INCIDENT 2026-08-31 12:18:40 trigger: php_rss=1644MB ================================================================== load: 2.43 2.45 2.27 7/699 971697 ncpu:10 mem_avail: 6545MB/13777MB (47.5%) swap_used:2160MB swapout:0/s blocked(D):0 running:8 iowait:0.1% steal:0.0% php: 22 procs / 1644MB heaviest user: madalice (10 procs, 1008MB) apache: 57 procs tcp_estab: 59 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3388 madalice 10 1009 nobody 56 950 root 249 931 evolution 16 516 netdata 7 209 customc 1 130 mailman 20 74 cpanellogin 1 62 dovenull 6 46 infinium 1 43 mailnull 3 40 wp-toolkit 3 20 zabbix 1 19 dovecot 3 18 lowrange 1 14 alison 1 14 kurri 1 12 named 1 11 nscd 1 4 --- php workers by user --- USER PROCS RSS_MB madalice 10 1009 evolution 11 533 customc 1 132 root 1 22 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4985 MB Active(file): 4314 MB Inactive(file): 849 MB Dirty: 2 MB Writeback: 0 MB SReclaimable: 487 MB CommitLimit: 10984 MB Committed_AS: 9919 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 3-10:00:01 4140 /usr/bin/imunify-agent-proxy 896009 root 18:39 1268 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 3469392 8.5 Ssl 3-09:59:30 /usr/sbin/mariadbd 3036527 3002570 root 197640 0.1 S 09:46:58 spamd child 508924 1 netdata 190468 1.9 Ssl 3-09:58:59 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 969833 510022 madalice 174540 12.3 S 01:24 php-fpm: pool madalice_com_au 969838 510022 madalice 157904 10.7 S 01:24 php-fpm: pool madalice_com_au 971642 969857 customc 143376 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 3002570 1 root 132380 0.0 Ss 09:55:54 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3036528 3002570 root 123444 0.0 S 09:46:58 spamd child 971667 971313 evolution 108284 0.0 R 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 969832 510022 madalice 107240 11.7 S 01:24 php-fpm: pool madalice_com_au 969844 510022 madalice 101032 10.6 S 01:23 php-fpm: pool madalice_com_au 969840 510022 madalice 100476 12.2 S 01:23 php-fpm: pool madalice_com_au 969842 510022 madalice 100372 10.9 S 01:23 php-fpm: pool madalice_com_au 970835 510022 madalice 97568 10.9 S 00:49 php-fpm: pool madalice_com_au 970832 510022 madalice 95872 12.3 S 00:49 php-fpm: pool madalice_com_au 971617 951913 evolution 69100 10.0 S 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 971626 950253 evolution 66888 14.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 971668 969799 evolution 66824 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 509640 508992 root 64252 0.0 Sl 3-09:58:54 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 873062 1353308 cpanellogin 63784 0.0 S 27:22 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 971702 968303 evolution 63324 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 509266 1 root 61460 0.0 Ss 3-09:58:56 /usr/lib/systemd/systemd-journald 969835 510022 madalice 54008 11.0 R 01:24 php-fpm: pool madalice_com_au 969831 510022 madalice 51428 10.7 S 01:24 php-fpm: pool madalice_com_au 509236 509098 root 49144 0.0 Sl 3-09:58:56 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 949496 508511 infinium 44712 0.0 S 06:59 dovecot/imap 1353308 1 root 42008 0.1 Ss 40-09:37:22 cpsrvd (SSL) - waiting for connections 971663 971308 evolution 41120 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 971629 971618 evolution 40680 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 971628 969734 evolution 39704 4.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 971627 971609 evolution 39592 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 971624 971608 evolution 39132 2.