INCIDENT 2026-09-02 14:14:20 trigger: load=90.27/10cpu swapout=9805/s ================================================================== load: 90.27 30.33 16.35 3/724 3239063 ncpu:10 mem_avail: 11394MB/13777MB (82.7%) swap_used:2090MB swapout:9812/s blocked(D):1 running:3 iowait:19.6% steal:0.0% php: 5 procs / 83MB heaviest user: madalice (3 procs, 82MB) apache: 146 procs tcp_estab: 66 --- RSS by user (all processes) --- USER PROCS RSS_MB nobody 145 1318 mysql 1 468 root 249 258 netdata 7 152 madalice 3 82 mailman 20 34 evolution 9 17 zabbix 1 13 wp-toolkit 3 13 candyfabcom 1 12 dovecot 3 7 polkitd 1 2 lowrange 1 2 dovenull 6 2 dbus 1 2 cpanelconnecttrack 1 2 mailnull 1 1 rpc 1 0 nscd 1 0 named 1 0 --- php workers by user --- USER PROCS RSS_MB nobody 145 1318 mysql 1 468 root 248 249 netdata 7 152 madalice 3 82 mailman 20 34 evolution 9 18 zabbix 1 13 wp-toolkit 3 13 candyfabcom 1 12 dovecot 3 7 polkitd 1 2 lowrange 1 2 dovenull 6 2 dbus 1 2 cpanelconnecttrack 1 2 mailnull 1 1 rpc 1 0 nscd 1 0 named 1 0 --- php workers by user --- USER PROCS RSS_MB madalice 3 82 evolution 2 35 root 1 0 --- vm tuning / memory pressure --- vm.swappiness 30 madalice 3 82 evolution 2 37 root 1 0 --- vm tuning / memory pressure --- vm.vfs_cache_pressure 100 vm.swappiness 30 vm.min_free_kbytes 67584 vm.vfs_cache_pressure 100 vm.overcommit_memory 0 vm.overcommit_ratio 50 vm.min_free_kbytes 67584 vm.overcommit_memory 0 Cached: 622 MB Active(file): 358 MB Inactive(file): 321 MB Dirty: 2 MB Writeback: 0 MB SReclaimable: 181 MB CommitLimit: 10984 MB Committed_AS: 9121 MB --- backup / dump / scan processes (page-cache evictors) --- vm.overcommit_ratio 50 Cached: 622 MB Active(file): 358 MB Inactive(file): 321 MB Dirty: 2 MB Writeback: 0 MB SReclaimable: 181 MB CommitLimit: 10984 MB Committed_AS: 9121 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND PID USER ELAPSED RSS_KB COMMAND 3202034 root 10:00 27016 /opt/imunify360/venv/bin/python3 -m imav.run 3926885 root 1-11:51:52 252 /usr/bin/imunify-agent-proxy 3202034 root 10:00 27016 /opt/imunify360/venv/bin/python3 -m imav.run 3926885 root 1-11:51:52 252 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 482544 25.8 Ssl 00:07 /usr/sbin/mariadbd 508924 1 netdata 136104 2.0 Ssl 5-11:54:41 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 706071 655564 root 45608 0.0 S 11:36:22 spamd child 2900038 655564 root 43280 0.0 S 01:32:18 spamd child 3238491 3929444 madalice 29720 1.5 S 00:12 php-fpm: pool madalice_com_au 3238668 3929444 madalice 29692 1.2 S 00:11 php-fpm: pool madalice_com_au 3202034 1 root 27016 0.7 Ssl 10:00 /opt/imunify360/venv/bin/python3 -m imav.run 3238472 3929444 madalice 25484 2.6 S 00:36 php-fpm: pool madalice_com_au 509236 509098 root 23972 0.0 Sl 5-11:54:38 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 3238230 506832 nobody 18860 0.1 S 01:06 /usr/sbin/httpd -k start 3238699 506832 nobody 18500 0.2 S 00:10 /usr/sbin/httpd -k start 3238760 506832 nobody 18396 0.1 S 00:09 /usr/sbin/httpd -k start 3238482 506832 nobody 18204 1.4 S 00:19 /usr/sbin/httpd -k start 3238378 506832 nobody 18052 1.1 S 00:58 /usr/sbin/httpd -k start 509671 508992 netdata 17868 2.1 Sl 5-11:54:36 /usr/libexec/netdata/plugins.d/apps.plugin 1 3238772 506832 nobody 17784 0.3 S 00:09 /usr/sbin/httpd -k start 3238243 506832 nobody 17480 0.0 S 01:04 /usr/sbin/httpd -k start 3238764 506832 nobody 17364 0.2 S 00:09 /usr/sbin/httpd -k start 3238768 506832 nobody 16728 0.1 S 00:09 /usr/sbin/httpd -k start 3238659 506832 nobody 16540 0.1 S 00:11 /usr/sbin/httpd -k start 3238244 506832 nobody 16004 0.1 S 01:04 /usr/sbin/httpd -k start 3238763 506832 nobody 15980 0.1 S 00:09 /usr/sbin/httpd -k start 3238765 506832 nobody 15940 0.1 S 00:09 /usr/sbin/httpd -k start 3238661 506832 nobody 15700 0.0 S 00:11 /usr/sbin/httpd -k start 3238700 506832 nobody 15688 0.3 S 00:10 /usr/sbin/httpd -k start 3238705 506832 nobody 15660 0.1 S 00:10 /usr/sbin/httpd -k start 3238655 506832 nobody 15656 0.1 S 00:11 /usr/sbin/httpd -k start 3238656 506832 nobody 15640 0.0 S 00:11 /usr/sbin/httpd -k start 