INCIDENT 2026-09-10 09:03:31 trigger: php_procs=72 php_rss=2786MB mysql_conn=17 ================================================================== load: 1.69 1.83 1.63 5/764 867621 ncpu:10 mem_avail: 6800MB/13777MB (49.4%) swap_used:1474MB swapout:0/s blocked(D):0 running:5 iowait:0.1% steal:0.0% php: 72 procs / 2786MB heaviest user: evolution (70 procs, 2651MB) apache: 92 procs tcp_estab: 99 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2893 evolution 79 2754 nobody 93 1675 root 250 1061 netdata 8 253 mailman 20 190 madalice 1 132 infinium 2 80 dovenull 6 67 wp-toolkit 3 62 cpanellogin 1 55 kurri 3 41 dovecot 3 28 polkitd 1 15 lowrange 1 14 zabbix 1 10 nscd 1 6 named 1 6 cpanelconnecttrack 1 4 mailnull 1 2 --- php workers by user --- USER PROCS RSS_MB evolution 73 2744 madalice 1 132 root 1 2 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5493 MB Active(file): 4577 MB Inactive(file): 1033 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 620 MB CommitLimit: 10984 MB Committed_AS: 10864 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 849368 root 03:31 3096 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 3926885 root 9-06:41:07 4068 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2330591 1 mysql 2963084 13.3 Ssl 2-04:18:04 /usr/sbin/mariadbd 166870 1 netdata 197260 2.7 Ssl 4-06:41:13 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3701672 3652415 root 177540 0.0 S 06:28:19 spamd child 3701673 3652415 root 165148 0.0 S 06:28:19 spamd child 3652415 1 root 164276 0.0 Ss 06:38:40 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2328754 1 root 154692 0.0 Ss 2-04:18:14 /usr/lib/systemd/systemd-journald 867517 167896 madalice 135516 44.3 S 00:03 php-fpm: pool madalice_com_au 509236 509098 root 67088 0.0 Sl 13-06:43:53 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 867565 867381 evolution 61856 17.0 S 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 865491 865072 evolution 58640 0.0 S 02:03 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 867570 866382 evolution 58208 8.0 S 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 849022 847572 evolution 57980 0.0 S 03:49 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 625148 1353308 cpanellogin 56684 0.0 S 01:06:22 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 864647 864165 evolution 56576 0.0 S 02:57 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 847868 1353308 infinium 56416 0.0 S 04:55 webmaild - serving 1.41.252.211 1353308 1 root 42528 0.0 Ss 50-06:22:19 cpsrvd (SSL) - waiting for connections 1469 1 root 41472 0.1 Ss 72-22:53:48 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 867350 847553 evolution 40808 0.2 S 00:16 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 867626 867615 evolution 40540 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 867481 865071 evolution 40292 0.5 S 00:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 867421 866145 evolution 40136 0.3 S 00:10 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 867471 848617 evolution 40036 0.4 S 00:07 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 867482 866254 evolution 40016 0.5 S 00:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 867478 866415 evolution 40004 0.6 S 00:06 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 867495 866137 evolution 39208 0.4 S 00:05 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 864272 864210 evolution 38868 0.0 S 03:12 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 865046 865039 evolution 38648 0.0 S 02:28 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864689 848618 evolution 38632 0.0 S 02:53 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864954 864317 evolution 38628 0.0 S 02:31 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864368 830311 evolution 38620 0.0 S 03:03 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864814 864208 evolution 38620 0.0 S 02:42 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 867462 845441 evolution 38620 0.5 S 00:08 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 865914 865075 evolution 38616 0.0 S 01:42 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 855719 847540 evolution 38600 0.0 S 03:25 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 857147 848593 evolution 38600 0.0 S 