INCIDENT 2026-09-03 19:30:59 trigger: php_rss=1696MB ================================================================== load: 2.79 1.42 0.99 10/721 1133809 ncpu:10 mem_avail: 7025MB/13777MB (51.0%) swap_used:1540MB swapout:0/s blocked(D):0 running:14 iowait:0.1% steal:0.0% php: 14 procs / 1696MB heaviest user: evolution (12 procs, 1525MB) apache: 59 procs tcp_estab: 57 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2960 root 248 1057 nobody 58 954 evolution 15 894 netdata 8 248 alison 5 194 wp-toolkit 3 67 mailman 20 27 dovenull 6 26 cpanellogin 1 22 zabbix 1 11 polkitd 1 11 kurri 1 11 dovecot 3 8 mailnull 2 7 named 1 5 nscd 1 4 dbus 1 2 cpanelconnecttrack 1 2 chrony 1 1 --- php workers by user --- USER PROCS RSS_MB evolution 7 889 alison 1 146 root 1 30 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5565 MB Active(file): 4722 MB Inactive(file): 1004 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 472 MB CommitLimit: 10984 MB Committed_AS: 8312 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 2-17:08:31 4504 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3031256 15.4 Ssl 1-05:16:46 /usr/sbin/mariadbd 1542443 1 netdata 181652 2.5 Ssl 17:08:36 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1133769 1133416 evolution 177720 83.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1596048 1543747 root 174112 0.0 S 16:53:11 spamd child 4117331 1543747 root 173392 0.0 S 05:26:14 spamd child 509266 1 root 171212 0.0 Ss 6-17:11:17 /usr/lib/systemd/systemd-journald 1133772 1133448 evolution 170624 74.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1133773 1133447 evolution 166100 74.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1133768 1133382 evolution 160856 70.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1133771 1133457 evolution 151716 67.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1133760 1133414 alison 149792 121 S 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1133774 1133455 evolution 134080 49.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1543747 1 root 119460 0.0 Ss 17:08:06 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 509236 509098 root 45532 0.0 Sl 6-17:11:17 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 42308 0.1 Ss 43-16:49:43 cpsrvd (SSL) - waiting for connections 1469 1 root 41932 0.1 Ss 66-09:21:12 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542981 1542551 netdata 41748 0.1 Sl 17:08:32 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1542487 1 wp-toolkit 37136 0.0 Ss 17:08:36 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1542072 1 root 32432 0.0 Ss 17:08:40 lfd - sleeping 1542510 1 root 31604 0.0 Ss 17:08:35 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1542531 1 wp-toolkit 25132 0.0 Ss 17:08:35 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1463 1 root 24640 0.0 Ss 66-09:21:12 tailwatchd 1065238 1353308 cpanellogin 22900 0.0 S 19:55 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en docroot /usr/local/cpanel/base cpanel_locale 1116074 506832 nobody 22840 0.0 S 05:32 /usr/sbin/httpd -k start 1542141 1 root 22732 0.0 Ss 17:08:39 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 1116186 506832 nobody 22636 0.0 S 05:31 /usr/sbin/httpd -k start 1116169 506832 nobody 