INCIDENT 2026-09-10 13:15:16 trigger: php_rss=2336MB mysql_conn=24 ================================================================== load: 6.53 3.06 2.27 38/684 1824869 ncpu:10 mem_avail: 5976MB/13777MB (43.4%) swap_used:1393MB swapout:1197/s blocked(D):0 running:24 iowait:0.3% steal:0.0% php: 24 procs / 2336MB heaviest user: alison (16 procs, 1963MB) apache: 72 procs tcp_estab: 53 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2975 alison 16 1997 nobody 71 1279 root 247 1040 netdata 8 250 mailman 20 179 speedlin 2 146 madalice 1 137 cpanellogin 1 107 evolution 10 82 dovenull 6 66 wp-toolkit 3 60 dovecot 3 27 polkitd 1 14 lowrange 1 14 kurri 1 13 zabbix 1 9 nscd 1 6 named 1 5 cpanelconnecttrack 1 4 --- php workers by user --- USER PROCS RSS_MB alison 16 2029 speedlin 2 151 madalice 1 137 evolution 3 59 root 1 2 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6333 MB Active(file): 4135 MB Inactive(file): 1134 MB Dirty: 3 MB Writeback: 0 MB SReclaimable: 513 MB CommitLimit: 10984 MB Committed_AS: 10899 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 9-10:52:52 3892 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2330591 1 mysql 3046544 15.5 Ssl 2-08:29:49 /usr/sbin/mariadbd 166870 1 netdata 195512 2.7 Ssl 4-10:52:58 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1734664 3652415 root 172788 0.0 S 23:44 spamd child 1824570 1820003 alison 161888 56.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1824379 1823119 alison 161852 42.7 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1824403 1820727 alison 161196 51.3 S 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1824366 1824331 alison 160052 35.0 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3701673 3652415 root 159328 0.0 S 10:40:04 spamd child 1824374 1824334 alison 158212 33.2 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1821136 167896 madalice 151488 17.7 R 00:14 php-fpm: pool madalice_com_au 3652415 1 root 140088 0.0 Ss 10:50:25 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1824557 1822716 alison 128664 37.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1824579 1824210 alison 128172 35.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2328754 1 root 127400 0.0 Ss 2-08:29:59 /usr/lib/systemd/systemd-journald 1824552 1819499 alison 127064 48.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1824594 1820858 alison 123424 55.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1824592 1819916 alison 120072 62.5 S 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1824372 1824330 alison 116052 26.7 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1382815 1353308 cpanellogin 109608 0.0 S 01:56:48 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base server_locale en default_login_theme cpanel 1824744 1823274 speedlin 84512 71.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509236 509098 root 67324 0.0 Sl 13-10:55:38 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1824839 1820868 alison 61280 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1821041 1821016 evolution 60888 1.8 Ss 00:15 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 1353308 1 root 42880 0.0 Ss 50-10:34:04 cpsrvd (SSL) - waiting for connections 1469 1 root 41704 0.1 Ss 73-03:05:33 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2495258 1 wp-toolkit 36148 0.0 