INCIDENT 2026-09-01 15:21:56 trigger: php_rss=1902MB ================================================================== load: 2.14 1.85 1.96 14/661 2532712 ncpu:10 mem_avail: 6424MB/13777MB (46.6%) swap_used:2483MB swapout:0/s blocked(D):0 running:11 iowait:0.2% steal:0.0% php: 16 procs / 1902MB heaviest user: evolution (13 procs, 1581MB) apache: 38 procs tcp_estab: 54 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3362 evolution 17 1523 root 242 937 nobody 37 649 netdata 7 214 madalice 1 156 olympic 1 130 wp-toolkit 3 87 mailman 20 86 cpanellogin 1 70 dovenull 6 46 mailnull 2 20 dovecot 3 18 zabbix 1 17 infinium 1 14 kurri 1 13 named 1 12 lowrange 1 11 polkitd 1 4 nscd 1 4 --- php workers by user --- USER PROCS RSS_MB evolution 10 1379 madalice 1 156 olympic 1 130 root 1 33 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5496 MB Active(file): 4547 MB Inactive(file): 1130 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 475 MB CommitLimit: 10984 MB Committed_AS: 8533 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 12:59:27 4172 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 3443268 11.0 Ssl 4-13:02:47 /usr/sbin/mariadbd 508924 1 netdata 194532 1.9 Ssl 4-13:02:16 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2532674 2531299 evolution 183056 52.0 S 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2532675 2516103 evolution 181080 53.0 S 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2532677 2531369 evolution 180948 54.5 S 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2532679 2532142 evolution 180904 99.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2001035 3930335 root 163000 0.1 S 02:26:40 spamd child 2532527 3929444 madalice 160452 18.7 S 00:14 php-fpm: pool madalice_com_au 2532668 2532125 evolution 156156 57.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3963222 3930335 root 151236 0.0 S 12:51:39 spamd child 2532680 2532506 evolution 145488 65.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2532670 2532155 evolution 145220 32.5 R 00:02 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2532631 2516174 olympic 134064 45.7 S 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509266 1 root 114372 0.0 Ss 4-13:02:13 /usr/lib/systemd/systemd-journald 3930335 1 root 85988 0.0 Ss 12:58:45 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2078454 1353308 cpanellogin 72116 0.0 S 02:01:58 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 2532691 2531314 evolution 63952 14.0 R 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 509640 508992 root 60688 0.0 Sl 4-13:02:11 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 509236 509098 root 53836 0.0 Sl 4-13:02:13 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 3929420 1 wp-toolkit 47904 0.0 Ss 12:59:18 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1353308 1 root 42172 0.1 Ss 41-12:40:39 cpsrvd (SSL) - waiting for connections 3929564 1 wp-toolkit 35392 0.0 Ss 12:59:17 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 3929444 1 root 34560 0.0 Ss 12:59:18 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3929532 1 root 25680 0.0 Ss 12:59:17 lfd - sleeping 2516058 506832 nobody 21204 0.0 S 03:14 /usr/sbin/httpd -k start 1463 1 root 21112 0.0 Ss 64-05:12:08 tailwatchd 2516103 506832 nobody 21092 