INCIDENT 2026-09-09 10:21:39 trigger: php_procs=27 php_rss=1998MB mysql_conn=23 ================================================================== load: 1.94 1.40 1.15 29/668 208313 ncpu:10 mem_avail: 7171MB/13777MB (52.1%) swap_used:1265MB swapout:0/s blocked(D):0 running:30 iowait:0.4% steal:0.0% php: 27 procs / 1998MB heaviest user: olympic (22 procs, 1824MB) apache: 47 procs tcp_estab: 76 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2501 olympic 23 2051 root 253 1036 nobody 46 890 mailman 20 327 netdata 8 242 madalice 1 132 wp-toolkit 3 129 cpanellogin 1 47 evolution 11 46 dovenull 6 28 mailnull 4 25 lowrange 2 23 polkitd 1 21 kurri 1 11 aaa 1 11 dovecot 3 9 zabbix 1 8 nscd 1 5 named 1 5 --- php workers by user --- USER PROCS RSS_MB olympic 23 2101 madalice 1 132 evolution 3 39 root 1 2 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 7036 MB Active(file): 5351 MB Inactive(file): 1005 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 622 MB CommitLimit: 10984 MB Committed_AS: 11142 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 191877 root 02:02 56088 /opt/imunify360/venv/bin/python3 -m imav.run 3926885 root 8-07:59:15 3516 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2330591 1 mysql 2561204 13.9 Ssl 1-05:36:13 /usr/sbin/mariadbd 166870 1 netdata 191816 2.8 Ssl 3-07:59:22 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2746766 2730373 root 186860 0.0 S 07:55:47 spamd child 2746767 2730373 root 165652 0.0 S 07:55:47 spamd child 2730373 1 root 163832 0.0 Ss 07:58:52 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 208246 167896 madalice 135740 45.3 S 00:03 php-fpm: pool madalice_com_au 208258 191115 olympic 130140 58.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 208274 189205 olympic 118092 51.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 208261 207598 olympic 113084 44.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 208263 190510 olympic 109172 41.5 S 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 208265 207843 olympic 104468 40.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 208276 188564 olympic 102664 37.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 208269 207637 olympic 100668 35.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 208262 207601 olympic 99324 38.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 208266 207863 olympic 97768 36.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 208267 191082 olympic 96264 35.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 208277 192227 olympic 93364 29.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 208271 189537 olympic 93156 31.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 208268 206982 olympic 93000 30.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 208264 207640 olympic 92000 29.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 208273 190750 olympic 90232 30.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 208272 207587 olympic 89756 27.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 208259 192192 olympic 88504 29.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 208260 207636 olympic 82608 27.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 208281 208278 olympic 76600 39.