22948 0.0 Ss 59-22:09:40 tailwatchd 1778331 506832 nobody 22472 0.0 S 08:33 /usr/sbin/httpd -k start 1779692 506832 nobody 22220 0.0 S 06:59 /usr/sbin/httpd -k start 1799610 508720 mailnull 22100 0.0 S 00:26 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 1796551 506832 nobody 22076 0.1 S 03:55 /usr/sbin/httpd -k start 508857 508814 mailman 21940 0.0 S 05:59:51 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s 508863 508814 mailman 21904 0.0 S 05:59:51 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:5:8 -s 1779479 506832 nobody 21832 0.0 S 07:03 /usr/sbin/httpd -k start 508867 508814 mailman 21824 0.0 S 05:59:51 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s 508856 508814 mailman 21820 0.0 S 05:59:51 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s 508855 508814 mailman 21816 0.0 S 05:59:51 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:2:4 -s 508864 508814 mailman 21796 0.0 S 05:59:51 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:6:8 -s 508858 508814 mailman 21768 0.0 S 05:59:51 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:8 -s 508861 508814 mailman 21716 0.0 S 05:59:51 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:3:8 -s 508865 508814 mailman 21712 0.0 S 05:59:51 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:7:8 -s 938444 1 root 21688 0.0 Ss 04:07:25 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 508860 508814 mailman 21672 0.0 S 05:59:51 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:2:8 -s 1798280 506832 nobody 21652 0.0 S 02:16 /usr/sbin/httpd -k start 508854 508814 mailman 21648 0.0 S 05:59:51 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:1:4 -s 508866 508814 mailman 21512 0.0 S 05:59:51 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s 508859 508814 mailman 21504 0.0 S 05:59:51 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:1:8 -s --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 529123 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 471 evolution/portal.evolutionerp.com.au-ssl_log 123 madalice/madalice.com.au-ssl_log 73 infinium/infinium.net.au-ssl_log 61 aaa/aaadownunder.com.au-ssl_log 13 evolution/pdev.evolutionerp.com.au-ssl_log 9 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 351 203.54.180.238 107 103.104.165.99 65 4.205.62.107 58 20.203.141.11 35 14.1.95.251 31 103.104.164.114 30 180.181.236.49 14 124.168.5.234 14 1.145.102.184 13 101.119.133.71 10 147.161.213.71 3 52.167.144.139 3 147.161.215.103 3 114.119.159.70 2 40.77.167.6 --- top request paths across all vhosts (last 3 min) --- 156 POST /functions.php 90 GET /app/ajax.php 50 GET /index.php 44 GET /heartbeat.php 35 POST /plugins/csvexporter/plugin.php 28 POST /app/ajax/selectFilter.php 28 GET /factory_session_checker.php 23 POST /app/ajax/selectFilterSingle.php 20 POST /quoteditsave.php 16 POST /uploadsave.php 16 POST /mfreqsave.php 14 POST /app/ajax.php 14 GET /factory_session_processed_qty.php 14 GET /factory_session_joiner.php 12 POST /itemModify.php 10 POST /purchaseaddsave.php 7 GET /plugins/fensa/fensa-ajax.php 5 POST /jobeditsave.php 5 POST /clienteditsave.php 4 POST /portal/register --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 156 POST /functions.php 90 GET /app/ajax.php 43 GET /index.php 35 POST /plugins/csvexporter/plugin.php 28 POST /app/ajax/selectFilter.php 23 POST /app/ajax/selectFilterSingle.php 20 POST /quoteditsave.php 16 POST /mfreqsave.php 14 POST /app/ajax.php 12 POST /itemModify.php 10 