INCIDENT 2026-08-18 10:12:07 trigger: php_rss=1521MB ================================================================== load: 5.32 3.42 2.51 17/689 1360978 ncpu:10 mem_avail: 5329MB/11729MB (45.4%) swap_used:2127MB swapout:40/s blocked(D):0 running:17 iowait:0.2% steal:0.0% php: 16 procs / 1521MB heaviest user: madalice (9 procs, 1181MB) apache: 53 procs tcp_estab: 58 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2655 madalice 8 993 root 236 930 nobody 52 915 evolution 10 286 netdata 8 248 speedlin 1 81 cpanellogin 1 63 mailnull 6 52 kurri 3 35 dovenull 6 27 wp-toolkit 6 20 zabbix 1 14 mailman 20 14 alison 1 12 lowrange 1 11 nscd 1 8 dovecot 3 8 named 1 5 dbus 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 8 1002 evolution 6 266 speedlin 1 83 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5590 MB Active(file): 4447 MB Inactive(file): 657 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 366 MB CommitLimit: 9960 MB Committed_AS: 9647 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 955450 root 09:00:51 7584 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 2719504 7.9 Ssl 3-02:21:30 /usr/sbin/mariadbd 1360900 1360119 madalice 199440 89.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 199296 2.5 Ssl 50-00:02:12 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2575382 1 root 180368 0.0 Ss 3-02:21:33 /usr/lib/systemd/systemd-journald 1000360 998750 root 175440 0.0 S 07:47:18 spamd child 1360904 1355802 madalice 160156 70.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 998750 1 root 151992 0.0 Ss 07:49:23 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1000361 998750 root 132980 0.0 S 07:47:18 spamd child 1360909 1356876 madalice 132508 110 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1360913 1357571 madalice 129316 100 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1360910 1358677 madalice 127832 104 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1360912 1360134 madalice 127444 103 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1360911 1360133 madalice 127180 106 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1360944 1355930 speedlin 97552 64.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1360945 1356850 madalice 81104 46.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1360899 1360639 evolution 72356 10.0 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1292891 1353308 cpanellogin 65196 0.0 S 58:52 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 1353308 1 root 42072 0.0 Ss 27-07:30:42 cpsrvd (SSL) - waiting for connections 1360947 1360890 evolution 40876 4.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1360920 1359652 evolution 40684 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1360940 1359348 evolution 40076 2.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1360942 1360905 evolution 39920 4.