INCIDENT 2026-09-01 14:58:46 trigger: php_procs=29 php_rss=2446MB mysql_conn=24 ================================================================== load: 4.25 2.46 2.31 32/727 2442184 ncpu:10 mem_avail: 5934MB/13777MB (43.1%) swap_used:2497MB swapout:1950/s blocked(D):0 running:31 iowait:0.1% steal:0.0% php: 29 procs / 2446MB heaviest user: tubesupplies (16 procs, 1661MB) apache: 87 procs tcp_estab: 77 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3348 tubesupplies 16 1640 nobody 86 1462 root 242 965 evolution 14 339 madalice 2 289 netdata 7 215 aaa 2 110 wp-toolkit 3 87 mailman 20 86 cpanellogin 1 69 speedlin 1 54 dovenull 6 46 vinesit 1 21 zabbix 1 18 dovecot 3 18 infinium 1 14 alison 1 14 kurri 1 13 named 1 12 --- php workers by user --- USER PROCS RSS_MB tubesupplies 16 1579 evolution 8 321 madalice 2 289 aaa 1 96 speedlin 1 54 root 1 33 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5707 MB Active(file): 3589 MB Inactive(file): 1472 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 475 MB CommitLimit: 10984 MB Committed_AS: 11820 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 12:36:17 4172 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 3429120 10.9 Ssl 4-12:39:37 /usr/sbin/mariadbd 508924 1 netdata 196224 1.9 Ssl 4-12:39:06 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2442093 2425005 tubesupplies 162548 42.0 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2001035 3930335 root 162108 0.1 S 02:03:30 spamd child 2441629 3929444 madalice 161648 10.5 S 00:34 php-fpm: pool madalice_com_au 3963222 3930335 root 151236 0.0 S 12:28:29 spamd child 2442097 2441745 tubesupplies 149776 34.5 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2442102 2441650 tubesupplies 135628 34.7 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2441778 3929444 madalice 134484 5.6 S 00:22 php-fpm: pool madalice_com_au 2442101 2442039 tubesupplies 132184 32.7 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2442098 2442038 tubesupplies 131916 33.0 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2442100 2442021 tubesupplies 129308 29.5 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2442106 2441272 tubesupplies 128700 29.0 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509266 1 root 113724 0.0 Ss 4-12:39:03 /usr/lib/systemd/systemd-journald 2442119 2442075 tubesupplies 108888 50.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2442116 2442068 tubesupplies 101088 41.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2442125 2441617 tubesupplies 91356 63.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3930335 1 root 85988 0.0 Ss 12:35:35 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2442105 2441742 tubesupplies 85932 38.2 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2442123 2441074 tubesupplies 77012 52.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2442062 2439948 evolution 72280 4.8 R 00:05 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2078454 1353308 cpanellogin 71316 0.0 S 01:38:48 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 2442128 2442069 tubesupplies 66012 33.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2442126 2440305 tubesupplies 64672 32.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2442124 2442079 speedlin 62512 33.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2442127 2442070 tubesupplies 61404 27.