INCIDENT 2026-09-01 08:29:52 trigger: php_rss=1597MB mysql_conn=19 ================================================================== load: 3.67 2.00 1.79 17/696 1002578 ncpu:10 mem_avail: 6579MB/13777MB (47.8%) swap_used:2264MB swapout:5/s blocked(D):0 running:19 iowait:0.4% steal:0.0% php: 21 procs / 1597MB heaviest user: evolution (18 procs, 1337MB) apache: 67 procs tcp_estab: 75 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3396 evolution 24 1338 nobody 66 1172 root 241 1099 netdata 7 215 madalice 1 161 cpanellogin 1 124 wp-toolkit 3 120 mailman 20 90 infinium 1 67 dovenull 6 46 kurri 2 27 mailnull 2 23 zabbix 1 18 dovecot 3 18 corpkicks 1 14 named 1 12 polkitd 1 4 nscd 1 4 cpanelconnecttrack 1 3 --- php workers by user --- USER PROCS RSS_MB evolution 17 1255 madalice 1 161 infinium 1 69 root 1 34 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5422 MB Active(file): 4861 MB Inactive(file): 866 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 570 MB CommitLimit: 10984 MB Committed_AS: 9589 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 06:07:23 7760 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 3478220 9.2 Ssl 4-06:10:43 /usr/sbin/mariadbd 508924 1 netdata 193828 1.9 Ssl 4-06:10:12 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3963221 3930335 root 189296 0.0 S 05:59:35 spamd child 3963222 3930335 root 179076 0.0 S 05:59:35 spamd child 3930335 1 root 171876 0.0 Ss 06:06:41 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1001455 3929444 madalice 165044 13.4 S 01:05 php-fpm: pool madalice_com_au 1002539 1002241 evolution 145624 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1002536 1001684 evolution 145428 62.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1002537 1000460 evolution 144120 58.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 552662 1353308 cpanellogin 127004 0.0 S 02:07:16 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base default_login_theme cpanel server_locale en 1002540 1002263 evolution 110892 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 509266 1 root 107544 0.0 Ss 4-06:10:09 /usr/lib/systemd/systemd-journald 1002528 1002281 evolution 106040 36.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1002545 1002302 evolution 97120 0.0 S 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1002544 1000501 infinium 85452 0.0 S 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 509640 508992 root 71572 0.0 Sl 4-06:10:07 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 3929420 1 wp-toolkit 69080 0.0 Ss 06:07:14 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1002248 1000490 evolution 67924 5.2 S 00:17 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1002547 983342 evolution 66648 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 509236 509098 root 58232 0.0 Sl 4-06:10:09 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 3929564 1 wp-toolkit 45024 0.0 Ss 06:07:13 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1002542 1002301 evolution 44220 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1002606 1002251 evolution 43456 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1002535 1001621 evolution 43380 6.0 R 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1001943 992132 evolution 43240 0.1 S 00:39 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1002453 1000500 evolution 43016 0.6 S 00:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 42812 0.1 Ss 41-05:48:35 cpsrvd (SSL) - waiting for connections 1002541 1002521 evolution 40532 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1002548 1002308 evolution 39148 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3929444 1 root 35124 0.0 Ss 06:07:14 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1002615 1002297 evolution 34644 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1002612 1001643 evolution 34156 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3929532 