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 208279 191354 olympic 76372 20.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2495258 1 wp-toolkit 73912 0.0 Ss 09:07:47 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2328754 1 root 64196 0.0 Ss 1-05:36:23 /usr/lib/systemd/systemd-journald 208307 207639 olympic 56536 11.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 191877 1 root 56088 1.0 Ssl 02:03 /opt/imunify360/venv/bin/python3 -m imav.run 208326 207600 olympic 54860 11.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2495169 1 wp-toolkit 50444 0.0 Ss 09:07:47 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 99643 1353308 cpanellogin 48516 0.0 S 26:42 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base default_login_theme cpanel server_locale en 509236 509098 root 45884 0.0 Sl 12-08:02:02 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 42376 0.0 Ss 49-07:40:28 cpsrvd (SSL) - waiting for connections 1469 1 root 41452 0.1 Ss 72-00:11:57 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2495193 1 root 34536 0.0 Ss 09:07:47 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 167562 166914 netdata 33180 0.1 Sl 3-07:59:17 /usr/libexec/netdata/plugins.d/go.d.plugin 1 2729805 1 root 32180 0.0 Ss 07:59:18 lfd - sleeping 2495282 1 root 28564 0.1 Ssl 09:07:45 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 1463 1 root 24488 0.0 Ss 72-00:11:57 tailwatchd 183561 506832 nobody 22684 0.1 S 06:31 /usr/sbin/httpd -k start 192141 506832 nobody 22668 0.0 S 01:47 /usr/sbin/httpd -k start 189205 506832 nobody 22544 0.0 S 05:11 /usr/sbin/httpd -k start 192171 506832 nobody 22328 0.0 S 01:46 /usr/sbin/httpd -k start 188564 506832 nobody 22256 0.0 S 06:04 /usr/sbin/httpd -k start 190510 506832 nobody 22224 0.0 S 03:29 /usr/sbin/httpd -k start 189694 506832 nobody 22208 0.0 S 04:29 /usr/sbin/httpd -k start 192214 506832 nobody 21812 0.0 S 01:44 /usr/sbin/httpd -k start 2495134 1 polkitd 21708 0.0 Ssl 09:07:48 /usr/lib/polkit-1/polkitd --no-debug 192226 506832 nobody 21696 0.0 S 01:44 /usr/sbin/httpd -k start 192194 506832 nobody 21676 0.1 S 01:45 /usr/sbin/httpd -k start 191115 506832 nobody 21620 0.0 S 02:50 /usr/sbin/httpd -k start 189537 506832 nobody 21412 0.0 S 04:38 /usr/sbin/httpd -k start 207046 506832 nobody 21384 0.1 S 01:20 /usr/sbin/httpd -k start 190750 506832 nobody 21372 0.0 S 03:14 /usr/sbin/httpd -k start 207598 506832 nobody 21320 0.1 S 00:42 /usr/sbin/httpd -k start 207863 506832 nobody 21236 0.0 S 00:30 /usr/sbin/httpd -k start 191082 506832 nobody 21144 0.0 S 02:52 /usr/sbin/httpd -k start 192140 506832 nobody 21068 0.0 S 01:47 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 5355234 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 1014 evolution/portal.evolutionerp.com.au-ssl_log 292 evolution/apps.evolutionerp.com.au-ssl_log 89 evolution/apps.evolutionerp.com.au 86 aaa/aaadownunder.com.au-ssl_log 18 madalice/madalice.com.au-ssl_log 8 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 721 203.54.180.238 235 103.104.165.99 175 20.151.10.161 141 182.239.240.254 76 103.104.164.114 65 116.91.221.245 36 1.145.107.231 23 1.144.107.82 9 1.145.65.243 4 52.167.144.209 3 