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3001917 1 root 33852 0.0 Ss 09:56:26 lfd - sleeping 1463 1 root 23972 0.0 Ss 63-02:08:51 tailwatchd 510022 1 root 22556 0.0 Ss 3-09:58:52 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 950425 506832 nobody 22380 0.1 S 05:46 /usr/sbin/httpd -k start 950253 506832 nobody 21988 0.0 S 06:00 /usr/sbin/httpd -k start 968742 506832 nobody 21624 0.0 S 02:28 /usr/sbin/httpd -k start 951913 506832 nobody 21504 0.0 S 04:05 /usr/sbin/httpd -k start 951928 506832 nobody 21504 0.1 S 04:04 /usr/sbin/httpd -k start 1469 1 root 21496 0.1 Ss 63-02:08:51 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 969416 506832 nobody 21128 0.1 S 01:44 /usr/sbin/httpd -k start 969205 506832 nobody 20940 0.2 S 02:01 /usr/sbin/httpd -k start 970728 506832 nobody 20688 0.0 S 00:52 /usr/sbin/httpd -k start 969785 506832 nobody 20648 0.0 S 01:27 /usr/sbin/httpd -k start 483898 1 zabbix 20436 0.2 Ssl 3-10:00:13 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 970727 506832 nobody 20432 0.0 S 00:52 /usr/sbin/httpd -k start 969419 506832 nobody 20352 0.0 S 01:44 /usr/sbin/httpd -k start 969857 506832 nobody 20276 0.0 S 01:23 /usr/sbin/httpd -k start 970729 506832 nobody 20220 0.1 S 00:52 /usr/sbin/httpd -k start 968303 506832 nobody 20216 0.0 S 02:42 /usr/sbin/httpd -k start 969138 506832 nobody 20088 0.1 S 02:04 /usr/sbin/httpd -k start 952277 506832 nobody 20020 0.0 S 04:01 /usr/sbin/httpd -k start 950207 506832 nobody 19656 0.0 S 06:02 /usr/sbin/httpd -k start 970689 506832 nobody 19424 0.0 S 00:54 /usr/sbin/httpd -k start 969799 506832 nobody 19368 0.0 S 01:26 /usr/sbin/httpd -k start 969786 506832 nobody 19312 0.0 S 01:27 /usr/sbin/httpd -k start 970926 506832 nobody 19168 0.0 S 00:43 /usr/sbin/httpd -k start 951903 506832 nobody 19128 0.2 S 04:06 /usr/sbin/httpd -k start 969383 506832 nobody 19124 0.0 S 01:46 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 7723378 | root | 108-1481181613 | Execute | 1 | Sending data | SELECT jobs.id, jobs.pmId, jobs.clientid, jobs.company, jobs.status, jobs.suburb, jobs.new_flag, jobs.reference, jobs.cat, jobs.dateadded, jobs.price, jobs.nextaction, jobs.repId, contacts.code, contacts.company, contacts.lastname, contacts.firstname, contacts.trading_names, jobs.site, jobs | | 7723398 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 7723397 | root | 304-1779936994 | Execute | 0 | Sending data | SELECT purchases.id,purchases.createdate,purchases.date,purchases.status,purchaseitems.id as puritemid, purchaseitems.qty,purchaseitems.reqitemid,purchaseitems.status as status2 FROM purchaseitems,purchases WHERE purchaseitems.purchaseid=purchases.id AND purchaseitems.reqitemid='99' | | 7723392 | root | 108-1481181613 | Execute | 0 | Sending data | UPDATE quotes set total = (select SUM(round(cast(quoteitems.adjPrice as decimal(15,4))*quoteitems.qty,2)) from quoteitems where quoteitems.quoteid = quotes.id and quoteitems.status=1), type = ? where quotes.id = ? | +---------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 615 evolution/app.evolutionerp.com.au-ssl_log 288 evolution/portal.evolutionerp.com.au-ssl_log 207 kamcool/kamcool.com.au-ssl_log 183 madalice/madalice.com.au-ssl_log 112 vinesit/vinesit.com.au-ssl_log 112 coscom/coscom.com.au-ssl_log 70 corpkicks/corporatekicks.com.au-ssl_log 56 customc/customcentral.com.au-ssl_log 10 alison/alisonarts.com.au-ssl_log 7 aaa/aaadownunder.com.au-ssl_log 3 (total vhosts taking traffic: 11) --- top client IPs across all vhosts (last 3 min) --- 453 203.54.180.238 288 40.115.94.245 183 4.205.62.107 124 93.123.109.166 110 52.139.44.162 90 103.104.164.114 74 180.181.236.49 74 158.23.184.117 53 195.178.110.104 51 13.213.5.99 49 150.228.243.152 32 103.104.165.99 24 165.225.233.87 10 147.161.213.78 8 118.127.40.55 --- top request paths across all vhosts (last 3 min) --- 263 POST /functions.php 135 GET /api/getItem/LWFBW2001KG 77 GET /heartbeat.php 70 GET /api/getItem/LWPG2001KG 68 GET /app/ajax.php 63 GET /factory_session_checker.php 52 GET /index.php 51 GET / 32 GET /factory_session_processed_qty.php 32 GET /factory_session_joiner.php 23 POST /app/ajax/selectFilter.php 16 POST /plugins/csvexporter/plugin.php 16 POST /itemModify.php 15 POST /quoteditsave.php 15 POST /clienteditsave.php 15 POST /blog/ 13 POST /app/ajax.php 12 POST /app/ajax/selectFilterSingle.php 10 POST /blog/index.php 10 POST /app/ajax/contactFilter.