03:25 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864214 864206 evolution 38600 0.0 S 03:13 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 867457 866143 evolution 38600 0.3 S 00:09 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 849395 848580 evolution 38596 0.0 S 03:31 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864739 864318 evolution 38596 0.0 S 02:49 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 865047 865041 evolution 38596 0.0 S 02:28 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864754 845467 evolution 38592 0.0 S 02:44 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864862 848596 evolution 38588 0.0 S 02:34 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 866686 866238 evolution 38588 0.0 S 01:00 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 849347 848579 evolution 38584 0.0 S 03:31 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864752 864316 evolution 38584 0.0 S 02:44 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864124 847091 evolution 38572 0.0 S 03:19 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864748 848060 evolution 38572 0.0 S 02:46 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864624 864164 evolution 38564 0.0 S 03:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 866148 866135 evolution 38560 0.0 S 01:30 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864820 848499 evolution 38556 0.0 S 02:41 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864338 848459 evolution 38552 0.0 S 03:04 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864755 864254 evolution 38548 0.0 S 02:44 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 857180 846219 evolution 38540 0.0 S 03:25 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 866925 866213 evolution 38540 0.0 S 00:56 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 855648 848607 evolution 38516 0.0 S 03:26 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 849278 848595 evolution 38512 0.0 S 03:34 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 858008 848582 evolution 38512 0.0 S 03:24 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 865757 848497 evolution 38512 0.0 S 02:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 864623 864259 evolution 38508 0.0 S 03:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 867271 866028 evolution 38504 0.1 S 00:24 /opt/cpanel/ea-php83/root/usr/bin/php-cgi --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+----------------------+----------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+----------------------+----------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 8996598 | claude | 108-1481181613 | Execute | 294 | Sending data | SELECT COUNT(*) AS n FROM `contacts` c WHERE DATEDIFF(CURDATE(), (SELECT MAX(NULLIF(j.`dateadded`, '0000-00-00')) FROM `jobs` j JOIN `customextrameta` m ON m.`metaname` LIKE CONCAT('shopify-%-job-', j.`id`, '-orderid') WHERE j.`clientid` = c.`clientid`)) <= 90 | | 9002845 | root | 108-1481181613 | Execute | 228 | Waiting for table level lock | UPDATE jobs SET estimated_revenue = ?, price = ?, invoiced_total = ? WHERE id = ? | | 9003585 | root | 108-1481181613 | Execute | 222 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInventory.reference as itemreference , description , code | | 9004214 | root | 108-1481181613 | Execute | 218 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInventory.reference as itemreference , description , code | | 9005097 | root | 108-1481181613 | Execute | 214 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInventory.reference as itemreference , description , code | | 9005726 | root | 108-1481181613 | Execute | 210 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInventory.reference as itemreference , description , code | | 9006750 | root | 108-1481181613 | Execute | 203 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInventory.reference as itemreference , description , code | | 9006858 | root | 108-1481181613 | Execute | 199 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInventory.reference as itemreference , description , code | | 9009077 | root | 108-1481181613 | Execute | 177 | Waiting for table level lock | SELECT *, IF(source = 'project', (SELECT jobcode FROM jobs WHERE jobs.id = sourceid), '') as jobcode FROM tasks WHERE id='11395' | | 9009257 | root | 108-1481181613 | Execute | 164 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInventory.reference as itemreference , description , code | | 9019135 | root | 108-1481181613 | Execute | 122 | Waiting for table level lock | SELECT jobs.