INCIDENT 2026-08-28 08:52:20 trigger: php_rss=1929MB ================================================================== load: 2.78 1.98 1.74 9/642 1924953 ncpu:10 mem_avail: 7478MB/13777MB (54.3%) swap_used:736MB swapout:0/s blocked(D):0 running:12 iowait:0.2% steal:0.0% php: 15 procs / 1929MB heaviest user: madalice (10 procs, 1765MB) apache: 59 procs tcp_estab: 61 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1991 madalice 10 1804 root 250 1060 nobody 58 1001 mailman 20 399 netdata 7 204 evolution 7 122 wp-toolkit 3 102 mailnull 5 73 dovenull 6 56 cpanellogin 1 51 named 1 36 zabbix 1 25 kurri 2 23 dovecot 3 23 polkitd 1 20 candyfabcom 1 14 rpc 1 5 nscd 1 5 cpanelconnecttrack 1 4 --- php workers by user --- USER PROCS RSS_MB madalice 10 1819 evolution 3 111 root 1 29 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5590 MB Active(file): 4813 MB Inactive(file): 1099 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 540 MB CommitLimit: 10984 MB Committed_AS: 9251 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 06:33:40 11816 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2038792 9.5 Ssl 06:33:09 /usr/sbin/mariadbd 1924575 510022 madalice 239544 27.0 R 00:24 php-fpm: pool madalice_com_au 1924891 510022 madalice 232848 59.0 R 00:04 php-fpm: pool madalice_com_au 1924892 510022 madalice 222428 53.7 R 00:04 php-fpm: pool madalice_com_au 1924573 510022 madalice 209388 27.3 R 00:24 php-fpm: pool madalice_com_au 1924889 510022 madalice 207688 58.5 R 00:04 php-fpm: pool madalice_com_au 529388 527476 root 178376 0.0 S 06:28:02 spamd child 508924 1 netdata 173540 1.9 Ssl 06:32:38 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1922658 510022 madalice 162052 13.8 S 02:08 php-fpm: pool madalice_com_au 1924572 510022 madalice 161976 24.7 R 00:24 php-fpm: pool madalice_com_au 529389 527476 root 160108 0.0 S 06:28:02 spamd child 1924565 510022 madalice 158928 26.2 S 00:25 php-fpm: pool madalice_com_au 1924888 510022 madalice 158748 60.2 S 00:04 php-fpm: pool madalice_com_au 1924887 510022 madalice 158692 65.2 S 00:04 php-fpm: pool madalice_com_au 527476 1 root 117656 0.0 Ss 06:29:41 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 509236 509098 root 69340 0.0 Sl 06:32:35 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 938582 1 wp-toolkit 59660 0.0 Ss 04:40:12 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1890416 1353308 cpanellogin 52496 0.1 S 07:18 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base default_login_theme cpanel server_locale en 1353308 1 root 42088 0.0 Ss 37-06:11:01 cpsrvd (SSL) - waiting for connections 1924913 1923488 evolution 40328 5.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 508634 1 named 37268 0.0 Ssl 06:32:43 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 938585 1 wp-toolkit 36640 0.0 Ss 04:40:12 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1469 1 root 34492 0.1 Ss 59-22:42:30 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 509266 1 root 32648 0.0 Ss 06:32:35 /usr/lib/systemd/systemd-journald 509098 1 root 32068 0.0 Ss 06:32:36 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion 4180059 4180015 evolution 30884 0.0 Ss 08:52:20 /opt/cpanel/ea-php74/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 510022 1 root 30612 0.0 Ss 06:32:31 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 