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509640 508992 root 60688 0.0 Sl 4-12:39:01 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 509236 509098 root 53828 0.0 Sl 4-12:39:03 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 2442047 2423173 evolution 50108 5.1 R 00:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3929420 1 wp-toolkit 47904 0.0 Ss 12:36:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1353308 1 root 41864 0.1 Ss 41-12:17:29 cpsrvd (SSL) - waiting for connections 2442129 2441943 evolution 40680 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2442104 2441941 evolution 39584 0.5 S 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2442103 2441940 evolution 39548 0.5 S 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2442118 2442074 evolution 39248 1.0 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2442083 2440318 evolution 39108 0.7 S 00:04 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3929564 1 wp-toolkit 35392 0.0 Ss 12:36:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 3929444 1 root 34560 0.0 Ss 12:36:08 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 2441932 1353308 root 31800 0.0 S 00:13 cpaneld - serving 66.132.172.111 3929532 1 root 25668 0.0 Ss 12:36:07 lfd - sleeping 2425005 506832 nobody 23220 0.0 S 04:31 /usr/sbin/httpd -k start 2423869 506832 nobody 23180 0.0 S 05:44 /usr/sbin/httpd -k start 2424933 506832 nobody 22612 0.0 S 04:33 /usr/sbin/httpd -k start 2423173 506832 nobody 22608 0.1 S 06:30 /usr/sbin/httpd -k start 2405741 508511 vinesit 22320 0.0 S 10:42 dovecot/imap 2425002 506832 nobody 22132 0.0 S 04:31 /usr/sbin/httpd -k start 2440627 506832 nobody 21824 0.1 S 01:46 /usr/sbin/httpd -k start 2424470 506832 nobody 21668 0.1 S 05:10 /usr/sbin/httpd -k start 2440305 506832 nobody 21552 0.0 S 02:11 /usr/sbin/httpd -k start 2440459 506832 nobody 21040 0.1 S 01:56 /usr/sbin/httpd -k start 1463 1 root 20912 0.0 Ss 64-04:48:58 tailwatchd 2441262 506832 nobody 20740 0.1 S 01:06 /usr/sbin/httpd -k start 1469 1 root 20636 0.1 Ss 64-04:48:58 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2441287 506832 nobody 20556 0.0 S 01:04 /usr/sbin/httpd -k start 2439948 506832 nobody 20372 0.0 S 02:47 /usr/sbin/httpd -k start 2440318 506832 nobody 20372 0.0 S 02:07 /usr/sbin/httpd -k start 2441085 506832 nobody 20000 0.0 S 01:24 /usr/sbin/httpd -k start 2441724 506832 nobody 19948 0.1 S 00:29 /usr/sbin/httpd -k start 2439528 506832 nobody 19832 0.0 S 03:27 /usr/sbin/httpd -k start 2441743 506832 nobody 19832 0.1 S 00:28 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 14388551 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 509 evolution/app.evolutionerp.com.au-ssl_log 132 evolution/portal.evolutionerp.com.au-ssl_log 120 olytis/tis.com.au-ssl_log 59 tubesupplies/tubesupplies.com.au-ssl_log 48 infinium/infinium.net.au-ssl_log 24 aaa/aaadownunder.com.au-ssl_log 12 madalice/madalice.com.au-ssl_log 11 vinesit/vinesit.com.au-ssl_log 8 customc/customcentral.com.au-ssl_log 4 alison/alisonarts.com.au-ssl_log 3 corpkicks/corporatekicks.com.au-ssl_log 3 coscom/swms.coscom.com.au 2 nrg/nrgservices.net.au-ssl_log 2 evolution/evolutionerp.com.au-ssl_log 1 (total vhosts taking traffic: 16) --- top client IPs across all vhosts (last 3 min) --- 389 203.54.180.238 132 40.115.94.245 112 103.104.165.99 73 103.104.164.114 61 158.23.184.117 46 85.239.151.74 