180.181.236.49 3 165.225.233.87 3 118.127.40.55 2 91.92.243.234 2 120.150.225.142 --- top request paths across all vhosts (last 3 min) --- 258 POST /functions.php 254 GET /app/ajax.php 106 GET /factory_session_checker.php 100 GET /index.php 62 GET /heartbeat.php 56 POST /plugins/csvexporter/plugin.php 54 GET /factory_session_processed_qty.php 53 GET /factory_session_joiner.php 44 POST /clienteditsave.php 44 POST /app/ajax.php 43 POST /app/ajax/selectFilterSingle.php 36 POST /jobeditsave.php 35 POST /app/ajax/selectFilter.php 22 POST /logsave.php 15 POST /quoteditsave.php 11 POST //functions.php 10 GET /plugins/fensa/fensa-ajax.php 10 GET //app/ajax.php 9 POST /plugins/fencecosting/plugin.php 7 POST /invaddsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 258 POST /functions.php 254 GET /app/ajax.php 88 GET /index.php 56 POST /plugins/csvexporter/plugin.php 44 POST /clienteditsave.php 44 POST /app/ajax.php 43 POST /app/ajax/selectFilterSingle.php 36 POST /jobeditsave.php 35 POST /app/ajax/selectFilter.php 22 POST /logsave.php 15 POST /quoteditsave.php 11 POST //functions.php -- last 10 requests -- 203.54.180.238 - - [09/Sep/2026:10:21:33 +1000] "GET /index.php?page=mfshoporderdetail&id=44099 HTTP/1.1" 200 29549 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=44099" "Mozilla/5.0 (Windows NT 10.0 203.54.180.238 - - [09/Sep/2026:10:21:33 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=44099" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 203.54.180.238 - - [09/Sep/2026:10:21:34 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dmfshoporderdetail%26id%3D44099&call=getUserSetting&caller=ajaxSubmitLocal&seq=12216517799 HTTP/1.1" 200 104 "https://my.evolutio 116.91.221.245 - - [09/Sep/2026:10:21:34 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=invedit&id=4476&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x 203.54.180.238 - - [09/Sep/2026:10:21:35 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=44099" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 103.104.164.114 - - [09/Sep/2026:10:21:35 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=70197" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 203.54.180.238 - - [09/Sep/2026:10:21:35 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 22378 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=44099" "Mozilla/5.0 (Windows NT 10.0; Win64; 116.91.221.245 - - [09/Sep/2026:10:21:35 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=inveditsub&id=3154" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb 116.91.221.245 - - [09/Sep/2026:10:21:35 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 233 "https://my.evolutionerp.com.au/index.php?page=invedit&id=3154&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x 103.104.165.99 - - [09/Sep/2026:10:21:36 +1000] "POST /jobeditsave.php?call=filter HTTP/1.1" 200 646 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 106 GET /factory_session_checker.php 62 GET /heartbeat.php 54 GET /factory_session_processed_qty.php 53 GET /factory_session_joiner.php 12 GET /index.php 3 POST /portal/register 2 POST /factory_functions.php -- last 10 requests -- 203.54.180.238 - - [09/Sep/2026:10:21:31 