1 root 33524 0.0 Ss 06:07:13 lfd - sleeping 3929469 1 root 30060 0.0 Ss 06:07:14 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 1469 1 root 22220 0.1 Ss 63-22:20:04 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1000460 506832 nobody 22196 0.1 S 02:16 /usr/sbin/httpd -k start 1000199 506832 nobody 21712 0.0 S 02:39 /usr/sbin/httpd -k start 1001944 506832 nobody 21464 0.2 S 00:39 /usr/sbin/httpd -k start 1000477 506832 nobody 21388 0.2 S 02:15 /usr/sbin/httpd -k start 983342 506832 nobody 21352 0.0 S 06:24 /usr/sbin/httpd -k start 1000449 506832 nobody 21352 0.0 S 02:18 /usr/sbin/httpd -k start 1000519 506832 nobody 21312 0.1 S 02:14 /usr/sbin/httpd -k start 1002241 506832 nobody 21284 0.7 S 00:18 /usr/sbin/httpd -k start 1000498 506832 nobody 21184 0.1 S 02:14 /usr/sbin/httpd -k start 1000316 506832 nobody 21164 0.0 S 02:30 /usr/sbin/httpd -k start 1000507 506832 nobody 20880 0.0 S 02:14 /usr/sbin/httpd -k start 992132 506832 nobody 20820 0.0 S 04:45 /usr/sbin/httpd -k start 1000482 506832 nobody 20720 0.0 S 02:15 /usr/sbin/httpd -k start 998598 506832 nobody 20580 0.0 S 04:35 /usr/sbin/httpd -k start 999727 506832 nobody 20512 0.0 S 03:20 /usr/sbin/httpd -k start 1000470 506832 nobody 20372 0.0 S 02:15 /usr/sbin/httpd -k start 1000515 506832 nobody 20232 0.0 S 02:14 /usr/sbin/httpd -k start 1001643 506832 nobody 20152 0.0 S 00:52 /usr/sbin/httpd -k start 1001682 506832 nobody 20048 0.1 S 00:51 /usr/sbin/httpd -k start 1002264 506832 nobody 20024 0.1 S 00:16 /usr/sbin/httpd -k start 1000490 506832 nobody 20012 0.0 S 02:14 /usr/sbin/httpd -k start 1000513 506832 nobody 19852 0.0 S 02:14 /usr/sbin/httpd -k start 1463 1 root 19688 0.0 Ss 63-22:20:04 tailwatchd 1002280 506832 nobody 19616 0.2 S 00:15 /usr/sbin/httpd -k start 1002278 506832 nobody 19576 0.1 S 00:15 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+--------------+-----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+--------------+-----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 11030721 | lecsafec_evo | lecsafec_icatv2 | Execute | 38 | Sending data | update assets,results set results.asset_id=assets.id WHERE assets.uploadid='39164' AND results.uploadid=assets.uploadid AND assets.assetkey=results.assetkey AND assets.jobid=results.jobid | | 11043965 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+--------------+-----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 752 evolution/portal.evolutionerp.com.au-ssl_log 220 evolution/app.evolutionerp.com.au-ssl_log 115 infinium/infinium.net.au-ssl_log 79 evolution/evolutionerp.com.au-ssl_log 73 infinium/infinium.net.au 43 madalice/madalice.com.au-ssl_log 13 kurri/kurrimotorinn.com.au-ssl_log 5 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 394 203.54.180.238 128 103.104.165.99 115 40.115.94.245 104 182.239.240.254 101 180.181.236.49 99 20.104.18.15 71 35.196.45.4 53 101.166.96.210 47 124.168.5.234 39 150.228.151.47 35 1.128.27.146 33 103.104.164.114 18 165.225.233.87 8 1.129.107.213 7 147.161.215.103 --- top request paths across all vhosts (last 3 min) --- 244 POST /functions.php 130 GET /app/ajax.php 85 GET /factory_session_checker.php 74 POST /app/ajax.php 69 GET /index.php 58 GET /api/getItem/LWFBW2001KG 57 GET /api/getItem/LWHG2001KG 49 GET /heartbeat.php 43 GET /factory_session_joiner.php 42 GET /factory_session_processed_qty.php 39 POST /app/ajax/selectFilter.php 32 POST /plugins/csvexporter/plugin.php 24 POST /app/ajax/selectFilterSingle.php 23 POST /quoteditsave.php 17 POST /clienteditsave.php 16 POST /itemModify.php 15 POST /inveditsave.php 7 POST /wp-login.php 7 POST /wp-cron.php 7 POST /timesheets.