INCIDENT 2026-09-10 09:00:29 trigger: php_procs=26 ================================================================== load: 2.08 1.74 1.55 2/716 864401 ncpu:10 mem_avail: 7365MB/13777MB (53.5%) swap_used:1476MB swapout:0/s blocked(D):0 running:2 iowait:0.0% steal:0.0% php: 26 procs / 1002MB heaviest user: evolution (24 procs, 842MB) apache: 95 procs tcp_estab: 87 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2892 nobody 94 1617 root 252 1082 evolution 28 850 netdata 8 256 mailman 20 190 madalice 1 156 infinium 2 77 dovenull 6 67 wp-toolkit 3 62 cpanellogin 1 55 aaa 3 44 kurri 3 41 dovecot 3 28 mailnull 3 27 polkitd 1 15 lowrange 1 14 zabbix 1 9 nscd 1 6 named 1 6 --- php workers by user --- USER PROCS RSS_MB evolution 24 842 madalice 1 156 root 1 2 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5561 MB Active(file): 4609 MB Inactive(file): 1094 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 619 MB CommitLimit: 10984 MB Committed_AS: 8810 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 849368 root 00:29 3096 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 3926885 root 9-06:38:05 4068 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2330591 1 mysql 2962252 13.2 Ssl 2-04:15:02 /usr/sbin/mariadbd 166870 1 netdata 200888 2.7 Ssl 4-06:38:11 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3701672 3652415 root 177536 0.0 S 06:25:17 spamd child 3701673 3652415 root 165148 0.0 S 06:25:17 spamd child 3652415 1 root 164284 0.0 Ss 06:35:38 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 847828 167896 madalice 160548 13.1 S 01:57 php-fpm: pool madalice_com_au 2328754 1 root 153504 0.0 Ss 2-04:15:12 /usr/lib/systemd/systemd-journald 509236 509098 root 67080 0.0 Sl 13-06:40:51 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 849022 847572 evolution 57980 0.1 S 00:47 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 625148 1353308 cpanellogin 56548 0.0 S 01:03:20 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 847868 1353308 infinium 56252 0.1 S 01:53 webmaild - serving 1.41.252.211 1353308 1 root 42528 0.0 Ss 50-06:19:17 cpsrvd (SSL) - waiting for connections 1469 1 root 41472 0.1 Ss 72-22:50:46 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 864272 864210 evolution 38868 0.3 S 00:10 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864368 830311 evolution 38620 3.0 S 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 855719 847540 evolution 38600 0.1 S 00:23 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 857147 848593 evolution 38600 0.0 S 00:23 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864214 864206 evolution 38600 0.1 S 00:11 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 849395 848580 evolution 38596 0.1 S 00:29 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 849347 848579 evolution 38584 0.0 S 00:29 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864124 847091 evolution 38572 0.1 S 00:17 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864338 848459 evolution 38552 1.5 S 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 857180 846219 evolution 38540 0.1 S 00:23 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 855648 848607 evolution 38516 0.0 S 00:24 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 849278 848595 evolution 38512 0.0 S 00:32 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 858008 848582 evolution 38512 0.1 S 00:22 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 849152 846055 evolution 38492 0.0 S 00:40 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864273 864252 evolution 38488 0.3 S 00:10 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864271 864248 evolution 38412 0.2 S 00:10 