INCIDENT 2026-09-01 09:14:27 trigger: php_rss=2093MB mysql_conn=15 ================================================================== load: 2.46 2.09 2.04 17/686 1166728 ncpu:10 mem_avail: 6005MB/13777MB (43.6%) swap_used:2267MB swapout:1688/s blocked(D):0 running:16 iowait:1.1% steal:0.0% php: 17 procs / 2093MB heaviest user: madalice (10 procs, 1868MB) apache: 47 procs tcp_estab: 62 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3432 madalice 10 1956 root 245 1107 nobody 46 800 evolution 16 346 netdata 7 217 wp-toolkit 3 115 mailman 20 90 mailnull 4 54 dovenull 6 46 dovecot 3 18 zabbix 1 17 lowrange 1 14 cpanellogin 1 13 named 1 12 kurri 1 12 polkitd 1 4 nscd 1 4 cpanelconnecttrack 1 3 dbus 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 10 1974 evolution 7 298 root 1 34 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5057 MB Active(file): 3938 MB Inactive(file): 1422 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 515 MB CommitLimit: 10984 MB Committed_AS: 9635 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 06:51:58 5428 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 3515156 9.5 Ssl 4-06:55:18 /usr/sbin/mariadbd 1166676 3929444 madalice 251668 88.6 R 00:03 php-fpm: pool madalice_com_au 1166617 3929444 madalice 250516 39.7 R 00:10 php-fpm: pool madalice_com_au 1166667 3929444 madalice 245128 72.7 R 00:04 php-fpm: pool madalice_com_au 1166666 3929444 madalice 222956 66.7 R 00:04 php-fpm: pool madalice_com_au 1166665 3929444 madalice 218524 67.5 R 00:04 php-fpm: pool madalice_com_au 508924 1 netdata 196364 1.9 Ssl 4-06:54:47 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3963221 3930335 root 182856 0.1 S 06:44:10 spamd child 3963222 3930335 root 172108 0.0 S 06:44:10 spamd child 1166663 3929444 madalice 160620 71.2 R 00:04 php-fpm: pool madalice_com_au 1166664 3929444 madalice 160024 68.5 S 00:04 php-fpm: pool madalice_com_au 3930335 1 root 152456 0.0 Ss 06:51:16 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1166679 3929444 madalice 142940 65.6 R 00:03 php-fpm: pool madalice_com_au 1166683 3929444 madalice 142068 64.0 R 00:03 php-fpm: pool madalice_com_au 1166678 3929444 madalice 141584 61.3 R 00:03 php-fpm: pool madalice_com_au 509266 1 root 107140 0.0 Ss 4-06:54:44 /usr/lib/systemd/systemd-journald 509640 508992 root 68152 0.0 Sl 4-06:54:42 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1166657 1164884 evolution 67912 3.5 S 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1166700 1164167 evolution 66976 17.0 R 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3929420 1 wp-toolkit 65648 0.0 Ss 06:51:49 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 509236 509098 root 56900 0.0 Sl 4-06:54:44 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 3929564 1 wp-toolkit 43704 0.0 Ss 06:51:48 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1353308 1 root 41808 0.1 Ss 41-06:33:10 cpsrvd (SSL) - waiting for connections 1166693 1166691 evolution 40524 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1166694 1166689 evolution 40480 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3929444 1 root 35052 0.0 Ss 06:51:49 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1166671 