22536 0.0 S 05:31 /usr/sbin/httpd -k start 1542188 1 root 22280 0.1 Ssl 17:08:38 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 1116017 506832 nobody 22008 0.0 S 05:34 /usr/sbin/httpd -k start 1116001 506832 nobody 21468 0.0 S 05:35 /usr/sbin/httpd -k start 1116018 506832 nobody 20724 0.0 S 05:34 /usr/sbin/httpd -k start 1116036 506832 nobody 20096 0.0 S 05:33 /usr/sbin/httpd -k start 1118108 506832 nobody 20072 0.0 S 02:26 /usr/sbin/httpd -k start 1133414 506832 nobody 19928 0.0 S 00:23 /usr/sbin/httpd -k start 1133435 506832 nobody 19180 0.1 S 00:22 /usr/sbin/httpd -k start 1133441 506832 nobody 19064 0.0 S 00:22 /usr/sbin/httpd -k start 1133407 506832 nobody 18404 0.0 S 00:23 /usr/sbin/httpd -k start 1133429 506832 nobody 18332 0.0 S 00:22 /usr/sbin/httpd -k start 1119239 506832 nobody 18200 0.0 S 00:57 /usr/sbin/httpd -k start 1133404 506832 nobody 18188 0.0 S 00:23 /usr/sbin/httpd -k start 1133438 506832 nobody 17948 0.0 S 00:22 /usr/sbin/httpd -k start 1542982 1542551 netdata 17828 2.1 Sl 17:08:32 /usr/libexec/netdata/plugins.d/apps.plugin 1 1133447 506832 nobody 17660 0.0 S 00:22 /usr/sbin/httpd -k start 1133446 506832 nobody 17632 0.0 S 00:22 /usr/sbin/httpd -k start 1133457 506832 nobody 17552 0.0 S 00:22 /usr/sbin/httpd -k start 1133417 506832 nobody 17544 0.0 S 00:23 /usr/sbin/httpd -k start 1133406 506832 nobody 17524 0.0 S 00:23 /usr/sbin/httpd -k start 1133413 506832 nobody 17524 0.0 S 00:23 /usr/sbin/httpd -k start 1133385 506832 nobody 17516 0.0 S 00:25 /usr/sbin/httpd -k start 1133398 506832 nobody 17508 0.0 S 00:24 /usr/sbin/httpd -k start 1133432 506832 nobody 17480 0.0 S 00:22 /usr/sbin/httpd -k start 1133451 506832 nobody 17476 0.0 S 00:22 /usr/sbin/httpd -k start 1133418 506832 nobody 17448 0.0 S 00:23 /usr/sbin/httpd -k start 1133387 506832 nobody 17424 0.0 S 00:25 /usr/sbin/httpd -k start 1133419 506832 nobody 17412 0.0 S 00:23 /usr/sbin/httpd -k start 1133455 506832 nobody 17404 0.0 S 00:22 /usr/sbin/httpd -k start 1133395 506832 nobody 17400 0.0 S 00:24 /usr/sbin/httpd -k start 1133396 506832 nobody 17384 0.0 S 00:24 /usr/sbin/httpd -k start 1133443 506832 nobody 17372 0.0 S 00:22 /usr/sbin/httpd -k start 1133386 506832 nobody 17360 0.0 S 00:25 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 6592423 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 178 evolution/evolutionerp.com.au 147 evolution/evolutionerp.com.au-ssl_log 132 alison/alisonarts.com.au-ssl_log 16 evolution/portal.evolutionerp.com.au-ssl_log 9 tubesupplies/tubesupplies.com.au 6 tubesupplies/tubesupplies.com.au-ssl_log 6 madalice/madalice.com.au-ssl_log 1 speedlin/speedlinefencing.com.au-ssl_log 1 (total vhosts taking traffic: 9) --- top client IPs across all vhosts (last 3 min) --- 277 134.199.151.213 178 40.115.94.245 14 146.190.251.165 12 62.60.130.198 9 203.54.180.238 1 188.166.68.82 1 162.243.76.142 1 159.196.12.13 1 118.127.40.55 1 114.119.145.175 1 114.119.130.40 --- top request paths across all vhosts (last 3 min) --- 86 GET /api/getItem/LWPB2001KG 9 GET /heartbeat.php 6 GET / 4 GET /wp-includes/ID3/ 3 GET /.env 3 GET /api/getItem/SHSG656520 3 GET /api/getItem/LWFB2001KG 2 GET /yarn.lock 2 GET /wp-includes/view-transitions.php 2 GET /wp-includes/view-config.php 2 GET /wp-includes/utf8.php 