INCIDENT 2026-08-28 11:30:40 trigger: php_rss=1669MB ================================================================== load: 4.23 2.11 1.87 8/649 2528160 ncpu:10 mem_avail: 7486MB/13777MB (54.3%) swap_used:807MB swapout:356/s blocked(D):0 running:2 iowait:0.1% steal:0.0% php: 14 procs / 1669MB heaviest user: madalice (10 procs, 1553MB) apache: 65 procs tcp_estab: 57 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2212 madalice 10 1553 nobody 64 1147 root 249 1094 mailman 20 381 netdata 7 198 evolution 9 139 cpanellogin 1 111 wp-toolkit 3 98 dovenull 6 58 mailnull 3 39 named 1 32 zabbix 1 25 dovecot 3 24 aaa 1 15 polkitd 1 14 alison 1 14 kurri 1 10 rpc 1 5 nscd 1 5 --- php workers by user --- USER PROCS RSS_MB madalice 10 1553 evolution 2 87 root 1 29 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5990 MB Active(file): 4187 MB Inactive(file): 2182 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 582 MB CommitLimit: 10984 MB Committed_AS: 9047 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 09:12:00 11688 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2265672 15.2 Rsl 09:11:29 /usr/sbin/mariadbd 529388 527476 root 194808 0.1 S 09:06:22 spamd child 508924 1 netdata 170388 2.0 Ssl 09:10:58 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2513639 510022 madalice 160136 14.6 S 00:41 php-fpm: pool madalice_com_au 2528083 510022 madalice 159220 47.7 S 00:08 php-fpm: pool madalice_com_au 2520832 510022 madalice 159172 12.0 S 00:34 php-fpm: pool madalice_com_au 2513638 510022 madalice 159112 15.5 S 00:42 php-fpm: pool madalice_com_au 2528084 510022 madalice 159080 49.7 S 00:08 php-fpm: pool madalice_com_au 2528085 510022 madalice 159064 46.5 S 00:08 php-fpm: pool madalice_com_au 2513643 510022 madalice 158928 14.8 S 00:41 php-fpm: pool madalice_com_au 2528086 510022 madalice 158884 34.3 S 00:08 php-fpm: pool madalice_com_au 2528087 510022 madalice 158808 31.6 S 00:08 php-fpm: pool madalice_com_au 2528088 510022 madalice 157956 32.2 S 00:08 php-fpm: pool madalice_com_au 529389 527476 root 157412 0.0 S 09:06:22 spamd child 1890416 1353308 cpanellogin 113944 0.0 S 02:45:38 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base default_login_theme cpanel server_locale en 527476 1 root 111672 0.0 Ss 09:08:01 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2528132 2526546 evolution 67036 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 509236 509098 root 65676 0.0 Sl 09:10:55 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 938582 1 wp-toolkit 57052 0.0 Ss 07:18:32 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1353308 1 root 42456 0.0 Ss 37-08:49:21 cpsrvd (SSL) - waiting for connections 509266 1 root 39240 0.0 Ss 09:10:55 /usr/lib/systemd/systemd-journald 2512872 1353308 root 37936 0.0 S 01:30 whostmgrd - serving 1.144.107.82 938585 1 wp-toolkit 36248 0.0 Ss 07:18:32 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1469 1 root 33264 0.1 Ss 60-01:20:50 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 508634 1 named 33008 0.0 Ssl 09:11:03 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 510022 1 root 30544 0.0 Ss 09:10:51 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 