INCIDENT 2026-09-10 08:40:31 trigger: php_rss=2336MB ================================================================== load: 0.97 1.20 1.13 17/666 788512 ncpu:10 mem_avail: 6054MB/13777MB (43.9%) swap_used:1488MB swapout:22/s blocked(D):0 running:20 iowait:0.1% steal:0.0% php: 17 procs / 2336MB heaviest user: madalice (10 procs, 2192MB) apache: 55 procs tcp_estab: 69 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2868 madalice 10 1970 nobody 54 966 root 248 902 kamcool 3 355 netdata 8 253 mailman 20 190 evolution 8 104 infinium 2 85 dovenull 6 67 wp-toolkit 3 62 cpanellogin 1 52 mailnull 5 37 dovecot 3 28 kurri 2 27 vinesit 1 15 polkitd 1 15 lowrange 1 14 zabbix 1 8 nscd 1 6 --- php workers by user --- USER PROCS RSS_MB madalice 10 1907 evolution 4 97 root 1 2 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5286 MB Active(file): 4528 MB Inactive(file): 897 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 618 MB CommitLimit: 10984 MB Committed_AS: 9606 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 773596 root 00:31 1272 /bin/sh -c bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || : 3926885 root 9-06:18:07 3912 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2330591 1 mysql 2937624 13.0 Rsl 2-03:55:04 /usr/sbin/mariadbd 788465 167896 madalice 251588 128 S 00:01 php-fpm: pool madalice_com_au 788455 167896 madalice 251500 82.0 S 00:02 php-fpm: pool madalice_com_au 788462 167896 madalice 251500 139 S 00:01 php-fpm: pool madalice_com_au 788454 167896 madalice 251488 75.5 S 00:02 php-fpm: pool madalice_com_au 788461 167896 madalice 248968 88.5 R 00:02 php-fpm: pool madalice_com_au 166870 1 netdata 198984 2.7 Ssl 4-06:18:13 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3701672 3652415 kamcool 177580 0.0 R 06:05:19 spamd child 788473 3701672 kamcool 174520 0.0 S 00:00 spamd child (razor2) 3701673 3652415 root 165232 0.0 S 06:05:19 spamd child 3652415 1 root 164412 0.0 Ss 06:15:40 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 788315 167896 madalice 159380 28.4 R 00:10 php-fpm: pool madalice_com_au 2328754 1 root 145680 0.0 Ss 2-03:55:14 /usr/lib/systemd/systemd-journald 788457 167896 madalice 138516 78.0 R 00:02 php-fpm: pool madalice_com_au 788460 167896 madalice 138512 74.0 R 00:02 php-fpm: pool madalice_com_au 788456 167896 madalice 136616 80.5 R 00:02 php-fpm: pool madalice_com_au 788453 167896 madalice 136608 69.0 R 00:02 php-fpm: pool madalice_com_au 509236 509098 root 67080 0.0 Sl 13-06:20:53 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 788490 773314 evolution 56700 0.0 S 00:00 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 788439 1353308 infinium 55704 6.0 S 00:02 webmaild - serving 1.41.252.211 625148 1353308 cpanellogin 54116 0.0 S 43:22 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 1353308 1 root 42504 0.0 Ss 50-05:59:19 cpsrvd (SSL) - waiting for connections 1469 1 root 41472 0.1 Ss 72-22:30:48 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 788469 788306 evolution 40576 5.