INCIDENT 2026-09-04 08:56:18 trigger: php_rss=1641MB ================================================================== load: 0.41 0.91 1.30 19/721 4058769 ncpu:10 mem_avail: 6991MB/13777MB (50.7%) swap_used:1712MB swapout:0/s blocked(D):0 running:15 iowait:0.0% steal:0.0% php: 18 procs / 1641MB heaviest user: evolution (16 procs, 1484MB) apache: 45 procs tcp_estab: 65 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3081 evolution 30 1871 root 251 938 nobody 44 763 netdata 8 258 madalice 1 122 infinium 2 84 wp-toolkit 3 62 cpanellogin 1 35 dovenull 6 27 mailman 20 26 mailnull 4 24 lowrange 1 12 candyfabcom 1 11 zabbix 1 10 polkitd 1 10 kurri 1 10 dovecot 3 8 sshd 1 6 named 1 5 --- php workers by user --- USER PROCS RSS_MB evolution 20 1879 madalice 1 122 root 1 34 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5427 MB Active(file): 4083 MB Inactive(file): 1639 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 716 MB CommitLimit: 10984 MB Committed_AS: 9109 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 3-06:33:51 5552 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3155556 12.6 Ssl 1-18:42:06 /usr/sbin/mariadbd 1542443 1 netdata 191536 2.5 Ssl 1-06:33:56 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2654375 2603077 root 184044 0.0 S 06:17:11 spamd child 4058715 4057985 evolution 178724 92.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2603077 1 root 167820 0.0 Ss 06:32:07 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 4058714 4041210 evolution 154696 75.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 4058727 4058173 evolution 145848 81.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 4058514 2601907 madalice 125396 7.0 S 00:18 php-fpm: pool madalice_com_au 4058718 4043239 evolution 122268 98.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 4058728 4058712 evolution 122024 49.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2654376 2603077 root 103628 0.0 S 06:17:11 spamd child 4058726 4039562 evolution 101840 34.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 4058729 4039576 evolution 79820 26.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 4058732 4042685 evolution 76512 19.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 4058781 4058568 evolution 65872 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 4042400 1353308 infinium 56444 0.0 S 02:47 webmaild - serving 1.41.252.211 1353308 1 root 42564 0.1 Ss 44-06:15:03 cpsrvd (SSL) - waiting for connections 509236 509098 root 42216 0.0 Sl 7-06:36:37 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1469 1 root 41672 0.1 Ss 66-22:46:32 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542981 1542551 netdata 41172 0.1 Sl 1-06:33:52 /usr/libexec/netdata/plugins.d/go.d.plugin 1 4058789 4058176 evolution 40496 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 4058763 4058170 evolution 40388 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 4058725 4058552 evolution 38648 4.0 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 4058724 4058134 evolution 36724 3.0 S 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 4058762 4043221 evolution 36720 3.0 S 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 4058780 4058774 evolution 36600 0.0 S 00:00 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 4058759 4058550 evolution 36520 3.0 S 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 3792373 1353308 cpanellogin 36444 0.0 S 01:09:33 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base default_login_theme cpanel server_locale en 2601907 1 root 35052 0.0 Ss 06:32:52 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1542487 1 wp-toolkit 34756 0.0 Ss 1-06:33:56 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 3867523 1542095 infinium 30220 0.0 S 46:28 php-fpm: pool user_infinium 2602226 1 root 28368 0.1 Ssl 06:32:37 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 1463 1 root 25128 0.0 Ss 66-22:46:32 