2 GET /wp-includes/IXR/ 2 GET /wp-content/uploads/wp-file-manager/ 2 GET /wp-content/uploads/debug.log 2 GET /wp-content/uploads/ 2 GET /wp-content/updraft/ 2 GET /wp-content/plugins/xai/ 2 GET /wp-content/plugins/wpvivid/ 2 GET /wp-content/plugins/wp-smtp/ 2 GET /wp-content/plugins/wp-mail-smtp/ --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 86 GET /api/getItem/LWPB2001KG 3 GET /api/getItem/SHSG656520 3 GET /api/getItem/LWFB2001KG 2 GET /api/getItem/SHSG8989508 2 GET /api/getItem/SHSG8989358 2 GET /api/getItem/SHSG8989258 2 GET /api/getItem/SHSG8989208 2 GET /api/getItem/SHSG7575508 2 GET /api/getItem/SHSG656516 2 GET /api/getItem/SHSG3030258 1 GET /api/getItem/SHSP8989608 1 GET /api/getItem/SHSP7575608 -- last 10 requests -- 40.115.94.245 - - [03/Sep/2026:19:30:55 +1000] "GET /api/getItem/SHSG8989208 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:19:30:55 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:19:30:55 +1000] "GET /api/getItem/SHSG8989258 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:19:30:56 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:19:30:56 +1000] "GET /api/getItem/SHSG8989358 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:19:30:56 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:19:30:56 +1000] "GET /api/getItem/SHSG8989508 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:19:30:56 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:19:30:57 +1000] "GET /api/getItem/SHSP8989608 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:19:30:57 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" == evolution/evolutionerp.com.au == -- top paths -- 1 GET /yarn.lock 1 GET /wp-content/uploads/wp-file-manager/ 1 GET /wp-content/uploads/debug.log 1 GET /wp-content/uploads/ 1 GET /wp-content/updraft/ 1 GET /wp-content/plugins/xai/ 1 GET /wp-content/plugins/wpvivid/ 1 GET /wp-content/plugins/wp-smtp/ 1 GET /wp-content/plugins/wp-mail-smtp/ 1 GET /wp-content/plugins/wp-mail-log/ 1 GET /wp-content/plugins/wp-mail-bank/ 1 GET /wp-content/plugins/wp-file-manager/ -- last 10 requests -- 134.199.151.213 - - [03/Sep/2026:19:30:55 +1000] "GET /.env.production.local HTTP/1.1" 301 295 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 134.199.151.213 - - [03/Sep/2026:19:30:55 +1000] "GET /.htpasswd HTTP/1.1" 301 283 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 134.199.151.213 - - [03/Sep/2026:19:30:56 +1000] "GET /.DS_Store HTTP/1.1" 301 283 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 134.199.151.213 - - [03/Sep/2026:19:30:56 +1000] "GET /.htaccess HTTP/1.1" 301 283 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 134.199.151.213 - - [03/Sep/2026:19:30:56 +1000] "GET /.gitignore HTTP/1.1" 301 284 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 134.199.151.213 - - [03/Sep/2026:19:30:56 +1000] "GET /web.config.bak HTTP/1.1" 301 288 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 134.199.151.213 - - [03/Sep/2026:19:30:56 +1000] "GET /web.config HTTP/1.1" 301 284 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 134.199.151.213 - - [03/Sep/2026:19:30:58 +1000] "GET /server-status HTTP/1.1" 301 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 134.199.151.213 - - [03/Sep/2026:19:30:58 +1000] "GET /server-info