INCIDENT 2026-08-31 12:15:39 trigger: php_rss=1654MB ================================================================== load: 3.80 2.40 2.21 2/684 967569 ncpu:10 mem_avail: 6272MB/13777MB (45.5%) swap_used:2163MB swapout:0/s blocked(D):0 running:2 iowait:0.0% steal:0.0% php: 13 procs / 1654MB heaviest user: madalice (10 procs, 1584MB) apache: 49 procs tcp_estab: 51 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3385 madalice 10 1584 root 250 976 nobody 48 880 netdata 7 209 mailman 20 74 cpanellogin 1 62 infinium 2 55 dovenull 6 46 mailnull 3 40 evolution 7 31 wp-toolkit 3 20 zabbix 1 18 dovecot 3 18 alison 1 14 kurri 1 12 named 1 11 nscd 1 4 polkitd 1 3 dbus 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 10 1584 evolution 2 32 root 1 22 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4930 MB Active(file): 4267 MB Inactive(file): 885 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 487 MB CommitLimit: 10984 MB Committed_AS: 8932 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 3-09:57:00 4140 /usr/bin/imunify-agent-proxy 896009 root 15:38 1268 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 934557 root 05:37 59476 /opt/imunify360/venv/bin/python3 -m imav.run --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 3466736 8.5 Ssl 3-09:56:29 /usr/sbin/mariadbd 3036527 3002570 root 197640 0.1 S 09:43:57 spamd child 508924 1 netdata 189964 1.9 Ssl 3-09:55:58 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 951881 510022 madalice 163688 11.3 S 01:07 php-fpm: pool madalice_com_au 951888 510022 madalice 163676 11.7 S 01:06 php-fpm: pool madalice_com_au 951900 510022 madalice 163528 10.1 S 01:05 php-fpm: pool madalice_com_au 951902 510022 madalice 163120 9.7 S 01:05 php-fpm: pool madalice_com_au 951910 510022 madalice 162712 10.1 S 01:04 php-fpm: pool madalice_com_au 951898 510022 madalice 162656 10.1 S 01:05 php-fpm: pool madalice_com_au 951887 510022 madalice 162008 11.7 S 01:06 php-fpm: pool madalice_com_au 951893 510022 madalice 161908 9.5 R 01:06 php-fpm: pool madalice_com_au 966810 510022 madalice 159940 15.9 S 00:25 php-fpm: pool madalice_com_au 951909 510022 madalice 159604 9.6 S 01:05 php-fpm: pool madalice_com_au 3002570 1 root 132380 0.0 Ss 09:52:53 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3036528 3002570 root 123444 0.0 S 09:43:57 spamd child 509640 508992 root 64252 0.0 Sl 3-09:55:53 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 873062 1353308 cpanellogin 63784 0.0 S 24:21 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 509266 1 root 61460 0.0 Ss 3-09:55:55 /usr/lib/systemd/systemd-journald 934557 1 root 59476 0.6 Ssl 05:37 /opt/imunify360/venv/bin/python3 -m imav.run 509236 509098 root 49044 0.0 Sl 3-09:55:55 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 949496 508511 infinium 44712 0.0 S 03:58 dovecot/imap 1353308 1 root 42008 0.1 Ss 40-09:34:21 cpsrvd (SSL) - waiting for connections 3001917 1 root 33852 0.0 Ss 09:53:25 lfd - sleeping 1463 1 root 23972 0.0 Ss 63-02:05:50 tailwatchd 949191 506832 nobody 23672 0.1 S 04:26 /usr/sbin/httpd -k start 933984 506832 nobody 22748 0.0 S 05:52 /usr/sbin/httpd -k start 510022 1 root 22552 