30 150.228.151.47 12 182.239.240.254 9 20.104.49.130 8 118.127.40.55 6 147.161.213.71 3 50.6.200.195 3 180.181.236.49 3 165.225.233.87 3 147.161.213.78 --- top request paths across all vhosts (last 3 min) --- 195 POST /functions.php 104 GET /app/ajax.php 98 GET /api/getItem/LWPB2001KG 46 GET /index.php 45 GET /heartbeat.php 30 GET /factory_session_checker.php 27 POST /plugins/csvexporter/plugin.php 24 POST /app/ajax.php 18 POST /inveditsave.php 17 POST /app/ajax/selectFilterSingle.php 16 POST /app/ajax/selectFilter.php 16 GET /factory_session_processed_qty.php 15 GET /factory_session_joiner.php 15 GET /api/getItem/LWHG2001KG 13 GET /wp-login.php 11 POST /quoteditsave.php 9 POST /wp-login.php 9 GET / 8 POST /jobeditsave.php 8 GET /autodiscover/autodiscover.xml --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 195 POST /functions.php 107 GET /app/ajax.php 39 GET /index.php 28 POST /plugins/csvexporter/plugin.php 25 POST /app/ajax.php 18 POST /inveditsave.php 18 POST /app/ajax/selectFilterSingle.php 16 POST /app/ajax/selectFilter.php 11 POST /quoteditsave.php 8 POST /jobeditsave.php 6 POST /invaddsave.php 5 POST /plugins/fencecosting/plugin.php -- last 10 requests -- 103.104.165.99 - - [01/Sep/2026:14:58:42 +1000] "POST /logsave.php?call=getHistory&id=12060&module=job HTTP/1.1" 200 657 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12060" "Mozilla/5.0 (Windows NT 10.0; Win 103.104.165.99 - - [01/Sep/2026:14:58:43 +1000] "POST /clienteditsave.php?clientid=723&call=getCategoryDiscounts HTTP/1.1" 200 25 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12060" "Mozilla/5.0 (Windows NT 103.104.165.99 - - [01/Sep/2026:14:58:43 +1000] "POST /clienteditsave.php?call=getSettings HTTP/1.1" 200 60 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12060" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 103.104.165.99 - - [01/Sep/2026:14:58:48 +1000] "POST /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Djobedit%26id%3D12060%26tab%3Djobeditinv HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=jobed 103.104.165.99 - - [01/Sep/2026:14:58:44 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 21932 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12060&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Wi 103.104.165.99 - - [01/Sep/2026:14:58:48 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12060&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 103.104.165.99 - - [01/Sep/2026:14:58:48 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=19320498615 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/index 103.104.165.99 - - [01/Sep/2026:14:58:48 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=11695773449 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/inde 103.104.165.99 - - [01/Sep/2026:14:58:48 +1000] "POST /plugins/fencecosting/plugin.php HTTP/1.1" 200 3913 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12060&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win 103.104.165.99 - - [01/Sep/2026:14:58:48 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Djobedit%26id%3D12060%26tab%3Djobeditinv&call=getUserSetting&caller=ajaxSubmitLocal&seq=12264378459 HTTP/1.1" 2 == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 98 GET /api/getItem/LWPB2001KG 15 GET /api/getItem/LWHG2001KG 2 GET /api/getItem/PXLG25 1 GET /api/getItem/PXLG50 1 GET /api/getItem/PXLG40 