*,datediff('2026-09-10',jobs.dateadded) as diff,contacts.company from jobs,contacts where jobs.clientid=contacts.clientid AND jobs.branch='3' AND jobs.status='1' AND new_flag='1' order by dateadded desc | | 9025941 | root | 108-1481181613 | Execute | 16 | Waiting for table level lock | select picking.*, jobs.company, jobs.reference as jref from picking,jobs where jobs.id=picking.jobid and picking.id = ? | | 9028143 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | | 9028142 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+----------------------+----------------+---------+------+------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- +---------+----------------+------+------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | DB | TIME | STATE | q | +---------+----------------+------+------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 9002845 | 108-1481181613 | 228 | Waiting for table level lock | UPDATE jobs SET estimated_revenue = ?, price = ?, invoiced_total = ? WHERE id = ? | | 9003585 | 108-1481181613 | 222 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInvento | | 9004214 | 108-1481181613 | 218 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInvento | | 9005097 | 108-1481181613 | 214 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInvento | | 9005726 | 108-1481181613 | 210 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInvento | | 9006750 | 108-1481181613 | 203 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInvento | | 9006858 | 108-1481181613 | 199 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInvento | | 9009077 | 108-1481181613 | 177 | Waiting for table level lock | SELECT *, IF(source = 'project', (SELECT jobcode FROM jobs WHERE jobs.id = sourceid), '') as jobcode FROM tasks WHERE id='11395' | | 9009257 | 108-1481181613 | 164 | Waiting for table level lock | SELECT timesheets_timer.* , jobcode , jobs.reference , company , jobInvento | | 9019135 | 108-1481181613 | 122 | Waiting for table level lock | SELECT jobs.*,datediff('2026-09-10',jobs.dateadded) as diff,contacts.company from jobs,contacts where jobs.clientid=contacts.clientid AND jobs.branch='3' AND jobs.status='1' AND new_flag='1' orde | | 9025941 | 108-1481181613 | 16 | Waiting for table level lock | select picking.*, jobs.company, jobs.reference as jref from picking,jobs where jobs.id=picking.jobid and picking.id = ? | +---------+----------------+------+------------------------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 601 evolution/app.evolutionerp.com.au-ssl_log 141 evolution/portal.evolutionerp.com.au-ssl_log 138 evolution/staging.evolutionerp.com.au-ssl_log 54 evolution/staging.evolutionerp.com.au 48 corpkicks/corporatekicks.com.au-ssl_log 6 madalice/madalice.com.au-ssl_log 6 olympic/olympicfencing.com.au-ssl_log 3 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 194 103.104.165.99 150 203.54.180.238 141 40.115.94.245 121 180.181.236.49 102 45.148.10.125 86 120.150.225.142 85 182.239.240.254 41 150.228.151.88 25 165.225.233.89 16 1.144.107.82 9 103.104.164.114 6 147.161.213.71 4 118.127.40.55 2 45.61.187.148 2 34.196.51.17 --- top request paths across all vhosts (last 3 min) --- 169 GET /app/ajax.php 131 GET /api/getItem/LWFB2001KG 123 POST /functions.php 48 GET /factory_session_checker.php 47 GET /index.php 42 GET /heartbeat.php 35 POST /app/ajax.php 34 POST /clienteditsave.php 29 POST /app/ajax/selectFilterSingle.php 24 GET /factory_session_processed_qty.php 24 GET /factory_session_joiner.php 18 POST /quoteditsave.php 16 POST /plugins/csvexporter/plugin.php 16 POST //functions.php 15 GET //app/ajax.php 14 POST /logsave.php 12 GET /modalload.php 10 GET /api/getItem/LWPG2001KG 8 HEAD /index.php 7 POST /plugins/fencecosting/plugin.