0.0 Ss 3-09:55:51 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 933267 506832 nobody 22296 0.1 S 06:34 /usr/sbin/httpd -k start 949381 506832 nobody 21964 0.0 S 04:07 /usr/sbin/httpd -k start 1469 1 root 21492 0.1 Ss 63-02:05:50 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 931541 506832 nobody 21320 0.1 S 08:03 /usr/sbin/httpd -k start 951939 506832 nobody 21176 0.1 S 01:02 /usr/sbin/httpd -k start 949942 506832 nobody 21104 0.0 S 03:20 /usr/sbin/httpd -k start 950564 506832 nobody 20704 0.2 S 02:36 /usr/sbin/httpd -k start 950131 506832 nobody 20696 0.0 S 03:03 /usr/sbin/httpd -k start 952286 506832 nobody 20600 0.0 S 01:00 /usr/sbin/httpd -k start 950544 506832 nobody 20524 0.0 S 02:38 /usr/sbin/httpd -k start 951492 506832 nobody 20452 0.0 S 01:29 /usr/sbin/httpd -k start 951913 506832 nobody 20316 0.0 S 01:04 /usr/sbin/httpd -k start 952276 506832 nobody 20216 0.0 S 01:00 /usr/sbin/httpd -k start 952284 506832 nobody 20184 0.0 S 01:00 /usr/sbin/httpd -k start 951187 506832 nobody 20164 0.0 S 01:48 /usr/sbin/httpd -k start 952285 506832 nobody 20084 0.0 S 01:00 /usr/sbin/httpd -k start 951912 506832 nobody 20060 0.0 S 01:04 /usr/sbin/httpd -k start 951928 506832 nobody 20000 0.1 S 01:03 /usr/sbin/httpd -k start 951942 506832 nobody 19944 0.0 S 01:02 /usr/sbin/httpd -k start 952225 506832 nobody 19844 0.0 S 01:01 /usr/sbin/httpd -k start 952267 506832 nobody 19816 0.1 S 01:00 /usr/sbin/httpd -k start 952291 506832 nobody 19660 0.0 S 01:00 /usr/sbin/httpd -k start 950425 506832 nobody 19504 0.2 S 02:45 /usr/sbin/httpd -k start 950207 506832 nobody 19460 0.0 S 03:01 /usr/sbin/httpd -k start 952277 506832 nobody 19400 0.0 S 01:00 /usr/sbin/httpd -k start 950253 506832 nobody 19328 0.0 S 02:59 /usr/sbin/httpd -k start 483898 1 zabbix 19092 0.2 Ssl 3-09:57:12 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 952289 506832 nobody 19068 0.0 S 01:00 /usr/sbin/httpd -k start 952223 506832 nobody 18948 0.0 S 01:01 /usr/sbin/httpd -k start 952296 506832 nobody 18752 0.1 S 01:00 /usr/sbin/httpd -k start 951925 506832 nobody 18576 0.0 S 01:03 /usr/sbin/httpd -k start 952216 506832 nobody 18536 0.0 S 01:01 /usr/sbin/httpd -k start 951185 506832 nobody 18292 0.0 S 01:48 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 7708487 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 599 evolution/app.evolutionerp.com.au-ssl_log 465 evolution/portal.evolutionerp.com.au-ssl_log 215 customc/customcentral.com.au-ssl_log 191 coscom/coscom.com.au-ssl_log 184 madalice/madalice.com.au-ssl_log 131 corpkicks/corporatekicks.com.au-ssl_log 90 otter2/otterfencing.net.au-ssl_log 43 aaa/aaadownunder.com.au-ssl_log 16 speedlin/speedlinefencing.com.au-ssl_log 8 (total vhosts taking traffic: 10) --- top client IPs across all vhosts (last 3 min) --- 490 203.54.180.238 465 40.115.94.245 444 93.123.109.166 126 103.104.164.114 84 103.104.165.99 58 180.181.236.49 57 20.220.10.235 50 13.213.5.99 43 20.48.160.90 28 150.228.243.152 17 147.161.213.78 11 118.127.40.55 9 147.161.213.71 7 84.235.250.94 7 103.168.66.237 --- top request paths across all vhosts (last 3 min) --- 238 POST /functions.php 135 GET /api/getItem/LWHG2001KG 