INCIDENT 2026-09-04 14:18:11 trigger: php_rss=1561MB ================================================================== load: 1.37 1.46 1.47 13/711 1110203 ncpu:10 mem_avail: 6870MB/13777MB (49.9%) swap_used:1631MB swapout:0/s blocked(D):0 running:16 iowait:0.1% steal:0.0% php: 15 procs / 1561MB heaviest user: customc (8 procs, 944MB) apache: 42 procs tcp_estab: 69 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3229 customc 9 1165 root 245 900 nobody 41 773 madalice 3 414 netdata 8 247 evolution 12 232 kurri 5 70 dovenull 6 67 wp-toolkit 3 61 alison 4 57 dovecot 3 28 mailman 20 26 cpanellogin 1 22 mailnull 4 21 vinesit 1 14 corpkicks 1 14 zabbix 1 11 polkitd 1 7 sshd 1 6 --- php workers by user --- USER PROCS RSS_MB customc 9 1193 madalice 2 399 evolution 4 215 root 1 33 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4962 MB Active(file): 4206 MB Inactive(file): 952 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 532 MB CommitLimit: 10984 MB Committed_AS: 9054 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 3-11:55:44 4232 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3307316 14.5 Ssl 2-00:03:59 /usr/sbin/mariadbd 1110118 2601907 madalice 249148 16.8 S 00:07 php-fpm: pool madalice_com_au 1110163 1108126 customc 190380 79.0 S 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1110169 1109161 customc 188392 80.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1110170 1108117 customc 188340 84.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1110161 1110094 customc 187028 81.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1542443 1 netdata 181660 2.6 Ssl 1-11:55:49 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1110171 1109525 evolution 178480 78.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1109902 2601907 madalice 161788 12.3 S 00:19 php-fpm: pool madalice_com_au 1110172 1110166 customc 157416 70.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1043892 2603077 root 142400 0.0 S 13:15 spamd child 2603077 1 root 138520 0.0 Ss 11:54:00 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 509266 1 root 111468 0.0 Ss 7-11:58:30 /usr/lib/systemd/systemd-journald 2654376 2603077 root 110440 0.0 S 11:39:04 spamd child 1110188 1110138 customc 102956 35.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1110214 1109162 customc 57876 12.0 R 00:01 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1110228 1109136 evolution 44324 0.0 R 00:00 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1469 1 root 42016 0.1 Ss 67-04:08:25 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 509236 509098 root 41960 0.0 Sl 7-11:58:30 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 41520 0.1 Ss 44-11:36:56 cpsrvd (SSL) - waiting for connections 1542981 1542551 netdata 40900 0.1 Sl 1-11:55:45 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1110167 1109513 evolution 40292 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1110168 1108137 evolution 39112 2.