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [09/Sep/2026:10:21:31 +1000] "GET /factory_session_joiner.php?id=35207 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [09/Sep/2026:10:21:31 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 124 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [09/Sep/2026:10:21:31 +1000] "GET /heartbeat.php?sentAt=1788913290&bytes=106,160,166,138&_=1788908245677 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [09/Sep/2026:10:21:33 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [09/Sep/2026:10:21:33 +1000] "GET /factory_session_joiner.php?id=35214 HTTP/1.1" 200 86 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [09/Sep/2026:10:21:34 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [09/Sep/2026:10:21:34 +1000] "GET /heartbeat.php?sentAt=1788913294&bytes=106,160,166,142&_=1788868264639 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [09/Sep/2026:10:21:36 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [09/Sep/2026:10:21:36 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 == evolution/apps.evolutionerp.com.au-ssl_log == -- top paths -- 3 GET /admin.php 2 GET /av.php 1 GET /xiugai.php 1 GET /wp.php 1 GET /wp-includes/ID3/about.php 1 GET /wp-includes/blocks/audio/ 1 GET /w.php 1 GET /wp-filemannger.php 1 GET /wp-content/themes/index.php 1 GET /wp-content/plugins/hellopress/wp_filemanager.php 1 GET /wp-content/index.php 1 GET /wp-content/admin.php -- last 10 requests -- 20.151.10.161 - - [09/Sep/2026:10:20:40 +1000] "GET /sb.php HTTP/1.1" 404 - "-" "-" 20.151.10.161 - - [09/Sep/2026:10:20:41 +1000] "GET /wp-content/index.php HTTP/1.1" 404 - "-" "-" 20.151.10.161 - - [09/Sep/2026:10:20:41 +1000] "GET /wp-includes/ID3/about.php HTTP/1.1" 404 - "-" "-" 20.151.10.161 - - [09/Sep/2026:10:20:41 +1000] "GET /wp-admin/css/ HTTP/1.1" 404 - "-" "-" 20.151.10.161 - - [09/Sep/2026:10:20:42 +1000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 404 - "-" "-" 20.151.10.161 - - [09/Sep/2026:10:20:42 +1000] "GET /wp-includes/blocks/audio/ HTTP/1.1" 404 - "-" "-" 20.151.10.161 - - [09/Sep/2026:10:20:43 +1000] "GET /wp-admin/js/index.php HTTP/1.1" 404 - "-" "-" 20.151.10.161 - - [09/Sep/2026:10:20:43 +1000] "GET /wp-content/admin.php HTTP/1.1" 404 - "-" "-" 20.151.10.161 - - [09/Sep/2026:10:20:44 +1000] "GET /wp-content/themes/index.php HTTP/1.1" 404 - "-" "-" 20.151.10.161 - - [09/Sep/2026:10:20:44 +1000] "GET /av.php HTTP/1.1" 404 - "-" "-" --- last 30 samples (run-up to this incident) --- 2026-09-09 10:19:14 L1=1.30 run=2 blk=0 avail=8306 (60.3%) swpO=0 conn=2 myRSS=2499 php=5 phpRSS=194 ap=48 tcp=53 topuser=madalice 2026-09-09 10:19:18 L1=1.36 run=1 blk=0 avail=8383 (60.8%) swpO=0 conn=1 myRSS=2499 php=4 phpRSS=154 ap=46 tcp=60 topuser=madalice 2026-09-09 10:19:24 L1=1.49 run=1 blk=0 avail=8346 (60.6%) swpO=0 conn=2 myRSS=2499 php=6 phpRSS=218 ap=50 tcp=59 topuser=madalice 2026-09-09 10:19:28 L1=1.53 run=2 blk=0 avail=8315 (60.4%) swpO=0 conn=1 myRSS=2499 php=5 phpRSS=211 ap=51 tcp=65 topuser=madalice 2026-09-09 10:19:34 L1=1.73 run=5 blk=0 avail=8336 (60.5%) swpO=0 conn=4 myRSS=2499 php=6 phpRSS=214 ap=51 tcp=66 topuser=madalice 2026-09-09 10:19:38 L1=1.59 run=1 blk=0 avail=8324 (60.4%) swpO=0 conn=1 