102 GET /app/ajax.php 91 GET /wp/wp/v2/posts/999999 91 GET /heartbeat.php 63 GET /index.php 60 GET /factory_session_checker.php 55 POST /wp/ 37 POST /wp/index.php 31 GET /factory_session_processed_qty.php 31 GET /factory_session_joiner.php 25 POST /plugins/csvexporter/plugin.php 23 POST /clienteditsave.php 21 POST /app/ajax/selectFilterSingle.php 19 POST /wp//wp-json/batch/v1 18 POST /wp/wp-json/Batch/v1 18 POST /wp/wp-json/batch/v1/ 18 POST /wp/wp-json/batch/v1 18 POST /wp/wordpress/wp-json/batch/v1 18 POST /wp/blog/wp-json/batch/v1 --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 238 POST /functions.php 102 GET /app/ajax.php 61 GET /index.php 25 POST /plugins/csvexporter/plugin.php 23 POST /clienteditsave.php 21 POST /app/ajax/selectFilterSingle.php 14 POST /quoteditsave.php 14 POST /app/ajax.php 12 POST /app/ajax/selectFilter.php 11 POST /jobeditsave.php 10 POST /logsave.php 7 POST /inveditsave.php -- last 10 requests -- 203.54.180.238 - - [31/Aug/2026:12:15:35 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=activities&date=04-09-2026&company=p%20&%20t" "Mozilla/5.0 (Windows NT 203.54.180.238 - - [31/Aug/2026:12:15:36 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 203.54.180.238 - - [31/Aug/2026:12:15:36 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=invedit&id=6439&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x 203.54.180.238 - - [31/Aug/2026:12:15:36 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=inventory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 203.54.180.238 - - [31/Aug/2026:12:15:37 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29551&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [31/Aug/2026:12:15:37 +1000] "POST /quoteditsave.php?call=addLineItem HTTP/1.1" 200 279 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78933§ionid=0" "Mozilla/5.0 (Windows NT 10.0; 203.54.180.238 - - [31/Aug/2026:12:15:37 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78933§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 203.54.180.238 - - [31/Aug/2026:12:15:37 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=billadd&billid=19848" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW 180.181.236.49 - - [31/Aug/2026:12:15:37 +1000] "GET /index.php?page=invedit&id=5897 HTTP/1.1" 200 35387 "https://my.evolutionerp.com.au/index.php?page=inveditkit&id=2810&string=" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 180.181.236.49 - - [31/Aug/2026:12:15:38 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinvedit%26id%3D5897%26tab%3Dgeneraltab&call=getUserSetting&caller=ajaxSubmitLocal&seq=17961031000 HTTP/1.1" 200 109 "https://my. == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 135 GET /api/getItem/LWHG2001KG 15 GET /api/getItem/LWPB2001KG 9 GET /api/getItem/NA 4 GET /api/getItem/PWFBW3151KG 2 GET /api/getItem/SHSG8989508 2 GET /api/getItem/SHSG8989358 2 GET /api/getItem/SHSG8989258 2 GET /api/getItem/SHSG8989208 2 GET /api/getItem/SHSG7575508 2 GET /api/getItem/SHSG757540-8 2 GET /api/getItem/SHSG757530-8 2 GET /api/getItem/SHSG757525-8 -- last 10 requests -- 40.115.94.245 - - [31/Aug/2026:12:15:36 