Ss 1-12:01:23 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 167562 166914 netdata 35356 0.1 Sl 4-10:52:53 /usr/libexec/netdata/plugins.d/go.d.plugin 1 3651775 1 root 29788 0.0 Ss 10:50:59 lfd - sleeping 1824469 1823280 alison 24572 52.3 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1817092 506832 nobody 24480 0.1 S 04:51 /usr/sbin/httpd -k start 2495169 1 wp-toolkit 24072 0.0 Ss 1-12:01:23 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1817845 506832 nobody 23788 0.1 S 03:51 /usr/sbin/httpd -k start 1818576 506832 nobody 22872 0.1 S 03:05 /usr/sbin/httpd -k start 1818968 506832 nobody 22744 0.1 S 02:36 /usr/sbin/httpd -k start 1818969 506832 nobody 22564 0.1 S 02:36 /usr/sbin/httpd -k start 1819011 506832 nobody 22528 0.0 S 02:34 /usr/sbin/httpd -k start 1819004 506832 nobody 22428 0.1 S 02:34 /usr/sbin/httpd -k start 1820396 506832 nobody 22324 0.4 S 00:55 /usr/sbin/httpd -k start 1820364 506832 nobody 22296 0.1 S 00:57 /usr/sbin/httpd -k start 1818986 506832 nobody 22156 0.0 S 02:35 /usr/sbin/httpd -k start 1818577 506832 nobody 22008 0.1 S 03:05 /usr/sbin/httpd -k start 1818958 506832 nobody 21888 0.1 S 02:37 /usr/sbin/httpd -k start 1818594 506832 nobody 21788 0.1 S 03:04 /usr/sbin/httpd -k start 1819013 506832 nobody 21712 0.1 S 02:34 /usr/sbin/httpd -k start 1819933 506832 nobody 21684 0.1 S 01:29 /usr/sbin/httpd -k start 1819499 506832 nobody 21672 0.1 S 02:04 /usr/sbin/httpd -k start 1818574 506832 nobody 21640 0.0 S 03:05 /usr/sbin/httpd -k start 1820001 506832 nobody 21568 0.1 S 01:23 /usr/sbin/httpd -k start 1818983 506832 nobody 21416 0.0 S 02:35 /usr/sbin/httpd -k start 1819828 506832 nobody 21124 0.0 S 01:35 /usr/sbin/httpd -k start 1818982 506832 nobody 20636 0.1 S 02:35 /usr/sbin/httpd -k start 1819916 506832 nobody 20348 0.0 S 01:30 /usr/sbin/httpd -k start 1820727 506832 nobody 20200 0.1 S 00:34 /usr/sbin/httpd -k start 1820859 506832 nobody 20184 0.1 S 00:25 /usr/sbin/httpd -k start 1820002 506832 nobody 20176 0.0 S 01:23 /usr/sbin/httpd -k start 1820684 506832 nobody 20164 0.1 S 00:37 /usr/sbin/httpd -k start 1820003 506832 nobody 20156 0.1 S 01:23 /usr/sbin/httpd -k start 1820728 506832 nobody 20148 0.1 S 00:34 /usr/sbin/httpd -k start 1823277 506832 nobody 20100 0.4 S 00:09 /usr/sbin/httpd -k start 1823120 506832 nobody 20092 0.3 S 00:10 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- 1824570 D - /opt/cpanel/ea-php82/root/usr/bin/php-cgi --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10573666 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 552 evolution/portal.evolutionerp.com.au-ssl_log 135 evolution/app.evolutionerp.com.au-ssl_log 124 speedlin/speedlinefencing.com.au-ssl_log 90 alison/alisonarts.com.au-ssl_log 84 alison/alisonarts.com.au 53 aaa/aaadownunder.com.au-ssl_log 35 madalice/madalice.com.au-ssl_log 10 evolution/evolutionerp.com.au-ssl_log 6 infinium/infinium.net.au-ssl_log 6 corpkicks/corporatekicks.com.au-ssl_log 3 customc/customcentral.com.au-ssl_log 2 olympic/olympicfencing.com.au-ssl_log 2 otterfencing/otterfencing.com.au-ssl_log 1 speedlin/speedlinefencing.com.au 1 (total vhosts taking traffic: 15) --- top client IPs across all vhosts (last 3 min) --- 389 203.54.180.238 131 213.209.159.84 124 40.115.94.245 95 182.239.240.254 75 138.2.103.207 70 124.170.183.15 55 101.166.96.210 50 103.104.165.99 23 