526869 1 root 29644 0.0 Ss 09:08:24 lfd - sleeping 4180059 4180015 evolution 28780 0.0 Ss 11:30:40 /opt/cpanel/ea-php74/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 481558 1 root 27632 0.1 Ssl 09:13:22 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 483898 1 zabbix 25952 0.2 Ssl 09:12:12 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 509098 1 root 24544 0.0 Ss 09:10:56 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion 2494881 506832 nobody 23352 0.0 S 06:08 /usr/sbin/httpd -k start 1463 1 root 23048 0.0 Ss 60-01:20:50 tailwatchd 2513458 506832 nobody 22836 0.2 S 00:51 /usr/sbin/httpd -k start 2512350 506832 nobody 22308 0.0 S 01:59 /usr/sbin/httpd -k start 2509402 506832 nobody 22232 0.0 S 05:24 /usr/sbin/httpd -k start 508867 508814 mailman 21632 0.0 S 09:11:01 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s 508863 508814 mailman 21564 0.0 S 09:11:01 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:5:8 -s 508857 508814 mailman 21548 0.0 S 09:11:01 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s 508856 508814 mailman 21544 0.0 S 09:11:01 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s 508864 508814 mailman 21524 0.0 S 09:11:01 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:6:8 -s 508861 508814 mailman 21452 0.0 S 09:11:01 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:3:8 -s 508854 508814 mailman 21424 0.0 S 09:11:01 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:1:4 -s 508865 508814 mailman 21412 0.0 S 09:11:01 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:7:8 -s 2510923 506832 nobody 21396 0.0 S 03:46 /usr/sbin/httpd -k start 508859 508814 mailman 21196 0.0 S 09:11:01 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:1:8 -s 508862 508814 mailman 21116 0.0 S 09:11:01 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:4:8 -s 2512414 506832 nobody 21060 0.1 S 01:54 /usr/sbin/httpd -k start 508858 508814 mailman 20900 0.0 S 09:11:01 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:8 -s 2511946 506832 nobody 20764 0.1 S 02:24 /usr/sbin/httpd -k start 2512395 506832 nobody 20736 0.0 S 01:55 /usr/sbin/httpd -k start 2512415 506832 nobody 20600 0.0 S 01:54 /usr/sbin/httpd -k start 2513222 506832 nobody 20600 0.1 S 01:06 /usr/sbin/httpd -k start 938444 1 root 20268 0.0 Ss 07:18:35 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 2526556 506832 nobody 20260 0.1 S 00:29 /usr/sbin/httpd -k start 508855 508814 mailman 20160 0.0 S 09:11:01 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:2:4 -s 2513376 506832 nobody 20160 0.0 S 00:56 /usr/sbin/httpd -k start 2512552 506832 nobody 20148 0.0 S 01:48 /usr/sbin/httpd -k start 2525174 506832 nobody 20128 0.1 S 00:30 /usr/sbin/httpd -k start 2513378 506832 nobody 20084 0.0 S 00:56 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 1911486 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 871 evolution/portal.evolutionerp.com.au-ssl_log 216 infinium/infinium.net.au-ssl_log 148 alison/testing.alisonarts.com.au-ssl_log 90 alison/testing.alisonarts.com.au 88 aaa/aaadownunder.com.au-ssl_log 61 madalice/madalice.com.au-ssl_log 30 corpkicks/corporatekicks.com.au-ssl_log 