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2495258 1 wp-toolkit 36512 0.0 Ss 1-07:26:38 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 167562 166914 netdata 36404 0.1 Sl 4-06:18:08 /usr/libexec/netdata/plugins.d/go.d.plugin 1 3651775 1 root 32440 0.0 Ss 06:16:14 lfd - sleeping 663720 2495053 infinium 31644 0.0 S 31:31 php-fpm: pool user_infinium 2495169 1 wp-toolkit 25344 0.0 Ss 1-07:26:38 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 751570 506832 nobody 23592 0.0 S 09:47 /usr/sbin/httpd -k start 754182 506832 nobody 22568 0.0 S 05:54 /usr/sbin/httpd -k start 769379 506832 nobody 22276 0.0 S 05:00 /usr/sbin/httpd -k start 770293 506832 nobody 22208 0.0 S 03:44 /usr/sbin/httpd -k start 770574 506832 nobody 22204 0.0 S 03:29 /usr/sbin/httpd -k start 771963 506832 nobody 21728 0.1 S 02:06 /usr/sbin/httpd -k start 772665 506832 nobody 21504 0.0 S 01:29 /usr/sbin/httpd -k start 753352 506832 nobody 21500 0.0 S 06:59 /usr/sbin/httpd -k start 772991 506832 nobody 20616 0.0 S 01:04 /usr/sbin/httpd -k start 770888 506832 nobody 20544 0.0 S 03:03 /usr/sbin/httpd -k start 772564 506832 nobody 20336 0.0 S 01:31 /usr/sbin/httpd -k start 770887 506832 nobody 20244 0.0 S 03:03 /usr/sbin/httpd -k start 1463 1 root 20164 0.0 Ss 72-22:30:48 tailwatchd 783582 506832 nobody 20148 0.0 S 00:23 /usr/sbin/httpd -k start 772711 506832 nobody 20120 0.1 S 01:27 /usr/sbin/httpd -k start 773244 506832 nobody 20076 0.0 S 00:46 /usr/sbin/httpd -k start 773452 506832 nobody 19984 0.0 S 00:34 /usr/sbin/httpd -k start 773255 506832 nobody 19860 0.0 S 00:45 /usr/sbin/httpd -k start 772841 506832 nobody 19828 0.0 S 01:16 /usr/sbin/httpd -k start 770326 506832 nobody 19812 0.1 S 03:42 /usr/sbin/httpd -k start 773314 506832 nobody 19772 0.1 S 00:39 /usr/sbin/httpd -k start 773581 506832 nobody 19696 0.0 S 00:32 /usr/sbin/httpd -k start 772178 506832 nobody 19676 0.0 S 01:53 /usr/sbin/httpd -k start 773493 506832 nobody 19640 0.0 S 00:33 /usr/sbin/httpd -k start 772183 506832 nobody 19632 0.0 S 01:53 /usr/sbin/httpd -k start 788302 506832 nobody 19532 0.2 S 00:14 /usr/sbin/httpd -k start 2495282 1 root 19476 0.1 Ssl 1-07:26:36 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 773253 506832 nobody 19380 0.0 S 00:45 /usr/sbin/httpd -k start 788308 506832 nobody 19260 0.0 S 00:13 /usr/sbin/httpd -k start 773006 506832 nobody 19012 0.0 S 01:03 /usr/sbin/httpd -k start 770170 506832 nobody 18944 0.0 S 03:57 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 8836792 | root | 108-1481181613 | Execute | 0 | Sending data | SELECT srcid, sum(qty) as qty from projectAssign where jobid = ? AND src='jobitems' AND activityid > 0 GROUP by srcid | | 8836780 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+----------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 569 evolution/portal.evolutionerp.com.au-ssl_log 276 evolution/app.evolutionerp.com.au-ssl_log 95 aaa/aaadownunder.com.au-ssl_log 31 evolution/staging.evolutionerp.com.au 14 evolution/staging.evolutionerp.com.au-ssl_log 13 alison/alisonarts.com.au-ssl_log 2 madalice/madalice.com.au-ssl_log 2 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 372 203.54.180.238 163 103.104.165.99 115 182.239.240.254 97 150.228.151.88 95 40.115.94.245 58 103.104.164.114 27 45.148.10.125 20 149.102.230.138 19 120.21.7.154 9 203.54.162.106 7 147.161.213.71 4 180.181.236.49 3 34.202.52.10 2 43.132.113.3 