INCIDENT 2026-09-02 14:37:08 trigger: php_rss=2080MB ================================================================== load: 1.61 2.24 5.26 3/629 3330060 ncpu:10 mem_avail: 8334MB/13777MB (60.5%) swap_used:1393MB swapout:0/s blocked(D):0 running:14 iowait:0.2% steal:0.0% php: 15 procs / 2080MB heaviest user: evolution (11 procs, 1597MB) apache: 37 procs tcp_estab: 57 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1802 evolution 18 1613 nobody 36 608 madalice 3 479 root 245 455 netdata 7 184 cpanellogin 1 47 mailman 20 36 dovenull 6 19 zabbix 1 17 wp-toolkit 3 14 dovecot 3 9 kurri 1 4 polkitd 1 3 nscd 1 3 dbus 1 3 cpanelconnecttrack 1 3 named 1 2 mailnull 1 2 chrony 1 1 --- php workers by user --- USER PROCS RSS_MB evolution 10 1545 madalice 3 479 root 1 2 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5249 MB Active(file): 4018 MB Inactive(file): 1573 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 273 MB CommitLimit: 10984 MB Committed_AS: 8789 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 1-12:14:40 4596 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 1845340 37.4 Ssl 22:55 /usr/sbin/mariadbd 3330011 3313575 evolution 187064 91.0 S 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3330014 3329581 evolution 187020 104 S 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3330017 3313528 evolution 186836 90.0 S 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3330013 3310332 evolution 186712 97.0 S 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3330015 3313539 evolution 186632 95.0 S 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3330012 3311079 evolution 186604 101 S 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3330010 3313574 evolution 186328 89.0 S 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3330016 3313546 evolution 181024 94.0 S 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 508924 1 netdata 168268 2.0 Ssl 5-12:17:29 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3292380 3929444 madalice 165852 7.1 S 09:51 php-fpm: pool madalice_com_au 3292379 3929444 madalice 162896 7.6 S 09:51 php-fpm: pool madalice_com_au 3292374 3929444 madalice 162700 7.6 S 09:51 php-fpm: pool madalice_com_au 706071 655564 root 152800 0.0 S 11:59:10 spamd child 3330027 3330025 evolution 107064 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3239542 1353308 cpanellogin 48756 0.0 S 22:41 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en docroot /usr/local/cpanel/base cpanel_locale 2900038 655564 root 43520 0.0 S 01:55:06 spamd child 3330069 3313126 evolution 42400 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1353308 1 root 42032 0.1 Ss 42-11:55:52 cpsrvd (SSL) - waiting for connections 509236 509098 root 27056 0.0 Sl 5-12:17:26 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 3310332 506832 nobody 22256 0.0 S 06:26 /usr/sbin/httpd -k start 3330047 1469 root 21036 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3311079 506832 nobody 20672 0.0 S 05:51 /usr/sbin/httpd -k start 3313605 506832 nobody 20608 0.0 S 02:53 /usr/sbin/httpd -k start 3312084 506832 nobody 19892 0.0 S 04:32 /usr/sbin/httpd -k start 3313606 506832 nobody 19868 0.0 S 02:53 /usr/sbin/httpd -k start 3312896 506832 nobody 19740 0.0 S 03:42 /usr/sbin/httpd -k start 3313503 506832 nobody 19596 0.0 S 02:58 /usr/sbin/httpd -k start 3313528 506832 nobody 19412 