0.0 S 03:12 /usr/sbin/httpd -k start 1469 1 root 20832 0.1 Ss 64-05:12:08 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2516167 506832 nobody 20676 0.0 S 03:10 /usr/sbin/httpd -k start 2532112 506832 nobody 20664 0.0 S 00:40 /usr/sbin/httpd -k start 2514738 506832 nobody 20504 0.0 S 04:50 /usr/sbin/httpd -k start 2532080 506832 nobody 20436 0.0 S 00:41 /usr/sbin/httpd -k start 2531369 506832 nobody 20304 0.1 S 01:18 /usr/sbin/httpd -k start 2516102 506832 nobody 20256 0.0 S 03:12 /usr/sbin/httpd -k start 2516174 506832 nobody 20224 0.0 S 03:10 /usr/sbin/httpd -k start 2516132 506832 nobody 20200 0.0 S 03:11 /usr/sbin/httpd -k start 2516116 506832 nobody 20024 0.0 S 03:11 /usr/sbin/httpd -k start 2532125 506832 nobody 19876 0.1 S 00:39 /usr/sbin/httpd -k start 2532130 506832 nobody 19824 0.0 S 00:39 /usr/sbin/httpd -k start 2532129 506832 nobody 19660 0.0 S 00:39 /usr/sbin/httpd -k start 3929469 1 root 19608 0.0 Ss 12:59:18 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 2532131 506832 nobody 19544 0.1 S 00:39 /usr/sbin/httpd -k start 2532153 506832 nobody 19520 0.0 S 00:38 /usr/sbin/httpd -k start 2516173 506832 nobody 19456 0.1 S 03:10 /usr/sbin/httpd -k start 2532155 506832 nobody 19400 0.0 S 00:38 /usr/sbin/httpd -k start 2531314 506832 nobody 19012 0.0 S 01:21 /usr/sbin/httpd -k start 2532124 506832 nobody 18532 0.0 S 00:39 /usr/sbin/httpd -k start 2532128 506832 nobody 18468 0.1 S 00:39 /usr/sbin/httpd -k start 2516159 506832 nobody 18292 0.0 S 03:10 /usr/sbin/httpd -k start 2531608 506832 nobody 17992 0.0 S 01:03 /usr/sbin/httpd -k start 2516104 506832 nobody 17892 0.1 S 03:12 /usr/sbin/httpd -k start 2532142 506832 nobody 17688 0.0 S 00:38 /usr/sbin/httpd -k start 2531390 506832 nobody 17636 0.0 S 01:17 /usr/sbin/httpd -k start 483898 1 zabbix 17628 0.2 Ssl 4-13:03:30 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 2532141 506832 nobody 17604 0.0 S 00:38 /usr/sbin/httpd -k start 2531300 506832 nobody 17340 0.0 S 01:22 /usr/sbin/httpd -k start 2532152 506832 nobody 17268 0.0 S 00:38 /usr/sbin/httpd -k start 2532127 506832 nobody 17060 0.0 S 00:39 /usr/sbin/httpd -k start 2531299 506832 nobody 17032 0.0 S 01:22 /usr/sbin/httpd -k start 2532111 506832 nobody 16944 0.0 S 00:40 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------------+------------+---------+------+----------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------------+------------+---------+------+----------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 14606796 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 14606599 | olympic_wp | olympic_wp | Query | 0 | starting | SELECT a.*, g.slug AS `group` FROM nqNZ24_actionscheduler_actions a LEFT JOIN nqNZ24_actionscheduler_groups g ON a.group_id=g.group_id WHERE a.action_id=42736 | +----------+------------+------------+---------+------+----------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 688 evolution/portal.evolutionerp.com.au-ssl_log 126 evolution/app.evolutionerp.com.au-ssl_log 119 corpkicks/corporatekicks.com.au-ssl_log 118 otter2/otterfencing.net.au 113 whiz/whizengineering.com.au-ssl_log 38 aaa/aaadownunder.com.au-ssl_log 24 infinium/infinium.net.au-ssl_log 21 aaa/aaadownunder.com.au 15 evolution/evolutionerp.com.au-ssl_log 14 madalice/madalice.com.au-ssl_log 9 (total vhosts taking traffic: 11) --- top client IPs across all vhosts (last 3 min) --- 358 203.54.180.238 204 103.104.164.114 188 103.104.165.99 119 40.115.94.245 113 20.48.179.39 113 20.151.10.161 38 158.23.184.117 29 175.36.227.212 27 193.26.115.185 16 1.141.176.34 11 118.127.40.55 10 150.228.151.47 6 52.12.102.174 5 34.101.220.229 4 180.181.236.49 --- top request paths across all vhosts (last 3 min) --- 205 POST /functions.php 166 GET /app/ajax.php 79 GET /api/getItem/LWFB2001KG 70 GET /index.php 53 GET /heartbeat.php 38 POST /plugins/csvexporter/plugin.php 36 POST /clienteditsave.php 34 GET /factory_session_checker.php 27 POST /app/ajax/selectFilterSingle.php 21 POST /app/ajax.php 20 GET /api/getItem/LWPB2001KG 17 POST /logsave.php 17 GET /factory_session_processed_qty.php 17 GET /factory_session_joiner.php 14 POST /purchaseaddsave.php 14 POST /jobeditsave.php 11 HEAD /index.php 10 POST /wp-cron.php 7 GET /wp-login.php 6 POST /plugins/fencecosting/plugin.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 205 POST /functions.php 166 GET /app/ajax.php 66 GET /index.php 38 POST /plugins/csvexporter/plugin.php 36 POST /clienteditsave.php 27 POST /app/ajax/selectFilterSingle.php 21 POST /app/ajax.php 17 POST /logsave.php 14 POST /purchaseaddsave.php 14 POST /jobeditsave.php 11 HEAD /index.php 6 POST /plugins/fencecosting/plugin.php -- last 10 requests -- 203.54.180.238 - - [01/Sep/2026:15:21:52 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 22840 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78390" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 203.54.180.238 - - [01/Sep/2026:15:21:52 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=invedit&id=3877&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [01/Sep/2026:15:21:52 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinvedit%26id%3D3877%26tab%3Dgeneraltab&call=getUserSetting&caller=ajaxSubmitLocal&seq=14702554916 HTTP/1.1" 200 110 "https://my. 103.104.164.114 - - [01/Sep/2026:15:21:53 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 203.54.180.238 - - [01/Sep/2026:15:21:53 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78390" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K 203.54.180.238 - - [01/Sep/2026:15:21:53 +1000] "GET /inveditsave.php?call=heal&itemid=3877 HTTP/1.1" 302 20 "https://my.evolutionerp.com.au/index.php?page=invedit&id=3877&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; W 203.54.180.238 - - [01/Sep/2026:15:21:54 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=invedit&id=3877&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x 203.54.180.238 - - [01/Sep/2026:15:21:54 +1000] "GET /index.php?page=invedit&id=3877 HTTP/1.1" 200 39302 "https://my.evolutionerp.com.au/index.php?page=invedit&id=3877&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64 182.239.240.254 - - [01/Sep/2026:15:21:54 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=dispatchedit&dispatchid=3865" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 203.54.180.238 - - [01/Sep/2026:15:21:54 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=invedit&id=3877&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 53 GET /heartbeat.php 34 GET /factory_session_checker.php 17 GET /factory_session_processed_qty.php 17 GET /factory_session_joiner.php 4 GET /index.php 1 GET /uploadsave.php -- last 10 requests -- 203.54.180.238 - - [01/Sep/2026:15:21:42 +1000] "GET /heartbeat.php?sentAt=1788240102&bytes=106,150,96,230&_=1788238828978 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [01/Sep/2026:15:21:43 +1000] "GET /heartbeat.php?sentAt=1788240103&bytes=106,150,96,231&_=1788238869262 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [01/Sep/2026:15:21:46 +1000] "GET /factory_session_joiner.php?id=34986 HTTP/1.1" 200 98 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [01/Sep/2026:15:21:46 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 124 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [01/Sep/2026:15:21:47 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [01/Sep/2026:15:21:46 +1000] "GET /heartbeat.php?sentAt=1788240104&bytes=106,150,96,232&_=1788226930481 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [01/Sep/2026:15:21:52 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [01/Sep/2026:15:21:52 +1000] "GET /heartbeat.php?sentAt=1788240112&bytes=106,150,96,240&_=1788238828979 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [01/Sep/2026:15:21:53 +1000] "GET /heartbeat.php?sentAt=1788240113&bytes=106,150,96,241&_=1788238869263 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 120.21.55.80 - - [01/Sep/2026:15:21:54 +1000] "GET /index.php?page=inventory_picking_goods&pickid=37995&seq=1037126930190 HTTP/1.1" 200 11450 "https://portal.evolutionerp.com.au/index.php?page=inventory_picking" "Mozilla == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 79 GET /api/getItem/LWFB2001KG 20 GET /api/getItem/LWPB2001KG 1 GET /api/getItem/RGW100T 1 GET /api/getItem/PC7550 1 GET /api/getItem/PC5025BL 1 GET /api/getItem/PC19 1 GET /api/getItem/PC16 1 GET /api/getItem/PC15050 1 GET /api/getItem/PC1212 1 GET /api/getItem/PC10050 1 GET /api/getItem/L2 1 GET /api/getItem/IPC90NB -- last 10 requests -- 40.115.94.245 - - [01/Sep/2026:15:21:34 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:15:21:34 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:15:21:34 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:15:21:35 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:15:21:35 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:15:21:36 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:15:21:36 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:15:21:36 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:15:21:37 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [01/Sep/2026:15:21:37 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" --- last 30 samples (run-up to this incident) --- 2026-09-01 15:19:33 L1=1.28 run=2 blk=0 avail=7453 (54.1%) swpO=0 conn=4 myRSS=3357 php=6 phpRSS=324 ap=89 tcp=38 topuser=madalice 2026-09-01 15:19:35 L1=1.18 run=1 blk=0 avail=7506 (54.5%) swpO=0 conn=2 myRSS=3357 php=3 phpRSS=199 ap=87 tcp=42 topuser=madalice 2026-09-01 15:19:43 L1=1.25 run=3 blk=0 avail=7522 (54.6%) swpO=0 conn=4 myRSS=3357 php=6 phpRSS=324 ap=79 tcp=35 topuser=madalice 2026-09-01 15:19:45 L1=1.23 run=1 blk=0 avail=7573 (55.0%) swpO=0 conn=2 myRSS=3357 php=3 phpRSS=199 ap=77 tcp=40 topuser=madalice 2026-09-01 15:19:53 L1=1.37 run=2 blk=0 avail=7533 (54.7%) swpO=0 conn=4 myRSS=3357 php=9 phpRSS=464 ap=69 tcp=34 