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864372 848598 evolution 38408 0.0 S 00:00 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 849211 848498 evolution 38392 0.0 S 00:36 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864298 848614 evolution 37836 0.4 S 00:07 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 167562 166914 netdata 37468 0.1 Sl 4-06:38:06 /usr/libexec/netdata/plugins.d/go.d.plugin 1 864126 848616 evolution 36728 0.1 S 00:16 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864213 864205 evolution 36716 0.1 S 00:11 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 2495258 1 wp-toolkit 36512 0.0 Ss 1-07:46:36 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 3651775 1 root 32448 0.0 Ss 06:36:12 lfd - sleeping 2495169 1 wp-toolkit 25344 0.0 Ss 1-07:46:36 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 847091 506832 nobody 24136 0.1 S 02:50 /usr/sbin/httpd -k start 849051 846834 root 23456 0.1 S 00:47 /usr/sbin/exim -q 847870 2495053 infinium 23344 0.0 S 01:53 php-fpm: pool user_infinium 830311 506832 nobody 22552 0.0 S 05:40 /usr/sbin/httpd -k start 848575 506832 nobody 22212 0.0 S 01:15 /usr/sbin/httpd -k start 848457 506832 nobody 22128 0.0 S 01:22 /usr/sbin/httpd -k start 830314 506832 nobody 21976 0.0 S 05:40 /usr/sbin/httpd -k start 846618 506832 nobody 21584 0.0 S 03:23 /usr/sbin/httpd -k start 847553 506832 nobody 21344 0.0 S 02:16 /usr/sbin/httpd -k start 848060 506832 nobody 21268 0.0 S 01:44 /usr/sbin/httpd -k start 848574 506832 nobody 21248 0.0 S 01:15 /usr/sbin/httpd -k start 848618 506832 nobody 21132 0.0 S 01:12 /usr/sbin/httpd -k start 845441 506832 nobody 20908 0.0 S 04:58 /usr/sbin/httpd -k start 848596 506832 nobody 20860 0.0 S 01:13 /usr/sbin/httpd -k start 845467 506832 nobody 20704 0.0 S 04:55 /usr/sbin/httpd -k start 848608 506832 nobody 20664 0.0 S 01:12 /usr/sbin/httpd -k start 848459 506832 nobody 20620 0.0 S 01:22 /usr/sbin/httpd -k start 846219 506832 nobody 20588 0.0 S 03:55 /usr/sbin/httpd -k start 848499 506832 nobody 20568 0.0 S 01:21 /usr/sbin/httpd -k start 846055 506832 nobody 20564 0.0 S 04:11 /usr/sbin/httpd -k start 835975 506832 nobody 20532 0.0 S 05:24 /usr/sbin/httpd -k start 849053 849051 mailnull 20408 0.0 S 00:46 /usr/sbin/exim -q --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+--------+----------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+--------+----------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 8996598 | claude | 108-1481181613 | Execute | 112 | Sending data | SELECT COUNT(*) AS n FROM `contacts` c WHERE DATEDIFF(CURDATE(), (SELECT MAX(NULLIF(j.`dateadded`, '0000-00-00')) FROM `jobs` j JOIN `customextrameta` m ON m.`metaname` LIKE CONCAT('shopify-%-job-', j.`id`, '-orderid') WHERE j.`clientid` = c.`clientid`)) <= 90 | | 9002845 | root | 108-1481181613 | Execute | 46 | Waiting for table level lock | UPDATE jobs SET estimated_revenue = ?, price = ?, invoiced_total = ? WHERE id = ? | | 9003585 | root | 108-1481181613 | Execute | 39 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInventory.reference as itemreference , description , code | | 9004214 | root | 108-1481181613 | Execute | 35 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInventory.reference as itemreference , description , code | | 9005097 | root | 108-1481181613 | Execute | 31 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInventory.reference as itemreference , description , code | | 9005726 | root | 108-1481181613 | Execute | 28 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInventory.reference as itemreference , description , code | | 9006750 | root | 108-1481181613 | Execute | 20 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInventory.reference