0.0 S 02:55 /usr/sbin/httpd -k start 3313517 506832 nobody 19396 0.0 S 02:56 /usr/sbin/httpd -k start 3313521 506832 nobody 19332 0.0 S 02:56 /usr/sbin/httpd -k start 3313126 506832 nobody 19296 0.0 S 03:26 /usr/sbin/httpd -k start 3313566 506832 nobody 19232 0.0 S 02:54 /usr/sbin/httpd -k start 3311142 506832 nobody 18992 0.0 S 05:49 /usr/sbin/httpd -k start 3313546 506832 nobody 18924 0.0 S 02:54 /usr/sbin/httpd -k start 3313575 506832 nobody 18904 0.0 S 02:54 /usr/sbin/httpd -k start 3313627 506832 nobody 18756 0.1 S 02:53 /usr/sbin/httpd -k start 483898 1 zabbix 18360 0.2 Ssl 5-12:18:43 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 3313532 506832 nobody 18340 0.0 S 02:55 /usr/sbin/httpd -k start 3329567 506832 nobody 18192 0.0 S 00:39 /usr/sbin/httpd -k start 3329571 506832 nobody 18032 0.1 S 00:38 /usr/sbin/httpd -k start 509671 508992 netdata 18004 2.1 Sl 5-12:17:24 /usr/libexec/netdata/plugins.d/apps.plugin 1 3329579 506832 nobody 17992 0.1 S 00:37 /usr/sbin/httpd -k start 3312897 506832 nobody 17972 0.0 S 03:42 /usr/sbin/httpd -k start 3328789 506832 nobody 17700 0.0 S 01:28 /usr/sbin/httpd -k start 3313574 506832 nobody 17652 0.0 S 02:54 /usr/sbin/httpd -k start 3313577 506832 nobody 17608 0.0 S 02:54 /usr/sbin/httpd -k start 3313296 506832 nobody 17432 0.1 S 03:13 /usr/sbin/httpd -k start 3329580 506832 nobody 17372 0.1 S 00:37 /usr/sbin/httpd -k start 3313539 506832 nobody 16520 0.0 S 02:55 /usr/sbin/httpd -k start 3329578 506832 nobody 16504 0.0 S 00:37 /usr/sbin/httpd -k start 3329826 506832 nobody 16444 0.0 S 00:13 /usr/sbin/httpd -k start 3329581 506832 nobody 15848 0.0 S 00:37 /usr/sbin/httpd -k start 3329907 506832 nobody 15652 0.1 S 00:10 /usr/sbin/httpd -k start 3330025 506832 nobody 15248 0.0 S 00:01 /usr/sbin/httpd -k start 3329847 506832 nobody 15216 0.1 S 00:11 /usr/sbin/httpd -k start 3329906 506832 nobody 15172 0.1 S 00:10 /usr/sbin/httpd -k start 509266 1 root 11744 0.0 Ss 5-12:17:26 /usr/lib/systemd/systemd-journald 654927 1 root 11288 0.0 Ss 12:14:17 lfd - sleeping 1463 1 root 11260 0.0 Ss 65-04:27:21 tailwatchd --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 190719 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 540 madalice/madalice.com.au-ssl_log 131 evolution/portal.evolutionerp.com.au-ssl_log 125 tubesupplies/tubesupplies.com.au-ssl_log 65 tubesupplies/tubesupplies.com.au 56 evolution/app.evolutionerp.com.au-ssl_log 48 aaa/aaadownunder.com.au-ssl_log 4 speedlin/speedlinefencing.com.au-ssl_log 2 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 235 203.54.180.238 153 103.104.165.99 138 103.104.164.114 120 20.48.179.39 116 34.165.206.34 48 40.115.94.245 41 124.168.5.234 32 1.144.107.82 19 182.239.240.254 16 150.228.151.47 16 101.166.96.210 9 2001:8004:14b3:854f:95d1:bdfe:1050:32b5 4 180.181.236.49 4 120.154.88.130 4 118.127.40.55 --- top request paths across all vhosts (last 3 min) --- 183 POST /functions.php 127 GET /app/ajax.php 51 GET /factory_session_checker.php 46 GET /index.php 29 GET /api/getItem/LWFB2001KG 27 GET /factory_session_joiner.php 26 GET /factory_session_processed_qty.php 24 POST /clienteditsave.php 19 POST /app/ajax.php 18 POST /app/ajax/selectFilterSingle.php 18 GET /heartbeat.php 17 POST /plugins/csvexporter/plugin.php 15 POST /quoteditsave.php 14 GET /api/getItem/LWPB2001KG 12 POST /plugins/fencecosting/plugin.php 10 POST /wp-admin/admin-ajax.php 10 POST /itemModify.php 9 POST /app/ajax/selectFilter.php 8 POST /logsave.php 8 POST /jobeditsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 183 POST /functions.php 127 GET /app/ajax.php 45 GET /index.php 24 POST /clienteditsave.php 19 POST /app/ajax.php 18 POST /app/ajax/selectFilterSingle.php 17 POST /plugins/csvexporter/plugin.php 15 POST /quoteditsave.php 12 POST /plugins/fencecosting/plugin.php 10 POST /itemModify.php 9 POST /app/ajax/selectFilter.php 8 POST /logsave.php -- last 10 requests -- 103.104.164.114 - - [02/Sep/2026:14:37:03 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=19260615667 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/inde 103.104.164.114 - - [02/Sep/2026:14:37:03 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=16569170451 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/ind 103.104.164.114 - - [02/Sep/2026:14:37:03 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinvoiceadd%26invoiceid%3D4840%26tab%3Dmaintab&call=getUserSetting&caller=ajaxSubmitLocal&seq=14679040883 HTTP/1.1" 200 173 "htt 103.104.164.114 - - [02/Sep/2026:14:37:04 +1000] "POST /clienteditsave.php?call=getSettings HTTP/1.1" 200 60 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=4840&tab=maintab" "Mozilla/5.0 (Windows NT 103.104.164.114 - - [02/Sep/2026:14:37:04 +1000] "POST /clienteditsave.php?clientid=218&call=getCategoryDiscounts HTTP/1.1" 200 25 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=4840&tab=maintab" "Mo 103.104.165.99 - - [02/Sep/2026:14:37:04 +1000] "GET /index.php?page=inventory HTTP/1.1" 200 34999 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 103.104.165.99 - - [02/Sep/2026:14:37:05 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=inventory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. 103.104.164.114 - - [02/Sep/2026:14:37:05 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=4840&tab=maintab" "Mozilla/5.0 (Windows NT 10.0; 103.104.165.99 - - [02/Sep/2026:14:37:05 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinventory&call=getUserSetting&caller=ajaxSubmitLocal&seq=15585347799 HTTP/1.1" 200 162 "https://my.evolutionerp.com.au/index.php 203.54.180.238 - - [02/Sep/2026:14:37:05 +1000] "POST /quoteditsave.php?call=addLineItem HTTP/1.1" 200 321 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79036§ionid=0" "Mozilla/5.0 (Windows NT 10.0; == madalice/madalice.com.au-ssl_log == -- top paths -- 10 POST /wp-admin/admin-ajax.php 2 GET /store/1p-custom-af1-shoes/ 2 GET /store/1p-blue-custom-af1/ 1 GET /www/phpinfo.php 1 GET /wp-admin/phpinfo.php 1 GET /worker/.env 1 GET /webroot/index.php/_environment 1 GET /webmail/phpinfo.php 1 GET /uat/phpinfo.php 1 GET /uat/.env 1 GET /travis/.env 1 GET /transactional/.env -- last 10 requests -- 34.165.206.34 - - [02/Sep/2026:14:35:39 +1000] "GET /includes/phpinfo.php HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.165.206.34 - - [02/Sep/2026:14:35:44 +1000] "GET / HTTP/1.1" 200 12478 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 2001:8004:14b3:854f:95d1:bdfe:1050:32b5 - - [02/Sep/2026:14:35:47 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 77 "https://madalice.com.au/wp-admin/post.php?post=34699&action=edit" "Mozilla/5.0 (Windows NT 10.0; W 114.119.143.104 - - [02/Sep/2026:14:35:57 +1000] "GET /store/1p-blue-custom-af1/?image=1&rating=5&wcpr_verified=1 