INCIDENT 2026-09-04 08:28:08 trigger: php_rss=1768MB ================================================================== load: 3.49 1.88 1.53 19/777 3949169 ncpu:10 mem_avail: 6644MB/13777MB (48.2%) swap_used:1726MB swapout:1313/s blocked(D):0 running:16 iowait:0.1% steal:0.0% php: 18 procs / 1768MB heaviest user: evolution (8 procs, 553MB) apache: 107 procs tcp_estab: 100 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2987 nobody 106 1557 root 244 869 evolution 20 703 tubesupplies 2 288 netdata 8 257 infinium 3 206 madalice 1 155 speedlin 1 150 customc 1 140 corpkicks 1 123 vinesit 1 89 wp-toolkit 3 62 alison 3 38 kurri 3 34 cpanellogin 1 33 dovenull 6 27 mailman 20 26 mailnull 3 17 zabbix 1 12 --- php workers by user --- USER PROCS RSS_MB evolution 10 701 tubesupplies 2 290 madalice 1 155 speedlin 1 150 customc 1 143 corpkicks 1 124 infinium 1 121 vinesit 1 89 root 1 34 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5390 MB Active(file): 3590 MB Inactive(file): 1817 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 725 MB CommitLimit: 10984 MB Committed_AS: 9866 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 3-06:05:41 5532 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3058796 12.4 Ssl 1-18:13:56 /usr/sbin/mariadbd 1542443 1 netdata 190444 2.5 Ssl 1-06:05:46 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2654375 2603077 root 183748 0.0 S 05:49:01 spamd child 2603077 1 root 167824 0.0 Ss 06:03:57 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3949063 3949038 tubesupplies 161480 52.6 S 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3948505 2601907 madalice 158732 21.2 S 00:30 php-fpm: pool madalice_com_au 3949057 3948802 speedlin 158460 52.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3949126 3949042 customc 152512 70.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3949129 3949017 evolution 149796 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3949128 3949015 evolution 145636 59.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3949060 3949041 tubesupplies 144808 43.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3949117 3947377 infinium 124904 50.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 2654376 2603077 root 103632 0.0 S 05:49:01 spamd child 3949121 3949014 vinesit 94792 74.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3949047 3947905 evolution 61644 3.0 S 00:04 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 3949157 3949031 evolution 57364 0.0 S 00:00 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 3949104 1353308 infinium 56244 6.5 S 00:02 webmaild - serving 1.41.252.211 3949174 3949040 infinium 51640 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 1353308 1 root 42528 0.1 Ss 44-05:46:53 cpsrvd (SSL) - waiting for connections 509236 509098 root 42216 0.0 Sl 7-06:08:27 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1469 1 root 41672 0.1 Ss 66-22:18:22 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542981 1542551 netdata 41172 0.1 Sl 1-06:05:42 /usr/libexec/netdata/plugins.d/go.d.plugin 1 3949175 3948926 evolution 40588 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3949136 3948925 evolution 38252 0.0 S 00:00 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 3949133 3949030 evolution 36988 0.0 S 00:00 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 3949134 3947015 evolution 36944 0.0 S 00:00 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 2601907 1 root 35052 0.0 Ss 06:04:42 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1542487 