HTTP/1.1" 301 285 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 134.199.151.213 - - [03/Sep/2026:19:30:58 +1000] "GET /actuator/configprops HTTP/1.1" 301 294 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" == evolution/evolutionerp.com.au-ssl_log == -- top paths -- 3 GET / 1 POST /wp-cron.php 1 POST / 1 GET /yarn.lock 1 GET /wp-content/uploads/wp-file-manager/ 1 GET /wp-content/uploads/debug.log 1 GET /wp-content/uploads/ 1 GET /wp-content/updraft/ 1 GET /wp-content/plugins/xai/ 1 GET /wp-content/plugins/wpvivid/ 1 GET /wp-content/plugins/wp-smtp/ 1 GET /wp-content/plugins/wp-mail-smtp/ -- last 10 requests -- 134.199.151.213 - - [03/Sep/2026:19:30:57 +1000] "GET /sites/default/settings.php~ HTTP/1.1" 404 119853 "http://mail.myevoerp.com/sites/default/settings.php~" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 134.199.151.213 - - [03/Sep/2026:19:30:57 +1000] "GET /app/etc/config.php HTTP/1.1" 404 119844 "http://mail.myevoerp.com/app/etc/config.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Geck 134.199.151.213 - - [03/Sep/2026:19:30:57 +1000] "GET /app/etc/env.php.bak HTTP/1.1" 404 119845 "http://mail.myevoerp.com/app/etc/env.php.bak" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Ge 134.199.151.213 - - [03/Sep/2026:19:30:57 +1000] "GET /sites/default/default.settings.php HTTP/1.1" 404 119860 "http://mail.myevoerp.com/sites/default/default.settings.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 134.199.151.213 - - [03/Sep/2026:19:30:57 +1000] "GET /app/etc/env.php HTTP/1.1" 404 119841 "http://mail.myevoerp.com/app/etc/env.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chr 134.199.151.213 - - [03/Sep/2026:19:30:58 +1000] "GET /.DS_Store HTTP/1.1" 404 123949 "http://mail.myevoerp.com/.DS_Store" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0. 134.199.151.213 - - [03/Sep/2026:19:30:58 +1000] "GET /.htaccess HTTP/1.1" 404 123949 "http://mail.myevoerp.com/.htaccess" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0. 134.199.151.213 - - [03/Sep/2026:19:30:58 +1000] "GET /.gitignore HTTP/1.1" 404 123950 "http://mail.myevoerp.com/.gitignore" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0. 134.199.151.213 - - [03/Sep/2026:19:30:58 +1000] "GET /web.config HTTP/1.1" 404 123950 "http://mail.myevoerp.com/web.config" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0. 134.199.151.213 - - [03/Sep/2026:19:30:58 +1000] "GET /actuator/env HTTP/1.1" 404 123952 "http://mail.myevoerp.com/actuator/env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/12 --- last 30 samples (run-up to this incident) --- 2026-09-03 19:28:38 L1=0.59 run=2 blk=0 avail=8460 (61.4%) swpO=0 conn=1 myRSS=2925 php=3 phpRSS=164 ap=14 tcp=28 topuser=madalice 2026-09-03 19:28:39 L1=0.59 run=1 blk=0 avail=8475 (61.5%) swpO=0 conn=1 myRSS=2925 php=3 phpRSS=164 ap=14 tcp=28 topuser=madalice 2026-09-03 19:28:48 L1=0.50 run=1 blk=0 avail=8474 (61.5%) swpO=0 conn=1 myRSS=2925 php=3 phpRSS=164 ap=14 tcp=28 topuser=madalice 2026-09-03 19:28:49 L1=0.50 run=1 blk=0 avail=8474 (61.5%) swpO=0 conn=1 myRSS=2925 php=3 phpRSS=164 ap=14 tcp=28 topuser=madalice 2026-09-03 19:28:58 L1=0.58 run=1 blk=0 avail=8592 (62.4%) swpO=0 conn=1 myRSS=2925 php=2 phpRSS=30 ap=14 tcp=27 topuser=root 2026-09-03 