tailwatchd 4039562 506832 nobody 22932 0.0 S 06:01 /usr/sbin/httpd -k start 4039503 506832 nobody 22864 0.0 S 06:02 /usr/sbin/httpd -k start 1542531 1 wp-toolkit 22640 0.0 Ss 1-06:33:55 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 4039576 506832 nobody 22456 0.0 S 06:00 /usr/sbin/httpd -k start 4039554 506832 nobody 21652 0.0 S 06:01 /usr/sbin/httpd -k start 4042278 506832 nobody 21016 0.1 S 02:59 /usr/sbin/httpd -k start 509266 1 root 20844 0.0 Ss 7-06:36:37 /usr/lib/systemd/systemd-journald 4041210 506832 nobody 20692 0.0 S 04:14 /usr/sbin/httpd -k start 4042302 506832 nobody 20684 0.0 S 02:55 /usr/sbin/httpd -k start 4043461 506832 nobody 20256 0.0 S 01:30 /usr/sbin/httpd -k start 4058173 506832 nobody 19792 0.0 S 00:42 /usr/sbin/httpd -k start 4058089 506832 nobody 19744 0.0 S 00:48 /usr/sbin/httpd -k start 4043221 506832 nobody 19704 0.0 S 01:49 /usr/sbin/httpd -k start 4043209 506832 nobody 19344 0.0 S 01:50 /usr/sbin/httpd -k start 4058170 506832 nobody 19284 0.0 S 00:42 /usr/sbin/httpd -k start 4058400 506832 nobody 19156 0.0 S 00:26 /usr/sbin/httpd -k start 4042685 506832 nobody 19152 0.0 S 02:23 /usr/sbin/httpd -k start 4058504 506832 nobody 19152 0.0 S 00:19 /usr/sbin/httpd -k start 4041820 506832 nobody 18920 0.0 S 03:29 /usr/sbin/httpd -k start 4043220 506832 nobody 18900 0.0 S 01:49 /usr/sbin/httpd -k start 1542141 1 root 18400 0.0 Ss 1-06:33:59 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 4043011 506832 nobody 18300 0.0 S 02:03 /usr/sbin/httpd -k start 1542982 1542551 netdata 18256 2.1 Sl 1-06:33:52 /usr/libexec/netdata/plugins.d/apps.plugin 1 4058128 506832 nobody 18228 0.0 S 00:44 /usr/sbin/httpd -k start 4043239 506832 nobody 18204 0.1 S 01:48 /usr/sbin/httpd -k start 4058174 506832 nobody 18172 0.0 S 00:42 /usr/sbin/httpd -k start 4058175 506832 nobody 18072 0.0 S 00:42 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 7763870 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 348 evolution/portal.evolutionerp.com.au-ssl_log 208 evolution/app.evolutionerp.com.au-ssl_log 94 aaa/aaadownunder.com.au-ssl_log 13 coscom/coscom.com.au 10 evolution/evolutionerp.com.au-ssl_log 6 madalice/madalice.com.au-ssl_log 5 speedlin/speedlinefencing.com.au-ssl_log 2 bigdeals/bigdeals.com.au-ssl_log 1 candyfabcom/candyfab.com.au-ssl_log 1 evolution/evolutionerp.com.au 1 tubesupplies/tubesupplies.com.au-ssl_log 1 (total vhosts taking traffic: 12) --- top client IPs across all vhosts (last 3 min) --- 414 203.54.180.238 94 40.115.94.245 61 150.228.243.144 32 103.104.165.99 12 203.166.236.147 11 103.104.164.114 10 169.150.201.135 9 182.239.240.254 9 180.181.236.49 7 1.145.70.156 3 64.233.173.198 3 178.211.139.240 3 165.225.233.115 3 118.127.40.55 3 101.119.82.178 --- top request paths across all vhosts (last 3 min) --- 171 POST /functions.php 94 GET /api/getItem/LWHG2001KG 78 GET /factory_session_checker.php 41 GET /app/ajax.php 40 GET /factory_session_processed_qty.php 39 GET /heartbeat.php 39 GET /factory_session_joiner.php 37 GET /index.php 23 POST /plugins/csvexporter/plugin.php 10 POST /clienteditsave.php 10 GET //app/ajax.php 7 POST /mfreqsave.php 7 POST /app/ajax/selectFilterSingle.php 6 POST /app/ajax.php 5 POST /logsave.php 5 POST /jobeditsave.php 4 POST /quoteditsave.php 4 POST //clienteditsave.php 4 GET / 3 POST /wp-cron.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 171 POST /functions.php 41 GET /app/ajax.php 29 GET /index.php 23 POST /plugins/csvexporter/plugin.php 10 POST /clienteditsave.php 10 GET //app/ajax.php 7 POST /mfreqsave.php 7 POST /app/ajax/selectFilterSingle.php 6 POST /app/ajax.php 5 POST /logsave.php 5 POST /jobeditsave.php 4 POST /quoteditsave.php -- last 10 requests -- 203.54.180.238 - - [04/Sep/2026:08:56:16 +1000] "POST /clienteditsave.php?clientid=19467&call=getCategoryDiscounts HTTP/1.1" 200 25 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29533" "Mozilla/5.0 (Windows N 203.54.180.238 - - [04/Sep/2026:08:56:16 +1000] "POST /logsave.php?call=getHistory&id=29533&module=job HTTP/1.1" 200 772 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29533" "Mozilla/5.0 (Windows NT 10.0; Win 203.166.236.147 - - [04/Sep/2026:08:56:17 +1000] "POST /itemModify.php?call=getInvMFMeta&modifyid=1251 HTTP/1.1" 200 155 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=37099§ionid=0" "Mozilla/5.0 (Wi 203.166.236.147 - - [04/Sep/2026:08:56:17 +1000] "POST /itemModify.php?call=getBOM HTTP/1.1" 200 22 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=37099§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [04/Sep/2026:08:56:17 +1000] "GET /index.php?page=quotereg HTTP/1.1" 200 20378 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/1 203.54.180.238 - - [04/Sep/2026:08:56:18 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=dispatchedit&dispatchid=34089" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 203.54.180.238 - - [04/Sep/2026:08:56:17 +1000] "GET /index.php?page=quotereg HTTP/1.1" 200 84247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/1 203.54.180.238 - - [04/Sep/2026:08:56:17 +1000] "GET /app/ajax.php?cn=&furi=true&uri=&call=getUserSetting&caller=ajaxSubmitLocal&seq=14185922661 HTTP/1.1" 200 273 "https://my.evolutionerp.com.au/index.php?page=jobedit&id 203.54.180.238 - - [04/Sep/2026:08:56:18 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Djobedit%26id%3D29533&call=getUserSetting&caller=ajaxSubmitLocal&seq=11728156861 HTTP/1.1" 200 111 "https://my. 203.54.180.238 - - [04/Sep/2026:08:56:18 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Djobedit%26id%3D29533&call=getUserSetting&caller=ajaxSubmitLocal&seq=11551859029 HTTP/1.1" 200 98 "https://my.evolutionerp.com.au == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 78 GET /factory_session_checker.php 40 GET /factory_session_processed_qty.php 39 GET /heartbeat.php 39 GET /factory_session_joiner.php 8 GET /index.php 3 GET /userlogin.php 1 POST /factory_functions.php -- last 10 requests -- 203.54.180.238 - - [04/Sep/2026:08:56:06 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [04/Sep/2026:08:56:06 +1000] "GET /factory_session_joiner.php?id=35123 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [04/Sep/2026:08:56:08 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 124 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [04/Sep/2026:08:56:08 +1000] "GET /factory_session_joiner.php?id=35116 HTTP/1.1" 200 92 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [04/Sep/2026:08:56:08 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [04/Sep/2026:08:56:08 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [04/Sep/2026:08:56:07 +1000] "GET /heartbeat.php?sentAt=1788476167&bytes=106,153,251,7&_=1788436617183 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [04/Sep/2026:08:56:08 +1000] "GET /heartbeat.php?sentAt=1788476168&bytes=106,153,251,8&_=1788474385132 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [04/Sep/2026:08:56:11 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [04/Sep/2026:08:56:12 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 124 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 94 GET /api/getItem/LWHG2001KG -- last 10 requests -- 40.115.94.245 - - [04/Sep/2026:08:55:31 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:08:55:32 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:08:55:32 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:08:55:32 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:08:55:33 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:08:55:33 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:08:55:33 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:08:55:34 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:08:55:34 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:08:55:35 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" --- last 30 samples (run-up to this incident) --- 