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1110227 1108871 evolution 37004 0.0 S 00:00 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1542487 1 wp-toolkit 34288 0.0 Ss 1-11:55:49 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2601907 1 root 34060 0.0 Ss 11:54:45 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1110242 1109540 customc 28508 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 2602226 1 root 27540 0.1 Ssl 11:54:30 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 1463 1 root 24876 0.0 Ss 67-04:08:25 tailwatchd 1108140 506832 nobody 23364 0.1 S 02:02 /usr/sbin/httpd -k start 1082892 506832 nobody 23352 0.0 S 03:43 /usr/sbin/httpd -k start 1108141 506832 nobody 23300 0.1 S 02:02 /usr/sbin/httpd -k start 1108480 506832 nobody 23108 0.0 S 01:39 /usr/sbin/httpd -k start 1108871 506832 nobody 22916 0.1 S 01:17 /usr/sbin/httpd -k start 1109135 506832 nobody 22852 0.2 S 01:05 /usr/sbin/httpd -k start 1079419 1353308 cpanellogin 22768 0.0 S 07:01 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base default_login_theme cpanel server_locale en 1542531 1 wp-toolkit 22228 0.0 Ss 1-11:55:48 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1109162 506832 nobody 22048 0.0 S 01:04 /usr/sbin/httpd -k start 1107461 506832 nobody 21856 0.0 S 02:46 /usr/sbin/httpd -k start 1109522 506832 nobody 21528 0.1 S 00:44 /usr/sbin/httpd -k start 1109512 506832 nobody 21396 0.0 S 00:45 /usr/sbin/httpd -k start 1107608 506832 nobody 21388 0.0 S 02:35 /usr/sbin/httpd -k start 1109523 506832 nobody 21344 0.1 S 00:44 /usr/sbin/httpd -k start 1108128 506832 nobody 21180 0.0 S 02:04 /usr/sbin/httpd -k start 1108126 506832 nobody 21092 0.0 S 02:04 /usr/sbin/httpd -k start 1108870 506832 nobody 20860 0.1 S 01:17 /usr/sbin/httpd -k start 1108886 506832 nobody 20688 0.0 S 01:16 /usr/sbin/httpd -k start 1109513 506832 nobody 20388 0.0 S 00:45 /usr/sbin/httpd -k start 1109540 506832 nobody 20240 0.0 S 00:43 /usr/sbin/httpd -k start 1108117 506832 nobody 20044 0.0 S 02:05 /usr/sbin/httpd -k start 1108135 506832 nobody 19852 0.0 S 02:02 /usr/sbin/httpd -k start 1109546 506832 nobody 19712 0.0 S 00:43 /usr/sbin/httpd -k start 1108137 506832 nobody 19704 0.0 S 02:02 /usr/sbin/httpd -k start 1109542 506832 nobody 19704 0.0 S 00:43 /usr/sbin/httpd -k start 1108481 506832 nobody 19416 0.0 S 01:39 /usr/sbin/httpd -k start 1109116 506832 nobody 19316 0.0 S 01:06 /usr/sbin/httpd -k start 1108125 506832 nobody 19300 0.0 S 02:04 /usr/sbin/httpd -k start 1109136 506832 nobody 19132 0.0 S 01:05 /usr/sbin/httpd -k start 1109545 506832 nobody 19112 0.0 S 00:43 /usr/sbin/httpd -k start 1109138 506832 nobody 19048 0.0 S 01:05 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 9952004 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 9951838 | madalice_wp | madalice_wp | Query | 0 | Creating sort index | SELECT *, CASE WHEN `type` = 3 THEN 0 WHEN `type` = 4 THEN 1 WHEN `type` = 7 THEN 2 WHEN `type` = 6 THEN 3 WHEN `type` = 5 THEN 4 WHEN `type` = 9 THEN 5 WHEN `type` = 8 THEN 6 WHEN `type` = 2 THEN 7 WHEN `type` = 1 THEN 8 ELSE 9999 END AS `typeSort`, CASE WHEN `type` = 3 THEN `parameters` WHEN `ty | +---------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 440 infinium/infinium.net.au-ssl_log 307 evolution/portal.evolutionerp.com.au-ssl_log 137 evolution/app.evolutionerp.com.au-ssl_log 51 kurri/kurrimotorinn.com.au-ssl_log 16 olympic/olympicfencing.com.au-ssl_log 8 madalice/madalice.com.au-ssl_log 6 (total vhosts taking traffic: 7) --- top client IPs across all vhosts (last 3 min) --- 353 203.54.180.238 166 168.110.22.89 124 195.178.110.103 119 147.161.213.90 51 40.115.94.245 43 182.239.240.254 36 1.144.107.82 20 118.127.40.55 