3238245 506832 nobody 15552 0.0 S 01:04 /usr/sbin/httpd -k start 3238698 506832 nobody 15524 0.1 S 00:10 /usr/sbin/httpd -k start 3238704 506832 nobody 15500 0.1 S 00:10 /usr/sbin/httpd -k start 3238703 506832 nobody 15412 0.1 S 00:10 /usr/sbin/httpd -k start 3238063 506832 nobody 15396 0.0 S 01:11 /usr/sbin/httpd -k start 3238767 506832 nobody 15336 0.1 S 00:09 /usr/sbin/httpd -k start 3238766 506832 nobody 15304 0.1 S 00:09 /usr/sbin/httpd -k start 3238702 506832 nobody 15180 0.1 S 00:10 /usr/sbin/httpd -k start 3238390 506832 nobody 15120 1.5 S 00:55 /usr/sbin/httpd -k start 3238701 506832 nobody 15104 0.0 S 00:10 /usr/sbin/httpd -k start 3238107 506832 nobody 14984 0.0 S 01:08 /usr/sbin/httpd -k start 3238076 506832 nobody 14940 0.1 S 01:10 /usr/sbin/httpd -k start 3238394 506832 nobody 14444 2.0 S 00:55 /usr/sbin/httpd -k start 3238229 506832 nobody 13904 0.0 S 01:06 /usr/sbin/httpd -k start 3238490 506832 nobody 13672 0.0 S 00:12 /usr/sbin/httpd -k start 483898 1 zabbix PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 482544 25.8 Ssl 00:07 /usr/sbin/mariadbd 508924 1 netdata 136104 2.0 Ssl 5-11:54:41 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 706071 655564 root 45608 0.0 S 11:36:22 spamd child 2900038 655564 root 43280 0.0 S 01:32:18 spamd child 3238491 3929444 madalice 29720 1.5 S 00:12 php-fpm: pool madalice_com_au 3238668 3929444 madalice 29692 1.2 S 00:11 php-fpm: pool madalice_com_au 3202034 1 root 27016 0.7 Ssl 10:00 /opt/imunify360/venv/bin/python3 -m imav.run 3238472 3929444 madalice 25484 2.6 S 00:36 php-fpm: pool madalice_com_au 509236 509098 root 23972 0.0 Sl 5-11:54:38 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 3238230 506832 nobody 18860 0.1 S 01:06 /usr/sbin/httpd -k start 3238699 506832 nobody 18500 0.2 S 00:10 /usr/sbin/httpd -k start 3238760 506832 nobody 18396 0.1 S 00:09 /usr/sbin/httpd -k start 3238482 506832 nobody 18204 1.4 S 00:19 /usr/sbin/httpd -k start 3238378 506832 nobody 18052 1.1 S 00:58 /usr/sbin/httpd -k start 509671 508992 netdata 17868 2.1 Sl 5-11:54:36 /usr/libexec/netdata/plugins.d/apps.plugin 1 3238772 506832 nobody 17784 0.3 S 00:09 /usr/sbin/httpd -k start 3238243 506832 nobody 17480 0.0 S 01:04 /usr/sbin/httpd -k start 3238764 506832 nobody 17364 0.2 S 00:09 /usr/sbin/httpd -k start 3238768 506832 nobody 16728 0.1 S 00:09 /usr/sbin/httpd -k start 3238659 506832 nobody 16540 0.1 S 00:11 /usr/sbin/httpd -k start 3238244 506832 nobody 16004 0.1 S 01:04 /usr/sbin/httpd -k start 3238763 506832 nobody 15980 0.1 S 00:09 /usr/sbin/httpd -k start 3238765 506832 nobody 15940 0.1 S 00:09 /usr/sbin/httpd -k start 3238661 506832 nobody 15700 0.0 S 00:11 /usr/sbin/httpd -k start 3238700 506832 nobody 15688 0.3 S 00:10 /usr/sbin/httpd -k start 3238705 506832 nobody 15660 0.1 S 00:10 /usr/sbin/httpd -k start 3238655 506832 nobody 15656 0.1 S 00:11 /usr/sbin/httpd -k start 3238656 506832 nobody 15640 0.0 S 00:11 /usr/sbin/httpd -k start 3238245 506832 nobody 15552 0.0 S 01:04 /usr/sbin/httpd -k start 3238698 506832 nobody 15524 0.1 S 00:10 /usr/sbin/httpd -k start 3238704 506832 nobody 15500 0.1 S 00:10 /usr/sbin/httpd -k start 3238703 506832 nobody 15412 0.1 S 00:10 /usr/sbin/httpd -k start 3238063 506832 nobody 15396 0.0 S 01:11 /usr/sbin/httpd -k start 3238767 506832 nobody 15336 0.1 S 00:09 /usr/sbin/httpd -k start 3238766 506832 nobody 15304 0.1 S 00:09 /usr/sbin/httpd -k start 3238702 506832 nobody 15180 0.1 S 00:10 /usr/sbin/httpd -k start 3238390 506832 nobody 15120 1.5 S 00:55 /usr/sbin/httpd -k start 3238701 506832 nobody 15104 0.0 S 00:10 /usr/sbin/httpd -k start 3238107 506832 nobody 14984 0.0 S 01:08 /usr/sbin/httpd -k start 3238076 506832 nobody 14940 0.1 S 01:10 /usr/sbin/httpd -k start 3238394 506832 nobody 14444 2.0 S 00:55 /usr/sbin/httpd -k start 3238229 506832 nobody 13904 0.0 S 01:06 /usr/sbin/httpd -k start 3238490 506832 nobody 13672 0.0 S 00:12 /usr/sbin/httpd -k start 483898 1 zabbix 13420 0.2 Ssl 5-11:55:55 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 3238487 506832 nobody 13412 1.3 S 00:15 /usr/sbin/httpd -k start 3238385 506832 nobody 13388 0.9 S 00:57 /usr/sbin/httpd -k start 3238242 506832 nobody 13292 0.0 S 01:04 /usr/sbin/httpd -k start 3238761 506832 nobody 13204 0.0 S 00:09 /usr/sbin/httpd -k start 3238770 506832 nobody 13204 0.0 S 00:09 /usr/sbin/httpd -k start 3238771 506832 nobody 13204 0.0 S 00:09 /usr/sbin/httpd -k start 3238395 506832 nobody 12908 2.1 S 00:55 /usr/sbin/httpd -k start 3238388 506832 nobody 12736 2.0 S 00:56 /usr/sbin/httpd -k start 3238078 506832 nobody 12732 0.0 S 01:10 /usr/sbin/httpd -k start 3238081 506832 nobody 12684 0.0 S 01:10 /usr/sbin/httpd -k start 3238973 508511 candyfabcom 12472 0.0 S 00:04 dovecot/imap 3238075 506832 nobody 12436 0.0 S 01:10 /usr/sbin/httpd -k start 3238054 506832 nobody 12336 0.0 S 01:12 /usr/sbin/httpd -k start 3238080 506832 nobody 12164 0.0 S 01:10 /usr/sbin/httpd -k start 3238065 506832 nobody 11780 0.0 S 01:11 /usr/sbin/httpd -k start 3238077 506832 nobody 11728 0.0 S 01:10 /usr/sbin/httpd -k start 13420 0.2 Ssl 5-11:55:55 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 3238487 506832 nobody 13412 1.3 S 00:15 /usr/sbin/httpd -k start 3238385 506832 nobody 13388 0.9 S 00:57 /usr/sbin/httpd -k start 3238242 506832 nobody 13292 0.0 S 01:04 /usr/sbin/httpd -k start 3238761 506832 nobody 13204 0.0 S 00:09 /usr/sbin/httpd -k start 3238770 506832 nobody 13204 0.0 S 00:09 /usr/sbin/httpd -k start 3238771 506832 nobody 13204 0.0 S 00:09 /usr/sbin/httpd -k start 3238395 506832 nobody 12908 2.1 S 00:55 /usr/sbin/httpd -k start 3238388 506832 nobody 12736 2.0 S 00:56 /usr/sbin/httpd -k start 3238078 506832 nobody 12732 0.0 S 01:10 /usr/sbin/httpd -k start 3238081 506832 nobody 12684 0.0 S 01:10 /usr/sbin/httpd -k start 3238973 508511 candyfabcom 12472 0.0 S 00:04 dovecot/imap 3238075 506832 nobody 12436 0.0 S 01:10 /usr/sbin/httpd -k start 3238054 506832 nobody 12336 0.0 S 01:12 /usr/sbin/httpd -k start 3238080 506832 nobody 12164 0.0 S 01:10 /usr/sbin/httpd -k start 3238065 506832 nobody 11780 0.0 S 01:11 /usr/sbin/httpd -k start 3238077 506832 nobody 11728 0.0 S 01:10 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- --- mariadb processlist (non-sleeping) --- +-----+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +-----+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 371 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +-----+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- +-----+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +-----+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 372 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +-----+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 209 evolution/portal.evolutionerp.com.au-ssl_log 110 customc/customcentral.com.au-ssl_log 71 evolution/my.evolutionerp.com.au-ssl_log 209 evolution/app.evolutionerp.com.au-ssl_log 67 lowrange/lowrange.com.au-ssl_log 20 evolution/portal.evolutionerp.com.au-ssl_log 110 madalice/madalice.com.au-ssl_log 14 customc/customcentral.com.au-ssl_log 71 evolution/app.evolutionerp.com.au-ssl_log 67 lowrange/lowrange.com.au-ssl_log 20 madalice/madalice.com.au-ssl_log 14 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 168 203.54.180.238 67 40.115.94.245 65 35.247.240.153 56 103.104.165.99 31 182.239.240.254 19 34.165.58.25 15 1.144.107.82 14 103.104.164.114 13 101.166.96.210 12 124.168.5.234 5 118.127.40.55 3 150.228.151.47 2 52.167.144.187 2 147.161.213.78 2 138.226.108.105 --- top request paths across all vhosts (last 3 min) --- 168 203.54.180.238 101 40.115.94.245 65 35.247.240.153 56 103.104.165.99 31 182.239.240.254 19 34.165.58.25 15 1.144.107.82 14 103.104.164.114 13 101.166.96.210 12 124.168.5.234 5 118.127.40.55 3 150.228.151.47 2 52.167.144.187 2 147.161.213.78 2 138.226.108.105 --- top request paths across all vhosts (last 3 min) --- 134 POST /functions.php 81 GET /api/getItem/LWPB2001KG 45 GET /factory_session_checker.php 22 GET /factory_session_processed_qty.php 22 GET /factory_session_joiner.php 21 GET /heartbeat.php 16 GET /app/ajax.php 14 POST /app/ajax/selectFilter.php 9 GET /index.php 6 POST /itemModify.php 5 POST /wp-cron.php 5 POST /quoteditsave.php 5 POST / 5 GET /download.php 3 POST /plugins/csvexporter/plugin.php 3 POST /app/ajax/selectFilterSingle.php 3 POST /app/ajax.php 3 GET /modalload.php 3 GET / 2 POST /plugins/fencecosting/plugin.