2 157.55.39.60 --- top request paths across all vhosts (last 3 min) --- 177 POST /functions.php 118 GET /app/ajax.php 113 GET /factory_session_checker.php 59 GET /factory_session_processed_qty.php 58 GET /index.php 58 GET /factory_session_joiner.php 32 POST /plugins/csvexporter/plugin.php 30 GET /heartbeat.php 22 POST /app/ajax/selectFilterSingle.php 22 POST /app/ajax/selectFilter.php 22 POST /app/ajax.php 17 POST //functions.php 15 POST /clienteditsave.php 14 POST /purchaseaddsave.php 10 POST /jobeditsave.php 9 GET //index.php 8 POST /portal/register 8 HEAD /index.php 7 POST /print.php 5 POST /billaddsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 177 POST /functions.php 118 GET /app/ajax.php 50 GET /index.php 32 POST /plugins/csvexporter/plugin.php 22 POST /app/ajax/selectFilterSingle.php 22 POST /app/ajax/selectFilter.php 22 POST /app/ajax.php 17 POST //functions.php 15 POST /clienteditsave.php 14 POST /purchaseaddsave.php 10 POST /jobeditsave.php 9 GET //index.php -- last 10 requests -- 203.54.180.238 - - [10/Sep/2026:08:40:28 +1000] "POST /jobeditsave.php?call=filter HTTP/1.1" 200 1024 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko 150.228.151.88 - - [10/Sep/2026:08:40:29 +1000] "POST /app/ajax.php?cn=&furi=true&uri=page%3Dopportunityedit%26opportunityid%3D147 HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=opportunityedit&opportuni 150.228.151.88 - - [10/Sep/2026:08:40:29 +1000] "POST /inveditsave.php?call=fetch_inventory HTTP/1.1" 200 11383 "https://my.evolutionerp.com.au/index.php?page=inventory&string=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 103.104.165.99 - - [10/Sep/2026:08:40:29 +1000] "GET /index.php?page=purchaseadd&purchaseid=11311 HTTP/1.1" 200 74589 "https://my.evolutionerp.com.au/index.php?page=purchasereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 103.104.165.99 - - [10/Sep/2026:08:40:29 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=11311" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 150.228.151.88 - - [10/Sep/2026:08:40:29 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinventory%26string%3D&call=getUserSetting&caller=ajaxSubmitLocal&seq=11750272039 HTTP/1.1" 200 99 "https://my.evolutionerp.com.a 203.54.180.238 - - [10/Sep/2026:08:40:29 +1000] "POST /jobeditsave.php?call=filter HTTP/1.1" 200 553 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/ 150.228.151.88 - - [10/Sep/2026:08:40:29 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=invedit&id=4027&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x 103.104.165.99 - - [10/Sep/2026:08:40:29 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=12265406633 HTTP/1.1" 200 98 "https://my.evolutionerp.com.au/inde 103.104.165.99 - - [10/Sep/2026:08:40:29 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=18813077398 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/index == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 113 GET /factory_session_checker.php 59 GET /factory_session_processed_qty.php 58 GET /factory_session_joiner.php 30 GET /heartbeat.php 8 POST /portal/register 8 GET /index.php -- last 10 requests -- 203.54.180.238 - - [10/Sep/2026:08:40:21 