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:12:15:36 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:12:15:36 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:12:15:36 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:12:15:36 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:12:15:36 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:12:15:36 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:12:15:36 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:12:15:36 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:12:15:36 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 91 GET /heartbeat.php 60 GET /factory_session_checker.php 31 GET /factory_session_processed_qty.php 31 GET /factory_session_joiner.php 1 POST /factory_functions.php 1 GET /index.php -- last 10 requests -- 203.54.180.238 - - [31/Aug/2026:12:15:24 +1000] "GET /factory_session_joiner.php?id=34981 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [31/Aug/2026:12:15:25 +1000] "GET /heartbeat.php?sentAt=1788142519&bytes=106,148,227,183&_=1788137334430 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [31/Aug/2026:12:15:27 +1000] "GET /heartbeat.php?sentAt=1788142528&bytes=106,148,227,192&_=1788141208031 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=8 203.54.180.238 - - [31/Aug/2026:12:15:29 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [31/Aug/2026:12:15:30 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [31/Aug/2026:12:15:30 +1000] "GET /heartbeat.php?sentAt=1788142530&bytes=106,148,227,194&_=1788140245335 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [31/Aug/2026:12:15:31 +1000] "POST /factory_functions.php HTTP/1.1" 302 20 "https://portal.evolutionerp.com.au/index.php?page=inventory_picking_goods&pickid=37958&seq=3925775502570" "Mozilla/5.0 (Linux 203.54.180.238 - - [31/Aug/2026:12:15:31 +1000] "GET /index.php?page=inventory_picking_goods&pickid=37958 HTTP/1.1" 200 11227 "https://portal.evolutionerp.com.au/index.php?page=inventory_picking_goods&pickid=37958&seq=39 203.54.180.238 - - [31/Aug/2026:12:15:32 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 124 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [31/Aug/2026:12:15:32 +1000] "GET /factory_session_joiner.php?id=34974 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe --- last 30 samples (run-up to this incident) --- 2026-08-31 12:13:08 L1=1.33 run=5 blk=0 avail=7002 (50.8%) swpO=0 conn=5 myRSS=3419 php=8 phpRSS=683 ap=82 tcp=74 topuser=madalice 2026-08-31 12:13:17 L1=1.59 run=2 blk=0 avail=7180 (52.1%) swpO=0 conn=2 myRSS=3419 php=6 phpRSS=528 ap=72 tcp=76 topuser=madalice 2026-08-31 12:13:18 L1=1.59 run=2 blk=0 avail=7167 (52.0%) swpO=0 conn=5 myRSS=3419 php=6 phpRSS=545 ap=72 tcp=76 topuser=madalice 2026-08-31 12:13:27 L1=1.75 run=4 blk=0 avail=7243 (52.6%) swpO=0 conn=2 myRSS=3419 php=8 phpRSS=604 ap=62 tcp=63 topuser=madalice 2026-08-31 12:13:28 L1=1.75 run=3 blk=0 avail=7202 (52.3%) swpO=0 conn=5 myRSS=3419 php=7 phpRSS=609 ap=62 tcp=62 topuser=madalice 2026-08-31 12:13:38 L1=1.86 run=4 blk=0 avail=7388 (53.6%) swpO=1 conn=2 myRSS=3419 php=7 phpRSS=511 ap=52 tcp=54 topuser=madalice 2026-08-31 12:13:38 L1=1.86 