526869 1 root 29424 0.0 Ss 06:30:04 lfd - sleeping 481558 1 root 28692 0.1 Ssl 06:35:02 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 483898 1 zabbix 25904 0.2 Ssl 06:33:52 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 1904734 506832 nobody 23776 0.0 S 05:54 /usr/sbin/httpd -k start 1906669 506832 nobody 23568 0.0 S 03:46 /usr/sbin/httpd -k start 1907333 506832 nobody 23480 0.0 S 03:15 /usr/sbin/httpd -k start 1888726 506832 nobody 23460 0.0 S 09:21 /usr/sbin/httpd -k start 1463 1 root 22956 0.0 Ss 59-22:42:30 tailwatchd 1907274 506832 nobody 22656 0.0 S 03:19 /usr/sbin/httpd -k start 1906790 506832 nobody 22244 0.1 S 03:41 /usr/sbin/httpd -k start 1905298 506832 nobody 22220 0.0 S 05:09 /usr/sbin/httpd -k start 1923488 506832 nobody 22132 0.0 S 01:32 /usr/sbin/httpd -k start 1905265 506832 nobody 22096 0.1 S 05:11 /usr/sbin/httpd -k start 508857 508814 mailman 21940 0.0 S 06:32:41 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s 508863 508814 mailman 21904 0.0 S 06:32:41 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:5:8 -s 508867 508814 mailman 21824 0.0 S 06:32:41 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s 508856 508814 mailman 21820 0.0 S 06:32:41 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s 508855 508814 mailman 21816 0.0 S 06:32:41 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:2:4 -s 1907201 506832 nobody 21808 0.0 S 03:21 /usr/sbin/httpd -k start 508864 508814 mailman 21796 0.0 S 06:32:41 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:6:8 -s 1907658 506832 nobody 21772 0.0 S 02:58 /usr/sbin/httpd -k start 508858 508814 mailman 21768 0.0 S 06:32:41 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:8 -s 1923093 506832 nobody 21764 0.0 S 01:51 /usr/sbin/httpd -k start 508861 508814 mailman 21716 0.0 S 06:32:41 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:3:8 -s 508865 508814 mailman 21712 0.0 S 06:32:41 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:7:8 -s 938444 1 root 21688 0.0 Ss 04:40:15 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 508860 508814 mailman 21672 0.0 S 06:32:41 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:2:8 -s 508854 508814 mailman 21648 0.0 S 06:32:41 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:1:4 -s 1907714 506832 nobody 21568 0.0 S 02:57 /usr/sbin/httpd -k start 508866 508814 mailman 21512 0.0 S 06:32:41 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s 508859 508814 mailman 21504 0.0 S 06:32:41 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:1:8 -s 1906141 506832 nobody 21464 0.0 S 04:13 /usr/sbin/httpd -k start 508862 508814 mailman 21436 0.0 S 06:32:41 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:4:8 -s --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 791501 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 616 evolution/portal.evolutionerp.com.au-ssl_log 128 evolution/evolutionerp.com.au-ssl_log 97 kurri/kurrimotorinn.com.au-ssl_log 87 kamcool/kamcool.com.au-ssl_log 66 corpkicks/corporatekicks.com.au-ssl_log 47 customc/customcentral.com.au-ssl_log 39 evolution/evolutionerp.com.au 32 madalice/madalice.com.au-ssl_log 31 tubesupplies/tubesupplies.com.au-ssl_log 26 olympic/olympicfencing.com.au-ssl_log 9 vinesit/vinesit.com.au-ssl_log 2 (total vhosts taking traffic: 12) --- top client IPs across all vhosts (last 3 min) --- 293 203.54.180.238 156 14.1.95.251 154 20.104.18.15 131 103.104.165.99 66 20.151.9.151 62 20.48.251.3 57 180.181.236.49 50 103.104.164.114 45 20.48.250.41 39 20.169.16.7 32 1.145.0.18 24 3.129.21.10 7 147.161.213.71 6 1.145.102.184 5 124.168.5.234 --- top request paths across all vhosts (last 3 min) --- 196 POST /functions.php 141 GET /app/ajax.php 79 GET /index.php 61 POST /plugins/csvexporter/plugin.php 59 GET /heartbeat.php 26 POST /app/ajax/selectFilterSingle.php 18 POST /inveditsave.php 17 GET /factory_session_checker.php 16 POST /app/ajax.php 14 GET /api/runsheets.php 14 GET /api/api-check.php 13 POST /purchaseaddsave.php 11 POST /quoteditsave.php 10 POST /app/ajax/selectFilter.php 9 GET /factory_session_processed_qty.php 8 POST /clienteditsave.php 8 GET /factory_session_joiner.php 6 GET //app/ajax.php 5 GET /wp-content/plugins/hellopress/wp_filemanager.php 5 GET / --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 196 POST /functions.php 141 GET /app/ajax.php 76 GET /index.php 61 POST /plugins/csvexporter/plugin.php 26 POST /app/ajax/selectFilterSingle.php 18 POST /inveditsave.php 16 POST /app/ajax.php 13 POST /purchaseaddsave.php 11 POST /quoteditsave.php 10 POST /app/ajax/selectFilter.php 8 POST /clienteditsave.php 6 GET //app/ajax.php -- last 10 requests -- 103.104.164.114 - - [28/Aug/2026:08:52:13 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=1796§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 103.104.164.114 - - [28/Aug/2026:08:52:13 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 15814 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=1796§ionid=0" "Mozilla/5.0 (Windows NT 10.0; 203.54.180.238 - - [28/Aug/2026:08:52:14 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 2252 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29563" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK 203.54.180.238 - - [28/Aug/2026:08:52:14 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 238 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:08:52:14 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 23692 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29563" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple 147.161.213.71 - - [28/Aug/2026:08:52:14 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=siteedit&siteid=2489" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW 14.1.95.251 - - [28/Aug/2026:08:52:14 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinvedit%26id%3D2212%26tab%3Dgeneraltab&call=getUserSetting&caller=ajaxSubmitLocal&seq=11333065236 HTTP/1.1" 200 109 "https://my.evo 103.104.165.99 - - [28/Aug/2026:08:52:14 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 977 "https://my.evolutionerp.com.au/index.php?page=opportunityedit&opportunityid=3187" "Mozilla/5.0 (Windows NT 10.0; Win6 203.54.180.238 - - [28/Aug/2026:08:52:15 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=activities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. 