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 134 POST /functions.php 81 GET /api/getItem/LWPB2001KG 45 GET /factory_session_checker.php 22 GET /factory_session_processed_qty.php 22 GET /factory_session_joiner.php 21 GET /heartbeat.php 16 GET /app/ajax.php 14 POST /app/ajax/selectFilter.php 9 GET /index.php 6 POST /itemModify.php 5 POST /wp-cron.php 5 POST /quoteditsave.php 5 POST / 5 GET /download.php 3 POST /plugins/csvexporter/plugin.php 3 POST /app/ajax/selectFilterSingle.php 3 POST /app/ajax.php 3 GET /modalload.php 3 GET / 2 POST /plugins/fencecosting/plugin.php --- busiest 3 vhosts: top paths + last 10 requests --- 134 POST /functions.php 16 GET /app/ajax.php 14 POST /app/ajax/selectFilter.php 9 GET /index.php 6 POST /itemModify.php 5 POST /quoteditsave.php 5 GET /download.php 3 POST /plugins/csvexporter/plugin.php 3 POST /app/ajax/selectFilterSingle.php 3 POST /app/ajax.php 3 GET /modalload.php 2 POST /plugins/fencecosting/plugin.php -- last 10 requests -- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 103.104.164.114 - - [02/Sep/2026:14:14:12 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 103.104.165.99 - - [02/Sep/2026:14:14:13 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12028" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 103.104.165.99 - - [02/Sep/2026:14:14:13 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php?page=mfreqedit&id=11256" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK 1.144.107.82 - - [02/Sep/2026:14:14:13 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php?page=support_tickets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 103.104.165.99 - - [02/Sep/2026:14:14:14 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php?page=clientsites&clientid=741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) App 124.168.5.234 - - [02/Sep/2026:14:14:15 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=37048" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW 203.54.180.238 - - [02/Sep/2026:14:14:17 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 51 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=20055&tab=clienteditpricing" "Mozilla/5.0 (Windows N 203.54.180.238 - - [02/Sep/2026:14:14:16 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 51 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=17&tab=clienteditgeneral" "Mozilla/5.0 (Windows NT 1 203.54.180.238 - - [02/Sep/2026:14:14:17 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78933§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 150.228.151.47 - - [02/Sep/2026:14:14:16 +1000] "GET /index.php?page=inventory HTTP/1.1" 200 31126 "https://ntp.msn.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 134 POST /functions.php 16 GET /app/ajax.php 14 POST /app/ajax/selectFilter.php 9 GET /index.php 6 POST /itemModify.php 5 POST /quoteditsave.php 5 GET /download.php 3 POST /plugins/csvexporter/plugin.php 3 POST /app/ajax/selectFilterSingle.php 3 POST /app/ajax.php 3 GET /modalload.php 2 POST /plugins/fencecosting/plugin.php -- last 10 requests -- 103.104.164.114 - - [02/Sep/2026:14:14:12 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 103.104.165.99 - - [02/Sep/2026:14:14:13 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12028" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 103.104.165.99 - - [02/Sep/2026:14:14:13 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php?page=mfreqedit&id=11256" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK 1.144.107.82 - - [02/Sep/2026:14:14:13 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php?page=support_tickets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 103.104.165.99 - - [02/Sep/2026:14:14:14 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php?page=clientsites&clientid=741" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) App 