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1360914 1360857 evolution 39268 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1361011 1357458 evolution 38872 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2223 1201 root 38180 0.0 Sl 50-00:02:11 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 4922 2431 netdata 32948 0.1 Sl 50-00:02:07 /usr/libexec/netdata/plugins.d/go.d.plugin 1 998083 1 root 27520 0.0 Ss 07:49:56 lfd - sleeping 1463 1 root 25792 0.0 Ss 50-00:02:11 tailwatchd 1469 1 root 23160 0.1 Ss 50-00:02:11 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1358513 1276780 nobody 21400 0.0 S 02:30 /usr/sbin/httpd -k start 1356850 1276780 nobody 21140 0.0 S 04:39 /usr/sbin/httpd -k start 1359051 1276780 nobody 21116 0.1 S 01:56 /usr/sbin/httpd -k start 1352799 1276780 nobody 20856 0.0 S 08:50 /usr/sbin/httpd -k start 1357523 1276780 nobody 20560 0.0 S 03:42 /usr/sbin/httpd -k start 1360393 1276780 nobody 20432 0.3 S 00:32 /usr/sbin/httpd -k start 1358677 1276780 nobody 20428 0.0 S 02:17 /usr/sbin/httpd -k start 1357458 1276780 nobody 20236 0.0 S 03:44 /usr/sbin/httpd -k start 1360176 1276780 nobody 20188 0.1 S 00:48 /usr/sbin/httpd -k start 1359024 1276780 nobody 20164 0.0 S 01:59 /usr/sbin/httpd -k start 1357184 1276780 nobody 20016 0.0 S 04:10 /usr/sbin/httpd -k start 1355841 1276780 nobody 19988 0.0 S 05:44 /usr/sbin/httpd -k start 1359173 1276780 nobody 19916 0.0 S 01:49 /usr/sbin/httpd -k start 1360175 1276780 nobody 19852 0.2 S 00:48 /usr/sbin/httpd -k start 1355930 1276780 nobody 19848 0.0 S 05:41 /usr/sbin/httpd -k start 1359076 1276780 nobody 19820 0.1 S 01:54 /usr/sbin/httpd -k start 1356876 1276780 nobody 19764 0.3 S 04:37 /usr/sbin/httpd -k start 1357569 1276780 nobody 19728 0.0 S 03:41 /usr/sbin/httpd -k start 1360562 1276780 nobody 19712 0.1 S 00:22 /usr/sbin/httpd -k start 1357571 1276780 nobody 19656 0.0 S 03:41 /usr/sbin/httpd -k start 1358275 1276780 nobody 19620 0.0 S 02:50 /usr/sbin/httpd -k start 1359652 1276780 nobody 19380 0.0 S 01:18 /usr/sbin/httpd -k start 1358686 1276780 nobody 19352 0.0 S 02:16 /usr/sbin/httpd -k start 1360134 1276780 nobody 19324 0.1 S 00:50 /usr/sbin/httpd -k start 1359172 1276780 nobody 19272 0.0 S 01:49 /usr/sbin/httpd -k start 1355802 1276780 nobody 19248 0.3 S 05:46 /usr/sbin/httpd -k start 1360354 1276780 nobody 19124 0.0 S 00:35 /usr/sbin/httpd -k start 1360119 1276780 nobody 19116 0.2 S 00:51 /usr/sbin/httpd -k start 1359150 1276780 nobody 19076 0.3 S 01:51 /usr/sbin/httpd -k start 1358218 1276780 nobody 19048 0.0 S 02:52 /usr/sbin/httpd -k start 1357475 1276780 nobody 18924 0.0 S 03:43 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 6627009 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 542 evolution/portal.evolutionerp.com.au-ssl_log 188 madalice/madalice.com.au-ssl_log 114 alison/alisonarts.com.au-ssl_log 33 (total vhosts taking traffic: 4) --- top client IPs across all vhosts (last 3 min) --- 396 203.54.180.238 201 103.104.165.99 63 103.104.164.114 60 74.248.136.165 45 20.42.19.40 32 4.232.94.23 20 193.82.239.232 14 182.239.240.254 12 147.161.213.78 12 116.91.221.198 4 1.144.107.82 3 115.128.106.35 2 40.77.167.28 2 191.237.254.161 1 43.173.180.142 --- top request paths across all vhosts (last 3 min) --- 180 POST /functions.php 99 GET /app/ajax.php 64 GET /index.php 49 GET /heartbeat.php 48 GET /factory_session_checker.php 30 POST /clienteditsave.php 27 POST /plugins/csvexporter/plugin.php 25 GET /factory_session_processed_qty.php 24 GET /factory_session_joiner.php 23 POST /app/ajax/selectFilterSingle.php 20 POST /app/ajax.php 16 POST /portal/register 16 POST //functions.php 12 POST /mfreqsave.php 12 POST /app/ajax/selectFilter.php 10 POST /jobeditsave.php 10 GET //app/ajax.php 9 POST /logsave.php 6 POST /invoiceaddsave.php 5 POST /quoteditsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 180 POST /functions.php 99 GET /app/ajax.php 40 GET /index.php 30 POST /clienteditsave.php 27 POST /plugins/csvexporter/plugin.php 23 POST /app/ajax/selectFilterSingle.php 20 POST /app/ajax.php 16 POST //functions.php 12 POST /mfreqsave.php 12 POST /app/ajax/selectFilter.php 10 POST /jobeditsave.php 10 GET //app/ajax.php -- last 10 requests -- 103.104.164.114 - - [18/Aug/2026:10:12:03 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=17304861615 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/ind 103.104.164.114 - - [18/Aug/2026:10:12:03 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Dpurchaseadd%26purchaseid%3D66763&call=getUserSetting&caller=ajaxSubmitLocal&seq=14653662419 HTTP/1.1" 200 117 103.104.164.114 - - [18/Aug/2026:10:12:03 +1000] "POST /app/ajax/selectFilter.php?call=filterinv&filter=&cursel=&curseltext=&fromMS=1&&nolimit=LIMIT%2050&include=&supplierid=835&contactid=835&tid=%25%25&returnobj=itemFil 103.104.164.114 - - [18/Aug/2026:10:12:03 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dpurchaseadd%26purchaseid%3D66763&call=getUserSetting&caller=ajaxSubmitLocal&seq=19322921272 HTTP/1.1" 200 165 "https://my.evolu 103.104.165.99 - - [18/Aug/2026:10:12:04 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 203.54.180.238 - - [18/Aug/2026:10:12:04 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=pickingedit&pickingid=37638" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 103.104.165.99 - - [18/Aug/2026:10:12:04 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=mfreqedit&id=11152" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb 103.104.164.114 - - [18/Aug/2026:10:12:04 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=66763" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 103.104.164.114 - - [18/Aug/2026:10:12:05 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 16450 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=66763" "Mozilla/5.0 (Windows NT 10.0; Win6 182.239.240.254 - - [18/Aug/2026:10:12:05 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 49 GET /heartbeat.php 48 GET /factory_session_checker.php 25 GET /factory_session_processed_qty.php 24 GET /index.php 24 GET /factory_session_joiner.php 16 POST /portal/register 2 POST /factory_functions.php -- last 10 requests -- 203.54.180.238 - - [18/Aug/2026:10:11:57 +1000] "GET /heartbeat.php?sentAt=1787011917&bytes=106,131,163,77&_=1786971217276 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [18/Aug/2026:10:11:57 +1000] "GET /heartbeat.php?sentAt=1787011915&bytes=106,131,163,75&_=1787002018023 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [18/Aug/2026:10:11:58 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [18/Aug/2026:10:11:59 +1000] "GET /heartbeat.php?sentAt=1787011919&bytes=106,131,163,79&_=1787002625377 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [18/Aug/2026:10:11:59 +1000] "POST /factory_functions.php?factory_session_create HTTP/1.1" 302 20 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=8" "Mozilla/5.0 (Linux; A 203.54.180.238 - - [18/Aug/2026:10:12:00 +1000] "GET /index.php?page=factory_workbench HTTP/1.1" 200 12476 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=8" "Mozilla/5.0 (Linux; Android 10; 203.54.180.238 - - [18/Aug/2026:10:12:00 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [18/Aug/2026:10:12:01 +1000] "POST /portal/register HTTP/1.1" 404 - "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, 203.54.180.238 - - [18/Aug/2026:10:12:01 +1000] "GET /heartbeat.php?sentAt=1787011921&bytes=106,131,163,81&_=1787011400963 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=8" 203.54.180.238 - - [18/Aug/2026:10:12:02 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb == madalice/madalice.com.au-ssl_log == -- top paths -- 3 GET /wp-content/plugins/hellopress/wp_filemanager.php 3 GET /this_is_a_new_hello_world.php 1 POST / 1 GET /zwso.php 1 GET /zwq13.php 1 GET /z.php 1 GET /ze.php 1 GET /xxx.php 1 GET /xqq.php 1 GET /x.php 1 GET /xfun.php 1 GET /ws61.php -- last 10 requests -- 74.248.136.165 - - [18/Aug/2026:10:11:44 +1000] "GET /dsd.php HTTP/1.1" 404 30565 "-" "-" 20.42.19.40 - - [18/Aug/2026:10:11:45 +1000] "GET /wp-blog-header.php HTTP/1.1" 404 1 "-" "-" 191.237.254.161 - - [18/Aug/2026:10:11:45 +1000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 30564 "-" "-" 74.248.136.165 - - [18/Aug/2026:10:11:46 +1000] "GET /snq.php HTTP/1.1" 404 30565 "-" "-" 20.42.19.40 - - [18/Aug/2026:10:11:47 +1000] "GET /admin.php HTTP/1.1" 404 30575 "-" "-" 74.248.136.165 - - [18/Aug/2026:10:11:48 +1000] "GET /c4.php HTTP/1.1" 404 30561 "-" "-" 20.42.19.40 - - [18/Aug/2026:10:11:48 +1000] "GET /about/function.php HTTP/1.1" 404 30565 "-" "-" 191.237.254.161 - - [18/Aug/2026:10:11:48 +1000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 30562 "-" "-" 74.248.136.165 - - [18/Aug/2026:10:11:49 +1000] "GET /wp-access.php HTTP/1.1" 404 30564 "-" "-" 20.42.19.40 - - [18/Aug/2026:10:11:50 +1000] "GET /edit.php HTTP/1.1" 404 30560 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-18 10:09:46 L1=3.74 run=4 blk=0 avail=6338 (54.0%) swpO=0 conn=1 myRSS=2656 php=3 phpRSS=128 ap=43 tcp=44 topuser=evolution 2026-08-18 10:09:46 L1=3.92 run=4 blk=0 avail=6226 (53.1%) swpO=0 conn=4 myRSS=2656 php=3 phpRSS=238 ap=42 tcp=44 topuser=madalice 2026-08-18 10:09:56 L1=4.08 run=7 blk=0 avail=6188 (52.8%) swpO=0 conn=1 myRSS=2656 php=5 phpRSS=318 ap=47 tcp=48 topuser=madalice 2026-08-18 10:09:56 L1=4.16 run=6 blk=0 avail=6019 (51.3%) swpO=0 conn=4 myRSS=2656 php=8 phpRSS=573 ap=47 tcp=47 topuser=madalice 2026-08-18 10:10:06 L1=4.06 run=4 blk=0 avail=6104 (52.0%) swpO=0 conn=1 myRSS=2656 php=5 phpRSS=396 ap=46 tcp=52 topuser=evolution 2026-08-18 10:10:06 L1=4.22 run=3 blk=0 avail=6099 (52.0%) swpO=0 conn=4 myRSS=2656 php=3 phpRSS=348 ap=46 tcp=53 topuser=madalice 2026-08-18 10:10:16 