16 169.150.201.135 8 103.104.164.114 5 1.145.70.156 4 203.123.106.115 3 114.119.140.234 2 52.167.144.210 2 209.141.33.142 --- top request paths across all vhosts (last 3 min) --- 139 POST /functions.php 110 GET /wp-admin/index.php 81 GET /app/ajax.php 57 POST /wp-login.php 54 POST / 49 GET /factory_session_checker.php 36 GET /heartbeat.php 31 GET /index.php 25 GET /factory_session_processed_qty.php 25 GET /factory_session_joiner.php 25 GET //app/ajax.php 25 GET /api/getItem/LWFB2001KG 18 POST /app/ajax.php 16 GET / 14 POST /index.php 14 POST /app/ajax/selectFilterSingle.php 12 POST //itemModify.php 12 POST /clienteditsave.php 12 POST //app/ajax/selectFilter.php 11 POST //clienteditsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 139 POST /functions.php 81 GET /app/ajax.php 29 GET /index.php 25 GET //app/ajax.php 18 POST /app/ajax.php 14 POST /app/ajax/selectFilterSingle.php 12 POST //itemModify.php 12 POST /clienteditsave.php 12 POST //app/ajax/selectFilter.php 11 POST //clienteditsave.php 8 POST //functions.php 7 POST /plugins/csvexporter/plugin.php -- last 10 requests -- 147.161.213.90 - - [04/Sep/2026:14:18:03 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=19261424020 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/index 147.161.213.90 - - [04/Sep/2026:14:18:03 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=18763977366 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/inde 147.161.213.90 - - [04/Sep/2026:14:18:03 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dfsinstruction%26id%3D19326&call=getUserSetting&caller=ajaxSubmitLocal&seq=18699354372 HTTP/1.1" 200 164 "https://my.evolutionerp 203.54.180.238 - - [04/Sep/2026:14:18:04 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79145§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 182.239.240.254 - - [04/Sep/2026:14:18:04 +1000] "POST /app/ajax/selectFilter.php?call=filterinv&filter=MACHINING HTTP/1.1" 200 1142 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=4258&tab=jobeditinv" "Mozilla 203.54.180.238 - - [04/Sep/2026:14:18:05 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=invedit&id=304&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 147.161.213.90 - - [04/Sep/2026:14:18:05 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=fsinstruction&id=19326" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 147.161.213.90 - - [04/Sep/2026:14:18:05 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 1094 "https://my.evolutionerp.com.au/index.php?page=fsinstruction&id=19326" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 203.54.180.238 - - [04/Sep/2026:14:18:06 +1000] "POST //app/ajax/selectFilter.php?call=filterinv&filter=12%20100 HTTP/1.1" 200 22939 "https://my.evolutionerp.com.au//index.php?page=jobedit&id=25858&tab=jobeditinv" "Mozil 1.145.70.156 - - [04/Sep/2026:14:18:06 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=quotereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ( == infinium/infinium.net.au-ssl_log == -- top paths -- 110 GET /wp-admin/index.php 56 POST /wp-login.php 54 POST / 14 POST /index.php 12 GET / 9 POST /wp-json/batch/v1 7 POST /wp-json/Batch/v1 7 POST /wp-json/batch/v1/ 7 POST //wp-json/batch/v1 7 POST /wordpress/wp-json/batch/v1 7 POST /blog/wp-json/batch/v1 3 POST /wp-cron.php -- last 10 requests -- 195.178.110.103 - - [04/Sep/2026:14:18:03 +1000] "POST / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 118.127.40.55 - - [04/Sep/2026:14:18:03 +1000] "POST /?wordfence_syncAttackData=1788495483.23 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://infinium.net.au" 168.110.22.89 - - [04/Sep/2026:14:18:02 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 18944 "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ 195.178.110.103 - - [04/Sep/2026:14:18:03 +1000] "POST / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 168.110.22.89 - - [04/Sep/2026:14:18:04 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 18944 "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ 195.178.110.103 - - [04/Sep/2026:14:18:04 +1000] "POST / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" 168.110.22.89 - - [04/Sep/2026:14:18:05 +1000] "POST /wp-login.php HTTP/1.1" 503 18031 "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Vers 168.110.22.89 - - [04/Sep/2026:14:18:05 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 18944 "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Versi 168.110.22.89 - - [04/Sep/2026:14:18:06 +1000] "GET /wp-admin/index.php HTTP/1.1" 503 18944 "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Versi 168.110.22.89 - - [04/Sep/2026:14:18:07 +1000] "POST /wp-login.php HTTP/1.1" 503 18031 "https://infinium.net.au/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 49 GET /factory_session_checker.php 36 GET /heartbeat.php 25 GET /factory_session_processed_qty.php 25 GET /factory_session_joiner.php 1 POST /portal/register 1 GET /index.php -- last 10 requests -- 203.54.180.238 - - [04/Sep/2026:14:17:54 +1000] "GET /heartbeat.php?sentAt=1788495472&bytes=106,154,70,112&_=1788476750504 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [04/Sep/2026:14:17:56 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [04/Sep/2026:14:17:56 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [04/Sep/2026:14:17:57 +1000] "GET /factory_session_joiner.php?id=35142 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [04/Sep/2026:14:17:57 +1000] "GET /heartbeat.php?sentAt=1788495477&bytes=106,154,70,117&_=1788436619114 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [04/Sep/2026:14:17:59 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [04/Sep/2026:14:18:01 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [04/Sep/2026:14:18:04 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [04/Sep/2026:14:18:04 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [04/Sep/2026:14:18:04 +1000] "GET /factory_session_joiner.php?id=35145 HTTP/1.1" 200 86 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe --- last 30 samples (run-up to this incident) --- 2026-09-04 14:15:42 L1=1.88 run=2 blk=0 avail=7788 (56.5%) swpO=0 conn=2 myRSS=3229 php=4 phpRSS=244 ap=51 tcp=49 topuser=madalice 2026-09-04 14:15:50 L1=1.74 run=3 blk=0 avail=7769 (56.4%) swpO=0 conn=2 myRSS=3229 php=5 phpRSS=344 ap=43 tcp=45 topuser=tubesupplies 2026-09-04 14:15:52 L1=1.74 run=3 blk=0 avail=7749 (56.2%) swpO=0 conn=2 myRSS=3229 php=5 phpRSS=325 ap=41 tcp=51 topuser=madalice 2026-09-04 14:16:00 L1=1.71 run=1 blk=0 avail=7923 (57.5%) swpO=0 conn=2 myRSS=3229 php=3 phpRSS=166 ap=38 tcp=37 topuser=madalice 2026-09-04 14:16:02 L1=1.71 run=2 blk=0 avail=7921 (57.5%) swpO=0 conn=2 