INCIDENT 2026-09-03 13:28:09 trigger: php_rss=1648MB ================================================================== load: 1.40 1.55 1.75 3/706 3984482 ncpu:10 mem_avail: 7037MB/13777MB (51.1%) swap_used:1525MB swapout:534/s blocked(D):0 running:3 iowait:0.1% steal:0.0% php: 13 procs / 1648MB heaviest user: madalice (10 procs, 1580MB) apache: 40 procs tcp_estab: 58 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2846 madalice 10 1587 root 248 956 nobody 39 627 netdata 8 241 kurri 6 71 wp-toolkit 3 70 cpanellogin 1 55 evolution 10 54 mailman 20 27 dovenull 6 26 polkitd 1 13 corpkicks 1 11 zabbix 1 10 mailnull 2 9 named 1 6 dovecot 3 6 sshd 1 4 nscd 1 4 cpanelconnecttrack 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 10 1589 evolution 2 39 root 1 28 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5770 MB Active(file): 4257 MB Inactive(file): 1713 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 501 MB CommitLimit: 10984 MB Committed_AS: 8787 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 2-11:05:42 4512 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 2914976 15.6 Ssl 23:13:57 /usr/sbin/mariadbd 3984425 1542510 madalice 254196 69.0 R 00:04 php-fpm: pool madalice_com_au 3984423 1542510 madalice 252612 68.5 R 00:04 php-fpm: pool madalice_com_au 1596047 1543747 root 198400 0.1 S 10:50:22 spamd child 1542443 1 netdata 173640 2.5 Ssl 11:05:47 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3984320 1542510 madalice 159168 30.3 S 00:10 php-fpm: pool madalice_com_au 1596048 1543747 root 158184 0.0 S 10:50:22 spamd child 3984428 1542510 madalice 140512 40.0 S 00:04 php-fpm: pool madalice_com_au 3984427 1542510 madalice 138692 38.5 S 00:04 php-fpm: pool madalice_com_au 3984422 1542510 madalice 138548 43.2 S 00:04 php-fpm: pool madalice_com_au 3984426 1542510 madalice 138544 43.2 S 00:04 php-fpm: pool madalice_com_au 3984420 1542510 madalice 136480 39.0 S 00:04 php-fpm: pool madalice_com_au 3984421 1542510 madalice 136480 38.2 S 00:04 php-fpm: pool madalice_com_au 3984424 1542510 madalice 136452 43.5 S 00:04 php-fpm: pool madalice_com_au 1543747 1 root 119188 0.0 Ss 11:05:17 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 509266 1 root 71172 0.0 Ss 6-11:08:28 /usr/lib/systemd/systemd-journald 3835391 1353308 cpanellogin 56960 0.0 S 39:44 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 509236 509098 root 46236 0.0 Sl 6-11:08:28 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1542981 1542551 netdata 43540 0.1 Sl 11:05:43 /usr/libexec/netdata/plugins.d/go.d.plugin 1 3984491 3972875 evolution 42892 4.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 42068 0.1 Ss 43-10:46:54 cpsrvd (SSL) - waiting for connections 1542487 1 wp-toolkit 40940 0.0 Ss 11:05:47 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 3984449 3984441 evolution 40396 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1469 1 root 39568 0.1 Ss 66-03:18:23 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3984500 3982435 evolution 39140 2.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3984495 3984442 evolution 38944 2.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1542072 1 root 32220 0.0 Ss 11:05:51 lfd - sleeping 1542510 1 root 28956 0.0 Ss 11:05:46 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1542531 1 wp-toolkit 24836 0.0 Ss 11:05:46 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1463 1 root 24540 0.0 Ss 66-03:18:23 tailwatchd 1542141 1 root 24528 0.0 Ss 11:05:50 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 1542188 1 root 23692 0.1 Ssl 11:05:49 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 3964665 506832 nobody 21400 0.0 S 06:52 /usr/sbin/httpd -k start 3982937 506832 nobody 21088 0.0 S 01:42 /usr/sbin/httpd -k start 3972873 506832 nobody 20656 0.0 S 03:04 /usr/sbin/httpd -k start 3982914 506832 nobody 20408 0.0 S 01:45 /usr/sbin/httpd -k start 