L1=4.49 run=5 blk=0 avail=6077 (51.8%) swpO=0 conn=1 myRSS=2656 php=8 phpRSS=483 ap=50 tcp=48 topuser=evolution 2026-08-18 10:10:16 L1=4.49 run=5 blk=0 avail=5965 (50.9%) swpO=0 conn=4 myRSS=2656 php=9 phpRSS=621 ap=50 tcp=51 topuser=madalice 2026-08-18 10:10:26 L1=5.29 run=12 blk=0 avail=5894 (50.3%) swpO=0 conn=1 myRSS=2656 php=14 phpRSS=784 ap=57 tcp=63 topuser=evolution 2026-08-18 10:10:26 L1=5.29 run=12 blk=0 avail=5744 (49.0%) swpO=0 conn=4 myRSS=2656 php=15 phpRSS=911 ap=57 tcp=66 topuser=madalice 2026-08-18 10:10:36 L1=4.93 run=2 blk=0 avail=6262 (53.4%) swpO=2 conn=1 myRSS=2656 php=1 phpRSS=144 ap=56 tcp=43 topuser=madalice 2026-08-18 10:10:36 L1=4.93 run=3 blk=0 avail=6222 (53.1%) swpO=2 conn=4 myRSS=2656 php=1 phpRSS=183 ap=56 tcp=40 topuser=madalice 2026-08-18 10:10:46 L1=4.64 run=5 blk=0 avail=5991 (51.1%) swpO=0 conn=5 myRSS=2656 php=5 phpRSS=627 ap=46 tcp=49 topuser=madalice 2026-08-18 10:10:47 L1=4.64 run=6 blk=0 avail=6082 (51.9%) swpO=0 conn=6 myRSS=2656 php=5 phpRSS=500 ap=46 tcp=55 topuser=madalice 2026-08-18 10:10:56 L1=4.47 run=5 blk=0 avail=6213 (53.0%) swpO=0 conn=5 myRSS=2656 php=3 phpRSS=326 ap=44 tcp=48 topuser=madalice 2026-08-18 10:10:57 L1=4.47 run=4 blk=0 avail=6095 (52.0%) swpO=0 conn=6 myRSS=2656 php=4 phpRSS=475 ap=44 tcp=47 topuser=madalice 2026-08-18 10:11:06 L1=4.31 run=5 blk=0 avail=6029 (51.4%) swpO=0 conn=5 myRSS=2656 php=3 phpRSS=485 ap=45 tcp=44 topuser=madalice 2026-08-18 10:11:07 L1=4.31 run=3 blk=0 avail=6167 (52.6%) swpO=0 conn=6 myRSS=2656 php=3 phpRSS=371 ap=45 tcp=41 topuser=madalice 2026-08-18 10:11:16 L1=4.28 run=4 blk=0 avail=5977 (51.0%) swpO=0 conn=5 myRSS=2656 php=3 phpRSS=584 ap=42 tcp=49 topuser=madalice 2026-08-18 10:11:17 L1=4.28 run=4 blk=0 avail=6056 (51.6%) swpO=0 conn=6 myRSS=2656 php=4 phpRSS=525 ap=42 tcp=55 topuser=madalice 2026-08-18 10:11:26 L1=3.93 run=3 blk=0 avail=6141 (52.4%) swpO=0 conn=5 myRSS=2656 php=2 phpRSS=288 ap=55 tcp=47 topuser=madalice 2026-08-18 10:11:27 L1=3.93 run=6 blk=0 avail=6257 (53.3%) swpO=0 conn=6 myRSS=2656 php=3 phpRSS=200 ap=55 tcp=50 topuser=madalice 2026-08-18 10:11:36 L1=4.02 run=6 blk=0 avail=5908 (50.4%) swpO=0 conn=5 myRSS=2656 php=7 phpRSS=693 ap=53 tcp=57 topuser=madalice 2026-08-18 10:11:37 L1=4.02 run=4 blk=0 avail=6124 (52.2%) swpO=0 conn=6 myRSS=2656 php=4 phpRSS=376 ap=53 tcp=57 topuser=madalice 2026-08-18 10:11:46 L1=4.42 run=10 blk=0 avail=5764 (49.1%) swpO=0 conn=10 myRSS=2657 php=8 phpRSS=821 ap=53 tcp=62 topuser=madalice 2026-08-18 10:11:47 L1=4.42 run=15 blk=0 avail=5549 (47.3%) swpO=0 conn=12 myRSS=2657 php=13 phpRSS=1201 ap=53 tcp=62 topuser=madalice 2026-08-18 10:11:56 L1=4.83 run=9 blk=0 avail=5625 (48.0%) swpO=0 conn=10 myRSS=2657 php=6 phpRSS=960 ap=51 tcp=48 topuser=madalice 2026-08-18 10:11:57 L1=4.83 run=6 blk=0 avail=5849 (49.9%) swpO=0 conn=12 myRSS=2657 php=5 phpRSS=700 ap=51 tcp=47 topuser=madalice 2026-08-18 10:12:07 L1=5.32 run=11 blk=0 avail=5774 (49.2%) swpO=0 conn=10 myRSS=2657 php=11 phpRSS=961 ap=51 tcp=53 topuser=madalice 2026-08-18 10:12:07 L1=5.32 run=17 blk=0 avail=5329 (45.4%) swpO=40 conn=13 myRSS=2656 php=16 phpRSS=1521 ap=53 tcp=58 topuser=madalice