124.168.5.234 - - [02/Sep/2026:14:14:15 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 500 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=37048" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW 203.54.180.238 - - [02/Sep/2026:14:14:17 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 51 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=20055&tab=clienteditpricing" "Mozilla/5.0 (Windows N 203.54.180.238 - - [02/Sep/2026:14:14:16 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 51 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=17&tab=clienteditgeneral" "Mozilla/5.0 (Windows NT 1 203.54.180.238 - - [02/Sep/2026:14:14:17 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78933§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 150.228.151.47 - - [02/Sep/2026:14:14:16 +1000] "GET /index.php?page=inventory HTTP/1.1" 200 31126 "https://ntp.msn.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 45 GET /factory_session_checker.php 22 GET /factory_session_processed_qty.php 22 GET /factory_session_joiner.php 21 GET /heartbeat.php -- last 10 requests -- 45 GET /factory_session_checker.php 22 GET /factory_session_processed_qty.php 22 GET /factory_session_joiner.php 21 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [02/Sep/2026:14:14:10 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebK 203.54.180.238 - - [02/Sep/2026:14:14:10 +1000] "GET /heartbeat.php?sentAt=1788322434&bytes=106,151,162,130&_=1788321764682 HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=9 203.54.180.238 - - [02/Sep/2026:14:14:10 +1000] "GET /heartbeat.php?sentAt=1788322435&bytes=106,151,162,131&_=1788267566814 HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [02/Sep/2026:14:14:11 +1000] "GET /factory_session_joiner.php?id=35063 HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [02/Sep/2026:14:14:11 +1000] "GET /factory_session_checker.php HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:14:14:11 +1000] "GET /heartbeat.php?sentAt=1788322444&bytes=106,151,162,140&_=1788321764683 HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=9 203.54.180.238 - - [02/Sep/2026:14:14:11 +1000] "GET /heartbeat.php?sentAt=1788322445&bytes=106,151,162,141&_=1788267566815 HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [02/Sep/2026:14:14:10 +1000] "GET /heartbeat.php?sentAt=1788322424&bytes=106,151,162,120&_=1788321764681 HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=9 203.54.180.238 - - [02/Sep/2026:14:13:41 +1000] "GET /factory_session_checker.php HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:14:14:14 +1000] "GET /heartbeat.php?sentAt=1788322454&bytes=106,151,162,150&_=1788321764684 HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=9 == customc/customcentral.com.au-ssl_log == -- top paths -- 203.54.180.238 - - [02/Sep/2026:14:14:10 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebK 203.54.180.238 - - [02/Sep/2026:14:14:10 +1000] "GET /heartbeat.php?sentAt=1788322434&bytes=106,151,162,130&_=1788321764682 HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=9 203.54.180.238 - - [02/Sep/2026:14:14:10 +1000] "GET /heartbeat.php?sentAt=1788322435&bytes=106,151,162,131&_=1788267566814 HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [02/Sep/2026:14:14:11 +1000] "GET /factory_session_joiner.php?id=35063 HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [02/Sep/2026:14:14:11 +1000] "GET /factory_session_checker.php HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:14:14:11 +1000] "GET /heartbeat.php?sentAt=1788322444&bytes=106,151,162,140&_=1788321764683 HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=9 203.54.180.238 - - [02/Sep/2026:14:14:11 +1000] "GET /heartbeat.php?sentAt=1788322445&bytes=106,151,162,141&_=1788267566815 HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [02/Sep/2026:14:14:10 +1000] "GET /heartbeat.php?sentAt=1788322424&bytes=106,151,162,120&_=1788321764681 HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=9 203.54.180.238 - - [02/Sep/2026:14:13:41 +1000] "GET /factory_session_checker.php HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:14:14:14 +1000] "GET /heartbeat.php?sentAt=1788322454&bytes=106,151,162,150&_=1788321764684 HTTP/1.1" 500 20 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=9 == customc/customcentral.com.au-ssl_log == -- top paths -- 5 POST /wp-cron.php 1 GET /kubernetes.yaml 1 GET /docker-compose.dev.yml 1 GET /config/parameters.yaml 1 GET /config/ovh.conf 1 GET /config/msmtprc 1 GET /config/mandrill.php 1 GET /config/mail.php 1 GET /config/database.yml 1 GET /backend/settings.php 1 GET /backend/sendgrid.py 1 GET /backend/parameters.yml -- last 10 requests -- 5 POST /wp-cron.php 1 GET /kubernetes.yaml 1 GET /docker-compose.dev.yml 1 GET /config/parameters.yaml 1 GET /config/ovh.conf 1 GET /config/msmtprc 1 GET /config/mandrill.php 1 GET /config/mail.php 1 GET /config/database.yml 1 GET /backend/settings.php 1 GET /backend/sendgrid.py 1 GET /backend/parameters.yml -- last 10 requests -- 118.127.40.55 - - [02/Sep/2026:14:14:15 +1000] "POST /wp-cron.php?doing_wp_cron=1788322454.1482400894165039062500 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://customcentral.com.au" 118.127.40.55 - - [02/Sep/2026:14:14:15 +1000] "POST /wp-cron.php?doing_wp_cron=1788322455.1532769203186035156250 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://customcentral.com.au" 118.127.40.55 - - [02/Sep/2026:14:14:15 +1000] "POST /wp-cron.php?doing_wp_cron=1788322455.6457760334014892578125 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://customcentral.com.au" 118.127.40.55 - - [02/Sep/2026:14:14:16 +1000] "POST /wp-cron.php?doing_wp_cron=1788322456.5911979675292968750000 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://customcentral.com.au" 35.247.240.153 - - [02/Sep/2026:14:13:07 +1000] "GET /application.log HTTP/1.1" 500 2559 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.247.240.153 - - [02/Sep/2026:14:13:07 +1000] "GET /api/config.yml HTTP/1.1" 500 2559 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.247.240.153 - - [02/Sep/2026:14:13:07 +1000] "GET /app.log HTTP/1.1" 404 73335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.247.240.153 - - [02/Sep/2026:14:13:07 +1000] "GET /app/config/parameters.yaml HTTP/1.1" 500 2559 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.247.240.153 - - [02/Sep/2026:14:13:07 +1000] "GET /actuator/trace HTTP/1.1" 500 2559 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.247.240.153 - - [02/Sep/2026:14:13:07 +1000] "GET /actuator/threaddump HTTP/1.1" 500 2559 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 118.127.40.55 - - [02/Sep/2026:14:14:15 +1000] "POST /wp-cron.php?doing_wp_cron=1788322454.1482400894165039062500 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://customcentral.com.au" 118.127.40.55 - - [02/Sep/2026:14:14:15 +1000] "POST /wp-cron.php?doing_wp_cron=1788322455.1532769203186035156250 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://customcentral.com.au" 118.127.40.55 - - [02/Sep/2026:14:14:15 +1000] "POST /wp-cron.php?doing_wp_cron=1788322455.6457760334014892578125 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://customcentral.com.au" 118.127.40.55 - - [02/Sep/2026:14:14:16 +1000] "POST /wp-cron.php?doing_wp_cron=1788322456.5911979675292968750000 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://customcentral.com.au" 35.247.240.153 - - [02/Sep/2026:14:13:07 +1000] "GET /application.log HTTP/1.1" 500 2559 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.247.240.153 - - [02/Sep/2026:14:13:07 +1000] "GET /api/config.yml HTTP/1.1" 500 2559 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.247.240.153 - - [02/Sep/2026:14:13:07 +1000] "GET /app.log HTTP/1.1" 404 73335 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.247.240.153 - - [02/Sep/2026:14:13:07 +1000] "GET /app/config/parameters.yaml HTTP/1.1" 500 2559 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.247.240.153 - - [02/Sep/2026:14:13:07 +1000] "GET /actuator/trace HTTP/1.1" 500 2559 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 35.247.240.153 - - [02/Sep/2026:14:13:07 +1000] "GET /actuator/threaddump HTTP/1.1" 500 2559 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" --- last 30 samples (run-up to this incident) --- --- last 30 samples (run-up to this incident) --- 2026-09-02 14:11:02 L1=1.62 run=1 blk=0 avail=10101(73.3%) swpO=0 conn=2 myRSS=1298 php=4 phpRSS=319 ap=33 tcp=42 topuser=madalice 2026-09-02 14:11:02 L1=1.62 run=2 blk=0 avail=10101(73.3%) swpO=0 conn=2 myRSS=1298 php=4 phpRSS=319 ap=33 tcp=42 topuser=madalice 2026-09-02 14:11:12 L1=1.68 run=3 blk=0 avail=10063(73.0%) swpO=0 conn=2 myRSS=1299 php=5 phpRSS=391 ap=31 tcp=38 topuser=madalice 2026-09-02 14:11:12 L1=1.68 run=5 blk=0 avail=10061(73.0%) swpO=0 conn=2 myRSS=1299 php=5 phpRSS=395 ap=31 tcp=38 topuser=madalice 2026-09-02 14:11:22 L1=1.73 run=1 blk=0 avail=10063(73.0%) swpO=0 conn=2 myRSS=1299 php=5 phpRSS=384 ap=31 tcp=46 topuser=madalice 2026-09-02 14:11:22 L1=1.73 run=2 blk=0 avail=10062(73.0%) swpO=0 conn=2 myRSS=1299 php=5 phpRSS=384 ap=31 tcp=46 topuser=madalice 2026-09-02 14:11:32 L1=1.69 run=2 blk=0 avail=10051(73.0%) swpO=0 conn=2 myRSS=1299 php=4 phpRSS=370 ap=31 tcp=44 topuser=madalice 2026-09-02 14:11:32 L1=1.69 run=3 blk=0 avail=10049(72.9%) swpO=0 conn=2 myRSS=1299 php=4 phpRSS=371 ap=31 tcp=44 topuser=madalice 2026-09-02 14:11:42 L1=1.74 run=1 blk=0 avail=9930 (72.1%) swpO=0 conn=2 myRSS=1300 php=6 phpRSS=499 ap=36 tcp=44 topuser=madalice 2026-09-02 14:11:42 L1=1.74 run=2 blk=0 avail=9929 (72.1%) swpO=0 conn=2 myRSS=1300 php=6 phpRSS=499 ap=36 tcp=44 topuser=madalice 2026-09-02 14:11:52 L1=1.87 run=3 blk=0 avail=9917 (72.0%) swpO=0 conn=4 myRSS=1301 php=6 phpRSS=530 ap=34 tcp=34 topuser=madalice 2026-09-02 14:11:52 L1=1.87 run=5 blk=0 avail=9916 (72.0%) swpO=0 conn=4 myRSS=1301 php=6 phpRSS=531 ap=34 tcp=34 topuser=madalice 2026-09-02 14:12:02 L1=2.41 run=4 blk=0 avail=10153(73.7%) swpO=0 conn=4 myRSS=1302 php=6 phpRSS=282 ap=39 tcp=41 topuser=madalice 2026-09-02 14:12:02 L1=2.41 run=8 blk=0 avail=10137(73.6%) swpO=0 conn=4 myRSS=1302 php=5 phpRSS=263 ap=39 tcp=41 topuser=madalice 2026-09-02 14:12:12 L1=2.19 run=1 blk=0 avail=10232(74.3%) swpO=0 conn=4 myRSS=1302 php=3 phpRSS=162 ap=33 tcp=31 topuser=madalice 2026-09-02 14:12:12 L1=2.19 run=2 blk=0 avail=10231(74.3%) swpO=0 conn=4 myRSS=1302 php=3 phpRSS=162 ap=33 tcp=31 topuser=madalice 2026-09-02 14:12:22 L1=2.16 run=1 blk=0 avail=10238(74.3%) swpO=0 conn=4 myRSS=1302 php=3 phpRSS=161 ap=31 tcp=36 topuser=madalice 2026-09-02 14:12:22 L1=2.16 run=2 blk=0 avail=10237(74.3%) swpO=0 conn=4 myRSS=1302 php=3 phpRSS=161 ap=31 tcp=36 topuser=madalice 2026-09-02 14:12:32 L1=2.13 run=1 blk=0 avail=10227(74.2%) swpO=0 conn=4 myRSS=1302 php=3 phpRSS=162 ap=33 tcp=63 topuser=madalice 2026-09-02 14:12:32 L1=2.13 run=2 blk=0 avail=10225(74.2%) swpO=0 conn=4 myRSS=1302 php=3 phpRSS=162 ap=33 tcp=63 topuser=madalice 2026-09-02 14:12:42 L1=2.11 run=2 blk=0 avail=9367 (68.0%) swpO=0 conn=4 myRSS=1302 php=7 phpRSS=482 ap=121 tcp=43 topuser=madalice 2026-09-02 14:12:42 L1=2.11 run=4 blk=0 avail=9359 (67.9%) swpO=0 conn=4 myRSS=1302 php=7 phpRSS=483 ap=121 tcp=43 topuser=madalice 2026-09-02 14:12:52 L1=2.01 run=3 blk=0 avail=9410 (68.3%) swpO=0 conn=4 myRSS=1302 php=6 phpRSS=444 ap=111 tcp=38 topuser=madalice 2026-09-02 14:12:52 L1=2.01 run=3 blk=0 avail=9416 (68.3%) swpO=0 conn=4 myRSS=1302 php=6 phpRSS=444 ap=111 tcp=37 topuser=madalice 2026-09-02 14:13:02 L1=2.08 run=1 blk=0 avail=9499 (68.9%) swpO=0 conn=4 myRSS=1320 php=5 phpRSS=411 ap=101 tcp=38 topuser=madalice 2026-09-02 14:13:02 L1=2.08 run=2 blk=0 avail=9499 (69.0%) swpO=0 conn=4 myRSS=1320 php=6 phpRSS=429 ap=101 tcp=38 topuser=madalice 2026-09-02 14:13:12 L1=9.12 run=101 blk=2 avail=1761 (12.8%) swpO=1678 conn=91 myRSS=1260 php=97 phpRSS=10749 ap=111 tcp=207 topuser=customc 2026-09-02 14:13:12 L1=9.12 run=100 blk=0 avail=1739 (12.6%) swpO=1628 conn=91 myRSS=1262 php=97 phpRSS=10718 ap=111 tcp=205 topuser=customc 2026-09-02 14:14:20 L1=90.27 run=3 blk=1 avail=11394(82.7%) swpO=9805 conn=1 myRSS=464 php=5 phpRSS=83 ap=146 tcp=66 topuser=madalice 2026-09-02 14:14:20 