118.127.40.55 21 62.60.130.233 11 150.228.151.88 9 103.104.164.114 5 1.145.125.62 4 147.161.213.71 3 157.55.39.57 --- top request paths across all vhosts (last 3 min) --- 181 POST /functions.php 99 GET /app/ajax.php 51 GET /factory_session_checker.php 48 GET /wp-admin/index.php 41 GET /index.php 28 GET /heartbeat.php 27 POST /wp-login.php 26 POST /plugins/csvexporter/plugin.php 26 GET /factory_session_joiner.php 25 GET /factory_session_processed_qty.php 25 GET / 22 POST /quoteditsave.php 22 GET //app/ajax.php 18 POST /app/ajax/selectFilterSingle.php 17 POST /app/ajax.php 16 POST /app/ajax/selectFilter.php 15 POST /plugins/fencecosting/plugin.php 13 POST / 12 POST /wp-cron.php 12 POST //functions.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 181 POST /functions.php 99 GET /app/ajax.php 36 GET /index.php 26 POST /plugins/csvexporter/plugin.php 22 POST /quoteditsave.php 22 GET //app/ajax.php 18 POST /app/ajax/selectFilterSingle.php 17 POST /app/ajax.php 16 POST /app/ajax/selectFilter.php 15 POST /plugins/fencecosting/plugin.php 12 POST //functions.php 12 POST /clienteditsave.php -- last 10 requests -- 182.239.240.254 - - [10/Sep/2026:13:15:10 +1000] "POST //app/ajax/selectFilter.php?call=filterstaffandcontractors&filter=&cursel=&curseltext=&fromMS=1&&nolimit=LIMIT%201000&excludelabour=1&include=18&contactid=105&return 182.239.240.254 - - [10/Sep/2026:13:15:12 +1000] "POST //app/ajax/selectFilter.php?call=filterinv&filter=BLANKE HTTP/1.1" 200 1371 "https://my.evolutionerp.com.au//index.php?page=jobedit&id=4278&tab=jobeditinv" "Mozilla/ 203.54.180.238 - - [10/Sep/2026:13:15:12 +1000] "POST //functions.php?call=heartbeat HTTP/1.1" 200 285 "https://my.evolutionerp.com.au//index.php?page=jobedit&id=29745&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64 103.104.164.114 - - [10/Sep/2026:13:15:13 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 182.239.240.254 - - [10/Sep/2026:13:15:13 +1000] "POST //itemModify.php?call=getInvMFMeta&modifyid=1854 HTTP/1.1" 200 256 "https://my.evolutionerp.com.au//index.php?page=jobedit&id=4278&tab=jobeditinv" "Mozilla/5.0 (Wind 203.54.180.238 - - [10/Sep/2026:13:15:13 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79301§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 182.239.240.254 - - [10/Sep/2026:13:15:13 +1000] "POST //itemModify.php?call=getBOM HTTP/1.1" 200 22 "https://my.evolutionerp.com.au//index.php?page=jobedit&id=4278&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; x 203.54.180.238 - - [10/Sep/2026:13:15:14 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=14275" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 203.54.180.238 - - [10/Sep/2026:13:15:14 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=14276" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 182.239.240.254 - - [10/Sep/2026:13:15:15 +1000] "POST //functions.php?call=heartbeat HTTP/1.1" 200 994 "https://my.evolutionerp.com.au//index.php?page=jobedit&id=4211" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 51 GET /factory_session_checker.php 28 GET /heartbeat.php 26 GET /factory_session_joiner.php 25 GET /factory_session_processed_qty.php 5 GET /index.php -- last 10 requests -- 203.54.180.238 - - [10/Sep/2026:13:15:00 +1000] "GET /heartbeat.php?sentAt=1789010100&bytes=106,162,32,180&_=1788957672324 