HTTP/1.1" 404 36664 "https://madalice.com.au/store/1p-blue-custom-af1/?image=1&rating=5" "Mozilla/5.0 (Lin 2001:8004:14b3:854f:95d1:bdfe:1050:32b5 - - [02/Sep/2026:14:35:57 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 77 "https://madalice.com.au/wp-admin/post.php?post=34699&action=edit" "Mozilla/5.0 (Windows NT 10.0; W 2001:8004:14b3:854f:95d1:bdfe:1050:32b5 - - [02/Sep/2026:14:36:07 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 77 "https://madalice.com.au/wp-admin/post.php?post=34699&action=edit" "Mozilla/5.0 (Windows NT 10.0; W 171.224.178.220 - - [02/Sep/2026:14:36:08 +1000] "GET /product-category/customised-shoes/kids HTTP/1.1" 301 1 "https://madalice.com.au/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Ge 2001:8004:14b3:854f:95d1:bdfe:1050:32b5 - - [02/Sep/2026:14:36:17 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 77 "https://madalice.com.au/wp-admin/post.php?post=34699&action=edit" "Mozilla/5.0 (Windows NT 10.0; W 114.119.137.101 - - [02/Sep/2026:14:36:19 +1000] "GET /store/1p-blue-custom-af1/?amp%3Bwcpr_rating=3&image=1&rating=3&wcpr_rating=2 HTTP/1.1" 404 36664 "https://madalice.com.au/store/1p-blue-custom-af1/?amp%3Bwcpr_rating 2001:8004:14b3:854f:95d1:bdfe:1050:32b5 - - [02/Sep/2026:14:36:27 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 77 "https://madalice.com.au/wp-admin/post.php?post=34699&action=edit" "Mozilla/5.0 (Windows NT 10.0; W == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 51 GET /factory_session_checker.php 27 GET /factory_session_joiner.php 26 GET /factory_session_processed_qty.php 18 GET /heartbeat.php 1 POST /portal/register 1 POST /factory_functions.php 1 GET /index.php -- last 10 requests -- 203.54.180.238 - - [02/Sep/2026:14:36:57 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [02/Sep/2026:14:36:57 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:14:36:57 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:14:37:00 +1000] "GET /heartbeat.php?sentAt=1788323820&bytes=106,151,167,236&_=1788323770457 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=8 203.54.180.238 - - [02/Sep/2026:14:37:02 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:14:37:03 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:14:37:04 +1000] "GET /factory_session_joiner.php?id=35061 HTTP/1.1" 200 79 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [02/Sep/2026:14:37:04 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [02/Sep/2026:14:37:05 +1000] "GET /heartbeat.php?sentAt=1788323825&bytes=106,151,167,241&_=1788267566953 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [02/Sep/2026:14:37:07 +1000] "GET /factory_session_joiner.php?id=35064 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe --- last 30 samples (run-up to this incident) --- 2026-09-02 14:34:47 L1=1.68 run=4 blk=0 avail=9247 (67.1%) swpO=0 conn=2 myRSS=1732 php=8 phpRSS=586 ap=101 tcp=43 topuser=madalice 2026-09-02 14:34:48 L1=1.68 run=5 blk=0 avail=9210 (66.8%) swpO=0 conn=3 myRSS=1732 php=7 phpRSS=617 ap=100 tcp=43 topuser=madalice 2026-09-02 14:34:57 L1=1.73 run=12 blk=1 avail=9153 (66.4%) swpO=0 conn=4 myRSS=1734 php=13 phpRSS=880 ap=91 tcp=51 topuser=madalice 2026-09-02 14:34:58 L1=1.73 run=7 blk=1 avail=9218 (66.9%) swpO=0 conn=3 myRSS=1735 php=7 phpRSS=652 ap=90 tcp=50 topuser=madalice 2026-09-02 14:35:07 L1=1.70 run=9 blk=0 avail=9209 (66.8%) swpO=0 conn=4 myRSS=1737 php=8 phpRSS=713 ap=81 tcp=44 topuser=madalice 2026-09-02 14:35:08 L1=1.70 run=3 blk=0 avail=9332 (67.7%) swpO=0 conn=3 myRSS=1737 php=5 phpRSS=491 ap=80 tcp=44 topuser=madalice 2026-09-02 14:35:17 L1=1.74 run=4 blk=0 avail=9388 (68.1%) swpO=0 conn=4 myRSS=1738 php=7 phpRSS=616 ap=71 tcp=45 topuser=madalice 2026-09-02 14:35:18 L1=1.74 run=9 blk=0 avail=9377 (68.1%) swpO=0 conn=3 myRSS=1738 php=10 phpRSS=737 ap=70 tcp=50 topuser=madalice 2026-09-02 14:35:27 L1=2.08 run=4 blk=0 avail=9369 (68.0%) swpO=0 conn=4 myRSS=1740 php=10 phpRSS=793 ap=61 tcp=49 topuser=madalice 2026-09-02 14:35:28 L1=2.08 run=5 blk=0 avail=9441 (68.5%) swpO=0 conn=3 myRSS=1740 php=9 phpRSS=697 ap=60 tcp=48 topuser=madalice 2026-09-02 14:35:37 L1=2.36 run=4 blk=0 avail=9472 (68.7%) swpO=0 conn=4 myRSS=1746 php=7 phpRSS=676 ap=50 tcp=54 topuser=madalice 2026-09-02 14:35:38 L1=2.36 run=4 blk=0 avail=9511 (69.0%) swpO=0 conn=3 myRSS=1746 php=5 phpRSS=585 ap=50 tcp=54 topuser=madalice 2026-09-02 14:35:48 L1=2.23 run=7 blk=0 avail=9539 (69.2%) swpO=0 conn=4 myRSS=1746 php=7 phpRSS=624 ap=47 tcp=48 topuser=madalice 2026-09-02 14:35:48 L1=2.23 run=7 blk=0 avail=9384 (68.1%) swpO=0 conn=3 myRSS=1746 php=10 phpRSS=873 ap=47 tcp=48 topuser=madalice 2026-09-02 14:35:58 L1=2.04 run=7 blk=0 avail=9389 (68.1%) swpO=0 conn=5 myRSS=1747 php=7 phpRSS=804 ap=40 tcp=47 topuser=madalice 2026-09-02 14:35:58 L1=2.04 run=3 blk=0 avail=9513 (69.0%) swpO=0 conn=3 myRSS=1747 php=6 phpRSS=640 ap=40 tcp=49 topuser=madalice 2026-09-02 14:36:08 L1=2.03 run=4 blk=0 avail=9631 (69.9%) swpO=0 conn=5 myRSS=1747 php=7 phpRSS=583 ap=38 tcp=47 topuser=madalice 2026-09-02 14:36:08 L1=2.03 run=6 blk=0 avail=9556 (69.4%) swpO=0 conn=3 myRSS=1747 php=7 phpRSS=659 ap=38 tcp=47 topuser=madalice 2026-09-02 14:36:18 L1=1.95 run=2 blk=0 avail=9680 (70.3%) swpO=0 conn=5 myRSS=1758 php=5 phpRSS=487 ap=35 tcp=44 topuser=madalice 2026-09-02 14:36:18 L1=1.95 run=4 blk=0 avail=9609 (69.7%) swpO=0 conn=3 myRSS=1758 php=7 phpRSS=615 ap=35 tcp=44 topuser=madalice 2026-09-02 14:36:28 L1=1.81 run=6 blk=0 avail=9527 (69.2%) swpO=0 conn=5 myRSS=1758 php=8 phpRSS=752 ap=32 tcp=40 topuser=madalice 2026-09-02 14:36:28 L1=1.81 run=3 blk=0 avail=9627 (69.9%) swpO=0 conn=3 myRSS=1758 php=6 phpRSS=599 ap=32 tcp=39 topuser=madalice 2026-09-02 14:36:38 L1=1.76 run=4 blk=0 avail=9501 (69.0%) swpO=0 conn=5 myRSS=1758 php=7 phpRSS=709 ap=39 tcp=45 topuser=madalice 2026-09-02 14:36:38 L1=1.76 run=3 blk=0 avail=9566 (69.4%) swpO=0 conn=3 myRSS=1758 php=6 phpRSS=617 ap=39 tcp=45 topuser=madalice 2026-09-02 14:36:48 L1=1.57 run=2 blk=0 avail=9693 (70.4%) swpO=0 conn=5 myRSS=1758 php=5 phpRSS=501 ap=34 tcp=36 topuser=madalice 2026-09-02 14:36:48 L1=1.57 run=2 blk=0 avail=9636 (69.9%) swpO=0 conn=3 myRSS=1758 php=5 phpRSS=558 ap=34 tcp=36 topuser=madalice 2026-09-02 14:36:58 L1=1.63 run=5 blk=0 avail=9665 (70.2%) swpO=0 conn=4 myRSS=1758 php=7 phpRSS=590 ap=34 tcp=46 topuser=madalice 2026-09-02 14:36:58 L1=1.63 run=5 blk=0 avail=9563 (69.4%) swpO=0 conn=3 myRSS=1758 php=6 phpRSS=641 ap=34 tcp=43 topuser=madalice 2026-09-02 14:37:08 L1=1.61 run=14 blk=0 avail=8334 (60.5%) swpO=0 conn=10 myRSS=1802 php=15 phpRSS=2080 ap=37 tcp=57 topuser=evolution 2026-09-02 14:37:08 L1=1.61 run=4 blk=1 avail=9013 (65.4%) swpO=0 conn=3 myRSS=1807 php=10 phpRSS=1236 ap=37 tcp=49 topuser=evolution