as itemreference , description , code | | 9006858 | root | 108-1481181613 | Execute | 16 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInventory.reference as itemreference , description , code | | 9008838 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+--------+----------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- +---------+----------------+------+------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | DB | TIME | STATE | q | +---------+----------------+------+------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 9002845 | 108-1481181613 | 46 | Waiting for table level lock | UPDATE jobs SET estimated_revenue = ?, price = ?, invoiced_total = ? WHERE id = ? | | 9003585 | 108-1481181613 | 39 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInvento | | 9004214 | 108-1481181613 | 35 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInvento | | 9005097 | 108-1481181613 | 31 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInvento | | 9005726 | 108-1481181613 | 28 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInvento | | 9006750 | 108-1481181613 | 20 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInvento | | 9006858 | 108-1481181613 | 16 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInvento | +---------+----------------+------+------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 821 evolution/portal.evolutionerp.com.au-ssl_log 167 evolution/app.evolutionerp.com.au-ssl_log 111 evolution/my.evolutionerp.com.au 47 evolution/pdev.evolutionerp.com.au 18 evolution/pdev.evolutionerp.com.au-ssl_log 18 madalice/madalice.com.au-ssl_log 8 aaa/aaadownunder.com.au-ssl_log 7 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 285 203.54.180.238 168 45.148.10.125 159 182.239.240.254 127 150.228.151.88 123 103.104.165.99 111 40.115.94.245 81 180.181.236.49 35 120.150.225.142 32 1.145.125.62 24 103.104.164.114 20 203.54.162.106 11 1.144.107.82 3 165.225.233.87 3 147.161.213.71 2 207.46.13.36 --- top request paths across all vhosts (last 3 min) --- 185 POST /functions.php 152 GET /app/ajax.php 95 GET /api/getItem/LWFB2001KG 64 GET /index.php 62 GET /factory_session_checker.php 42 GET /heartbeat.php 41 GET //app/ajax.php 36 POST /plugins/csvexporter/plugin.php 31 GET /factory_session_processed_qty.php 31 GET /factory_session_joiner.php 28 POST /jobeditsave.php 26 POST /app/ajax.php 23 POST /clienteditsave.php 22 POST /app/ajax/selectFilterSingle.php 18 POST /app/ajax/selectFilter.php 17 POST //functions.php 16 GET /api/getItem/LWPB2001KG 14 HEAD /index.php 13 POST /quoteditsave.php 10 POST //clienteditsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 185 POST /functions.php 152 GET /app/ajax.php 63 GET /index.php 41 GET //app/ajax.php 36 POST /plugins/csvexporter/plugin.php 28 POST /jobeditsave.php 26 POST /app/ajax.php 23 POST /clienteditsave.php 22 POST /app/ajax/selectFilterSingle.php 18 POST /app/ajax/selectFilter.php 17 POST //functions.php 14 HEAD /index.php -- last 10 requests -- 180.181.236.49 - - [10/Sep/2026:09:00:23 +1000] "POST //functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au//index.php?page=quotedit"eid=6720" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) App 180.181.236.49 - - [10/Sep/2026:09:00:23 +1000] "POST //app/ajax/selectFilterSingle.php HTTP/1.1" 200 14083 "https://my.evolutionerp.com.au//index.php?page=quotedit"eid=6720" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 103.104.165.99 - - [10/Sep/2026:09:00:24 +1000] "POST /app/ajax/selectFilter.php?call=filterinv&filter=CLGDPT1834 HTTP/1.1" 200 1048 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12018&tab=jobeditinv" "Mozill 103.104.165.99 - - [10/Sep/2026:09:00:24 +1000] "POST /itemModify.php?call=getJobInvFiles HTTP/1.1" 200 338 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12018&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; W 103.104.165.99 - - [10/Sep/2026:09:00:24 +1000] "POST /itemModify.php?call=getJobInvBOM HTTP/1.1" 200 4783 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12018&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Wi 182.239.240.254 - - [10/Sep/2026:09:00:25 +1000] "POST //functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au//index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li 1.145.125.62 - - [10/Sep/2026:09:00:25 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 998 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=51196" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ 103.104.165.99 - - [10/Sep/2026:09:00:25 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=37188" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 180.181.236.49 - - [10/Sep/2026:09:00:25 +1000] "POST //app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au//index.php?page=quotedit"eid=6720" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ( 120.150.225.142 - - [10/Sep/2026:09:00:27 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=mfreqedit&id=1179" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 62 GET /factory_session_checker.php 42 GET /heartbeat.php 31 GET /factory_session_processed_qty.php 31 GET /factory_session_joiner.php 1 GET /index.php -- last 10 requests -- 203.54.180.238 - - [10/Sep/2026:09:00:08 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 122 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [10/Sep/2026:09:00:09 +1000] "GET /factory_session_joiner.php?id=35246 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [10/Sep/2026:09:00:10 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [10/Sep/2026:09:00:10 +1000] "GET /heartbeat.php?sentAt=1788994811&bytes=106,161,228,251&_=1788957670795 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [10/Sep/2026:09:00:12 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [10/Sep/2026:09:00:12 +1000] "GET /heartbeat.php?sentAt=1788994810&bytes=106,161,228,250&_=1788994126715 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [10/Sep/2026:09:00:13 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [10/Sep/2026:09:00:13 +1000] "GET /factory_session_joiner.php?id=35258 HTTP/1.1" 200 86 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [10/Sep/2026:09:00:15 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [10/Sep/2026:09:00:14 +1000] "GET /heartbeat.php?sentAt=1788994814&bytes=106,161,228,254&_=1788987691475 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 95 GET /api/getItem/LWFB2001KG 16 GET /api/getItem/LWPB2001KG -- last 10 requests -- 40.115.94.245 - - [10/Sep/2026:08:59:53 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:59:54 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:59:54 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:59:54 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:59:54 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:59:54 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:59:55 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:59:55 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:59:55 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:59:55 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" --- last 30 samples (run-up to this incident) --- 2026-09-10 08:58:07 L1=1.70 run=1 blk=0 avail=8071 (58.6%) swpO=1 conn=1 myRSS=2891 php=4 phpRSS=135 ap=42 tcp=46 topuser=madalice 2026-09-10 08:58:08 L1=1.70 run=3 blk=0 avail=8046 (58.4%) swpO=1 conn=5 myRSS=2891 php=5 phpRSS=195 