POST /purchaseaddsave.php 7 GET /plugins/fensa/fensa-ajax.php -- last 10 requests -- 103.104.165.99 - - [28/Aug/2026:08:19:28 +1000] "POST /app/ajax/selectFilter.php?call=filterinv&filter=&cursel=&curseltext=&fromMS=1&&nolimit=LIMIT%2050&include=&supplierid=5&contactid=5&tid=%25%25&returnobj=itemFilterSe 203.54.180.238 - - [28/Aug/2026:08:19:28 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 51 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=12257&tab=clienteditcontacts" "Mozilla/5.0 (Windows 103.104.165.99 - - [28/Aug/2026:08:19:29 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dpurchaseadd%26purchaseid%3D11272%23&call=getUserSetting&caller=ajaxSubmitLocal&seq=17459239553 HTTP/1.1" 200 166 "https://my.evo 203.54.180.238 - - [28/Aug/2026:08:19:29 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=opportunities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 103.104.164.114 - - [28/Aug/2026:08:19:29 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=quotereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 203.54.180.238 - - [28/Aug/2026:08:19:29 +1000] "POST /app/ajax/selectFilter.php?call=filterstaffandcontractors&filter=&cursel=&curseltext=&fromMS=1&&nolimit=LIMIT%201000&excludelabour=1&include=103&returnobj=ts_add_staf 203.54.180.238 - - [28/Aug/2026:08:19:29 +1000] "POST /mfreqsave.php?call=delbom&id=159058 HTTP/1.1" 200 81 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=43897" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [28/Aug/2026:08:19:29 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=43897" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 103.104.165.99 - - [28/Aug/2026:08:19:29 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=11272" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 203.54.180.238 - - [28/Aug/2026:08:19:29 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 125153 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=12257&tab=clienteditcontacts" "Mozilla/5.0 (W == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 44 GET /heartbeat.php 28 GET /factory_session_checker.php 14 GET /factory_session_processed_qty.php 14 GET /factory_session_joiner.php 7 POST /uploadsave.php 7 GET /index.php 4 POST /portal/register 2 GET /uploadsave.php 1 POST /login.php 1 GET /userlogin.php 1 GET /logoff.php -- last 10 requests -- 203.54.180.238 - - [28/Aug/2026:08:19:16 +1000] "GET /heartbeat.php?sentAt=1787869154&bytes=106,144,183,226&_=1787865012325 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [28/Aug/2026:08:19:17 +1000] "GET /index.php?page=inventory_picking HTTP/1.1" 200 9639 "https://portal.evolutionerp.com.au/index.php" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like 203.54.180.238 - - [28/Aug/2026:08:19:17 +1000] "POST /portal/register HTTP/1.1" 404 - "https://portal.evolutionerp.com.au/index.php?page=inventory_picking" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, 203.54.180.238 - - [28/Aug/2026:08:19:19 +1000] "GET /index.php?page=inventory_picking_goods&pickid=37894&seq=49632331800 HTTP/1.1" 200 13909 "https://portal.evolutionerp.com.au/index.php?page=inventory_picking" "Mozilla 203.54.180.238 - - [28/Aug/2026:08:19:20 +1000] "POST /portal/register HTTP/1.1" 404 - "https://portal.evolutionerp.com.au/index.php?page=inventory_picking_goods&pickid=37894&seq=49632331800" "Mozilla/5.0 (Linux; Android 203.54.180.238 - - [28/Aug/2026:08:19:21 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:08:19:20 +1000] "GET /heartbeat.php?sentAt=1787869160&bytes=106,144,183,232&_=1787810682213 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 101.119.133.71 - - [28/Aug/2026:08:19:22 +1000] "POST /uploadsave.php HTTP/1.1" 200 24 "https://portal.evolutionerp.com.au/index.php?page=opportunityedit&opportunityid=8522" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like 203.54.180.238 - - [28/Aug/2026:08:19:22 +1000] "GET /heartbeat.php?sentAt=1787869162&bytes=106,144,183,234&_=1787835392770 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 101.119.133.71 - - [28/Aug/2026:08:19:23 +1000] "POST /uploadsave.php HTTP/1.1" 200 24 "https://portal.evolutionerp.com.au/index.php?page=opportunityedit&opportunityid=8522" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like == madalice/madalice.com.au-ssl_log == -- top paths -- 2 GET /store/gift-card-2/ 2 GET /sneakers-for-individuals/ 1 GET /xmy.php 1 GET /wp-content/themes/luJMF.php 1 GET /wp-content/plugin-install.php 1 GET /wp-content/maintenance.php 1 GET /wp-blog.php 1 GET /wp-admin/sc.php 1 GET /wp-act.php 1 GET /wander.php 1 GET /v4.php 1 GET /v3.php -- last 10 requests -- 4.205.62.107 - - [28/Aug/2026:08:17:17 +1000] "GET /cli_bootstrap.php HTTP/1.1" 401 53 "-" "-" 4.205.62.107 - - [28/Aug/2026:08:17:17 +1000] "GET /wander.php HTTP/1.1" 401 53 "-" "-" 4.205.62.107 - - [28/Aug/2026:08:17:17 +1000] "GET /ah25.php HTTP/1.1" 401 53 "-" "-" 114.119.159.70 - - [28/Aug/2026:08:17:25 +1000] "GET /store/gift-card/?amp%3Brating=3&wcpr_image=1&wcpr_rating=4&wcpr_verified=1 HTTP/1.1" 301 1 "https://madalice.com.au/store/gift-card/?amp%3Brating=2&wcpr_image=1&wcpr_ 114.119.159.70 - - [28/Aug/2026:08:17:26 +1000] "GET /store/gift-card-2/?amp%3Brating=3&wcpr_image=1&wcpr_rating=4&wcpr_verified=1 HTTP/1.1" 200 50816 "https://madalice.com.au/store/gift-card/?amp%3Brating=2&wcpr_image=1 114.119.143.14 - - [28/Aug/2026:08:17:57 +1000] "GET /store/gift-card-2/?rating=4&wcpr_page=4 HTTP/1.1" 200 50806 "https://madalice.com.au/store/gift-card/?rating=4&wcpr_page=4" "Mozilla/5.0 (Linux; Android 7.0;) AppleWe 114.119.159.70 - - [28/Aug/2026:08:18:29 +1000] "GET /store/earth-tones-sketchy-cartoon/?wcpr_verified=1&wcpr_image=1&wcpr_page=4&rating=1 HTTP/1.1" 404 36674 "https://madalice.com.au/store/earth-tones-sketchy-cartoon/?w 114.119.143.104 - - [28/Aug/2026:08:19:01 +1000] "GET /store/design-your-own-send-in/?amp%3Bwcpr_page=2&rating=3&wcpr_image=1&wcpr_rating=2 HTTP/1.1" 200 53954 "https://madalice.com.au/store/design-your-own-send-in/?amp% 89.244.81.50 - - [28/Aug/2026:08:19:09 +1000] "GET /sneakers-for-individuals/?srsltid=AfmBOooM30gB2JR0dv1EYzsx8ipOBMviZ_1V9SQ5DZ6mdrMKpKt0-1K_ HTTP/1.1" 200 37213 "https://madalice.com.au" "Mozilla/5.0 (Windows NT 10.0; 118.101.169.234 - - [28/Aug/2026:08:19:15 +1000] "GET /sneakers-for-individuals/?srsltid=AfmBOooM30gB2JR0dv1EYzsx8ipOBMviZ_1V9SQ5DZ6mdrMKpKt0-1K_ HTTP/1.1" 200 37213 "https://madalice.com.au" "Mozilla/5.0 (Windows NT 10. --- last 30 samples (run-up to this incident) --- 2026-08-28 08:17:00 L1=1.56 run=5 blk=0 avail=9201 (66.8%) swpO=0 conn=1 myRSS=1811 php=5 phpRSS=299 ap=38 tcp=37 topuser=evolution 2026-08-28 08:17:09 L1=1.69 run=2 blk=0 avail=9222 (66.9%) swpO=0 conn=2 myRSS=1811 php=4 phpRSS=310 ap=30 tcp=28 topuser=madalice 2026-08-28 08:17:10 L1=1.69 run=1 blk=0 avail=9303 (67.5%) swpO=0 conn=1 myRSS=1811 php=4 phpRSS=233 ap=30 tcp=29 topuser=madalice 2026-08-28 08:17:19 L1=1.58 run=2 blk=0 avail=9216 (66.9%) swpO=0 conn=2 