1 GET /api/getItem/PXLG32 1 GET /api/getItem/PXLG20 1 GET /api/getItem/PMG90 1 GET /api/getItem/PMG80 1 GET /api/getItem/PMG65 1 GET /api/getItem/PMG50 1 GET /api/getItem/PMG40 -- last 10 requests -- 40.115.94.245 - - [01/Sep/2026:14:58:27 +1000] "GET /api/getItem/PMG40 HTTP/1.1" 200 2434 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:14:58:27 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:14:58:27 +1000] "GET /api/getItem/PMG50 HTTP/1.1" 200 2205 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:14:58:27 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:14:58:27 +1000] "GET /api/getItem/PMG65 HTTP/1.1" 200 1868 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:14:58:28 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:14:58:28 +1000] "GET /api/getItem/PMG80 HTTP/1.1" 200 2200 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:14:58:28 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:14:58:28 +1000] "GET /api/getItem/PMG90 HTTP/1.1" 200 1862 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:14:58:28 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 45 GET /heartbeat.php 30 GET /factory_session_checker.php 16 GET /factory_session_processed_qty.php 15 GET /factory_session_joiner.php 8 GET /index.php 5 POST /portal/register 1 POST /factory_functions.php -- last 10 requests -- 203.54.180.238 - - [01/Sep/2026:14:58:23 +1000] "GET /factory_session_joiner.php?id=35015 HTTP/1.1" 200 100 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleW 203.54.180.238 - - [01/Sep/2026:14:58:23 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [01/Sep/2026:14:58:25 +1000] "GET /heartbeat.php?sentAt=1788238705&bytes=106,150,91,113&_=1788169289281 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [01/Sep/2026:14:58:26 +1000] "GET /heartbeat.php?sentAt=1788238704&bytes=106,150,91,112&_=1788226930341 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [01/Sep/2026:14:58:28 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [01/Sep/2026:14:58:27 +1000] "GET /index.php HTTP/1.1" 200 5158 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 ( 203.54.180.238 - - [01/Sep/2026:14:58:27 +1000] "GET /index.php HTTP/1.1" 200 5159 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 ( 203.54.180.238 - - [01/Sep/2026:14:58:29 +1000] "GET /heartbeat.php?sentAt=1788238709&bytes=106,150,91,117&_=1788238443485 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [01/Sep/2026:14:58:31 +1000] "GET /index.php?page=processes HTTP/1.1" 200 4983 "https://portal.evolutionerp.com.au/index.php" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) 203.54.180.238 - - [01/Sep/2026:14:58:33 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 127 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb --- last 30 samples (run-up to this incident) --- 2026-09-01 14:56:25 L1=1.27 run=3 blk=0 avail=7559 (54.9%) swpO=0 conn=1 myRSS=3405 php=5 phpRSS=519 ap=32 tcp=41 topuser=madalice 2026-09-01 14:56:25 L1=1.27 run=6 blk=0 avail=7555 (54.8%) swpO=0 conn=2 myRSS=3405 php=5 phpRSS=524 ap=32 tcp=41 topuser=madalice 2026-09-01 14:56:35 L1=1.08 run=2 blk=0 avail=7673 (55.7%) swpO=0 conn=1 myRSS=3405 php=4 phpRSS=382 ap=32 tcp=38 topuser=madalice 2026-09-01 14:56:35 L1=1.08 run=3 blk=0 avail=7669 (55.7%) swpO=0 conn=2 myRSS=3405 php=4 phpRSS=386 ap=32 tcp=39 topuser=madalice 2026-09-01 14:56:45 L1=0.91 run=2 blk=0 avail=7668 (55.7%) swpO=0 conn=1 myRSS=3405 php=6 phpRSS=422 ap=32 tcp=34 topuser=madalice 2026-09-01 14:56:45 L1=0.91 run=4 blk=0 avail=7662 (55.6%) swpO=0 conn=2 myRSS=3405 php=6 phpRSS=453 ap=32 tcp=34 topuser=madalice 2026-09-01 14:56:55 L1=1.06 run=5 blk=0 avail=7685 (55.8%) swpO=0 conn=1 myRSS=3405 php=5 phpRSS=374 ap=34 tcp=33 topuser=madalice 2026-09-01 14:56:55 L1=1.06 run=5 blk=0 avail=7690 (55.8%) swpO=0 conn=2 myRSS=3405 php=5 phpRSS=374 ap=34 tcp=33 topuser=madalice 2026-09-01 14:57:05 L1=1.13 run=2 blk=0 avail=7584 (55.0%) swpO=0 conn=1 myRSS=3405 php=7 phpRSS=535 ap=32 tcp=43 topuser=madalice 2026-09-01 14:57:06 L1=1.13 run=3 blk=0 avail=7582 (55.0%) swpO=0 conn=2 myRSS=3405 php=7 phpRSS=535 ap=32 tcp=43 topuser=madalice 2026-09-01 14:57:16 L1=0.95 run=5 blk=0 avail=7640 (55.5%) swpO=0 conn=2 myRSS=3405 php=7 phpRSS=427 ap=34 tcp=44 topuser=madalice 2026-09-01 14:57:16 L1=0.95 run=4 blk=0 avail=7643 (55.5%) swpO=0 conn=2 myRSS=3405 php=6 phpRSS=413 ap=34 tcp=44 topuser=madalice 2026-09-01 14:57:26 L1=1.04 run=2 blk=0 avail=7788 (56.5%) swpO=0 conn=2 myRSS=3406 php=4 phpRSS=215 ap=37 tcp=39 topuser=madalice 2026-09-01 14:57:26 L1=1.04 run=3 blk=0 avail=7788 (56.5%) swpO=0 conn=2 myRSS=3406 php=4 phpRSS=215 ap=37 tcp=39 topuser=madalice 2026-09-01 14:57:36 L1=0.88 run=7 blk=0 avail=7471 (54.2%) swpO=0 conn=2 myRSS=3406 php=9 phpRSS=751 ap=28 tcp=36 topuser=customc 2026-09-01 14:57:36 L1=0.88 run=5 blk=0 avail=7478 (54.3%) swpO=0 conn=2 myRSS=3406 php=9 phpRSS=761 ap=28 tcp=36 topuser=customc 2026-09-01 14:57:46 L1=1.37 run=5 blk=0 avail=7735 (56.1%) swpO=2 conn=2 myRSS=3406 php=6 phpRSS=349 ap=35 tcp=37 topuser=evolution 2026-09-01 14:57:46 L1=1.37 run=7 blk=0 avail=7734 (56.1%) swpO=2 conn=2 myRSS=3406 php=6 phpRSS=349 ap=35 tcp=37 topuser=evolution 2026-09-01 14:57:56 L1=1.32 run=1 blk=0 avail=7809 (56.7%) swpO=0 conn=2 myRSS=3406 php=6 phpRSS=281 ap=33 tcp=41 topuser=madalice 2026-09-01 14:57:56 L1=1.32 run=5 blk=0 avail=7803 (56.6%) swpO=0 conn=2 myRSS=3406 php=5 phpRSS=277 ap=33 tcp=41 topuser=madalice 2026-09-01 14:58:06 L1=1.35 run=2 blk=0 avail=7826 (56.8%) swpO=0 conn=2 myRSS=3406 php=4 phpRSS=238 ap=30 tcp=39 topuser=madalice 2026-09-01 14:58:06 L1=1.35 run=2 blk=0 avail=7826 (56.8%) swpO=0 conn=2 myRSS=3406 php=4 phpRSS=238 ap=30 tcp=39 topuser=madalice 2026-09-01 14:58:16 L1=1.37 run=6 blk=0 avail=7557 (54.9%) swpO=0 conn=2 myRSS=3406 php=8 phpRSS=578 ap=36 tcp=52 topuser=tubesupplies 2026-09-01 14:58:16 L1=1.37 run=6 blk=0 avail=7559 (54.9%) swpO=0 conn=6 myRSS=3406 php=8 phpRSS=577 ap=36 tcp=52 topuser=tubesupplies 2026-09-01 14:58:26 L1=1.63 run=4 blk=0 avail=7499 (54.4%) swpO=0 conn=2 myRSS=3406 php=6 phpRSS=520 ap=44 tcp=48 topuser=madalice 2026-09-01 14:58:26 L1=1.63 run=5 blk=0 avail=7493 (54.4%) swpO=0 conn=6 myRSS=3406 php=6 phpRSS=520 ap=44 tcp=48 topuser=madalice 2026-09-01 14:58:36 L1=1.78 run=3 blk=0 avail=7443 (54.0%) swpO=0 conn=2 myRSS=3406 php=7 phpRSS=485 ap=59 tcp=66 topuser=madalice 2026-09-01 14:58:36 L1=1.78 run=4 blk=0 avail=7444 (54.0%) swpO=0 conn=6 myRSS=3406 php=7 phpRSS=486 ap=59 tcp=66 topuser=madalice 2026-09-01 14:58:46 L1=4.25 run=31 blk=0 avail=5934 (43.1%) swpO=1950 conn=24 myRSS=3348 php=29 phpRSS=2446 ap=87 tcp=77 topuser=tubesupplies 2026-09-01 14:58:46 L1=4.25 run=33 blk=0 avail=5921 (43.0%) swpO=1950 conn=22 myRSS=3348 php=30 phpRSS=2437 ap=87 tcp=78 topuser=tubesupplies