1166670 evolution 33868 1.6 Sl 00:03 /usr/local/bin/wkhtmltopdf --enable-local-file-access --encoding utf-8 --title PURCHASE ORDER --header-html /home/evolution/my.evolutio 3929532 1 root 32332 0.0 Ss 06:51:48 lfd - sleeping 3929469 1 root 28120 0.0 Ss 06:51:49 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 1166386 1 root 24544 0.3 S 00:23 /usr/sbin/exim -Mc 1x1BCX-00000004tQd-3tw7 1147563 506832 nobody 22916 0.1 S 06:18 /usr/sbin/httpd -k start 1166390 1166386 mailnull 22180 0.0 S 00:23 /usr/sbin/exim -Mc 1x1BCX-00000004tQd-3tw7 1469 1 root 22176 0.1 Ss 63-23:04:39 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1164300 506832 nobody 21264 0.0 S 02:50 /usr/sbin/httpd -k start 1164853 506832 nobody 21256 0.0 S 02:18 /usr/sbin/httpd -k start 1164834 506832 nobody 20820 0.1 S 02:19 /usr/sbin/httpd -k start 1164167 506832 nobody 20756 0.1 S 03:00 /usr/sbin/httpd -k start 1164848 506832 nobody 20712 0.0 S 02:18 /usr/sbin/httpd -k start 1163796 506832 nobody 20520 0.0 S 03:27 /usr/sbin/httpd -k start 1164850 506832 nobody 20276 0.0 S 02:18 /usr/sbin/httpd -k start 1165219 506832 nobody 19952 0.1 S 01:51 /usr/sbin/httpd -k start 1463 1 root 19916 0.0 Ss 63-23:04:39 tailwatchd 1164849 506832 nobody 19832 0.0 S 02:18 /usr/sbin/httpd -k start 1164826 506832 nobody 19696 0.1 S 02:20 /usr/sbin/httpd -k start 1164259 506832 nobody 19536 0.0 S 02:51 /usr/sbin/httpd -k start 1164880 506832 nobody 19532 0.0 S 02:17 /usr/sbin/httpd -k start 1164881 506832 nobody 19424 0.0 S 02:17 /usr/sbin/httpd -k start 1165726 506832 nobody 19296 0.0 S 01:13 /usr/sbin/httpd -k start 1164884 506832 nobody 19256 0.0 S 02:17 /usr/sbin/httpd -k start 1166303 506832 nobody 19216 0.0 S 00:27 /usr/sbin/httpd -k start 1165282 506832 nobody 19152 0.0 S 01:48 /usr/sbin/httpd -k start 1166302 506832 nobody 19144 0.0 S 00:27 /usr/sbin/httpd -k start 1166351 506832 nobody 19124 0.0 S 00:26 /usr/sbin/httpd -k start 1166198 506832 nobody 19060 0.0 S 00:31 /usr/sbin/httpd -k start 1166088 506832 nobody 19056 0.0 S 00:43 /usr/sbin/httpd -k start 1165825 506832 nobody 19008 0.1 S 01:08 /usr/sbin/httpd -k start 1166280 506832 nobody 18792 0.0 S 00:28 /usr/sbin/httpd -k start 1166256 506832 nobody 18772 0.0 S 00:30 /usr/sbin/httpd -k start 1166199 506832 nobody 18768 0.1 S 00:31 /usr/sbin/httpd -k start 1166677 506832 nobody 18640 0.6 S 00:03 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+-------------+-------------+---------+------+----------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+-------------+-------------+---------+------+----------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 11445991 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 11445969 | madalice_wp | madalice_wp | Query | 0 | Statistics | SELECT a.action_id FROM AMuqf6qZ_actionscheduler_actions a WHERE 1=1 AND a.hook='wc_schedule_pending_batch_processes' AND a.status IN ('in-progress', 'pending') LIMIT 0, 1 | +----------+-------------+-------------+---------+------+----------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 914 evolution/release.evolutionerp.com.au 216 evolution/portal.evolutionerp.com.au-ssl_log 115 evolution/app.evolutionerp.com.au-ssl_log 99 otter2/otterfencing.net.au 