103.104.164.114 - - [28/Aug/2026:08:52:15 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=1796§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 59 GET /heartbeat.php 17 GET /factory_session_checker.php 14 GET /api/runsheets.php 14 GET /api/api-check.php 9 GET /factory_session_processed_qty.php 8 GET /factory_session_joiner.php 3 POST /portal/register 3 GET /index.php 1 POST /factory_functions.php -- last 10 requests -- 203.54.180.238 - - [28/Aug/2026:08:52:02 +1000] "GET /heartbeat.php?sentAt=1787871122&bytes=106,144,191,146&_=1787870789261 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [28/Aug/2026:08:52:06 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 133 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [28/Aug/2026:08:52:06 +1000] "GET /factory_session_joiner.php?id=34936 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [28/Aug/2026:08:52:06 +1000] "GET /heartbeat.php?sentAt=1787871124&bytes=106,144,191,148&_=1787865012522 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [28/Aug/2026:08:52:07 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:08:52:09 +1000] "GET /heartbeat.php?sentAt=1787871129&bytes=106,144,191,153&_=1787869869700 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=8 203.54.180.238 - - [28/Aug/2026:08:52:12 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:08:52:12 +1000] "GET /heartbeat.php?sentAt=1787871132&bytes=106,144,191,156&_=1787835392967 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [28/Aug/2026:08:52:12 +1000] "GET /heartbeat.php?sentAt=1787871132&bytes=106,144,191,156&_=1787870789262 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [28/Aug/2026:08:52:16 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 133 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb == evolution/evolutionerp.com.au-ssl_log == -- top paths -- 2 GET /nice.php 1 GET /xmy.php 1 GET /w.php 1 GET /wp-content/uploads/ 1 GET /wp-content/themes/luJMF.php 1 GET /wp-content/plugin-install.php 1 GET /wp-content/maintenance.php 1 GET /wp-blog.php 1 GET /wp-admin/sc.php 1 GET /wp-act.php 1 GET /wander.php 1 GET /vv.php -- last 10 requests -- 20.104.18.15 - - [28/Aug/2026:08:50:48 +1000] "GET /504.php HTTP/1.1" 404 202754 "-" "-" 20.104.18.15 - - [28/Aug/2026:08:50:50 +1000] "GET /nice.php?p= HTTP/1.1" 301 - "-" "-" 20.104.18.15 - - [28/Aug/2026:08:50:51 +1000] "GET /nice.php HTTP/1.1" 404 202755 "-" "-" 20.104.18.15 - - [28/Aug/2026:08:50:53 +1000] "GET /beence.php HTTP/1.1" 404 202757 "-" "-" 20.104.18.15 - - [28/Aug/2026:08:50:55 +1000] "GET /222.php HTTP/1.1" 403 13 "-" "-" 20.104.18.15 - - [28/Aug/2026:08:50:55 +1000] "GET /ops.php HTTP/1.1" 404 202754 "-" "-" 20.104.18.15 - - [28/Aug/2026:08:50:57 +1000] "GET /4PJcpMFsD8B.php HTTP/1.1" 404 202762 "-" "-" 20.104.18.15 - - [28/Aug/2026:08:50:59 +1000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 202762 "-" "-" 20.104.18.15 - - [28/Aug/2026:08:51:01 +1000] "GET /f.php HTTP/1.1" 404 202752 "-" "-" 20.104.18.15 - - [28/Aug/2026:08:51:03 +1000] "GET /1dfcd2d08f.php HTTP/1.1" 404 202761 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-28 08:49:59 L1=3.01 run=1 blk=0 avail=8999 (65.3%) swpO=0 conn=2 myRSS=1987 php=4 phpRSS=232 ap=56 tcp=37 topuser=madalice 2026-08-28 08:50:00 L1=3.01 run=1 blk=0 avail=8990 (65.3%) swpO=0 conn=2 myRSS=1987 php=4 phpRSS=232 ap=56 tcp=33 topuser=madalice 2026-08-28 08:50:09 L1=2.93 run=4 blk=0 avail=9076 (65.9%) swpO=0 conn=2 myRSS=1987 php=7 phpRSS=309 ap=46 tcp=46 topuser=aaa 2026-08-28 08:50:10 L1=2.93 run=6 blk=0 avail=9066 (65.8%) swpO=0 conn=2 myRSS=1987 php=5 phpRSS=190 ap=46 tcp=45 topuser=evolution 2026-08-28 08:50:19 L1=2.62 run=3 blk=0 avail=8970 (65.1%) swpO=0 conn=2 