myRSS=2499 php=4 phpRSS=125 ap=52 tcp=54 topuser=madalice 2026-09-09 10:19:44 L1=1.54 run=3 blk=0 avail=8322 (60.4%) swpO=0 conn=4 myRSS=2500 php=7 phpRSS=262 ap=48 tcp=54 topuser=evolution 2026-09-09 10:19:48 L1=1.58 run=3 blk=0 avail=8323 (60.4%) swpO=0 conn=1 myRSS=2500 php=5 phpRSS=230 ap=46 tcp=51 topuser=madalice 2026-09-09 10:19:54 L1=1.61 run=2 blk=0 avail=8354 (60.6%) swpO=0 conn=4 myRSS=2500 php=6 phpRSS=225 ap=48 tcp=62 topuser=madalice 2026-09-09 10:19:58 L1=1.65 run=3 blk=0 avail=8264 (60.0%) swpO=0 conn=1 myRSS=2500 php=5 phpRSS=95 ap=73 tcp=70 topuser=evolution 2026-09-09 10:20:04 L1=1.75 run=3 blk=0 avail=8099 (58.8%) swpO=0 conn=4 myRSS=2500 php=7 phpRSS=326 ap=68 tcp=55 topuser=infinium 2026-09-09 10:20:08 L1=1.77 run=5 blk=0 avail=8196 (59.5%) swpO=0 conn=2 myRSS=2500 php=8 phpRSS=290 ap=64 tcp=64 topuser=evolution 2026-09-09 10:20:14 L1=1.95 run=5 blk=0 avail=8257 (59.9%) swpO=0 conn=4 myRSS=2500 php=6 phpRSS=204 ap=62 tcp=70 topuser=madalice 2026-09-09 10:20:19 L1=1.96 run=3 blk=0 avail=8186 (59.4%) swpO=0 conn=2 myRSS=2500 php=7 phpRSS=295 ap=65 tcp=86 topuser=evolution 2026-09-09 10:20:24 L1=1.80 run=1 blk=0 avail=8293 (60.2%) swpO=0 conn=4 myRSS=2500 php=4 phpRSS=43 ap=75 tcp=67 topuser=evolution 2026-09-09 10:20:29 L1=1.66 run=1 blk=0 avail=8210 (59.6%) swpO=0 conn=2 myRSS=2500 php=4 phpRSS=135 ap=71 tcp=66 topuser=madalice 2026-09-09 10:20:34 L1=1.84 run=12 blk=0 avail=8124 (59.0%) swpO=0 conn=5 myRSS=2500 php=11 phpRSS=469 ap=65 tcp=65 topuser=evolution 2026-09-09 10:20:39 L1=1.78 run=2 blk=0 avail=8261 (60.0%) swpO=0 conn=2 myRSS=2500 php=4 phpRSS=135 ap=64 tcp=77 topuser=madalice 2026-09-09 10:20:45 L1=1.95 run=2 blk=0 avail=8255 (59.9%) swpO=0 conn=5 myRSS=2500 php=6 phpRSS=231 ap=60 tcp=56 topuser=madalice 2026-09-09 10:20:49 L1=1.88 run=1 blk=0 avail=7965 (57.8%) swpO=0 conn=2 myRSS=2500 php=6 phpRSS=529 ap=56 tcp=55 topuser=madalice 2026-09-09 10:20:55 L1=1.81 run=3 blk=0 avail=8003 (58.1%) swpO=0 conn=5 myRSS=2500 php=11 phpRSS=668 ap=50 tcp=61 topuser=madalice 2026-09-09 10:20:59 L1=1.74 run=3 blk=0 avail=7953 (57.7%) swpO=0 conn=2 myRSS=2501 php=9 phpRSS=591 ap=56 tcp=86 topuser=madalice 2026-09-09 10:21:05 L1=1.68 run=1 blk=0 avail=7976 (57.9%) swpO=0 conn=5 myRSS=2501 php=7 phpRSS=483 ap=64 tcp=60 topuser=madalice 2026-09-09 10:21:09 L1=1.63 run=5 blk=0 avail=7830 (56.8%) swpO=0 conn=5 myRSS=2501 php=11 phpRSS=758 ap=61 tcp=77 topuser=madalice 2026-09-09 10:21:15 L1=1.82 run=5 blk=0 avail=7861 (57.1%) swpO=0 conn=5 myRSS=2501 php=9 phpRSS=627 ap=67 tcp=67 topuser=madalice 2026-09-09 10:21:19 L1=1.99 run=4 blk=0 avail=7881 (57.2%) swpO=0 conn=5 myRSS=2501 php=12 phpRSS=666 ap=63 tcp=62 topuser=madalice 2026-09-09 10:21:25 L1=1.83 run=3 blk=0 avail=8153 (59.2%) swpO=0 conn=5 myRSS=2501 php=7 phpRSS=368 ap=58 tcp=60 topuser=madalice 2026-09-09 10:21:29 L1=1.77 run=5 blk=0 avail=8286 (60.1%) swpO=0 conn=5 myRSS=2501 php=4 phpRSS=159 ap=54 tcp=58 topuser=madalice 2026-09-09 10:21:35 L1=2.03 run=6 blk=0 avail=8323 (60.4%) swpO=0 conn=3 myRSS=2501 php=6 phpRSS=228 ap=50 tcp=52 topuser=olympic 2026-09-09 10:21:39 L1=1.94 run=30 blk=0 avail=7171 (52.1%) swpO=0 conn=23 myRSS=2501 php=27 phpRSS=1998 ap=47 tcp=76 topuser=olympic