3972875 506832 nobody 20268 0.0 S 03:04 /usr/sbin/httpd -k start 3982435 506832 nobody 20100 0.0 S 02:17 /usr/sbin/httpd -k start 3982696 506832 nobody 20100 0.0 S 02:00 /usr/sbin/httpd -k start 3969776 506832 nobody 20040 0.0 S 03:06 /usr/sbin/httpd -k start 3972861 506832 nobody 19852 0.0 S 03:04 /usr/sbin/httpd -k start 3983911 506832 nobody 19628 0.1 S 00:41 /usr/sbin/httpd -k start 3983826 506832 nobody 18856 0.0 S 00:42 /usr/sbin/httpd -k start 3966386 506832 nobody 18696 0.1 S 04:41 /usr/sbin/httpd -k start 3984038 506832 nobody 18680 0.0 S 00:34 /usr/sbin/httpd -k start 3983908 506832 nobody 18492 0.0 S 00:41 /usr/sbin/httpd -k start 3983781 506832 nobody 18116 0.0 S 00:43 /usr/sbin/httpd -k start 3983314 506832 nobody 18064 0.0 S 01:16 /usr/sbin/httpd -k start 3982644 506832 nobody 18000 0.0 S 02:01 /usr/sbin/httpd -k start 3983825 506832 nobody 17952 0.0 S 00:42 /usr/sbin/httpd -k start 3983902 506832 nobody 17836 0.0 S 00:41 /usr/sbin/httpd -k start 3983782 506832 nobody 17808 0.1 S 00:43 /usr/sbin/httpd -k start 3984117 506832 nobody 17692 0.1 S 00:30 /usr/sbin/httpd -k start 3984118 506832 nobody 17652 0.1 S 00:30 /usr/sbin/httpd -k start 3984116 506832 nobody 17600 0.1 S 00:30 /usr/sbin/httpd -k start 1542982 1542551 netdata 17580 2.1 Sl 11:05:43 /usr/libexec/netdata/plugins.d/apps.plugin 1 3983315 506832 nobody 16952 0.0 S 01:16 /usr/sbin/httpd -k start 3983904 506832 nobody 16780 0.0 S 00:41 /usr/sbin/httpd -k start 3983828 506832 nobody 16168 0.0 S 00:42 /usr/sbin/httpd -k start 3983906 506832 nobody 16104 0.0 S 00:41 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+-------------+-------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+-------------+-------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 5233967 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 5233905 | madalice_wp | madalice_wp | Query | 0 | Opening tables | SELECT post_id, meta_key, meta_value FROM AMuqf6qZ_postmeta WHERE post_id IN (30554,30553,30552) ORDER BY meta_id ASC | +---------+-------------+-------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 523 evolution/portal.evolutionerp.com.au-ssl_log 204 evolution/app.evolutionerp.com.au-ssl_log 87 evolution/release.evolutionerp.com.au 45 speedlin/speedlinefencing.com.au-ssl_log 18 madalice/madalice.com.au-ssl_log 8 corpkicks/corporatekicks.com.au-ssl_log 6 otterfencing/otterfencing.com.au-ssl_log 6 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 392 203.54.180.238 108 4.204.224.164 88 103.104.165.99 87 40.115.94.245 72 180.181.236.49 33 103.104.164.114 26 101.166.96.210 18 146.190.251.165 15 120.150.225.142 13 182.239.240.254 10 1.144.107.82 5 203.123.106.115 5 150.228.151.47 4 47.79.13.223 4 45.148.10.166 --- top request paths across all vhosts (last 3 min) --- 188 POST /functions.php 74 GET /api/getItem/LWPB2001KG 72 GET /factory_session_checker.php 64 GET /app/ajax.php 50 GET /heartbeat.php 47 GET /index.php 44 POST /app/ajax.php 38 GET /factory_session_processed_qty.php 38 GET /factory_session_joiner.php 24 POST /plugins/csvexporter/plugin.php 22 POST /app/ajax/selectFilter.php 13 GET /api/getItem/LWHG2001KG 11 POST /app/ajax/selectFilterSingle.php 10 POST /inveditsave.php 7 POST /clienteditsave.php 7 POST /billaddsave.php 6 POST //functions.php 4 POST /timesheets.php 4 POST /quoteditsave.php 4 POST /purchaseaddsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 188 POST /functions.php 64 GET /app/ajax.php 44 POST /app/ajax.php 42 GET /index.php 24 POST /plugins/csvexporter/plugin.php 22 POST /app/ajax/selectFilter.php 11 POST /app/ajax/selectFilterSingle.php 10 POST /inveditsave.php 7 POST /clienteditsave.php 7 POST /billaddsave.php 6 POST //functions.php 4 POST /timesheets.php -- last 10 requests -- 203.54.180.238 - - [03/Sep/2026:13:28:07 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=invedit&id=141418&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [03/Sep/2026:13:28:07 