myRSS=1988 php=6 phpRSS=381 ap=46 tcp=53 topuser=evolution 2026-08-28 08:50:20 L1=2.62 run=3 blk=0 avail=8921 (64.8%) swpO=0 conn=2 myRSS=1988 php=5 phpRSS=395 ap=46 tcp=49 topuser=evolution 2026-08-28 08:50:29 L1=2.61 run=2 blk=0 avail=8974 (65.1%) swpO=0 conn=2 myRSS=1988 php=6 phpRSS=419 ap=41 tcp=48 topuser=evolution 2026-08-28 08:50:30 L1=2.61 run=6 blk=0 avail=9016 (65.4%) swpO=0 conn=2 myRSS=1988 php=6 phpRSS=365 ap=42 tcp=52 topuser=evolution 2026-08-28 08:50:39 L1=2.58 run=3 blk=0 avail=9021 (65.5%) swpO=0 conn=2 myRSS=1988 php=5 phpRSS=322 ap=44 tcp=51 topuser=madalice 2026-08-28 08:50:40 L1=2.58 run=4 blk=0 avail=8986 (65.2%) swpO=0 conn=2 myRSS=1988 php=6 phpRSS=388 ap=43 tcp=50 topuser=evolution 2026-08-28 08:50:49 L1=2.49 run=3 blk=0 avail=9043 (65.6%) swpO=0 conn=2 myRSS=1989 php=5 phpRSS=298 ap=44 tcp=45 topuser=madalice 2026-08-28 08:50:50 L1=2.49 run=1 blk=0 avail=9066 (65.8%) swpO=0 conn=1 myRSS=1989 php=3 phpRSS=216 ap=44 tcp=45 topuser=madalice 2026-08-28 08:50:59 L1=2.34 run=3 blk=0 avail=8956 (65.0%) swpO=0 conn=3 myRSS=1989 php=5 phpRSS=410 ap=40 tcp=44 topuser=evolution 2026-08-28 08:51:00 L1=2.34 run=2 blk=0 avail=9079 (65.9%) swpO=0 conn=1 myRSS=1989 php=3 phpRSS=216 ap=40 tcp=46 topuser=madalice 2026-08-28 08:51:10 L1=2.35 run=1 blk=0 avail=9090 (66.0%) swpO=0 conn=3 myRSS=1989 php=4 phpRSS=257 ap=40 tcp=46 topuser=madalice 2026-08-28 08:51:10 L1=2.35 run=1 blk=0 avail=9105 (66.1%) swpO=0 conn=1 myRSS=1989 php=3 phpRSS=216 ap=40 tcp=44 topuser=madalice 2026-08-28 08:51:20 L1=2.07 run=1 blk=0 avail=9019 (65.5%) swpO=0 conn=3 myRSS=1989 php=6 phpRSS=363 ap=42 tcp=48 topuser=evolution 2026-08-28 08:51:20 L1=2.07 run=1 blk=0 avail=9017 (65.4%) swpO=0 conn=1 myRSS=1989 php=5 phpRSS=324 ap=44 tcp=44 topuser=madalice 2026-08-28 08:51:30 L1=1.75 run=5 blk=0 avail=9128 (66.3%) swpO=0 conn=3 myRSS=1990 php=5 phpRSS=300 ap=36 tcp=39 topuser=madalice 2026-08-28 08:51:30 L1=1.75 run=1 blk=0 avail=9157 (66.5%) swpO=0 conn=1 myRSS=1990 php=3 phpRSS=219 ap=35 tcp=40 topuser=madalice 2026-08-28 08:51:40 L1=1.63 run=3 blk=0 avail=9103 (66.1%) swpO=0 conn=3 myRSS=1990 php=5 phpRSS=329 ap=38 tcp=43 topuser=madalice 2026-08-28 08:51:40 L1=1.63 run=1 blk=0 avail=9145 (66.4%) swpO=0 conn=1 myRSS=1990 php=3 phpRSS=218 ap=38 tcp=43 topuser=madalice 2026-08-28 08:51:50 L1=1.54 run=4 blk=0 avail=9022 (65.5%) swpO=0 conn=3 myRSS=1990 php=5 phpRSS=347 ap=41 tcp=45 topuser=madalice 2026-08-28 08:51:50 L1=1.54 run=1 blk=0 avail=9090 (66.0%) swpO=0 conn=1 myRSS=1990 php=3 phpRSS=219 ap=41 tcp=45 topuser=madalice 2026-08-28 08:52:00 L1=1.46 run=4 blk=0 avail=8428 (61.2%) swpO=0 conn=5 myRSS=1990 php=11 phpRSS=1053 ap=46 tcp=55 topuser=madalice 2026-08-28 08:52:00 L1=1.46 run=1 blk=0 avail=8460 (61.4%) swpO=0 conn=1 myRSS=1990 php=8 phpRSS=924 ap=48 tcp=56 topuser=madalice 2026-08-28 08:52:10 L1=1.32 run=1 blk=0 avail=8480 (61.5%) swpO=0 conn=5 myRSS=1990 php=7 phpRSS=841 ap=51 tcp=46 topuser=madalice 2026-08-28 08:52:10 L1=1.32 run=2 blk=0 avail=8459 (61.4%) swpO=0 conn=1 myRSS=1990 php=8 phpRSS=907 ap=50 tcp=44 topuser=madalice 2026-08-28 08:52:20 L1=2.78 run=12 blk=0 avail=7478 (54.3%) swpO=0 conn=9 myRSS=1991 php=15 phpRSS=1929 ap=59 tcp=61 topuser=madalice 2026-08-28 08:52:20 L1=2.78 run=9 blk=0 avail=7424 (53.9%) swpO=0 conn=5 myRSS=1991 php=14 phpRSS=1976 ap=59 tcp=62 topuser=madalice