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 169 GET /app/ajax.php 123 POST /functions.php 47 GET /index.php 35 POST /app/ajax.php 34 POST /clienteditsave.php 29 POST /app/ajax/selectFilterSingle.php 18 POST /quoteditsave.php 16 POST /plugins/csvexporter/plugin.php 16 POST //functions.php 15 GET //app/ajax.php 14 POST /logsave.php 12 GET /modalload.php -- last 10 requests -- 182.239.240.254 - - [10/Sep/2026:09:03:28 +1000] "POST /clienteditsave.php?clientid=503&call=getCategoryDiscounts HTTP/1.1" 200 25 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=4216" "Mozilla/5.0 (Windows NT 182.239.240.254 - - [10/Sep/2026:09:03:28 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=13150795209 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/ind 182.239.240.254 - - [10/Sep/2026:09:03:28 +1000] "GET /app/ajax.php?cn=&furi=true&uri=&call=getUserSetting&caller=ajaxSubmitLocal&seq=18913341984 HTTP/1.1" 200 202 "https://my.evolutionerp.com.au/index.php?page=jobedit&i 182.239.240.254 - - [10/Sep/2026:09:03:28 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=10118630325 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/inde 182.239.240.254 - - [10/Sep/2026:09:03:28 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Djobedit%26id%3D4216&call=getUserSetting&caller=ajaxSubmitLocal&seq=15932493500 HTTP/1.1" 200 112 "https://my. 182.239.240.254 - - [10/Sep/2026:09:03:28 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Djobedit%26id%3D4216&call=getUserSetting&caller=ajaxSubmitLocal&seq=18759892627 HTTP/1.1" 200 159 "https://my.evolutionerp.com.a 182.239.240.254 - - [10/Sep/2026:09:03:28 +1000] "POST /app/ajax.php?call=ts&tsact=tsUpdateTimesheetNominalRates HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=4216" "Mozilla/5.0 (Windows NT 1 120.150.225.142 - - [10/Sep/2026:09:03:28 +1000] "GET /modalload.php?key=jobeditnote&id=16117 HTTP/1.1" 200 569 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=16117&tab=generaltab" "Mozilla/5.0 (Windows NT 10. 182.239.240.254 - - [10/Sep/2026:09:03:29 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 2911 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=4216" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK 182.239.240.254 - - [10/Sep/2026:09:03:30 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 13234 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=4216" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 131 GET /api/getItem/LWFB2001KG 10 GET /api/getItem/LWPG2001KG -- last 10 requests -- 40.115.94.245 - - [10/Sep/2026:09:03:25 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:09:03:25 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:09:03:25 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:09:03:26 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:09:03:26 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:09:03:26 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:09:03:26 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:09:03:27 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:09:03:27 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:09:03:27 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 48 GET /factory_session_checker.php 42 GET /heartbeat.php 24 GET /factory_session_processed_qty.php 24 GET /factory_session_joiner.php -- last 10 requests -- 203.54.180.238 - - [10/Sep/2026:09:03:00 +1000] "GET /heartbeat.php?sentAt=1788994981&bytes=106,161,229,165&_=1788957670812 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [10/Sep/2026:09:03:02 +1000] "GET /heartbeat.php?sentAt=1788994980&bytes=106,161,229,164&_=1788994126732 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [10/Sep/2026:09:03:04 +1000] "GET /heartbeat.php?sentAt=1788994984&bytes=106,161,229,168&_=1788987691492 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [10/Sep/2026:09:03:06 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [10/Sep/2026:09:03:10 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 140 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [10/Sep/2026:09:03:10 +1000] "GET /factory_session_joiner.php?id=35256 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [10/Sep/2026:09:03:10 +1000] "GET /heartbeat.php?sentAt=1788994991&bytes=106,161,229,175&_=1788957670813 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [10/Sep/2026:09:03:11 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [10/Sep/2026:09:03:12 +1000] "GET /heartbeat.php?sentAt=1788994990&bytes=106,161,229,174&_=1788994126733 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [10/Sep/2026:09:03:14 +1000] "GET /heartbeat.php?sentAt=1788994994&bytes=106,161,229,178&_=1788987691493 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 --- last 30 samples (run-up to this incident) --- 2026-09-10 09:01:08 L1=2.64 run=3 blk=0 avail=6985 (50.7%) swpO=0 conn=13 myRSS=2893 php=52 phpRSS=1992 ap=103 tcp=108 topuser=evolution 2026-09-10 09:01:10 L1=2.91 run=6 blk=0 avail=6977 (50.6%) swpO=0 conn=13 myRSS=2893 php=54 phpRSS=2063 ap=101 tcp=107 topuser=evolution 2026-09-10 09:01:18 L1=2.91 run=3 blk=0 avail=7080 (51.4%) swpO=3 conn=13 myRSS=2893 php=51 phpRSS=1948 ap=93 tcp=99 topuser=evolution 2026-09-10 09:01:20 L1=2.76 run=4 blk=0 avail=7131 (51.8%) swpO=3 conn=12 myRSS=2893 php=49 phpRSS=1857 ap=91 tcp=92 topuser=evolution 2026-09-10 09:01:28 L1=2.70 run=3 blk=0 avail=7120 (51.7%) swpO=0 conn=13 myRSS=2893 php=49 phpRSS=1909 ap=83 tcp=97 topuser=evolution 2026-09-10 09:01:30 L1=2.56 run=2 blk=0 avail=7133 (51.8%) swpO=0 conn=13 myRSS=2893 php=50 phpRSS=1915 ap=82 tcp=102 topuser=evolution 2026-09-10 09:01:38 L1=2.44 run=3 blk=0 avail=7110 (51.6%) swpO=0 conn=14 myRSS=2893 php=51 phpRSS=1985 ap=80 tcp=95 topuser=evolution 2026-09-10 09:01:40 L1=2.56 run=4 blk=0 avail=6853 (49.7%) swpO=0 conn=17 myRSS=2893 php=55 phpRSS=2351 ap=80 tcp=96 topuser=evolution 2026-09-10 09:01:48 L1=2.44 run=2 blk=0 avail=7134 (51.8%) swpO=0 conn=13 myRSS=2893 php=52 phpRSS=2011 ap=76 tcp=89 topuser=evolution 2026-09-10 09:01:50 L1=2.32 run=3 blk=0 avail=7033 (51.1%) swpO=0 conn=15 myRSS=2893 php=55 phpRSS=2207 ap=76 tcp=89 topuser=evolution 2026-09-10 09:01:58 L1=2.38 run=3 blk=0 avail=7096 (51.5%) swpO=0 conn=14 myRSS=2893 php=55 phpRSS=2142 ap=79 tcp=95 topuser=evolution 2026-09-10 09:02:00 L1=2.51 run=6 blk=0 avail=7039 (51.1%) swpO=0 conn=15 myRSS=2893 php=58 phpRSS=2186 ap=91 tcp=108 topuser=evolution 2026-09-10 09:02:09 L1=2.39 run=2 blk=0 avail=6751 (49.0%) swpO=0 conn=14 myRSS=2893 php=59 phpRSS=2287 ap=120 tcp=122 topuser=evolution 2026-09-10 09:02:10 L1=2.36 run=5 blk=0 avail=6720 (48.8%) swpO=0 conn=16 myRSS=2893 php=60 phpRSS=2349 ap=121 tcp=127 topuser=evolution 2026-09-10 09:02:19 L1=2.33 run=2 blk=0 avail=6586 (47.8%) swpO=0 conn=13 myRSS=2893 php=57 phpRSS=2194 ap=151 tcp=115 topuser=evolution 2026-09-10 09:02:21 L1=2.22 run=6 blk=0 avail=6551 (47.6%) swpO=0 conn=16 myRSS=2893 php=59 phpRSS=2291 ap=149 tcp=115 topuser=evolution 2026-09-10 09:02:29 L1=2.12 run=2 blk=0 avail=6795 (49.3%) swpO=0 conn=13 myRSS=2893 php=56 phpRSS=2038 ap=141 tcp=128 topuser=evolution 2026-09-10 09:02:31 L1=2.03 run=5 blk=0 avail=6563 (47.6%) swpO=0 conn=15 myRSS=2893 php=58 phpRSS=2313 ap=139 tcp=120 topuser=evolution 2026-09-10 09:02:39 L1=1.95 run=2 blk=0 avail=6724 (48.8%) swpO=0 conn=14 myRSS=2893 php=60 phpRSS=2268 ap=131 tcp=107 topuser=evolution 2026-09-10 09:02:41 L1=1.87 run=3 blk=0 avail=6727 (48.8%) swpO=0 conn=14 myRSS=2893 php=60 phpRSS=2286 ap=129 tcp=111 topuser=evolution 2026-09-10 09:02:49 L1=1.80 run=2 blk=0 avail=6802 (49.4%) swpO=1 conn=13 myRSS=2893 php=59 phpRSS=2246 ap=121 tcp=90 topuser=evolution 2026-09-10 09:02:51 L1=1.82 run=3 blk=0 avail=6771 (49.1%) swpO=1 conn=15 myRSS=2893 php=61 phpRSS=2346 ap=119 tcp=90 topuser=evolution 2026-09-10 09:02:59 L1=1.75 run=2 blk=0 avail=6990 (50.7%) swpO=0 conn=13 myRSS=2893 php=58 phpRSS=2114 ap=111 tcp=80 topuser=evolution 2026-09-10 09:03:01 L1=1.69 run=4 blk=0 avail=6811 (49.4%) swpO=0 conn=15 myRSS=2893 php=61 phpRSS=2371 ap=109 tcp=84 topuser=evolution 2026-09-10 09:03:09 L1=1.64 run=4 blk=0 avail=6711 (48.7%) swpO=0 conn=15 myRSS=2893 php=63 phpRSS=2616 ap=101 tcp=84 topuser=evolution 2026-09-10 09:03:11 L1=1.75 run=5 blk=0 avail=6627 (48.1%) swpO=0 conn=16 myRSS=2893 php=64 phpRSS=2737 ap=99 tcp=79 topuser=evolution 2026-09-10 09:03:19 L1=1.69 run=3 blk=0 avail=6978 (50.6%) swpO=0 conn=15 myRSS=2893 php=61 phpRSS=2324 ap=93 tcp=95 topuser=evolution 2026-09-10 09:03:21 L1=1.63 run=4 blk=0 avail=6870 (49.9%) swpO=0 conn=16 myRSS=2893 php=64 phpRSS=2489 ap=92 tcp=95 topuser=evolution 2026-09-10 09:03:29 L1=1.58 run=3 blk=0 avail=6826 (49.5%) swpO=0 conn=17 myRSS=2893 php=69 phpRSS=2702 ap=91 tcp=93 topuser=evolution 2026-09-10 09:03:31 L1=1.69 run=5 blk=0 avail=6800 (49.4%) swpO=0 conn=17 myRSS=2893 php=72 phpRSS=2786 ap=92 tcp=99 topuser=evolution