2026-09-04 08:53:57 L1=0.78 run=2 blk=0 avail=8042 (58.4%) swpO=0 conn=2 myRSS=3069 php=3 phpRSS=192 ap=38 tcp=50 topuser=tubesupplies 2026-09-04 08:53:58 L1=0.78 run=5 blk=0 avail=7910 (57.4%) swpO=0 conn=2 myRSS=3069 php=7 phpRSS=423 ap=39 tcp=55 topuser=tubesupplies 2026-09-04 08:54:07 L1=1.04 run=5 blk=0 avail=7751 (56.3%) swpO=0 conn=2 myRSS=3069 php=7 phpRSS=561 ap=44 tcp=44 topuser=evolution 2026-09-04 08:54:08 L1=1.04 run=2 blk=0 avail=7844 (56.9%) swpO=0 conn=2 myRSS=3069 php=6 phpRSS=441 ap=43 tcp=44 topuser=speedlin 2026-09-04 08:54:17 L1=1.02 run=3 blk=0 avail=7980 (57.9%) swpO=0 conn=2 myRSS=3069 php=4 phpRSS=229 ap=44 tcp=46 topuser=madalice 2026-09-04 08:54:18 L1=1.02 run=1 blk=0 avail=7985 (58.0%) swpO=0 conn=2 myRSS=3069 php=4 phpRSS=229 ap=43 tcp=46 topuser=madalice 2026-09-04 08:54:27 L1=1.09 run=5 blk=0 avail=7817 (56.7%) swpO=0 conn=2 myRSS=3069 php=7 phpRSS=515 ap=37 tcp=50 topuser=madalice 2026-09-04 08:54:28 L1=1.09 run=2 blk=0 avail=7922 (57.5%) swpO=1 conn=2 myRSS=3069 php=6 phpRSS=374 ap=38 tcp=58 topuser=madalice 2026-09-04 08:54:37 L1=1.00 run=1 blk=0 avail=7881 (57.2%) swpO=1 conn=2 myRSS=3069 php=5 phpRSS=318 ap=48 tcp=39 topuser=madalice 2026-09-04 08:54:38 L1=1.00 run=3 blk=0 avail=7887 (57.2%) swpO=0 conn=2 myRSS=3069 php=5 phpRSS=318 ap=47 tcp=37 topuser=madalice 2026-09-04 08:54:47 L1=0.93 run=4 blk=0 avail=8009 (58.1%) swpO=0 conn=2 myRSS=3069 php=5 phpRSS=274 ap=38 tcp=43 topuser=madalice 2026-09-04 08:54:48 L1=0.93 run=3 blk=0 avail=7920 (57.5%) swpO=0 conn=1 myRSS=3069 php=4 phpRSS=266 ap=37 tcp=41 topuser=madalice 2026-09-04 08:54:57 L1=0.86 run=1 blk=0 avail=8163 (59.3%) swpO=0 conn=2 myRSS=3069 php=3 phpRSS=74 ap=37 tcp=38 topuser=evolution 2026-09-04 08:54:58 L1=0.86 run=1 blk=0 avail=8181 (59.4%) swpO=0 conn=1 myRSS=3069 php=2 phpRSS=34 ap=36 tcp=35 topuser=root 2026-09-04 08:55:07 L1=0.89 run=2 blk=0 avail=8211 (59.6%) swpO=0 conn=2 myRSS=3069 php=3 phpRSS=74 ap=30 tcp=35 topuser=evolution 2026-09-04 08:55:08 L1=0.89 run=2 blk=0 avail=8238 (59.8%) swpO=0 conn=1 myRSS=3069 php=2 phpRSS=34 ap=30 tcp=32 topuser=root 2026-09-04 08:55:17 L1=0.82 run=1 blk=0 avail=8257 (59.9%) swpO=0 conn=2 myRSS=3069 php=3 phpRSS=75 ap=26 tcp=33 topuser=evolution 2026-09-04 08:55:18 L1=0.82 run=1 blk=0 avail=8282 (60.1%) swpO=0 conn=1 myRSS=3069 php=2 phpRSS=34 ap=26 tcp=32 topuser=root 2026-09-04 08:55:27 L1=0.70 run=2 blk=0 avail=8223 (59.7%) swpO=0 conn=2 myRSS=3069 php=4 phpRSS=130 ap=29 tcp=37 topuser=evolution 2026-09-04 08:55:28 L1=0.70 run=2 blk=0 avail=8224 (59.7%) swpO=0 conn=1 myRSS=3069 php=4 phpRSS=129 ap=29 tcp=38 topuser=evolution 2026-09-04 08:55:37 L1=0.59 run=5 blk=0 avail=7924 (57.5%) swpO=0 conn=2 myRSS=3069 php=5 phpRSS=304 ap=47 tcp=68 topuser=madalice 2026-09-04 08:55:38 L1=0.59 run=3 blk=0 avail=7951 (57.7%) swpO=0 conn=1 myRSS=3069 php=4 phpRSS=229 ap=48 tcp=58 topuser=madalice 2026-09-04 08:55:47 L1=0.58 run=5 blk=0 avail=8000 (58.1%) swpO=0 conn=2 myRSS=3069 php=6 phpRSS=319 ap=41 tcp=45 topuser=madalice 2026-09-04 08:55:48 L1=0.58 run=1 blk=0 avail=8027 (58.3%) swpO=0 conn=2 myRSS=3069 php=4 phpRSS=229 ap=40 tcp=44 topuser=madalice 2026-09-04 08:55:58 L1=0.49 run=3 blk=0 avail=7990 (58.0%) swpO=0 conn=3 myRSS=3069 php=5 phpRSS=284 ap=41 tcp=48 topuser=madalice 2026-09-04 08:55:58 L1=0.49 run=2 blk=0 avail=8113 (58.9%) swpO=0 conn=2 myRSS=3069 php=5 phpRSS=166 ap=41 tcp=45 topuser=evolution 2026-09-04 08:56:08 L1=0.49 run=1 blk=0 avail=7974 (57.9%) swpO=0 conn=3 myRSS=3069 php=4 phpRSS=197 ap=52 tcp=44 topuser=madalice 2026-09-04 08:56:08 L1=0.49 run=1 blk=0 avail=7982 (57.9%) swpO=0 conn=2 myRSS=3069 php=5 phpRSS=209 ap=51 tcp=48 topuser=madalice 2026-09-04 08:56:18 L1=0.41 run=15 blk=0 avail=6991 (50.7%) swpO=0 conn=14 myRSS=3081 php=18 phpRSS=1641 ap=45 tcp=65 topuser=evolution 2026-09-04 08:56:18 L1=0.41 run=8 blk=0 avail=7189 (52.2%) swpO=0 conn=2 myRSS=3081 php=11 phpRSS=1199 ap=47 tcp=72 topuser=evolution