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [10/Sep/2026:08:40:20 +1000] "GET /heartbeat.php?sentAt=1788993621&bytes=106,161,224,85&_=1788957670676 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [10/Sep/2026:08:40:22 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [10/Sep/2026:08:40:23 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [10/Sep/2026:08:40:24 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [10/Sep/2026:08:40:24 +1000] "GET /factory_session_joiner.php?id=35259 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [10/Sep/2026:08:40:24 +1000] "GET /heartbeat.php?sentAt=1788993624&bytes=106,161,224,88&_=1788987691356 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [10/Sep/2026:08:40:25 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 140 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [10/Sep/2026:08:40:25 +1000] "GET /factory_session_joiner.php?id=35256 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [10/Sep/2026:08:40:25 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 3 GET /api/getItem/SHSG3535258 2 GET /api/getItem/SHSP5050608 2 GET /api/getItem/SHSH2525308 2 GET /api/getItem/SHSG8989508 2 GET /api/getItem/SHSG8989358 2 GET /api/getItem/SHSG8989258 2 GET /api/getItem/SHSG8989208 2 GET /api/getItem/SHSG7575508 2 GET /api/getItem/SHSG7575358 2 GET /api/getItem/SHSG6565608 2 GET /api/getItem/SHSG5050508 2 GET /api/getItem/SHSG5050408 -- last 10 requests -- 40.115.94.245 - - [10/Sep/2026:08:39:27 +1000] "GET /api/getItem/SHSP200200508 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:39:27 +1000] "GET /api/getItem/SHSG5050408 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:39:27 +1000] "GET /api/getItem/SHSP200200608 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:39:28 +1000] "GET /api/getItem/SHSG5050508 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:39:28 +1000] "GET /api/getItem/RHSG3825168 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:39:28 +1000] "GET /api/getItem/RHSG3825208 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:39:28 +1000] "GET /api/getItem/SHSP5050608 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:39:28 +1000] "GET /api/getItem/RHSG3825258 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:39:28 +1000] "GET /api/getItem/SHSG6565608 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:39:29 +1000] "GET /api/getItem/SHSG7575358 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" --- last 30 samples (run-up to this incident) --- 2026-09-10 08:38:02 L1=1.50 run=3 blk=0 avail=7959 (57.8%) swpO=0 conn=2 myRSS=2867 php=5 phpRSS=197 ap=51 tcp=53 topuser=madalice 2026-09-10 08:38:11 L1=1.27 run=4 blk=0 avail=7931 (57.6%) swpO=0 conn=3 myRSS=2867 php=7 phpRSS=290 ap=49 tcp=57 topuser=madalice 2026-09-10 08:38:13 L1=1.27 run=3 blk=0 avail=7932 (57.6%) swpO=0 conn=2 myRSS=2867 php=5 phpRSS=214 ap=48 tcp=62 topuser=madalice 2026-09-10 08:38:21 L1=1.22 run=1 blk=0 avail=8009 (58.1%) swpO=0 conn=2 myRSS=2867 php=5 phpRSS=198 ap=43 tcp=48 topuser=madalice 2026-09-10 08:38:23 L1=1.22 run=3 blk=0 avail=8143 (59.1%) swpO=0 conn=2 myRSS=2867 php=4 phpRSS=59 ap=42 tcp=53 topuser=evolution 2026-09-10 08:38:31 L1=1.33 run=1 blk=0 avail=7990 (58.0%) swpO=0 conn=2 