18 madalice/madalice.com.au-ssl_log 5 aaa/aaadownunder.com.au-ssl_log 2 (total vhosts taking traffic: 7) --- top client IPs across all vhosts (last 3 min) --- 608 203.54.180.238 431 68.155.159.216 99 40.115.94.245 70 103.104.165.99 44 103.104.164.114 38 101.166.96.210 27 150.228.151.47 18 82.102.18.220 9 182.239.240.254 4 124.168.5.234 4 1.144.107.82 3 180.181.236.49 3 120.21.55.80 2 147.161.215.103 2 114.119.146.16 --- top request paths across all vhosts (last 3 min) --- 201 POST /functions.php 158 GET /app/ajax.php 72 GET /index.php 57 POST /plugins/csvexporter/plugin.php 52 GET /heartbeat.php 50 GET /api/getItem/LWFBW2001KG 49 GET /api/getItem/LWHG2001KG 34 POST /clienteditsave.php 29 POST /app/ajax/selectFilterSingle.php 25 GET /factory_session_checker.php 24 POST /app/ajax.php 23 POST /app/ajax/selectFilter.php 22 POST /jobeditsave.php 15 POST /logsave.php 14 GET /factory_session_processed_qty.php 13 GET /factory_session_joiner.php 10 POST /quoteditsave.php 10 POST /itemModify.php 8 POST /billaddsave.php 6 GET //app/ajax.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 201 POST /functions.php 158 GET /app/ajax.php 63 GET /index.php 57 POST /plugins/csvexporter/plugin.php 34 POST /clienteditsave.php 29 POST /app/ajax/selectFilterSingle.php 24 POST /app/ajax.php 23 POST /app/ajax/selectFilter.php 22 POST /jobeditsave.php 15 POST /logsave.php 10 POST /quoteditsave.php 10 POST /itemModify.php -- last 10 requests -- 203.54.180.238 - - [01/Sep/2026:09:14:24 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 284 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29564&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [01/Sep/2026:09:14:24 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=inventory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 203.54.180.238 - - [01/Sep/2026:09:14:24 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 68.155.159.216 - - [01/Sep/2026:09:14:24 +1000] "GET /wp-blog.php HTTP/1.1" 404 - "-" "-" 203.54.180.238 - - [01/Sep/2026:09:14:24 +1000] "POST /jobeditsave.php?call=filter HTTP/1.1" 200 916 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. 203.54.180.238 - - [01/Sep/2026:09:14:24 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Djobregister&call=getUserSetting&caller=ajaxSubmitLocal&seq=11975071084 HTTP/1.1" 200 93 "https://my.evolutionerp.com.au/index.ph 68.155.159.216 - - [01/Sep/2026:09:14:24 +1000] "GET /wp-includes/ID3/ HTTP/1.1" 404 - "-" "-" 68.155.159.216 - - [01/Sep/2026:09:14:25 +1000] "GET /403.shtml HTTP/1.1" 404 - "-" "-" 68.155.159.216 - - [01/Sep/2026:09:14:25 +1000] "GET /cd.php HTTP/1.1" 404 - "-" "-" 68.155.159.216 - - [01/Sep/2026:09:14:25 +1000] "GET /css.php HTTP/1.1" 404 - "-" "-" == evolution/release.evolutionerp.com.au == -- top paths -- 1 GET /zup.php73 1 GET /zup.php 1 GET /z.php 1 GET /zoom1.php 1 GET /zafir1.php 1 GET /xxx.php 1 GET /x.php 1 GET /xmrlpc.php 1 GET /xleet.php 1 GET /ww5.php 1 GET /ww2.php 1 GET /wso.php -- last 10 requests -- 68.155.159.216 - - [01/Sep/2026:09:14:13 +1000] "GET /core.php HTTP/1.1" 301 287 "-" "-" 68.155.159.216 - - [01/Sep/2026:09:14:14 +1000] "GET /wp-admin/css/ HTTP/1.1" 301 292 "-" "-" 68.155.159.216 - - [01/Sep/2026:09:14:14 +1000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 301 304 "-" "-" 68.155.159.216 - - [01/Sep/2026:09:14:14 +1000] "GET /wp-content/min.php HTTP/1.1" 301 297 "-" "-" 68.155.159.216 - - [01/Sep/2026:09:14:15 +1000] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 301 315 "-" "-" 68.155.159.216 - - [01/Sep/2026:09:14:15 +1000] "GET /ws37.php HTTP/1.1" 301 287 "-" "-" 68.155.159.216 - - [01/Sep/2026:09:14:16 +1000] "GET /new.php HTTP/1.1" 403 13 "-" "-" 68.155.159.216 - - [01/Sep/2026:09:14:16 +1000] "GET /wp-admin/js/widgets/ HTTP/1.1" 301 299 "-" "-" 68.155.159.216 - - [01/Sep/2026:09:14:17 +1000] "GET /il.php HTTP/1.1" 301 285 "-" "-" 68.155.159.216 - - [01/Sep/2026:09:14:17 +1000] "GET /images/index.php HTTP/1.1" 301 295 "-" "-" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 58 GET /heartbeat.php 29 GET /factory_session_checker.php 15 GET /factory_session_processed_qty.php 15 GET /factory_session_joiner.php 8 GET /index.php 3 GET /uploadsave.php -- last 10 requests -- 203.54.180.238 - - [01/Sep/2026:09:14:13 +1000] "GET /heartbeat.php?sentAt=1788218054&bytes=106,150,10,198&_=1788216714160 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=8" 203.54.180.238 - - [01/Sep/2026:09:14:14 +1000] "GET /heartbeat.php?sentAt=1788218054&bytes=106,150,10,198&_=1788216211000 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [01/Sep/2026:09:14:15 +1000] "GET /heartbeat.php?sentAt=1788218056&bytes=106,150,10,200&_=1788169287216 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [01/Sep/2026:09:14:17 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [01/Sep/2026:09:14:21 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 127 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [01/Sep/2026:09:14:21 +1000] "GET /factory_session_joiner.php?id=34995 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [01/Sep/2026:09:14:22 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [01/Sep/2026:09:14:22 +1000] "GET /heartbeat.php?sentAt=1788218062&bytes=106,150,10,206&_=1788217242280 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=18 203.54.180.238 - - [01/Sep/2026:09:14:23 +1000] "GET /heartbeat.php?sentAt=1788218064&bytes=106,150,10,208&_=1788216714161 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=8" 203.54.180.238 - - [01/Sep/2026:09:14:27 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 --- last 30 samples (run-up to this incident) --- 2026-09-01 09:12:06 L1=1.81 run=3 blk=0 avail=7495 (54.4%) swpO=0 conn=3 myRSS=3466 php=7 phpRSS=382 ap=39 tcp=49 topuser=evolution 2026-09-01 09:12:06 L1=1.81 run=2 blk=0 avail=7499 (54.4%) swpO=0 conn=2 myRSS=3466 php=7 phpRSS=382 ap=39 tcp=49 topuser=evolution 2026-09-01 09:12:16 L1=2.44 run=4 blk=0 avail=7163 (52.0%) swpO=0 conn=3 myRSS=3467 php=6 phpRSS=507 ap=64 tcp=62 topuser=corpkicks 2026-09-01 09:12:16 L1=2.44 run=3 blk=0 avail=7132 (51.8%) swpO=0 conn=2 myRSS=3467 php=6 phpRSS=532 ap=64 tcp=63 topuser=corpkicks 2026-09-01 09:12:26 L1=2.14 run=7 blk=0 avail=7477 (54.3%) swpO=0 conn=3 myRSS=3467 php=5 phpRSS=258 ap=54 tcp=44 topuser=madalice 2026-09-01 09:12:26 L1=2.14 run=2 blk=0 avail=7504 (54.5%) swpO=0 conn=2 myRSS=3467 php=4 phpRSS=207 ap=54 tcp=44 