myRSS=1811 php=4 phpRSS=285 ap=35 tcp=38 topuser=madalice 2026-08-28 08:17:20 L1=1.58 run=5 blk=0 avail=9092 (66.0%) swpO=0 conn=1 myRSS=1811 php=7 phpRSS=500 ap=35 tcp=39 topuser=evolution 2026-08-28 08:17:29 L1=1.34 run=2 blk=0 avail=9294 (67.5%) swpO=0 conn=2 myRSS=1811 php=3 phpRSS=216 ap=29 tcp=32 topuser=madalice 2026-08-28 08:17:30 L1=1.34 run=2 blk=0 avail=9249 (67.1%) swpO=0 conn=1 myRSS=1811 php=6 phpRSS=356 ap=29 tcp=35 topuser=evolution 2026-08-28 08:17:39 L1=1.37 run=2 blk=0 avail=9282 (67.4%) swpO=0 conn=2 myRSS=1811 php=3 phpRSS=216 ap=29 tcp=40 topuser=madalice 2026-08-28 08:17:40 L1=1.37 run=2 blk=0 avail=9227 (67.0%) swpO=0 conn=3 myRSS=1811 php=5 phpRSS=344 ap=29 tcp=39 topuser=madalice 2026-08-28 08:17:49 L1=1.31 run=4 blk=0 avail=9206 (66.8%) swpO=0 conn=4 myRSS=1811 php=5 phpRSS=323 ap=36 tcp=49 topuser=corpkicks 2026-08-28 08:17:50 L1=1.31 run=2 blk=0 avail=9179 (66.6%) swpO=0 conn=3 myRSS=1811 php=4 phpRSS=314 ap=37 tcp=48 topuser=corpkicks 2026-08-28 08:18:00 L1=1.40 run=2 blk=1 avail=9127 (66.3%) swpO=0 conn=4 myRSS=1811 php=4 phpRSS=217 ap=40 tcp=37 topuser=madalice 2026-08-28 08:18:00 L1=1.40 run=1 blk=0 avail=9235 (67.0%) swpO=0 conn=3 myRSS=1811 php=4 phpRSS=232 ap=39 tcp=37 topuser=madalice 2026-08-28 08:18:10 L1=1.19 run=3 blk=0 avail=9301 (67.5%) swpO=0 conn=4 myRSS=1811 php=4 phpRSS=234 ap=31 tcp=28 topuser=madalice 2026-08-28 08:18:10 L1=1.19 run=5 blk=0 avail=9250 (67.1%) swpO=0 conn=3 myRSS=1811 php=7 phpRSS=366 ap=30 tcp=30 topuser=evolution 2026-08-28 08:18:20 L1=1.08 run=5 blk=0 avail=9198 (66.8%) swpO=0 conn=4 myRSS=1811 php=4 phpRSS=185 ap=31 tcp=36 topuser=olympic 2026-08-28 08:18:20 L1=1.08 run=4 blk=0 avail=9275 (67.3%) swpO=0 conn=3 myRSS=1811 php=5 phpRSS=287 ap=31 tcp=34 topuser=olympic 2026-08-28 08:18:30 L1=1.07 run=5 blk=0 avail=9049 (65.7%) swpO=0 conn=4 myRSS=1811 php=6 phpRSS=485 ap=37 tcp=45 topuser=madalice 2026-08-28 08:18:30 L1=1.07 run=2 blk=0 avail=9114 (66.2%) swpO=0 conn=3 myRSS=1811 php=5 phpRSS=388 ap=37 tcp=47 topuser=speedlin 2026-08-28 08:18:40 L1=0.98 run=3 blk=0 avail=9183 (66.7%) swpO=0 conn=4 myRSS=1811 php=4 phpRSS=233 ap=37 tcp=50 topuser=madalice 2026-08-28 08:18:40 L1=0.98 run=4 blk=0 avail=9171 (66.6%) swpO=0 conn=2 myRSS=1811 php=5 phpRSS=276 ap=37 tcp=50 topuser=madalice 2026-08-28 08:18:50 L1=0.83 run=8 blk=0 avail=8998 (65.3%) swpO=0 conn=6 myRSS=1811 php=10 phpRSS=579 ap=37 tcp=45 topuser=evolution 2026-08-28 08:18:50 L1=0.83 run=4 blk=0 avail=8995 (65.3%) swpO=0 conn=2 myRSS=1811 php=8 phpRSS=493 ap=37 tcp=43 topuser=evolution 2026-08-28 08:19:00 L1=0.78 run=1 blk=0 avail=9314 (67.6%) swpO=0 conn=6 myRSS=1812 php=3 phpRSS=100 ap=34 tcp=37 topuser=evolution 2026-08-28 08:19:00 L1=0.78 run=1 blk=0 avail=9314 (67.6%) swpO=0 conn=2 myRSS=1812 php=3 phpRSS=100 ap=34 tcp=35 topuser=evolution 2026-08-28 08:19:10 L1=0.81 run=4 blk=0 avail=9180 (66.6%) swpO=0 conn=6 myRSS=1812 php=4 phpRSS=285 ap=31 tcp=40 topuser=madalice 2026-08-28 08:19:10 L1=0.81 run=3 blk=0 avail=9114 (66.2%) swpO=0 conn=2 myRSS=1812 php=4 phpRSS=256 ap=31 tcp=38 topuser=madalice 2026-08-28 08:19:20 L1=1.65 run=3 blk=1 avail=8330 (60.5%) swpO=0 conn=6 myRSS=1819 php=13 phpRSS=1209 ap=47 tcp=53 topuser=madalice 2026-08-28 08:19:20 L1=1.65 run=4 blk=0 avail=8308 (60.3%) swpO=0 conn=2 myRSS=1825 php=13 phpRSS=1223 ap=47 tcp=52 topuser=madalice 2026-08-28 08:19:30 L1=1.70 run=9 blk=0 avail=7911 (57.4%) swpO=0 conn=5 myRSS=1844 php=17 phpRSS=1638 ap=61 tcp=64 topuser=madalice