19:28:59 L1=0.58 run=1 blk=0 avail=8591 (62.4%) swpO=0 conn=1 myRSS=2925 php=2 phpRSS=30 ap=14 tcp=28 topuser=root 2026-09-03 19:29:08 L1=0.49 run=2 blk=0 avail=8484 (61.6%) swpO=0 conn=1 myRSS=2925 php=3 phpRSS=164 ap=14 tcp=27 topuser=madalice 2026-09-03 19:29:09 L1=0.49 run=1 blk=0 avail=8482 (61.6%) swpO=0 conn=1 myRSS=2925 php=3 phpRSS=164 ap=14 tcp=26 topuser=madalice 2026-09-03 19:29:18 L1=0.41 run=1 blk=0 avail=8496 (61.7%) swpO=0 conn=1 myRSS=2925 php=3 phpRSS=164 ap=13 tcp=27 topuser=madalice 2026-09-03 19:29:19 L1=0.41 run=1 blk=0 avail=8494 (61.7%) swpO=0 conn=1 myRSS=2925 php=3 phpRSS=164 ap=13 tcp=27 topuser=madalice 2026-09-03 19:29:28 L1=0.35 run=1 blk=0 avail=8609 (62.5%) swpO=0 conn=1 myRSS=2925 php=2 phpRSS=30 ap=13 tcp=23 topuser=root 2026-09-03 19:29:29 L1=0.35 run=2 blk=1 avail=8610 (62.5%) swpO=0 conn=1 myRSS=2925 php=2 phpRSS=30 ap=13 tcp=23 topuser=root 2026-09-03 19:29:38 L1=0.29 run=1 blk=0 avail=8507 (61.7%) swpO=0 conn=1 myRSS=2925 php=3 phpRSS=154 ap=13 tcp=29 topuser=madalice 2026-09-03 19:29:39 L1=0.29 run=1 blk=0 avail=8505 (61.7%) swpO=0 conn=1 myRSS=2925 php=3 phpRSS=154 ap=13 tcp=29 topuser=madalice 2026-09-03 19:29:48 L1=0.32 run=1 blk=0 avail=8508 (61.8%) swpO=0 conn=1 myRSS=2925 php=3 phpRSS=154 ap=13 tcp=26 topuser=madalice 2026-09-03 19:29:49 L1=0.32 run=1 blk=0 avail=8505 (61.7%) swpO=0 conn=1 myRSS=2925 php=3 phpRSS=154 ap=13 tcp=26 topuser=madalice 2026-09-03 19:29:59 L1=0.27 run=4 blk=0 avail=8533 (61.9%) swpO=0 conn=1 myRSS=2925 php=3 phpRSS=130 ap=13 tcp=30 topuser=olympic 2026-09-03 19:29:59 L1=0.27 run=3 blk=0 avail=8492 (61.6%) swpO=0 conn=2 myRSS=2925 php=4 phpRSS=204 ap=13 tcp=32 topuser=olympic 2026-09-03 19:30:09 L1=0.61 run=3 blk=0 avail=8400 (61.0%) swpO=0 conn=1 myRSS=2925 php=4 phpRSS=226 ap=21 tcp=30 topuser=madalice 2026-09-03 19:30:09 L1=0.61 run=2 blk=0 avail=8399 (61.0%) swpO=0 conn=2 myRSS=2925 php=4 phpRSS=226 ap=21 tcp=31 topuser=madalice 2026-09-03 19:30:19 L1=0.67 run=2 blk=0 avail=8447 (61.3%) swpO=0 conn=1 myRSS=2925 php=4 phpRSS=226 ap=16 tcp=30 topuser=madalice 2026-09-03 19:30:19 L1=0.67 run=1 blk=0 avail=8446 (61.3%) swpO=0 conn=2 myRSS=2925 php=4 phpRSS=226 ap=16 tcp=30 topuser=madalice 2026-09-03 19:30:29 L1=0.56 run=4 blk=0 avail=8369 (60.7%) swpO=0 conn=1 myRSS=2925 php=4 phpRSS=300 ap=16 tcp=31 topuser=madalice 2026-09-03 19:30:29 L1=0.56 run=4 blk=0 avail=8244 (59.8%) swpO=0 conn=2 myRSS=2925 php=5 phpRSS=458 ap=16 tcp=30 topuser=madalice 2026-09-03 19:30:39 L1=0.48 run=2 blk=0 avail=7994 (58.0%) swpO=0 conn=1 myRSS=2936 php=4 phpRSS=258 ap=79 tcp=50 topuser=madalice 2026-09-03 19:30:39 L1=0.48 run=10 blk=0 avail=7872 (57.1%) swpO=0 conn=2 myRSS=2936 php=10 phpRSS=618 ap=79 tcp=57 topuser=evolution 2026-09-03 19:30:49 L1=1.21 run=9 blk=0 avail=7866 (57.1%) swpO=0 conn=7 myRSS=2942 php=10 phpRSS=620 ap=69 tcp=53 topuser=evolution 2026-09-03 19:30:49 L1=1.21 run=15 blk=0 avail=7321 (53.1%) swpO=0 conn=2 myRSS=2942 php=14 phpRSS=1306 ap=69 tcp=56 topuser=evolution 2026-09-03 19:30:59 L1=2.79 run=14 blk=0 avail=7025 (51.0%) swpO=0 conn=9 myRSS=2960 php=14 phpRSS=1696 ap=59 tcp=57 topuser=evolution 2026-09-03 19:30:59 L1=2.79 run=8 blk=0 avail=7678 (55.7%) swpO=0 conn=5 myRSS=2960 php=7 phpRSS=714 ap=59 tcp=58 topuser=evolution