1 wp-toolkit 34664 0.0 Ss 1-06:05:46 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 3792373 1353308 cpanellogin 34268 0.0 S 41:23 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base default_login_theme cpanel server_locale en 3867523 1542095 infinium 30192 0.0 S 18:18 php-fpm: pool user_infinium 2602226 1 root 28368 0.1 Ssl 06:04:27 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 3929311 506832 nobody 25212 0.0 S 06:15 /usr/sbin/httpd -k start 1463 1 root 25152 0.0 Ss 66-22:18:22 tailwatchd 3930309 506832 nobody 24184 0.0 S 05:15 /usr/sbin/httpd -k start 3946955 506832 nobody 22864 0.0 S 02:08 /usr/sbin/httpd -k start 3929715 506832 nobody 22844 0.0 S 05:49 /usr/sbin/httpd -k start 3947004 506832 nobody 22724 0.1 S 02:05 /usr/sbin/httpd -k start 1542531 1 wp-toolkit 22648 0.0 Ss 1-06:05:45 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 3946334 506832 nobody 22620 0.0 S 02:55 /usr/sbin/httpd -k start 3929664 506832 nobody 22500 0.0 S 05:51 /usr/sbin/httpd -k start 3947017 506832 nobody 22144 0.0 S 02:04 /usr/sbin/httpd -k start 3947015 506832 nobody 21800 0.0 S 02:04 /usr/sbin/httpd -k start 3947014 506832 nobody 21472 0.0 S 02:04 /usr/sbin/httpd -k start 3947556 506832 nobody 21308 0.0 S 01:26 /usr/sbin/httpd -k start 3947118 506832 nobody 21216 0.0 S 01:57 /usr/sbin/httpd -k start 3947377 506832 nobody 21180 0.0 S 01:34 /usr/sbin/httpd -k start 3932015 506832 nobody 21020 0.0 S 03:08 /usr/sbin/httpd -k start 3948802 506832 nobody 20752 0.1 S 00:15 /usr/sbin/httpd -k start 3931992 506832 nobody 20616 0.0 S 03:10 /usr/sbin/httpd -k start 3946349 506832 nobody 20584 0.0 S 02:53 /usr/sbin/httpd -k start 3948894 506832 nobody 20564 0.1 S 00:11 /usr/sbin/httpd -k start 3947328 506832 nobody 20504 0.0 S 01:40 /usr/sbin/httpd -k start 3948926 506832 nobody 20388 0.3 S 00:10 /usr/sbin/httpd -k start 3949021 506832 nobody 20288 0.4 S 00:05 /usr/sbin/httpd -k start 3947905 506832 nobody 20272 0.0 S 01:01 /usr/sbin/httpd -k start 3947885 506832 nobody 20200 0.0 S 01:04 /usr/sbin/httpd -k start 3949020 506832 nobody 20128 0.4 S 00:05 /usr/sbin/httpd -k start 3947558 506832 nobody 20028 0.0 S 01:26 /usr/sbin/httpd -k start 3947274 506832 nobody 19980 0.0 S 01:41 /usr/sbin/httpd -k start 3949030 506832 nobody 19896 0.2 S 00:04 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+----------------+---------+------+----------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+----------------+---------+------+----------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 7589001 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 7589000 | root | 85-1559715131 | Execute | 0 | Statistics | SELECT external, workshopnotes, (SELECT cost FROM inventory WHERE id = (SELECT default_cost_item fROM mfprocesses WHERE id = ?)) as cost, itemid as takeup, setupcost, setupTime, leadTime, cost as pcost FROM mfprocesses WHERE id = ? | | 7588992 | root | 108-1481181613 | Execute | 0 | Optimizing | SELECT * from staff WHERE id='141' and portal_access='1' | | 7588979 | root | 85-1559715131 | Execute | 0 | Sending data | UPDATE quotes set total = (select SUM(round(cast(quoteitems.adjPrice as decimal(15,4))*quoteitems.qty,2)) from quoteitems where quoteitems.quoteid = quotes.id and quoteitems.status=1) where quotes.id = ? | +---------+------+----------------+---------+------+----------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 410 bigdeals/bigdeals.com.au-ssl_log 148 evolution/portal.evolutionerp.com.au-ssl_log 145 