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 244 POST /functions.php 130 GET /app/ajax.php 74 POST /app/ajax.php 69 GET /index.php 39 POST /app/ajax/selectFilter.php 32 POST /plugins/csvexporter/plugin.php 24 POST /app/ajax/selectFilterSingle.php 23 POST /quoteditsave.php 17 POST /clienteditsave.php 16 POST /itemModify.php 15 POST /inveditsave.php 7 POST /timesheets.php -- last 10 requests -- 101.166.96.210 - - [01/Sep/2026:08:29:51 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=invedit&id=7107&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [01/Sep/2026:08:29:51 +1000] "POST /login.php HTTP/1.1" 302 20 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0. 203.54.180.238 - - [01/Sep/2026:08:29:51 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78542" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 203.54.180.238 - - [01/Sep/2026:08:29:51 +1000] "GET / HTTP/1.1" 200 31764 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Saf 101.166.96.210 - - [01/Sep/2026:08:29:52 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinvedit%26id%3D7107%26tab%3Dgeneraltab&call=getUserSetting&caller=ajaxSubmitLocal&seq=17867937808 HTTP/1.1" 200 109 "https://my. 150.228.151.47 - - [01/Sep/2026:08:29:52 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=inveditsub&id=2903" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb 203.54.180.238 - - [01/Sep/2026:08:29:49 +1000] "POST /dispatchsave.php?save=1 HTTP/1.1" 302 47 "https://my.evolutionerp.com.au/index.php?page=dispatchedit&dispatchid=33985" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) App 203.54.180.238 - - [01/Sep/2026:08:29:50 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=dispatchedit&dispatchid=33985" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 203.54.180.238 - - [01/Sep/2026:08:29:52 +1000] "POST /login2save.php HTTP/1.1" 302 20 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 203.54.180.238 - - [01/Sep/2026:08:29:52 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 22860 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78542" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 85 GET /factory_session_checker.php 49 GET /heartbeat.php 43 GET /factory_session_joiner.php 42 GET /factory_session_processed_qty.php 1 POST /factory_functions.php -- last 10 requests -- 203.54.180.238 - - [01/Sep/2026:08:29:39 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [01/Sep/2026:08:29:40 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [01/Sep/2026:08:29:40 +1000] "GET /factory_session_joiner.php?id=34995 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [01/Sep/2026:08:29:40 +1000] "GET /factory_session_joiner.php?id=34992 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [01/Sep/2026:08:29:40 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 127 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [01/Sep/2026:08:29:41 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [01/Sep/2026:08:29:42 +1000] "GET /heartbeat.php?sentAt=1788215382&bytes=106,150,0,86&_=1788213485350 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" " 203.54.180.238 - - [01/Sep/2026:08:29:44 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [01/Sep/2026:08:29:44 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [01/Sep/2026:08:29:45 +1000] "GET /factory_session_joiner.php?id=35008 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 58 GET /api/getItem/LWFBW2001KG 57 GET /api/getItem/LWHG2001KG -- last 10 requests -- 40.115.94.245 - - [01/Sep/2026:08:29:06 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:08:29:06 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:08:29:06 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:08:29:06 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:08:29:06 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:08:29:07 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:08:29:07 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:08:29:07 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:08:29:07 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:08:29:07 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" --- last 30 samples (run-up to this incident) --- 2026-09-01 08:27:32 L1=1.18 run=2 