myRSS=2869 php=6 phpRSS=231 ap=42 tcp=52 topuser=madalice 2026-09-10 08:38:33 L1=1.33 run=3 blk=0 avail=7972 (57.9%) swpO=0 conn=2 myRSS=2869 php=8 phpRSS=305 ap=41 tcp=53 topuser=evolution 2026-09-10 08:38:41 L1=1.67 run=2 blk=0 avail=7831 (56.8%) swpO=0 conn=2 myRSS=2869 php=9 phpRSS=359 ap=54 tcp=69 topuser=evolution 2026-09-10 08:38:43 L1=1.67 run=3 blk=0 avail=7872 (57.1%) swpO=0 conn=2 myRSS=2869 php=9 phpRSS=354 ap=53 tcp=58 topuser=evolution 2026-09-10 08:38:51 L1=1.56 run=1 blk=0 avail=8130 (59.0%) swpO=0 conn=2 myRSS=2869 php=4 phpRSS=43 ap=45 tcp=45 topuser=evolution 2026-09-10 08:38:53 L1=1.56 run=1 blk=0 avail=8161 (59.2%) swpO=0 conn=1 myRSS=2869 php=3 phpRSS=2 ap=43 tcp=42 topuser=root 2026-09-10 08:39:01 L1=1.55 run=3 blk=0 avail=8054 (58.5%) swpO=0 conn=2 myRSS=2869 php=6 phpRSS=233 ap=38 tcp=53 topuser=madalice 2026-09-10 08:39:03 L1=1.55 run=5 blk=0 avail=7809 (56.7%) swpO=0 conn=1 myRSS=2869 php=5 phpRSS=251 ap=44 tcp=54 topuser=madalice 2026-09-10 08:39:11 L1=1.54 run=3 blk=0 avail=8042 (58.4%) swpO=0 conn=2 myRSS=2869 php=5 phpRSS=175 ap=44 tcp=49 topuser=madalice 2026-09-10 08:39:13 L1=1.54 run=3 blk=0 avail=8040 (58.4%) swpO=0 conn=1 myRSS=2869 php=4 phpRSS=134 ap=43 tcp=52 topuser=madalice 2026-09-10 08:39:21 L1=1.37 run=1 blk=0 avail=8169 (59.3%) swpO=0 conn=2 myRSS=2869 php=4 phpRSS=43 ap=42 tcp=40 topuser=evolution 2026-09-10 08:39:23 L1=1.37 run=4 blk=0 avail=8083 (58.7%) swpO=0 conn=1 myRSS=2869 php=4 phpRSS=129 ap=40 tcp=42 topuser=madalice 2026-09-10 08:39:31 L1=1.24 run=1 blk=0 avail=8062 (58.5%) swpO=0 conn=2 myRSS=2869 php=5 phpRSS=175 ap=40 tcp=52 topuser=madalice 2026-09-10 08:39:33 L1=1.24 run=4 blk=0 avail=7963 (57.8%) swpO=0 conn=1 myRSS=2869 php=9 phpRSS=380 ap=40 tcp=51 topuser=evolution 2026-09-10 08:39:41 L1=1.29 run=1 blk=0 avail=8101 (58.8%) swpO=0 conn=2 myRSS=2869 php=5 phpRSS=175 ap=35 tcp=40 topuser=madalice 2026-09-10 08:39:43 L1=1.29 run=1 blk=0 avail=8128 (59.0%) swpO=0 conn=1 myRSS=2869 php=4 phpRSS=134 ap=33 tcp=41 topuser=madalice 2026-09-10 08:39:51 L1=1.31 run=1 blk=0 avail=8146 (59.1%) swpO=0 conn=2 myRSS=2869 php=5 phpRSS=99 ap=38 tcp=52 topuser=evolution 2026-09-10 08:39:53 L1=1.31 run=1 blk=0 avail=8037 (58.3%) swpO=0 conn=2 myRSS=2869 php=5 phpRSS=191 ap=39 tcp=49 topuser=madalice 2026-09-10 08:40:01 L1=1.19 run=3 blk=1 avail=7995 (58.0%) swpO=0 conn=2 myRSS=2869 php=5 phpRSS=174 ap=43 tcp=52 topuser=madalice 2026-09-10 08:40:03 L1=1.19 run=2 blk=0 avail=8038 (58.3%) swpO=0 conn=2 myRSS=2869 php=4 phpRSS=134 ap=43 tcp=43 topuser=madalice 2026-09-10 08:40:11 L1=1.16 run=2 blk=0 avail=8035 (58.3%) swpO=0 conn=2 myRSS=2869 php=4 phpRSS=134 ap=41 tcp=52 topuser=madalice 2026-09-10 08:40:13 L1=1.16 run=1 blk=0 avail=8064 (58.5%) swpO=0 conn=2 myRSS=2869 php=4 phpRSS=134 ap=41 tcp=50 topuser=madalice 2026-09-10 08:40:21 L1=1.05 run=2 blk=0 avail=8071 (58.6%) swpO=0 conn=2 myRSS=2869 php=5 phpRSS=121 ap=48 tcp=45 topuser=madalice 2026-09-10 08:40:23 L1=1.05 run=3 blk=0 avail=8003 (58.1%) swpO=0 conn=2 myRSS=2869 php=5 phpRSS=194 ap=47 tcp=45 topuser=madalice 2026-09-10 08:40:31 L1=0.97 run=20 blk=0 avail=6054 (43.9%) swpO=22 conn=9 myRSS=2868 php=17 phpRSS=2336 ap=55 tcp=69 topuser=madalice