myRSS=3229 php=4 phpRSS=208 ap=37 tcp=34 topuser=madalice 2026-09-04 14:16:10 L1=1.52 run=2 blk=0 avail=7488 (54.4%) swpO=0 conn=2 myRSS=3229 php=6 phpRSS=608 ap=48 tcp=58 topuser=madalice 2026-09-04 14:16:12 L1=1.52 run=2 blk=0 avail=7691 (55.8%) swpO=0 conn=2 myRSS=3229 php=5 phpRSS=373 ap=47 tcp=46 topuser=madalice 2026-09-04 14:16:20 L1=1.44 run=2 blk=0 avail=7676 (55.7%) swpO=0 conn=2 myRSS=3229 php=5 phpRSS=414 ap=44 tcp=56 topuser=madalice 2026-09-04 14:16:22 L1=1.44 run=1 blk=0 avail=7752 (56.3%) swpO=0 conn=2 myRSS=3229 php=5 phpRSS=346 ap=44 tcp=45 topuser=madalice 2026-09-04 14:16:30 L1=1.30 run=1 blk=0 avail=7796 (56.6%) swpO=0 conn=2 myRSS=3229 php=4 phpRSS=322 ap=38 tcp=62 topuser=madalice 2026-09-04 14:16:32 L1=1.30 run=2 blk=0 avail=7746 (56.2%) swpO=0 conn=2 myRSS=3229 php=5 phpRSS=387 ap=40 tcp=62 topuser=madalice 2026-09-04 14:16:40 L1=1.18 run=4 blk=0 avail=7903 (57.4%) swpO=0 conn=2 myRSS=3229 php=4 phpRSS=197 ap=41 tcp=54 topuser=infinium 2026-09-04 14:16:42 L1=1.18 run=1 blk=0 avail=7907 (57.4%) swpO=0 conn=2 myRSS=3229 php=3 phpRSS=166 ap=41 tcp=49 topuser=madalice 2026-09-04 14:16:50 L1=1.32 run=4 blk=0 avail=7871 (57.1%) swpO=0 conn=2 myRSS=3229 php=4 phpRSS=222 ap=41 tcp=52 topuser=madalice 2026-09-04 14:16:52 L1=1.32 run=3 blk=0 avail=7821 (56.8%) swpO=0 conn=2 myRSS=3229 php=8 phpRSS=399 ap=40 tcp=53 topuser=evolution 2026-09-04 14:17:00 L1=1.19 run=3 blk=0 avail=7869 (57.1%) swpO=0 conn=2 myRSS=3229 php=4 phpRSS=223 ap=43 tcp=45 topuser=madalice 2026-09-04 14:17:02 L1=1.19 run=6 blk=0 avail=7859 (57.0%) swpO=0 conn=2 myRSS=3229 php=5 phpRSS=279 ap=41 tcp=44 topuser=olympic 2026-09-04 14:17:10 L1=1.54 run=8 blk=0 avail=7734 (56.1%) swpO=0 conn=2 myRSS=3229 php=9 phpRSS=437 ap=52 tcp=52 topuser=evolution 2026-09-04 14:17:12 L1=1.54 run=1 blk=0 avail=7835 (56.9%) swpO=0 conn=2 myRSS=3229 php=3 phpRSS=166 ap=50 tcp=44 topuser=madalice 2026-09-04 14:17:20 L1=1.38 run=4 blk=0 avail=7928 (57.5%) swpO=0 conn=2 myRSS=3229 php=4 phpRSS=196 ap=42 tcp=45 topuser=madalice 2026-09-04 14:17:22 L1=1.38 run=2 blk=0 avail=7917 (57.5%) swpO=0 conn=2 myRSS=3229 php=4 phpRSS=223 ap=40 tcp=42 topuser=madalice 2026-09-04 14:17:30 L1=1.47 run=2 blk=0 avail=7849 (57.0%) swpO=0 conn=2 myRSS=3229 php=3 phpRSS=166 ap=53 tcp=61 topuser=madalice 2026-09-04 14:17:32 L1=1.47 run=2 blk=0 avail=7800 (56.6%) swpO=0 conn=1 myRSS=3229 php=4 phpRSS=267 ap=51 tcp=53 topuser=madalice 2026-09-04 14:17:40 L1=1.33 run=2 blk=0 avail=7868 (57.1%) swpO=0 conn=2 myRSS=3229 php=4 phpRSS=223 ap=47 tcp=54 topuser=madalice 2026-09-04 14:17:42 L1=1.33 run=4 blk=0 avail=7838 (56.9%) swpO=0 conn=1 myRSS=3229 php=8 phpRSS=381 ap=45 tcp=49 topuser=evolution 2026-09-04 14:17:50 L1=1.44 run=1 blk=0 avail=8055 (58.5%) swpO=0 conn=2 myRSS=3229 php=2 phpRSS=33 ap=38 tcp=56 topuser=root 2026-09-04 14:17:52 L1=1.44 run=4 blk=0 avail=7966 (57.8%) swpO=0 conn=1 myRSS=3229 php=6 phpRSS=209 ap=37 tcp=55 topuser=evolution 2026-09-04 14:18:00 L1=1.44 run=4 blk=0 avail=7863 (57.1%) swpO=0 conn=2 myRSS=3229 php=5 phpRSS=318 ap=38 tcp=49 topuser=madalice 2026-09-04 14:18:02 L1=1.44 run=1 blk=0 avail=7945 (57.7%) swpO=0 conn=1 myRSS=3229 php=3 phpRSS=166 ap=38 tcp=48 topuser=madalice 2026-09-04 14:18:11 L1=1.37 run=16 blk=0 avail=6870 (49.9%) swpO=0 conn=12 myRSS=3229 php=15 phpRSS=1561 ap=42 tcp=69 topuser=customc