evolution/app.evolutionerp.com.au-ssl_log 96 speedlin/speedlinefencing.com.au-ssl_log 62 speedlin/speedlinefencing.com.au 61 madalice/madalice.com.au-ssl_log 17 aaa/aaadownunder.com.au-ssl_log 4 olympic/olympicfencing.com.au-ssl_log 4 alison/alisonarts.com.au-ssl_log 2 (total vhosts taking traffic: 10) --- top client IPs across all vhosts (last 3 min) --- 201 203.54.180.238 185 103.104.165.99 148 34.74.253.19 123 20.104.49.130 96 40.115.94.245 75 101.166.96.210 33 150.228.243.144 20 203.166.236.147 20 1.145.70.156 14 103.104.164.114 8 91.92.47.82 4 180.181.236.49 2 82.135.202.97 2 52.91.144.238 2 47.82.11.175 --- top request paths across all vhosts (last 3 min) --- 144 POST /functions.php 85 GET /app/ajax.php 52 GET /factory_session_checker.php 48 GET /api/getItem/LWHG2001KG 48 GET /api/getItem/LWFBW2001KG 35 GET /index.php 32 GET /heartbeat.php 30 POST /plugins/csvexporter/plugin.php 26 GET /factory_session_processed_qty.php 26 GET /factory_session_joiner.php 19 GET / 18 POST /quoteditsave.php 17 POST /plugins/fencecosting/plugin.php 17 POST /app/ajax.php 12 POST /app/ajax/selectFilterSingle.php 9 HEAD /index.php 8 POST /clienteditsave.php 7 POST /jobeditsave.php 4 POST /logsave.php 4 POST /inveditsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 144 POST /functions.php 85 GET /app/ajax.php 31 GET /index.php 30 POST /plugins/csvexporter/plugin.php 18 POST /quoteditsave.php 17 POST /plugins/fencecosting/plugin.php 17 POST /app/ajax.php 12 POST /app/ajax/selectFilterSingle.php 9 HEAD /index.php 8 POST /clienteditsave.php 7 POST /jobeditsave.php 4 POST /logsave.php -- last 10 requests -- 103.104.164.114 - - [04/Sep/2026:08:28:00 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 101.166.96.210 - - [04/Sep/2026:08:28:00 +1000] "POST /app/ajax/selectFilter.php?call=filterinv&filter=EA-100-100-10 HTTP/1.1" 200 1590 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=37098§ionid=0" " 165.225.233.115 - - [04/Sep/2026:08:28:00 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=siteedit&siteid=4498" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple 150.228.243.144 - - [04/Sep/2026:08:28:01 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=inveditsub&id=2461" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe 150.228.243.144 - - [04/Sep/2026:08:28:03 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=invedit&id=1800&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; 101.166.96.210 - - [04/Sep/2026:08:28:03 +1000] "POST /itemModify.php?call=getInvMFMeta&modifyid=7594 HTTP/1.1" 200 49 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=37098§ionid=0" "Mozilla/5.0 (Wind 101.166.96.210 - - [04/Sep/2026:08:28:03 +1000] "POST /itemModify.php?call=getBOM HTTP/1.1" 200 22 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=37098§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [04/Sep/2026:08:28:06 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=quotereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 150.228.243.144 - - [04/Sep/2026:08:28:07 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=inventory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. 