topuser=evolution 2026-09-01 15:19:55 L1=1.34 run=1 blk=0 avail=7647 (55.5%) swpO=0 conn=2 myRSS=3357 php=3 phpRSS=199 ap=67 tcp=39 topuser=madalice 2026-09-01 15:20:03 L1=1.31 run=2 blk=0 avail=7612 (55.3%) swpO=0 conn=4 myRSS=3357 php=6 phpRSS=346 ap=59 tcp=47 topuser=madalice 2026-09-01 15:20:05 L1=1.45 run=3 blk=0 avail=7675 (55.7%) swpO=0 conn=1 myRSS=3357 php=4 phpRSS=269 ap=57 tcp=38 topuser=madalice 2026-09-01 15:20:13 L1=1.81 run=3 blk=0 avail=7704 (55.9%) swpO=0 conn=4 myRSS=3357 php=6 phpRSS=345 ap=49 tcp=44 topuser=madalice 2026-09-01 15:20:15 L1=1.83 run=3 blk=0 avail=7849 (57.0%) swpO=0 conn=1 myRSS=3357 php=6 phpRSS=227 ap=47 tcp=45 topuser=evolution 2026-09-01 15:20:23 L1=1.68 run=1 blk=0 avail=7972 (57.9%) swpO=0 conn=3 myRSS=3357 php=4 phpRSS=123 ap=39 tcp=35 topuser=evolution 2026-09-01 15:20:25 L1=1.55 run=2 blk=0 avail=7996 (58.0%) swpO=0 conn=1 myRSS=3357 php=2 phpRSS=42 ap=37 tcp=37 topuser=root 2026-09-01 15:20:33 L1=1.42 run=1 blk=0 avail=7876 (57.2%) swpO=0 conn=3 myRSS=3357 php=5 phpRSS=256 ap=35 tcp=40 topuser=madalice 2026-09-01 15:20:35 L1=1.31 run=4 blk=0 avail=7818 (56.7%) swpO=0 conn=1 myRSS=3357 php=5 phpRSS=282 ap=41 tcp=51 topuser=madalice 2026-09-01 15:20:43 L1=1.52 run=3 blk=0 avail=7787 (56.5%) swpO=2 conn=3 myRSS=3357 php=7 phpRSS=379 ap=41 tcp=48 topuser=evolution 2026-09-01 15:20:45 L1=1.80 run=2 blk=0 avail=7858 (57.0%) swpO=2 conn=1 myRSS=3357 php=3 phpRSS=176 ap=40 tcp=45 topuser=madalice 2026-09-01 15:20:53 L1=2.06 run=2 blk=0 avail=7606 (55.2%) swpO=0 conn=3 myRSS=3357 php=7 phpRSS=525 ap=43 tcp=54 topuser=infinium 2026-09-01 15:20:55 L1=2.06 run=3 blk=1 avail=7808 (56.7%) swpO=0 conn=1 myRSS=3357 php=3 phpRSS=199 ap=45 tcp=48 topuser=madalice 2026-09-01 15:21:03 L1=2.12 run=3 blk=0 avail=7757 (56.3%) swpO=0 conn=3 myRSS=3357 php=9 phpRSS=460 ap=39 tcp=34 topuser=evolution 2026-09-01 15:21:05 L1=2.12 run=2 blk=0 avail=7823 (56.8%) swpO=0 conn=2 myRSS=3357 php=3 phpRSS=252 ap=37 tcp=34 topuser=madalice 2026-09-01 15:21:13 L1=2.11 run=5 blk=0 avail=7848 (57.0%) swpO=0 conn=3 myRSS=3357 php=4 phpRSS=239 ap=30 tcp=55 topuser=madalice 2026-09-01 15:21:16 L1=2.11 run=1 blk=0 avail=7890 (57.3%) swpO=0 conn=2 myRSS=3357 php=3 phpRSS=198 ap=33 tcp=52 topuser=madalice 2026-09-01 15:21:23 L1=1.93 run=2 blk=0 avail=7712 (56.0%) swpO=0 conn=2 myRSS=3357 php=5 phpRSS=282 ap=57 tcp=41 topuser=madalice 2026-09-01 15:21:26 L1=1.93 run=1 blk=0 avail=7748 (56.2%) swpO=0 conn=2 myRSS=3357 php=3 phpRSS=199 ap=55 tcp=38 topuser=madalice 2026-09-01 15:21:34 L1=2.03 run=4 blk=0 avail=7685 (55.8%) swpO=0 conn=2 myRSS=3357 php=10 phpRSS=513 ap=47 tcp=47 topuser=evolution 2026-09-01 15:21:36 L1=2.03 run=5 blk=0 avail=7729 (56.1%) swpO=0 conn=2 myRSS=3357 php=7 phpRSS=393 ap=45 tcp=50 topuser=evolution 2026-09-01 15:21:44 L1=1.80 run=2 blk=0 avail=7727 (56.1%) swpO=0 conn=2 myRSS=3357 php=4 phpRSS=305 ap=43 tcp=50 topuser=madalice 2026-09-01 15:21:46 L1=1.80 run=3 blk=0 avail=7811 (56.7%) swpO=0 conn=2 myRSS=3357 php=4 phpRSS=242 ap=43 tcp=48 topuser=madalice 2026-09-01 15:21:54 L1=2.14 run=13 blk=0 avail=7374 (53.5%) swpO=0 conn=2 myRSS=3357 php=12 phpRSS=847 ap=37 tcp=44 topuser=olympic 2026-09-01 15:21:56 L1=2.14 run=11 blk=0 avail=6424 (46.6%) swpO=0 conn=11 myRSS=3362 php=16 phpRSS=1902 ap=38 tcp=54 topuser=evolution