3 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 708 203.54.180.238 178 20.151.129.194 166 103.104.165.99 146 4.205.62.107 94 14.1.95.251 44 52.139.37.240 38 180.181.236.49 22 32.195.67.60 22 203.40.84.196 22 101.166.96.210 11 120.21.147.42 9 103.104.164.114 7 165.225.233.87 6 147.161.215.103 6 1.145.102.184 --- top request paths across all vhosts (last 3 min) --- 225 POST /functions.php 184 GET /app/ajax.php 84 GET /index.php 79 GET /factory_session_checker.php 70 POST /plugins/csvexporter/plugin.php 52 GET /heartbeat.php 39 POST /app/ajax.php 39 GET /factory_session_processed_qty.php 39 GET /factory_session_joiner.php 30 POST /app/ajax/selectFilterSingle.php 29 POST /jobeditsave.php 28 POST /clienteditsave.php 22 POST /quoteditsave.php 17 POST /app/ajax/selectFilter.php 16 POST /itemModify.php 15 GET //app/ajax.php 14 POST /logsave.php 14 POST /inveditsave.php 13 HEAD /index.php 11 POST /plugins/fencecosting/plugin.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 225 POST /functions.php 184 GET /app/ajax.php 80 GET /index.php 70 POST /plugins/csvexporter/plugin.php 39 POST /app/ajax.php 30 POST /app/ajax/selectFilterSingle.php 29 POST /jobeditsave.php 28 POST /clienteditsave.php 22 POST /quoteditsave.php 17 POST /app/ajax/selectFilter.php 16 POST /itemModify.php 15 GET //app/ajax.php -- last 10 requests -- 203.54.180.238 - - [28/Aug/2026:11:30:35 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29560&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ 203.40.84.196 - - [28/Aug/2026:11:30:35 +1000] "POST /app/ajax/selectFilter.php?call=filterinv&filter=GATE%20POS HTTP/1.1" 200 23226 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36971§ionid=0" "Moz 1.145.102.184 - - [28/Aug/2026:11:30:36 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=activities&date=04-09-2026" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) A 203.54.180.238 - - [28/Aug/2026:11:30:36 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=invedit&id=6345&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x 203.40.84.196 - - [28/Aug/2026:11:30:36 +1000] "POST /app/ajax/selectFilter.php?call=filterinv&filter=GATE%20POST HTTP/1.1" 200 23173 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36971§ionid=0" "Mo 14.1.95.251 - - [28/Aug/2026:11:30:37 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=inveditsub&id=3901" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 203.54.180.238 - - [28/Aug/2026:11:30:38 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29563" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, 180.181.236.49 - - [28/Aug/2026:11:30:38 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=purchasereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:11:30:37 +1000] "GET /index.php?page=inventory HTTP/1.1" 200 40230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 203.54.180.238 - - [28/Aug/2026:11:30:39 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=inventory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 79 GET /factory_session_checker.php 52 GET /heartbeat.php 39 GET /factory_session_processed_qty.php 39 GET /factory_session_joiner.php 3 POST /portal/register 3 GET /index.php 1 POST /factory_functions.php -- last 10 requests -- 203.54.180.238 - - [28/Aug/2026:11:30:28 +1000] "GET /factory_session_joiner.php?id=34938 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [28/Aug/2026:11:30:28 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 127 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [28/Aug/2026:11:30:28 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:11:30:29 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:11:30:29 +1000] "GET /heartbeat.php?sentAt=1787880629&bytes=106,144,228,181&_=1787875286074 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [28/Aug/2026:11:30:30 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 147 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [28/Aug/2026:11:30:30 +1000] "GET /factory_session_joiner.php?id=34943 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [28/Aug/2026:11:30:31 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:11:30:33 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:11:30:32 +1000] "GET /heartbeat.php?sentAt=1787880632&bytes=106,144,228,184&_=1787835393917 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 == infinium/infinium.net.au-ssl_log == -- top paths -- 2 GET /doc.php 1 POST /wp-login.php 1 POST /wp-cron.php 1 GET /xqq.php 1 GET /xmy.php 1 GET /xin1.php 1 GET /xa.php 1 GET /wsws.php 1 GET /ws79.php 1 GET /ws61.php 1 GET /wpver.php 1 GET /wp-jufsis.php -- last 10 requests -- 4.205.62.107 - - [28/Aug/2026:11:30:02 +1000] "GET /a1vx.php HTTP/1.1" 404 5749 "-" "-" 4.205.62.107 - - [28/Aug/2026:11:30:02 +1000] "GET /phpsysinfo.php HTTP/1.1" 404 5749 "-" "-" 4.205.62.107 - - [28/Aug/2026:11:30:03 +1000] "GET /koiy.php HTTP/1.1" 404 5749 "-" "-" 4.205.62.107 - - [28/Aug/2026:11:30:04 +1000] "GET /test1.php HTTP/1.1" 404 5749 "-" "-" 4.205.62.107 - - [28/Aug/2026:11:30:05 +1000] "GET /lmfi2.php HTTP/1.1" 404 5749 "-" "-" 4.205.62.107 - - [28/Aug/2026:11:30:06 +1000] "GET /aws_sdk_settings.php HTTP/1.1" 404 5749 "-" "-" 4.205.62.107 - - [28/Aug/2026:11:30:06 +1000] "GET /mga.php HTTP/1.1" 404 5749 "-" "-" 4.205.62.107 - - [28/Aug/2026:11:30:06 +1000] "GET /konfig.php HTTP/1.1" 404 5749 "-" "-" 4.205.62.107 - - [28/Aug/2026:11:30:07 +1000] "GET /nw.php HTTP/1.1" 404 5749 "-" "-" 4.205.62.107 - - [28/Aug/2026:11:30:07 +1000] "GET /myfile.php HTTP/1.1" 404 5749 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-28 11:28:10 L1=1.41 run=4 blk=0 avail=8618 (62.6%) swpO=0 conn=3 myRSS=2225 php=7 phpRSS=407 ap=36 tcp=44 topuser=evolution 2026-08-28 11:28:20 L1=1.26 run=2 blk=0 avail=8593 (62.4%) swpO=0 conn=2 myRSS=2225 php=5 phpRSS=290 ap=52 tcp=54 topuser=madalice 2026-08-28 11:28:20 L1=1.26 run=3 blk=0 avail=8548 (62.0%) swpO=0 conn=3 myRSS=2225 php=6 phpRSS=364 ap=51 tcp=57 topuser=evolution 2026-08-28 11:28:30 L1=1.22 run=2 blk=0 avail=8580 (62.3%) swpO=0 conn=2 myRSS=2225 php=9 phpRSS=486 ap=43 tcp=49 topuser=evolution 2026-08-28 11:28:30 L1=1.22 run=2 blk=0 avail=8621 (62.6%) swpO=0 conn=3 myRSS=2225 php=6 phpRSS=337 ap=43 tcp=48 topuser=madalice 2026-08-28 11:28:40 L1=1.11 run=2 blk=0 avail=8521 (61.8%) swpO=0 conn=2 myRSS=2225 php=6 phpRSS=482 ap=40 tcp=58 topuser=evolution 