L1=90.27 run=3 blk=1 avail=11394(82.7%) swpO=9812 conn=2 myRSS=463 php=5 phpRSS=83 ap=146 tcp=66 topuser=madalice 2026-09-02 14:11:02 L1=1.62 run=1 blk=0 avail=10101(73.3%) swpO=0 conn=2 myRSS=1298 php=4 phpRSS=319 ap=33 tcp=42 topuser=madalice 2026-09-02 14:11:02 L1=1.62 run=2 blk=0 avail=10101(73.3%) swpO=0 conn=2 myRSS=1298 php=4 phpRSS=319 ap=33 tcp=42 topuser=madalice 2026-09-02 14:11:12 L1=1.68 run=3 blk=0 avail=10063(73.0%) swpO=0 conn=2 myRSS=1299 php=5 phpRSS=391 ap=31 tcp=38 topuser=madalice 2026-09-02 14:11:12 L1=1.68 run=5 blk=0 avail=10061(73.0%) swpO=0 conn=2 myRSS=1299 php=5 phpRSS=395 ap=31 tcp=38 topuser=madalice 2026-09-02 14:11:22 L1=1.73 run=1 blk=0 avail=10063(73.0%) swpO=0 conn=2 myRSS=1299 php=5 phpRSS=384 ap=31 tcp=46 topuser=madalice 2026-09-02 14:11:22 L1=1.73 run=2 blk=0 avail=10062(73.0%) swpO=0 conn=2 myRSS=1299 php=5 phpRSS=384 ap=31 tcp=46 topuser=madalice 2026-09-02 14:11:32 L1=1.69 run=2 blk=0 avail=10051(73.0%) swpO=0 conn=2 myRSS=1299 php=4 phpRSS=370 ap=31 tcp=44 topuser=madalice 2026-09-02 14:11:32 L1=1.69 run=3 blk=0 avail=10049(72.9%) swpO=0 conn=2 myRSS=1299 php=4 phpRSS=371 ap=31 tcp=44 topuser=madalice 2026-09-02 14:11:42 L1=1.74 run=1 blk=0 avail=9930 (72.1%) swpO=0 conn=2 myRSS=1300 php=6 phpRSS=499 ap=36 tcp=44 topuser=madalice 2026-09-02 14:11:42 L1=1.74 run=2 blk=0 avail=9929 (72.1%) swpO=0 conn=2 myRSS=1300 php=6 phpRSS=499 ap=36 tcp=44 topuser=madalice 2026-09-02 14:11:52 L1=1.87 run=3 blk=0 avail=9917 (72.0%) swpO=0 conn=4 myRSS=1301 php=6 phpRSS=530 ap=34 tcp=34 topuser=madalice 2026-09-02 14:11:52 L1=1.87 run=5 blk=0 avail=9916 (72.0%) swpO=0 conn=4 myRSS=1301 php=6 phpRSS=531 ap=34 tcp=34 topuser=madalice 2026-09-02 14:12:02 L1=2.41 run=4 blk=0 avail=10153(73.7%) swpO=0 conn=4 myRSS=1302 php=6 phpRSS=282 ap=39 tcp=41 topuser=madalice 2026-09-02 14:12:02 L1=2.41 run=8 blk=0 avail=10137(73.6%) swpO=0 conn=4 myRSS=1302 php=5 phpRSS=263 ap=39 tcp=41 topuser=madalice 2026-09-02 14:12:12 L1=2.19 run=1 blk=0 avail=10232(74.3%) swpO=0 conn=4 myRSS=1302 php=3 phpRSS=162 ap=33 tcp=31 topuser=madalice 2026-09-02 14:12:12 L1=2.19 run=2 blk=0 avail=10231(74.3%) swpO=0 conn=4 myRSS=1302 php=3 phpRSS=162 ap=33 tcp=31 topuser=madalice 2026-09-02 14:12:22 L1=2.16 run=1 blk=0 avail=10238(74.3%) swpO=0 conn=4 myRSS=1302 php=3 phpRSS=161 ap=31 tcp=36 topuser=madalice 2026-09-02 14:12:22 L1=2.16 run=2 blk=0 avail=10237(74.3%) swpO=0 conn=4 myRSS=1302 php=3 phpRSS=161 ap=31 tcp=36 topuser=madalice 2026-09-02 14:12:32 L1=2.13 run=1 blk=0 avail=10227(74.2%) swpO=0 conn=4 myRSS=1302 php=3 phpRSS=162 ap=33 tcp=63 topuser=madalice 2026-09-02 14:12:32 L1=2.13 run=2 blk=0 avail=10225(74.2%) swpO=0 conn=4 myRSS=1302 php=3 phpRSS=162 ap=33 tcp=63 topuser=madalice 2026-09-02 14:12:42 L1=2.11 run=2 blk=0 avail=9367 (68.0%) swpO=0 conn=4 myRSS=1302 php=7 phpRSS=482 ap=121 tcp=43 topuser=madalice 2026-09-02 14:12:42 L1=2.11 run=4 blk=0 avail=9359 (67.9%) swpO=0 conn=4 myRSS=1302 php=7 phpRSS=483 ap=121 tcp=43 topuser=madalice 2026-09-02 14:12:52 L1=2.01 run=3 blk=0 avail=9410 (68.3%) swpO=0 conn=4 myRSS=1302 php=6 phpRSS=444 ap=111 tcp=38 topuser=madalice 2026-09-02 14:12:52 L1=2.01 run=3 blk=0 avail=9416 (68.3%) swpO=0 conn=4 myRSS=1302 php=6 phpRSS=444 ap=111 tcp=37 topuser=madalice 2026-09-02 14:13:02 L1=2.08 run=1 blk=0 avail=9499 (68.9%) swpO=0 conn=4 myRSS=1320 php=5 phpRSS=411 ap=101 tcp=38 topuser=madalice 2026-09-02 14:13:02 L1=2.08 run=2 blk=0 avail=9499 (69.0%) swpO=0 conn=4 myRSS=1320 php=6 phpRSS=429 ap=101 tcp=38 topuser=madalice 2026-09-02 14:13:12 L1=9.12 run=101 blk=2 avail=1761 (12.8%) swpO=1678 conn=91 myRSS=1260 php=97 phpRSS=10749 ap=111 tcp=207 topuser=customc 2026-09-02 14:13:12 L1=9.12 run=100 blk=0 avail=1739 (12.6%) swpO=1628 conn=91 myRSS=1262 php=97 phpRSS=10718 ap=111 tcp=205 topuser=customc 2026-09-02 14:14:20 L1=90.27 run=3 blk=1 avail=11394(82.7%) swpO=9805 conn=1 myRSS=464 php=5 phpRSS=83 ap=146 tcp=66 topuser=madalice 2026-09-02 14:14:20 L1=90.27 run=3 blk=1 avail=11394(82.7%) swpO=9812 conn=2 myRSS=463 php=5 phpRSS=83 ap=146 tcp=66 topuser=madalice