blk=0 avail=7685 (55.8%) swpO=0 conn=1 myRSS=3401 php=3 phpRSS=178 ap=39 tcp=37 topuser=madalice 2026-09-01 08:27:32 L1=1.18 run=1 blk=0 avail=7671 (55.7%) swpO=0 conn=3 myRSS=3401 php=4 phpRSS=218 ap=39 tcp=40 topuser=madalice 2026-09-01 08:27:42 L1=1.07 run=11 blk=0 avail=6836 (49.6%) swpO=0 conn=1 myRSS=3401 php=9 phpRSS=663 ap=103 tcp=118 topuser=madalice 2026-09-01 08:27:42 L1=1.07 run=4 blk=0 avail=6725 (48.8%) swpO=0 conn=3 myRSS=3401 php=8 phpRSS=783 ap=103 tcp=114 topuser=madalice 2026-09-01 08:27:52 L1=1.54 run=1 blk=0 avail=7090 (51.5%) swpO=0 conn=1 myRSS=3401 php=4 phpRSS=355 ap=95 tcp=51 topuser=madalice 2026-09-01 08:27:52 L1=1.54 run=2 blk=0 avail=7039 (51.1%) swpO=0 conn=3 myRSS=3401 php=6 phpRSS=461 ap=95 tcp=49 topuser=madalice 2026-09-01 08:28:02 L1=1.45 run=10 blk=0 avail=7023 (51.0%) swpO=0 conn=1 myRSS=3401 php=8 phpRSS=618 ap=85 tcp=47 topuser=madalice 2026-09-01 08:28:02 L1=1.45 run=9 blk=0 avail=6947 (50.4%) swpO=0 conn=3 myRSS=3401 php=11 phpRSS=763 ap=85 tcp=50 topuser=madalice 2026-09-01 08:28:12 L1=1.54 run=4 blk=0 avail=7122 (51.7%) swpO=0 conn=1 myRSS=3401 php=6 phpRSS=534 ap=75 tcp=48 topuser=madalice 2026-09-01 08:28:12 L1=1.54 run=1 blk=0 avail=7219 (52.4%) swpO=0 conn=3 myRSS=3401 php=5 phpRSS=396 ap=75 tcp=41 topuser=madalice 2026-09-01 08:28:22 L1=1.53 run=3 blk=0 avail=7431 (53.9%) swpO=0 conn=1 myRSS=3401 php=4 phpRSS=237 ap=65 tcp=41 topuser=madalice 2026-09-01 08:28:22 L1=1.53 run=6 blk=0 avail=7331 (53.2%) swpO=0 conn=3 myRSS=3401 php=6 phpRSS=413 ap=65 tcp=42 topuser=madalice 2026-09-01 08:28:32 L1=1.67 run=1 blk=0 avail=7548 (54.8%) swpO=0 conn=1 myRSS=3401 php=3 phpRSS=178 ap=55 tcp=49 topuser=madalice 2026-09-01 08:28:32 L1=1.67 run=3 blk=0 avail=7536 (54.7%) swpO=0 conn=3 myRSS=3401 php=6 phpRSS=281 ap=55 tcp=48 topuser=madalice 2026-09-01 08:28:42 L1=1.64 run=3 blk=0 avail=7571 (55.0%) swpO=0 conn=1 myRSS=3401 php=5 phpRSS=262 ap=49 tcp=42 topuser=madalice 2026-09-01 08:28:43 L1=1.64 run=4 blk=0 avail=7534 (54.7%) swpO=0 conn=3 myRSS=3401 php=6 phpRSS=316 ap=49 tcp=40 topuser=evolution 2026-09-01 08:28:52 L1=1.62 run=5 blk=0 avail=7514 (54.5%) swpO=0 conn=1 myRSS=3401 php=7 phpRSS=420 ap=42 tcp=50 topuser=infinium 2026-09-01 08:28:53 L1=1.62 run=1 blk=0 avail=7529 (54.7%) swpO=0 conn=3 myRSS=3401 php=5 phpRSS=342 ap=42 tcp=49 topuser=madalice 2026-09-01 08:29:02 L1=1.52 run=4 blk=0 avail=7462 (54.2%) swpO=0 conn=1 myRSS=3401 php=8 phpRSS=481 ap=45 tcp=59 topuser=evolution 2026-09-01 08:29:03 L1=1.52 run=3 blk=0 avail=7544 (54.8%) swpO=0 conn=3 myRSS=3401 php=5 phpRSS=309 ap=45 tcp=55 topuser=madalice 2026-09-01 08:29:12 L1=1.76 run=3 blk=0 avail=7411 (53.8%) swpO=0 conn=4 myRSS=3401 php=7 phpRSS=506 ap=46 tcp=50 topuser=infinium 2026-09-01 08:29:13 L1=1.76 run=3 blk=0 avail=7537 (54.7%) swpO=0 conn=3 myRSS=3401 php=6 phpRSS=348 ap=46 tcp=46 topuser=evolution 2026-09-01 08:29:22 L1=1.93 run=5 blk=0 avail=7377 (53.5%) swpO=0 conn=4 myRSS=3401 php=7 phpRSS=543 ap=46 tcp=48 topuser=madalice 2026-09-01 08:29:23 L1=1.93 run=7 blk=0 avail=7309 (53.1%) swpO=0 conn=3 myRSS=3401 php=7 phpRSS=496 ap=45 tcp=47 topuser=madalice 2026-09-01 08:29:32 L1=2.25 run=4 blk=0 avail=7570 (54.9%) swpO=0 conn=4 myRSS=3401 php=6 phpRSS=317 ap=46 tcp=50 topuser=madalice 2026-09-01 08:29:33 L1=2.25 run=8 blk=0 avail=7385 (53.6%) swpO=0 conn=3 myRSS=3401 php=8 phpRSS=553 ap=46 tcp=57 topuser=evolution 2026-09-01 08:29:42 L1=2.68 run=15 blk=0 avail=6685 (48.5%) swpO=768 conn=4 myRSS=3396 php=19 phpRSS=1235 ap=75 tcp=63 topuser=evolution 2026-09-01 08:29:43 L1=2.68 run=16 blk=0 avail=6600 (47.9%) swpO=768 conn=3 myRSS=3396 php=14 phpRSS=1315 ap=74 tcp=63 topuser=evolution 2026-09-01 08:29:52 L1=3.67 run=19 blk=0 avail=6579 (47.8%) swpO=5 conn=19 myRSS=3396 php=21 phpRSS=1597 ap=67 tcp=75 topuser=evolution 2026-09-01 08:29:53 L1=3.67 run=19 blk=0 avail=6476 (47.0%) swpO=5 conn=14 myRSS=3396 php=18 phpRSS=1502 ap=68 tcp=71 topuser=evolution