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29126&tab=jobeditpick" "Mozilla/5.0 (Windows NT 10.0; Win64; 103.104.165.99 - - [03/Sep/2026:13:28:07 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=36783§ionid=32749" "Mozilla/5.0 (Windows NT 10.0; 103.104.165.99 - - [03/Sep/2026:13:28:07 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=opportunities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 103.104.165.99 - - [03/Sep/2026:13:28:07 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=staffedit&id=84" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 203.54.180.238 - - [03/Sep/2026:13:28:08 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=invedit&id=6602&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x 203.54.180.238 - - [03/Sep/2026:13:28:08 +1000] "POST //functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au//index.php?page=jobedit&id=29336&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64 180.181.236.49 - - [03/Sep/2026:13:28:09 +1000] "POST /app/ajax.php HTTP/1.1" 200 123 "https://my.evolutionerp.com.au/index.php?page=timesheetHistory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, 1.144.107.82 - - [03/Sep/2026:13:28:09 +1000] "GET /index.php?page=support_ticketedit&id=1353 HTTP/1.1" 200 51233 "https://my.evolutionerp.com.au/index.php?page=support_tickets" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 1.144.107.82 - - [03/Sep/2026:13:28:09 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=18143749900 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/index. == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 72 GET /factory_session_checker.php 50 GET /heartbeat.php 38 GET /factory_session_processed_qty.php 38 GET /factory_session_joiner.php 5 GET /index.php 1 POST /factory_functions.php -- last 10 requests -- 203.54.180.238 - - [03/Sep/2026:13:28:00 +1000] "GET /factory_session_joiner.php?id=35101 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [03/Sep/2026:13:28:01 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [03/Sep/2026:13:28:01 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [03/Sep/2026:13:28:01 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [03/Sep/2026:13:28:02 +1000] "GET /factory_session_joiner.php?id=35088 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [03/Sep/2026:13:28:02 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 124 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [03/Sep/2026:13:28:02 +1000] "GET /heartbeat.php?sentAt=1788406082&bytes=106,152,233,66&_=1788398070229 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [03/Sep/2026:13:28:03 +1000] "GET /heartbeat.php?sentAt=1788406083&bytes=106,152,233,67&_=1788349196174 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [03/Sep/2026:13:28:06 +1000] "GET /factory_session_joiner.php?id=35099 HTTP/1.1" 200 94 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [03/Sep/2026:13:28:06 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 74 GET /api/getItem/LWPB2001KG 13 GET /api/getItem/LWHG2001KG -- last 10 requests -- 40.115.94.245 - - [03/Sep/2026:13:27:15 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:13:27:16 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:13:27:16 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:13:27:16 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:13:27:17 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:13:27:17 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:13:27:18 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:13:27:18 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:13:27:18 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:13:27:19 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" --- last 30 samples (run-up to this incident) --- 2026-09-03 13:25:42 L1=1.12 run=5 blk=0 avail=7519 (54.6%) swpO=0 conn=3 myRSS=2863 php=10 phpRSS=967 ap=41 tcp=60 topuser=madalice 2026-09-03 13:25:49 L1=1.27 run=3 blk=0 avail=7593 (55.1%) swpO=0 conn=9 myRSS=2863 php=9 phpRSS=879 ap=39 tcp=52 topuser=madalice 2026-09-03 13:25:52 L1=1.25 run=5 blk=0 avail=7578 (55.0%) swpO=0 conn=3 myRSS=2863 php=12 phpRSS=979 ap=41 tcp=60 topuser=madalice 2026-09-03 13:25:59 L1=1.15 run=1 blk=0 avail=7967 (57.8%) swpO=0 conn=9 myRSS=2863 php=6 phpRSS=413 ap=41 tcp=51 topuser=madalice 2026-09-03 13:26:02 L1=1.30 run=3 blk=0 avail=8054 (58.5%) swpO=0 conn=2 myRSS=2863 php=4 phpRSS=308 ap=39 tcp=49 topuser=madalice 2026-09-03 13:26:09 L1=1.20 run=3 blk=0 avail=8060 (58.5%) swpO=0 conn=3 myRSS=2863 php=5 phpRSS=289 ap=45 tcp=67 topuser=madalice 2026-09-03 13:26:12 L1=1.26 run=2 blk=0 avail=8031 (58.3%) swpO=0 conn=2 myRSS=2863 php=4 phpRSS=251 ap=52 tcp=61 topuser=madalice 2026-09-03 13:26:19 L1=1.16 run=1 blk=0 avail=8092 (58.7%) swpO=0 conn=3 myRSS=2863 php=3 phpRSS=184 ap=48 tcp=56 topuser=madalice 2026-09-03 13:26:22 L1=1.15 run=2 blk=0 avail=8084 (58.7%) swpO=0 conn=2 myRSS=2863 php=4 phpRSS=255 ap=45 tcp=55 topuser=madalice 2026-09-03 13:26:29 L1=1.21 run=2 blk=0 avail=8276 (60.1%) swpO=0 conn=3 myRSS=2863 php=3 phpRSS=62 ap=47 tcp=53 topuser=evolution 2026-09-03 13:26:32 L1=1.20 run=3 blk=1 avail=8149 (59.2%) swpO=0 conn=2 myRSS=2863 php=3 phpRSS=162 ap=47 tcp=57 topuser=madalice 2026-09-03 13:26:39 L1=1.26 run=4 blk=0 avail=7963 (57.8%) swpO=0 conn=3 myRSS=2863 php=6 phpRSS=422 ap=50 tcp=55 topuser=tubesupplies 2026-09-03 13:26:42 L1=1.16 run=1 blk=0 avail=8158 (59.2%) swpO=0 conn=2 myRSS=2863 php=3 phpRSS=162 ap=47 tcp=50 topuser=madalice 2026-09-03 13:26:49 L1=1.15 run=1 blk=0 avail=8219 (59.7%) swpO=0 conn=3 myRSS=2863 php=4 phpRSS=202 ap=40 tcp=45 topuser=madalice 2026-09-03 13:26:52 L1=1.14 run=2 blk=0 avail=8166 (59.3%) swpO=0 conn=2 myRSS=2863 php=4 phpRSS=280 ap=38 tcp=57 topuser=madalice 2026-09-03 13:26:59 L1=1.12 run=1 blk=0 avail=8201 (59.5%) swpO=0 conn=3 myRSS=2863 php=4 phpRSS=213 ap=42 tcp=49 topuser=speedlin 2026-09-03 13:27:02 L1=1.19 run=1 blk=0 avail=8240 (59.8%) swpO=0 conn=1 myRSS=2863 php=3 phpRSS=162 ap=39 tcp=43 topuser=madalice 2026-09-03 13:27:09 L1=1.18 run=2 blk=0 avail=8189 (59.4%) swpO=0 conn=3 myRSS=2863 php=4 phpRSS=294 ap=32 tcp=45 topuser=madalice 2026-09-03 13:27:12 L1=1.32 run=1 blk=0 avail=8035 (58.3%) swpO=0 conn=1 myRSS=2863 php=4 phpRSS=452 ap=31 tcp=45 topuser=madalice 2026-09-03 13:27:19 L1=1.38 run=2 blk=0 avail=8138 (59.1%) swpO=0 conn=3 myRSS=2863 php=6 phpRSS=402 ap=31 tcp=45 topuser=madalice 2026-09-03 13:27:22 L1=1.35 run=2 blk=0 avail=8152 (59.2%) swpO=0 conn=1 myRSS=2863 php=5 phpRSS=371 ap=30 tcp=43 topuser=madalice 2026-09-03 13:27:29 L1=1.24 run=4 blk=0 avail=7853 (57.0%) swpO=0 conn=3 myRSS=2863 php=7 phpRSS=630 ap=45 tcp=61 topuser=madalice 2026-09-03 13:27:32 L1=1.46 run=3 blk=0 avail=7911 (57.4%) swpO=0 conn=1 myRSS=2863 php=6 phpRSS=553 ap=45 tcp=56 topuser=madalice 2026-09-03 13:27:39 L1=1.98 run=2 blk=0 avail=8000 (58.1%) swpO=0 conn=3 myRSS=2863 php=6 phpRSS=434 ap=48 tcp=67 topuser=madalice 2026-09-03 13:27:42 L1=1.91 run=2 blk=0 avail=8013 (58.2%) swpO=0 conn=1 myRSS=2863 php=5 phpRSS=370 ap=52 tcp=48 topuser=madalice 2026-09-03 13:27:49 L1=1.75 run=1 blk=0 avail=8059 (58.5%) swpO=0 conn=3 myRSS=2863 php=5 phpRSS=371 ap=45 tcp=48 topuser=madalice 2026-09-03 13:27:52 L1=1.69 run=2 blk=0 avail=8326 (60.4%) swpO=0 conn=1 myRSS=2863 php=3 phpRSS=69 ap=42 tcp=45 topuser=evolution 2026-09-03 13:27:59 L1=1.56 run=2 blk=0 avail=8347 (60.6%) swpO=0 conn=3 myRSS=2863 php=4 phpRSS=133 ap=35 tcp=52 topuser=evolution 2026-09-03 13:28:02 L1=1.43 run=2 blk=0 avail=8239 (59.8%) swpO=0 conn=3 myRSS=2864 php=5 phpRSS=267 ap=35 tcp=48 topuser=madalice 2026-09-03 13:28:09 L1=1.40 run=3 blk=0 avail=7037 (51.1%) swpO=534 conn=4 myRSS=2846 php=13 phpRSS=1648 ap=40 tcp=58 topuser=madalice