ap=41 tcp=51 topuser=madalice 2026-09-10 08:58:17 L1=1.76 run=4 blk=0 avail=8041 (58.4%) swpO=0 conn=1 myRSS=2891 php=5 phpRSS=147 ap=43 tcp=56 topuser=madalice 2026-09-10 08:58:19 L1=1.76 run=2 blk=0 avail=8016 (58.2%) swpO=0 conn=5 myRSS=2891 php=5 phpRSS=192 ap=44 tcp=51 topuser=madalice 2026-09-10 08:58:27 L1=1.65 run=1 blk=0 avail=8107 (58.8%) swpO=0 conn=3 myRSS=2892 php=3 phpRSS=2 ap=50 tcp=64 topuser=root 2026-09-10 08:58:29 L1=1.65 run=3 blk=0 avail=8101 (58.8%) swpO=0 conn=5 myRSS=2892 php=4 phpRSS=4 ap=50 tcp=58 topuser=root 2026-09-10 08:58:37 L1=1.56 run=2 blk=0 avail=8009 (58.1%) swpO=0 conn=3 myRSS=2892 php=4 phpRSS=135 ap=44 tcp=60 topuser=madalice 2026-09-10 08:58:39 L1=1.56 run=4 blk=0 avail=8006 (58.1%) swpO=0 conn=5 myRSS=2892 php=6 phpRSS=203 ap=44 tcp=62 topuser=madalice 2026-09-10 08:58:47 L1=1.62 run=2 blk=0 avail=7992 (58.0%) swpO=0 conn=3 myRSS=2892 php=5 phpRSS=153 ap=46 tcp=60 topuser=madalice 2026-09-10 08:58:49 L1=1.62 run=3 blk=0 avail=7998 (58.1%) swpO=0 conn=5 myRSS=2892 php=4 phpRSS=135 ap=46 tcp=48 topuser=madalice 2026-09-10 08:58:57 L1=1.52 run=2 blk=0 avail=8030 (58.3%) swpO=0 conn=3 myRSS=2892 php=4 phpRSS=157 ap=37 tcp=54 topuser=madalice 2026-09-10 08:58:59 L1=1.52 run=3 blk=0 avail=8029 (58.3%) swpO=0 conn=3 myRSS=2892 php=5 phpRSS=194 ap=36 tcp=52 topuser=madalice 2026-09-10 08:59:08 L1=1.60 run=6 blk=0 avail=7897 (57.3%) swpO=3 conn=3 myRSS=2892 php=6 phpRSS=314 ap=40 tcp=67 topuser=madalice 2026-09-10 08:59:09 L1=1.60 run=4 blk=0 avail=7917 (57.5%) swpO=3 conn=3 myRSS=2892 php=6 phpRSS=232 ap=48 tcp=64 topuser=madalice 2026-09-10 08:59:18 L1=1.91 run=3 blk=0 avail=7716 (56.0%) swpO=0 conn=3 myRSS=2892 php=5 phpRSS=214 ap=77 tcp=83 topuser=madalice 2026-09-10 08:59:19 L1=1.91 run=3 blk=0 avail=7718 (56.0%) swpO=0 conn=3 myRSS=2892 php=6 phpRSS=250 ap=77 tcp=82 topuser=madalice 2026-09-10 08:59:28 L1=1.84 run=2 blk=0 avail=7812 (56.7%) swpO=0 conn=3 myRSS=2892 php=4 phpRSS=157 ap=69 tcp=60 topuser=madalice 2026-09-10 08:59:29 L1=1.84 run=2 blk=0 avail=7817 (56.7%) swpO=0 conn=3 myRSS=2892 php=4 phpRSS=157 ap=68 tcp=55 topuser=madalice 2026-09-10 08:59:38 L1=1.87 run=2 blk=0 avail=7811 (56.7%) swpO=0 conn=3 myRSS=2892 php=4 phpRSS=158 ap=69 tcp=69 topuser=madalice 2026-09-10 08:59:39 L1=1.87 run=4 blk=0 avail=7816 (56.7%) swpO=0 conn=3 myRSS=2892 php=4 phpRSS=158 ap=69 tcp=67 topuser=madalice 2026-09-10 08:59:48 L1=2.12 run=2 blk=0 avail=7811 (56.7%) swpO=0 conn=3 myRSS=2892 php=5 phpRSS=214 ap=65 tcp=65 topuser=madalice 2026-09-10 08:59:49 L1=2.12 run=7 blk=0 avail=7792 (56.6%) swpO=0 conn=3 myRSS=2892 php=9 phpRSS=365 ap=65 tcp=65 topuser=evolution 2026-09-10 08:59:58 L1=2.10 run=4 blk=0 avail=7823 (56.8%) swpO=0 conn=3 myRSS=2892 php=9 phpRSS=352 ap=58 tcp=60 topuser=evolution 2026-09-10 08:59:59 L1=2.10 run=2 blk=0 avail=7825 (56.8%) swpO=0 conn=8 myRSS=2892 php=9 phpRSS=367 ap=57 tcp=63 topuser=evolution 2026-09-10 09:00:08 L1=2.17 run=3 blk=0 avail=7630 (55.4%) swpO=3 conn=3 myRSS=2892 php=18 phpRSS=764 ap=54 tcp=75 topuser=evolution 2026-09-10 09:00:09 L1=2.17 run=3 blk=0 avail=7642 (55.5%) swpO=3 conn=8 myRSS=2892 php=17 phpRSS=707 ap=56 tcp=73 topuser=evolution 2026-09-10 09:00:18 L1=2.30 run=3 blk=0 avail=7647 (55.5%) swpO=0 conn=3 myRSS=2892 php=19 phpRSS=764 ap=59 tcp=90 topuser=evolution 2026-09-10 09:00:19 L1=2.30 run=2 blk=0 avail=7591 (55.1%) swpO=0 conn=8 myRSS=2892 php=20 phpRSS=797 ap=69 tcp=93 topuser=evolution 2026-09-10 09:00:28 L1=2.18 run=4 blk=0 avail=7376 (53.5%) swpO=0 conn=11 myRSS=2892 php=24 phpRSS=932 ap=97 tcp=87 topuser=evolution 2026-09-10 09:00:29 L1=2.08 run=2 blk=0 avail=7365 (53.5%) swpO=0 conn=10 myRSS=2892 php=26 phpRSS=1002 ap=95 tcp=87 topuser=evolution