topuser=madalice 2026-09-01 09:12:36 L1=2.04 run=4 blk=2 avail=7491 (54.4%) swpO=0 conn=3 myRSS=3467 php=6 phpRSS=315 ap=49 tcp=59 topuser=evolution 2026-09-01 09:12:36 L1=2.04 run=5 blk=0 avail=7458 (54.1%) swpO=0 conn=2 myRSS=3467 php=7 phpRSS=381 ap=49 tcp=58 topuser=evolution 2026-09-01 09:12:46 L1=1.96 run=2 blk=0 avail=7530 (54.7%) swpO=0 conn=3 myRSS=3467 php=7 phpRSS=320 ap=46 tcp=36 topuser=evolution 2026-09-01 09:12:47 L1=1.96 run=1 blk=0 avail=7570 (54.9%) swpO=0 conn=2 myRSS=3467 php=3 phpRSS=167 ap=46 tcp=37 topuser=madalice 2026-09-01 09:12:56 L1=2.22 run=2 blk=0 avail=7651 (55.5%) swpO=0 conn=3 myRSS=3467 php=7 phpRSS=269 ap=36 tcp=45 topuser=evolution 2026-09-01 09:12:57 L1=2.22 run=4 blk=0 avail=7664 (55.6%) swpO=0 conn=2 myRSS=3467 php=7 phpRSS=259 ap=36 tcp=45 topuser=evolution 2026-09-01 09:13:06 L1=1.96 run=1 blk=0 avail=7606 (55.2%) swpO=0 conn=2 myRSS=3467 php=4 phpRSS=206 ap=38 tcp=43 topuser=madalice 2026-09-01 09:13:07 L1=1.96 run=2 blk=0 avail=7610 (55.2%) swpO=0 conn=2 myRSS=3467 php=4 phpRSS=208 ap=38 tcp=43 topuser=madalice 2026-09-01 09:13:16 L1=2.45 run=6 blk=0 avail=7449 (54.1%) swpO=0 conn=2 myRSS=3467 php=11 phpRSS=537 ap=39 tcp=50 topuser=evolution 2026-09-01 09:13:17 L1=2.45 run=4 blk=0 avail=7344 (53.3%) swpO=0 conn=2 myRSS=3467 php=10 phpRSS=624 ap=39 tcp=49 topuser=evolution 2026-09-01 09:13:26 L1=2.23 run=1 blk=0 avail=7573 (55.0%) swpO=0 conn=2 myRSS=3467 php=4 phpRSS=207 ap=43 tcp=45 topuser=madalice 2026-09-01 09:13:27 L1=2.23 run=1 blk=0 avail=7584 (55.1%) swpO=0 conn=1 myRSS=3467 php=3 phpRSS=167 ap=43 tcp=42 topuser=madalice 2026-09-01 09:13:36 L1=1.97 run=4 blk=0 avail=7334 (53.2%) swpO=0 conn=2 myRSS=3467 php=8 phpRSS=595 ap=39 tcp=52 topuser=otterfencing 2026-09-01 09:13:37 L1=1.97 run=2 blk=0 avail=7399 (53.7%) swpO=0 conn=1 myRSS=3467 php=5 phpRSS=442 ap=39 tcp=52 topuser=otterfencing 2026-09-01 09:13:46 L1=1.74 run=2 blk=0 avail=7644 (55.5%) swpO=0 conn=2 myRSS=3467 php=3 phpRSS=110 ap=42 tcp=43 topuser=evolution 2026-09-01 09:13:47 L1=1.74 run=2 blk=0 avail=7655 (55.6%) swpO=0 conn=1 myRSS=3467 php=3 phpRSS=110 ap=42 tcp=42 topuser=evolution 2026-09-01 09:13:57 L1=1.63 run=7 blk=0 avail=7407 (53.8%) swpO=0 conn=2 myRSS=3467 php=8 phpRSS=538 ap=39 tcp=50 topuser=evolution 2026-09-01 09:13:57 L1=1.63 run=4 blk=1 avail=7400 (53.7%) swpO=0 conn=1 myRSS=3467 php=8 phpRSS=534 ap=39 tcp=48 topuser=evolution 2026-09-01 09:14:07 L1=1.68 run=3 blk=0 avail=7505 (54.5%) swpO=0 conn=3 myRSS=3467 php=4 phpRSS=232 ap=48 tcp=44 topuser=madalice 2026-09-01 09:14:07 L1=1.68 run=8 blk=0 avail=7487 (54.3%) swpO=0 conn=1 myRSS=3467 php=7 phpRSS=342 ap=48 tcp=46 topuser=evolution 2026-09-01 09:14:17 L1=1.50 run=3 blk=0 avail=7600 (55.2%) swpO=0 conn=3 myRSS=3467 php=8 phpRSS=241 ap=41 tcp=46 topuser=evolution 2026-09-01 09:14:17 L1=1.50 run=3 blk=0 avail=7561 (54.9%) swpO=0 conn=1 myRSS=3467 php=8 phpRSS=307 ap=41 tcp=47 topuser=evolution 2026-09-01 09:14:27 L1=2.46 run=16 blk=0 avail=6005 (43.6%) swpO=1688 conn=15 myRSS=3432 php=17 phpRSS=2093 ap=47 tcp=62 topuser=madalice 2026-09-01 09:14:27 L1=2.46 run=16 blk=0 avail=5804 (42.1%) swpO=1688 conn=14 myRSS=3432 php=16 phpRSS=2201 ap=47 tcp=63 topuser=madalice