run=2 blk=0 avail=7442 (54.0%) swpO=1 conn=5 myRSS=3419 php=6 phpRSS=433 ap=52 tcp=49 topuser=madalice 2026-08-31 12:13:48 L1=1.96 run=7 blk=0 avail=7194 (52.2%) swpO=4 conn=5 myRSS=3419 php=13 phpRSS=878 ap=46 tcp=58 topuser=evolution 2026-08-31 12:13:48 L1=1.96 run=3 blk=0 avail=7416 (53.8%) swpO=4 conn=5 myRSS=3419 php=7 phpRSS=473 ap=46 tcp=63 topuser=madalice 2026-08-31 12:13:58 L1=1.97 run=5 blk=0 avail=7554 (54.8%) swpO=0 conn=5 myRSS=3419 php=7 phpRSS=334 ap=56 tcp=56 topuser=evolution 2026-08-31 12:13:58 L1=1.97 run=6 blk=0 avail=7541 (54.7%) swpO=0 conn=5 myRSS=3419 php=8 phpRSS=385 ap=55 tcp=56 topuser=evolution 2026-08-31 12:14:08 L1=2.21 run=4 blk=0 avail=7454 (54.1%) swpO=0 conn=5 myRSS=3419 php=8 phpRSS=506 ap=48 tcp=62 topuser=evolution 2026-08-31 12:14:08 L1=2.21 run=5 blk=0 avail=7511 (54.5%) swpO=0 conn=6 myRSS=3419 php=8 phpRSS=448 ap=48 tcp=58 topuser=evolution 2026-08-31 12:14:18 L1=2.64 run=3 blk=0 avail=7553 (54.8%) swpO=0 conn=5 myRSS=3419 php=7 phpRSS=334 ap=51 tcp=60 topuser=evolution 2026-08-31 12:14:18 L1=2.64 run=7 blk=0 avail=7374 (53.5%) swpO=0 conn=6 myRSS=3419 php=9 phpRSS=591 ap=50 tcp=63 topuser=evolution 2026-08-31 12:14:28 L1=2.39 run=1 blk=0 avail=7663 (55.6%) swpO=0 conn=5 myRSS=3419 php=4 phpRSS=230 ap=43 tcp=48 topuser=madalice 2026-08-31 12:14:28 L1=2.39 run=4 blk=0 avail=7556 (54.8%) swpO=0 conn=6 myRSS=3419 php=5 phpRSS=354 ap=42 tcp=48 topuser=madalice 2026-08-31 12:14:38 L1=3.05 run=4 blk=0 avail=6500 (47.2%) swpO=0 conn=1 myRSS=3419 php=14 phpRSS=1528 ap=53 tcp=82 topuser=madalice 2026-08-31 12:14:38 L1=3.05 run=6 blk=0 avail=6365 (46.2%) swpO=0 conn=4 myRSS=3419 php=17 phpRSS=1687 ap=69 tcp=79 topuser=madalice 2026-08-31 12:14:48 L1=3.05 run=4 blk=0 avail=5949 (43.2%) swpO=1 conn=5 myRSS=3419 php=15 phpRSS=1845 ap=94 tcp=71 topuser=madalice 2026-08-31 12:14:49 L1=3.05 run=3 blk=0 avail=6010 (43.6%) swpO=1 conn=3 myRSS=3419 php=13 phpRSS=1731 ap=93 tcp=68 topuser=madalice 2026-08-31 12:14:58 L1=2.89 run=9 blk=0 avail=5965 (43.3%) swpO=0 conn=4 myRSS=3419 php=16 phpRSS=1920 ap=84 tcp=67 topuser=madalice 2026-08-31 12:14:59 L1=2.89 run=2 blk=0 avail=6127 (44.5%) swpO=0 conn=4 myRSS=3419 php=14 phpRSS=1572 ap=83 tcp=62 topuser=madalice 2026-08-31 12:15:08 L1=2.75 run=8 blk=0 avail=6104 (44.3%) swpO=4 conn=5 myRSS=3419 php=20 phpRSS=1964 ap=73 tcp=55 topuser=madalice 2026-08-31 12:15:09 L1=2.75 run=5 blk=0 avail=6214 (45.1%) swpO=4 conn=3 myRSS=3419 php=19 phpRSS=1833 ap=73 tcp=54 topuser=madalice 2026-08-31 12:15:18 L1=3.57 run=10 blk=0 avail=5767 (41.9%) swpO=1099 conn=9 myRSS=3385 php=23 phpRSS=2250 ap=63 tcp=70 topuser=madalice 2026-08-31 12:15:19 L1=3.57 run=17 blk=0 avail=5746 (41.7%) swpO=1099 conn=9 myRSS=3385 php=22 phpRSS=2339 ap=63 tcp=69 topuser=madalice 2026-08-31 12:15:28 L1=4.32 run=5 blk=0 avail=6113 (44.4%) swpO=0 conn=2 myRSS=3385 php=17 phpRSS=1811 ap=55 tcp=54 topuser=madalice 2026-08-31 12:15:29 L1=4.32 run=10 blk=0 avail=6097 (44.3%) swpO=0 conn=2 myRSS=3385 php=20 phpRSS=2012 ap=55 tcp=53 topuser=madalice 2026-08-31 12:15:39 L1=3.80 run=2 blk=0 avail=6272 (45.5%) swpO=0 conn=1 myRSS=3385 php=13 phpRSS=1654 ap=49 tcp=51 topuser=madalice