2026-08-28 11:28:40 L1=1.11 run=2 blk=0 avail=8650 (62.8%) swpO=0 conn=2 myRSS=2225 php=4 phpRSS=281 ap=42 tcp=60 topuser=madalice 2026-08-28 11:28:50 L1=1.48 run=8 blk=0 avail=8343 (60.6%) swpO=0 conn=6 myRSS=2225 php=14 phpRSS=746 ap=59 tcp=68 topuser=evolution 2026-08-28 11:28:50 L1=1.48 run=5 blk=0 avail=8397 (61.0%) swpO=0 conn=2 myRSS=2225 php=11 phpRSS=586 ap=59 tcp=71 topuser=evolution 2026-08-28 11:29:00 L1=1.63 run=2 blk=0 avail=8456 (61.4%) swpO=0 conn=6 myRSS=2225 php=5 phpRSS=358 ap=64 tcp=57 topuser=madalice 2026-08-28 11:29:00 L1=1.63 run=4 blk=0 avail=8505 (61.7%) swpO=0 conn=2 myRSS=2225 php=4 phpRSS=281 ap=63 tcp=59 topuser=madalice 2026-08-28 11:29:10 L1=1.85 run=2 blk=0 avail=8515 (61.8%) swpO=0 conn=6 myRSS=2225 php=6 phpRSS=388 ap=54 tcp=57 topuser=evolution 2026-08-28 11:29:10 L1=1.85 run=3 blk=0 avail=8534 (61.9%) swpO=0 conn=2 myRSS=2225 php=6 phpRSS=382 ap=53 tcp=58 topuser=evolution 2026-08-28 11:29:20 L1=1.57 run=1 blk=0 avail=8670 (62.9%) swpO=0 conn=6 myRSS=2225 php=4 phpRSS=257 ap=44 tcp=45 topuser=madalice 2026-08-28 11:29:20 L1=1.57 run=1 blk=0 avail=8689 (63.1%) swpO=0 conn=2 myRSS=2225 php=3 phpRSS=216 ap=44 tcp=46 topuser=madalice 2026-08-28 11:29:30 L1=1.48 run=4 blk=0 avail=8793 (63.8%) swpO=0 conn=6 myRSS=2225 php=5 phpRSS=183 ap=36 tcp=45 topuser=evolution 2026-08-28 11:29:30 L1=1.48 run=1 blk=0 avail=8882 (64.5%) swpO=0 conn=2 myRSS=2225 php=4 phpRSS=84 ap=36 tcp=48 topuser=evolution 2026-08-28 11:29:40 L1=1.25 run=2 blk=0 avail=8719 (63.3%) swpO=0 conn=6 myRSS=2225 php=5 phpRSS=302 ap=37 tcp=45 topuser=evolution 2026-08-28 11:29:40 L1=1.25 run=2 blk=0 avail=8731 (63.4%) swpO=0 conn=2 myRSS=2225 php=4 phpRSS=258 ap=37 tcp=45 topuser=madalice 2026-08-28 11:29:50 L1=2.21 run=3 blk=0 avail=8396 (60.9%) swpO=0 conn=5 myRSS=2225 php=7 phpRSS=512 ap=59 tcp=73 topuser=infinium 2026-08-28 11:29:50 L1=2.21 run=3 blk=0 avail=8162 (59.2%) swpO=0 conn=2 myRSS=2225 php=7 phpRSS=660 ap=75 tcp=72 topuser=infinium 2026-08-28 11:30:00 L1=2.10 run=16 blk=1 avail=7680 (55.7%) swpO=40 conn=5 myRSS=2225 php=9 phpRSS=1257 ap=67 tcp=60 topuser=madalice 2026-08-28 11:30:01 L1=2.10 run=7 blk=0 avail=7982 (57.9%) swpO=36 conn=2 myRSS=2225 php=11 phpRSS=982 ap=67 tcp=61 topuser=madalice 2026-08-28 11:30:10 L1=2.25 run=6 blk=0 avail=7751 (56.3%) swpO=1142 conn=5 myRSS=2213 php=12 phpRSS=1273 ap=67 tcp=97 topuser=madalice 2026-08-28 11:30:11 L1=2.25 run=3 blk=0 avail=7691 (55.8%) swpO=1142 conn=2 myRSS=2213 php=12 phpRSS=1300 ap=75 tcp=97 topuser=madalice 2026-08-28 11:30:20 L1=2.20 run=4 blk=0 avail=7659 (55.6%) swpO=0 conn=5 myRSS=2213 php=11 phpRSS=1259 ap=84 tcp=59 topuser=madalice 2026-08-28 11:30:21 L1=2.20 run=5 blk=0 avail=7666 (55.6%) swpO=0 conn=2 myRSS=2213 php=11 phpRSS=1260 ap=83 tcp=60 topuser=madalice 2026-08-28 11:30:30 L1=2.02 run=4 blk=0 avail=7869 (57.1%) swpO=0 conn=5 myRSS=2213 php=14 phpRSS=1232 ap=73 tcp=66 topuser=madalice 2026-08-28 11:30:31 L1=2.02 run=8 blk=0 avail=7826 (56.8%) swpO=0 conn=2 myRSS=2213 php=15 phpRSS=1294 ap=73 tcp=69 topuser=madalice 2026-08-28 11:30:40 L1=4.23 run=2 blk=0 avail=7486 (54.3%) swpO=356 conn=1 myRSS=2212 php=14 phpRSS=1669 ap=65 tcp=57 topuser=madalice