203.54.180.238 - - [04/Sep/2026:08:28:07 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 285 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29468&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; == bigdeals/bigdeals.com.au-ssl_log == -- top paths -- 4 GET / 2 GET /_image 1 POST /v1/graphql 1 POST /graphql 1 POST /api/graphql 1 GET /z9x8c7v6b5-debug-trigger-webmail.bigdeals.com.au 1 GET /wp-json 1 GET /wp/.env 1 GET /wp-config.php.swp 1 GET /wp-config.php~ 1 GET /wp-config.old 1 GET /web/.env -- last 10 requests -- 34.74.253.19 - - [04/Sep/2026:08:27:34 +1000] "GET /api/health HTTP/1.1" 404 3496 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 34.74.253.19 - - [04/Sep/2026:08:27:34 +1000] "GET /.s3cfg HTTP/1.1" 401 12596 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 34.74.253.19 - - [04/Sep/2026:08:27:34 +1000] "GET /api/account HTTP/1.1" 404 3496 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 34.74.253.19 - - [04/Sep/2026:08:27:34 +1000] "GET /.boto HTTP/1.1" 401 12600 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 34.74.253.19 - - [04/Sep/2026:08:27:34 +1000] "GET /.htpasswd HTTP/1.1" 403 13 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 34.74.253.19 - - [04/Sep/2026:08:27:34 +1000] "GET /.svn/entries HTTP/1.1" 403 13 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 34.74.253.19 - - [04/Sep/2026:08:27:34 +1000] "GET /terraform.tfstate HTTP/1.1" 404 3496 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 34.74.253.19 - - [04/Sep/2026:08:27:34 +1000] "GET /docker-compose.yaml HTTP/1.1" 404 3496 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 34.74.253.19 - - [04/Sep/2026:08:27:34 +1000] "GET /api/v1/env HTTP/1.1" 401 12598 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 34.74.253.19 - - [04/Sep/2026:08:27:35 +1000] "GET /secrets.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 52 GET /factory_session_checker.php 32 GET /heartbeat.php 26 GET /factory_session_processed_qty.php 26 GET /factory_session_joiner.php 4 GET /index.php 3 POST /portal/register 2 POST /factory_functions.php -- last 10 requests -- 203.54.180.238 - - [04/Sep/2026:08:27:48 +1000] "GET /heartbeat.php?sentAt=1788474468&bytes=106,153,244,100&_=1788474384962 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [04/Sep/2026:08:27:50 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 123 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [04/Sep/2026:08:27:50 +1000] "GET /factory_session_joiner.php?id=35116 HTTP/1.1" 200 94 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [04/Sep/2026:08:27:51 +1000] "GET /heartbeat.php?sentAt=1788474471&bytes=106,153,244,103&_=1788474331456 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=5 203.54.180.238 - - [04/Sep/2026:08:27:54 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [04/Sep/2026:08:27:54 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [04/Sep/2026:08:27:55 +1000] "GET /factory_session_joiner.php?id=35088 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [04/Sep/2026:08:27:55 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 124 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [04/Sep/2026:08:27:57 +1000] "GET /heartbeat.php?sentAt=1788474477&bytes=106,153,244,109&_=1788436617014 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [04/Sep/2026:08:27:59 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 --- last 30 samples (run-up to this incident) --- 2026-09-04 08:25:48 L1=1.30 run=2 blk=0 avail=8163 (59.3%) swpO=0 conn=2 myRSS=3014 php=4 phpRSS=111 ap=39 tcp=46 topuser=evolution 2026-09-04 08:25:48 L1=1.19 run=1 blk=0 avail=8180 (59.4%) swpO=0 conn=1 myRSS=3014 php=2 phpRSS=34 ap=39 tcp=47 topuser=root 2026-09-04 08:25:58 L1=1.18 run=3 blk=0 avail=8008 (58.1%) swpO=0 conn=2 myRSS=3014 php=5 phpRSS=310 ap=33 tcp=49 topuser=madalice 2026-09-04 08:25:58 L1=1.16 run=4 blk=0 avail=7982 (57.9%) swpO=0 conn=1 myRSS=3014 php=4 phpRSS=308 ap=33 tcp=50 topuser=speedlin 2026-09-04 08:26:08 L1=1.15 run=1 blk=0 avail=8012 (58.2%) swpO=0 conn=2 myRSS=3014 php=4 phpRSS=231 ap=42 tcp=50 topuser=madalice 2026-09-04 08:26:08 L1=1.22 run=5 blk=0 avail=7973 (57.9%) swpO=0 conn=1 myRSS=3014 php=5 phpRSS=302 ap=42 tcp=51 topuser=madalice 2026-09-04 08:26:18 L1=1.20 run=4 blk=0 avail=8021 (58.2%) swpO=0 conn=2 myRSS=3014 php=4 phpRSS=229 ap=40 tcp=43 topuser=madalice 2026-09-04 08:26:18 L1=1.10 run=2 blk=0 avail=8006 (58.1%) swpO=0 conn=1 myRSS=3014 php=4 phpRSS=247 ap=40 tcp=43 topuser=madalice 2026-09-04 08:26:28 L1=1.34 run=4 blk=0 avail=8024 (58.2%) swpO=0 conn=2 myRSS=3014 php=5 phpRSS=279 ap=37 tcp=50 topuser=madalice 2026-09-04 08:26:28 L1=1.23 run=1 blk=0 avail=8057 (58.5%) swpO=0 conn=1 myRSS=3014 php=3 phpRSS=190 ap=37 tcp=52 topuser=madalice 2026-09-04 08:26:38 L1=1.29 run=6 blk=0 avail=7906 (57.4%) swpO=0 conn=3 myRSS=3014 php=5 phpRSS=358 ap=43 tcp=53 topuser=madalice 2026-09-04 08:26:38 L1=1.27 run=1 blk=0 avail=8012 (58.2%) swpO=0 conn=1 myRSS=3014 php=4 phpRSS=230 ap=43 tcp=51 topuser=madalice 2026-09-04 08:26:48 L1=1.65 run=5 blk=0 avail=7770 (56.4%) swpO=0 conn=3 myRSS=3016 php=6 phpRSS=435 ap=50 tcp=66 topuser=madalice 2026-09-04 08:26:48 L1=1.67 run=2 blk=0 avail=7813 (56.7%) swpO=0 conn=4 myRSS=3016 php=6 phpRSS=396 ap=50 tcp=67 topuser=otterfencing 2026-09-04 08:26:58 L1=1.78 run=1 blk=0 avail=8017 (58.2%) swpO=0 conn=3 myRSS=3016 php=3 phpRSS=168 ap=45 tcp=46 topuser=madalice 2026-09-04 08:26:59 L1=1.64 run=3 blk=0 avail=8004 (58.1%) swpO=0 conn=4 myRSS=3016 php=4 phpRSS=208 ap=45 tcp=48 topuser=madalice 2026-09-04 08:27:08 L1=1.67 run=2 blk=0 avail=7936 (57.6%) swpO=0 conn=3 myRSS=3016 php=4 phpRSS=268 ap=45 tcp=59 topuser=madalice 2026-09-04 08:27:09 L1=1.69 run=5 blk=0 avail=7884 (57.2%) swpO=0 conn=4 myRSS=3016 php=5 phpRSS=349 ap=45 tcp=57 topuser=madalice 2026-09-04 08:27:18 L1=1.59 run=3 blk=0 avail=7842 (56.9%) swpO=0 conn=3 myRSS=3016 php=6 phpRSS=463 ap=45 tcp=59 topuser=tubesupplies 2026-09-04 08:27:19 L1=1.59 run=6 blk=0 avail=7751 (56.3%) swpO=0 conn=4 myRSS=3016 php=8 phpRSS=619 ap=47 tcp=58 topuser=tubesupplies 2026-09-04 08:27:28 L1=1.50 run=5 blk=0 avail=7913 (57.4%) swpO=0 conn=3 myRSS=3016 php=5 phpRSS=288 ap=54 tcp=67 topuser=madalice 2026-09-04 08:27:29 L1=1.50 run=2 blk=0 avail=7870 (57.1%) swpO=0 conn=4 myRSS=3016 php=5 phpRSS=332 ap=54 tcp=65 topuser=madalice 2026-09-04 08:27:38 L1=1.49 run=3 blk=0 avail=8063 (58.5%) swpO=0 conn=4 myRSS=3016 php=5 phpRSS=179 ap=48 tcp=62 topuser=evolution 2026-09-04 08:27:39 L1=1.49 run=3 blk=0 avail=7966 (57.8%) swpO=0 conn=4 myRSS=3016 php=6 phpRSS=294 ap=47 tcp=63 topuser=evolution 2026-09-04 08:27:48 L1=1.74 run=3 blk=0 avail=7979 (57.9%) swpO=0 conn=4 myRSS=3016 php=5 phpRSS=334 ap=39 tcp=49 topuser=madalice 2026-09-04 08:27:49 L1=1.74 run=5 blk=0 avail=7885 (57.2%) swpO=0 conn=4 myRSS=3016 php=6 phpRSS=447 ap=38 tcp=49 topuser=madalice 2026-09-04 08:27:58 L1=1.69 run=1 blk=0 avail=8010 (58.1%) swpO=0 conn=4 myRSS=3016 php=4 phpRSS=230 ap=43 tcp=61 topuser=madalice 2026-09-04 08:27:59 L1=1.69 run=2 blk=0 avail=7963 (57.8%) swpO=0 conn=4 myRSS=3016 php=5 phpRSS=293 ap=45 tcp=62 topuser=madalice 2026-09-04 08:28:08 L1=3.49 run=16 blk=0 avail=6644 (48.2%) swpO=1313 conn=13 myRSS=2987 php=18 phpRSS=1768 ap=107 tcp=100 topuser=evolution 2026-09-04 08:28:09 L1=3.49 run=16 blk=0 avail=7008 (50.9%) swpO=1313 conn=4 myRSS=2987 php=18 phpRSS=1389 ap=107 tcp=94 topuser=evolution