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [10/Sep/2026:13:15:06 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [10/Sep/2026:13:15:07 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [10/Sep/2026:13:15:07 +1000] "GET /factory_session_joiner.php?id=35268 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [10/Sep/2026:13:15:09 +1000] "GET /factory_session_joiner.php?id=35254 HTTP/1.1" 200 79 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [10/Sep/2026:13:15:10 +1000] "GET /heartbeat.php?sentAt=1789010105&bytes=106,162,32,185&_=1789009210519 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [10/Sep/2026:13:15:11 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [10/Sep/2026:13:15:13 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [10/Sep/2026:13:15:13 +1000] "GET /heartbeat.php?sentAt=1789010110&bytes=106,162,32,190&_=1788957672325 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [10/Sep/2026:13:15:15 +1000] "GET /heartbeat.php?sentAt=1789010115&bytes=106,162,32,195&_=1789009210520 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 3 GET /api/getItem/SHSG252516--8 3 GET /api/getItem/RHSG501009-2400 2 GET /api/getItem/SHSG3535208 2 GET /api/getItem/SHSG303016-8 2 GET /api/getItem/SHSG252520-6.5 2 GET /api/getItem/SHSG252516-8 2 GET /api/getItem/SHSG252516-6.5 2 GET /api/getItem/SHSG252516--6.5 2 GET /api/getItem/SHSG202016-8 2 GET /api/getItem/SHSG202012-8 2 GET /api/getItem/SHSG15015040-8 2 GET /api/getItem/SHSG12512550-8 -- last 10 requests -- 40.115.94.245 - - [10/Sep/2026:13:14:22 +1000] "GET /api/getItem/SHSG898935-8 HTTP/1.1" 200 1491 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:13:14:22 +1000] "GET /api/getItem/SHSG252516--6.5 HTTP/1.1" 404 117 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:13:14:22 +1000] "GET /api/getItem/SHSG898950-8 HTTP/1.1" 200 1346 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:13:14:23 +1000] "GET /api/getItem/SHSG252516--8 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:13:14:23 +1000] "GET /api/getItem/SHSG909020-8 HTTP/1.1" 200 1478 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:13:14:23 +1000] "GET /api/getItem/SHSG252520-6.5 HTTP/1.1" 200 1765 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:13:14:23 +1000] "GET /api/getItem/SHSG303016-DP19-8 HTTP/1.1" 200 1400 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:13:14:23 +1000] "GET /api/getItem/SHSG303016-8 HTTP/1.1" 200 2102 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:13:14:23 +1000] "GET /api/getItem/SHSG303016-SP19-8 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:13:14:24 +1000] "GET /api/getItem/SHSG3535208 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" --- last 30 samples (run-up to this incident) --- 2026-09-10 13:12:55 L1=2.12 run=2 blk=0 avail=7782 (56.5%) swpO=0 conn=3 myRSS=3005 php=5 phpRSS=194 ap=56 tcp=39 topuser=madalice 2026-09-10 13:12:55 L1=2.12 run=4 blk=0 avail=7782 (56.5%) swpO=0 conn=4 myRSS=3005 php=5 phpRSS=194 ap=56 tcp=39 topuser=madalice 2026-09-10 13:13:05 L1=2.10 run=4 blk=0 avail=7764 (56.4%) swpO=0 conn=3 myRSS=3005 php=5 phpRSS=290 ap=46 tcp=38 topuser=corpkicks 2026-09-10 13:13:05 L1=2.10 run=4 blk=0 avail=7760 (56.3%) swpO=0 conn=4 myRSS=3005 php=5 phpRSS=294 ap=46 tcp=38 topuser=corpkicks 2026-09-10 13:13:15 L1=2.38 run=2 blk=0 avail=8012 (58.2%) swpO=0 conn=3 myRSS=3005 php=5 phpRSS=46 ap=43 tcp=43 topuser=evolution 2026-09-10 13:13:15 L1=2.38 run=4 blk=0 avail=8002 (58.1%) swpO=0 conn=4 myRSS=3005 php=4 phpRSS=26 ap=43 tcp=44 topuser=madalice 2026-09-10 13:13:25 L1=2.49 run=3 blk=0 avail=7886 (57.2%) swpO=0 conn=3 myRSS=3005 php=6 phpRSS=186 ap=40 tcp=49 topuser=madalice 2026-09-10 13:13:25 L1=2.49 run=7 blk=0 avail=7884 (57.2%) swpO=0 conn=4 myRSS=3005 php=6 phpRSS=221 ap=40 tcp=49 topuser=madalice 2026-09-10 13:13:35 L1=2.34 run=6 blk=0 avail=7912 (57.4%) swpO=0 conn=3 myRSS=3005 php=7 phpRSS=256 ap=35 tcp=37 topuser=madalice 2026-09-10 13:13:35 L1=2.34 run=4 blk=0 avail=7888 (57.3%) swpO=0 conn=4 myRSS=3005 php=7 phpRSS=278 ap=35 tcp=37 topuser=madalice 2026-09-10 13:13:45 L1=2.43 run=3 blk=0 avail=7611 (55.2%) swpO=0 conn=3 myRSS=3005 php=7 phpRSS=536 ap=37 tcp=41 topuser=madalice 2026-09-10 13:13:45 L1=2.43 run=7 blk=0 avail=7703 (55.9%) swpO=0 conn=4 myRSS=3005 php=6 phpRSS=319 ap=37 tcp=40 topuser=madalice 2026-09-10 13:13:55 L1=2.51 run=1 blk=0 avail=7797 (56.6%) swpO=0 conn=3 myRSS=3005 php=5 phpRSS=197 ap=46 tcp=47 topuser=madalice 2026-09-10 13:13:55 L1=2.51 run=3 blk=0 avail=7801 (56.6%) swpO=0 conn=4 myRSS=3005 php=6 phpRSS=233 ap=46 tcp=47 topuser=madalice 2026-09-10 13:14:05 L1=2.28 run=3 blk=1 avail=7912 (57.4%) swpO=0 conn=3 myRSS=3005 php=5 phpRSS=197 ap=36 tcp=33 topuser=madalice 2026-09-10 13:14:05 L1=2.28 run=2 blk=0 avail=7911 (57.4%) swpO=0 conn=4 myRSS=3005 php=5 phpRSS=197 ap=36 tcp=33 topuser=madalice 2026-09-10 13:14:15 L1=2.15 run=4 blk=0 avail=7868 (57.1%) swpO=0 conn=3 myRSS=3005 php=8 phpRSS=368 ap=29 tcp=32 topuser=madalice 2026-09-10 13:14:15 L1=2.15 run=8 blk=0 avail=7875 (57.2%) swpO=0 conn=4 myRSS=3005 php=8 phpRSS=375 ap=29 tcp=32 topuser=madalice 2026-09-10 13:14:25 L1=2.05 run=6 blk=0 avail=7650 (55.5%) swpO=0 conn=3 myRSS=3005 php=9 phpRSS=500 ap=35 tcp=36 topuser=madalice 2026-09-10 13:14:25 L1=2.05 run=6 blk=0 avail=7714 (56.0%) swpO=0 conn=4 myRSS=3005 php=8 phpRSS=481 ap=35 tcp=35 topuser=madalice 2026-09-10 13:14:35 L1=2.11 run=4 blk=0 avail=7717 (56.0%) swpO=0 conn=3 myRSS=3005 php=8 phpRSS=481 ap=34 tcp=37 topuser=madalice 2026-09-10 13:14:35 L1=2.11 run=6 blk=0 avail=7709 (56.0%) swpO=0 conn=4 myRSS=3005 php=8 phpRSS=487 ap=34 tcp=37 topuser=madalice 2026-09-10 13:14:45 L1=2.10 run=7 blk=0 avail=7675 (55.7%) swpO=0 conn=3 myRSS=3005 php=9 phpRSS=523 ap=38 tcp=43 topuser=madalice 2026-09-10 13:14:45 L1=2.10 run=7 blk=0 avail=7673 (55.7%) swpO=0 conn=4 myRSS=3005 php=9 phpRSS=535 ap=38 tcp=43 topuser=madalice 2026-09-10 13:14:55 L1=2.72 run=3 blk=0 avail=7590 (55.1%) swpO=1 conn=5 myRSS=3005 php=8 phpRSS=540 ap=44 tcp=47 topuser=madalice 2026-09-10 13:14:55 L1=2.72 run=3 blk=0 avail=7584 (55.1%) swpO=1 conn=4 myRSS=3005 php=8 phpRSS=546 ap=44 tcp=46 topuser=madalice 2026-09-10 13:15:06 L1=2.99 run=11 blk=1 avail=7293 (52.9%) swpO=0 conn=5 myRSS=3005 php=20 phpRSS=1150 ap=45 tcp=120 topuser=alison 2026-09-10 13:15:06 L1=2.99 run=16 blk=0 avail=7280 (52.8%) swpO=0 conn=4 myRSS=3005 php=22 phpRSS=1133 ap=45 tcp=120 topuser=alison 2026-09-10 13:15:16 L1=6.53 run=24 blk=0 avail=5976 (43.4%) swpO=1197 conn=24 myRSS=2975 php=24 phpRSS=2336 ap=72 tcp=53 topuser=alison 2026-09-10 13:15:16 L1=6.53 run=30 blk=0 avail=6025 (43.7%) swpO=1197 conn=20 myRSS=2975 php=24 phpRSS=2438 ap=72 tcp=53 topuser=alison