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 263 POST /functions.php 68 GET /app/ajax.php 51 GET /index.php 23 POST /app/ajax/selectFilter.php 16 POST /plugins/csvexporter/plugin.php 16 POST /itemModify.php 15 POST /quoteditsave.php 15 POST /clienteditsave.php 13 POST /app/ajax.php 12 POST /app/ajax/selectFilterSingle.php 10 POST /app/ajax/contactFilter.php 8 POST /jobeditsave.php -- last 10 requests -- 203.54.180.238 - - [31/Aug/2026:12:18:37 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Djobregister&call=getUserSetting&caller=ajaxSubmitLocal&seq=10550442198 HTTP/1.1" 200 93 "https://my.evolutionerp.com.au/index.ph 180.181.236.49 - - [31/Aug/2026:12:18:37 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinvedit%26id%3D6028%26tab%3Dgeneraltab&call=getUserSetting&caller=ajaxSubmitLocal&seq=10285623667 HTTP/1.1" 200 110 "https://my. 203.54.180.238 - - [31/Aug/2026:12:18:38 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 180.181.236.49 - - [31/Aug/2026:12:18:38 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=invedit&id=6028&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x 182.239.240.254 - - [31/Aug/2026:12:18:38 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 980 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=4140" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi 182.239.240.254 - - [31/Aug/2026:12:18:38 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 51 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=114&tab=clienteditgeneral" "Mozilla/5.0 (Windows NT 203.54.180.238 - - [31/Aug/2026:12:18:39 +1000] "POST /clienteditsave.php?call=getClients HTTP/1.1" 200 59 "https://my.evolutionerp.com.au/index.php?page=clientlist" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 150.228.243.152 - - [31/Aug/2026:12:18:40 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=invedit&id=2903&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; 147.161.213.71 - - [31/Aug/2026:12:18:40 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=siteedit&siteid=1884" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW 203.54.180.238 - - [31/Aug/2026:12:18:40 +1000] "POST /quoteditsave.php?call=addLineItem HTTP/1.1" 200 320 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=78936" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 135 GET /api/getItem/LWFBW2001KG 70 GET /api/getItem/LWPG2001KG 2 GET /api/getItem/GEB12-DL 1 GET /api/getItem/SPHDG15040 1 GET /api/getItem/S6 1 GET /api/getItem/S5 1 GET /api/getItem/S4 1 GET /api/getItem/S3 1 GET /api/getItem/S2 1 GET /api/getItem/S1 1 GET /api/getItem/RGW90 1 GET /api/getItem/RGW80 -- last 10 requests -- 40.115.94.245 - - [31/Aug/2026:12:16:20 +1000] "GET /api/getItem/K100MSGB HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:12:16:20 +1000] "GET /api/getItem/K150MSGB HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:12:16:20 +1000] "GET /api/getItem/RGW90 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:12:16:21 +1000] "GET /api/getItem/RGW100 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:12:16:21 +1000] "GET /api/getItem/RGW120 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:12:16:21 +1000] "GET /api/getItem/RGW160 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:12:16:21 +1000] "GET /api/getItem/RGW117T HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:12:16:21 +1000] "GET /api/getItem/RGW80 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:12:16:21 +1000] "GET /api/getItem/GP150x200x8 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:12:16:21 +1000] "GET /api/getItem/K125MSGB HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 77 GET /heartbeat.php 63 GET /factory_session_checker.php 32 GET /factory_session_processed_qty.php 32 GET /factory_session_joiner.php 1 POST /portal/register 1 POST /factory_functions.php 1 GET /index.php -- last 10 requests -- 203.54.180.238 - - [31/Aug/2026:12:18:27 +1000] "GET /factory_session_joiner.php?id=34981 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [31/Aug/2026:12:18:28 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [31/Aug/2026:12:18:27 +1000] "GET /heartbeat.php?sentAt=1788142708&bytes=106,148,228,116&_=1788141208049 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=8 203.54.180.238 - - [31/Aug/2026:12:18:29 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [31/Aug/2026:12:18:30 +1000] "GET /heartbeat.php?sentAt=1788142710&bytes=106,148,228,118&_=1788140245353 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [31/Aug/2026:12:18:33 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [31/Aug/2026:12:18:33 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 124 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [31/Aug/2026:12:18:33 +1000] "GET /factory_session_joiner.php?id=34974 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [31/Aug/2026:12:18:34 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [31/Aug/2026:12:18:33 +1000] "GET /heartbeat.php?sentAt=1788142713&bytes=106,148,228,121&_=1788136103080 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=9 --- last 30 samples (run-up to this incident) --- 2026-08-31 12:16:19 L1=3.16 run=6 blk=0 avail=7203 (52.3%) swpO=0 conn=1 myRSS=3385 php=7 phpRSS=702 ap=42 tcp=35 topuser=madalice 2026-08-31 12:16:19 L1=3.16 run=5 blk=0 avail=7204 (52.3%) swpO=0 conn=2 myRSS=3385 php=8 phpRSS=745 ap=42 tcp=35 topuser=madalice 2026-08-31 12:16:29 L1=3.28 run=1 blk=0 avail=7355 (53.4%) swpO=0 conn=1 myRSS=3385 php=5 phpRSS=505 ap=40 tcp=40 topuser=madalice 2026-08-31 12:16:29 L1=3.28 run=1 blk=0 avail=7355 (53.4%) swpO=0 conn=2 myRSS=3385 php=5 phpRSS=505 ap=40 tcp=39 topuser=madalice 2026-08-31 12:16:39 L1=2.93 run=1 blk=0 avail=7750 (56.3%) swpO=0 conn=1 myRSS=3385 php=2 phpRSS=34 ap=42 tcp=45 topuser=root 2026-08-31 12:16:39 L1=2.93 run=1 blk=0 avail=7748 (56.2%) swpO=0 conn=2 myRSS=3385 php=2 phpRSS=34 ap=42 tcp=44 topuser=root 2026-08-31 12:16:49 L1=2.64 run=3 blk=0 avail=7566 (54.9%) swpO=0 conn=3 myRSS=3385 php=5 phpRSS=283 ap=44 tcp=40 topuser=madalice 2026-08-31 12:16:49 L1=2.64 run=6 blk=0 avail=7541 (54.7%) swpO=0 conn=2 myRSS=3385 php=6 phpRSS=342 ap=44 tcp=40 topuser=madalice 2026-08-31 12:16:59 L1=2.54 run=6 blk=0 avail=7491 (54.4%) swpO=0 conn=3 myRSS=3385 php=9 phpRSS=436 ap=49 tcp=53 topuser=evolution 2026-08-31 12:16:59 L1=2.54 run=6 blk=0 avail=7457 (54.1%) swpO=0 conn=2 myRSS=3385 php=10 phpRSS=481 ap=49 tcp=52 topuser=evolution 2026-08-31 12:17:09 L1=2.68 run=5 blk=0 avail=7157 (52.0%) swpO=0 conn=3 myRSS=3385 php=8 phpRSS=765 ap=44 tcp=52 topuser=corpkicks 2026-08-31 12:17:09 L1=2.68 run=7 blk=0 avail=7142 (51.8%) swpO=0 conn=5 myRSS=3385 php=8 phpRSS=675 ap=44 tcp=53 topuser=corpkicks 2026-08-31 12:17:19 L1=3.11 run=6 blk=0 avail=6066 (44.0%) swpO=0 conn=6 myRSS=3385 php=18 phpRSS=2004 ap=55 tcp=67 topuser=madalice 2026-08-31 12:17:20 L1=3.11 run=9 blk=0 avail=6022 (43.7%) swpO=0 conn=6 myRSS=3385 php=17 phpRSS=2009 ap=55 tcp=67 topuser=madalice 2026-08-31 12:17:30 L1=3.24 run=5 blk=0 avail=6159 (44.7%) swpO=0 conn=4 myRSS=3387 php=13 phpRSS=1806 ap=51 tcp=42 topuser=madalice 2026-08-31 12:17:30 L1=3.30 run=3 blk=0 avail=6224 (45.2%) swpO=0 conn=4 myRSS=3387 php=14 phpRSS=1775 ap=51 tcp=41 topuser=madalice 2026-08-31 12:17:40 L1=2.94 run=1 blk=0 avail=6367 (46.2%) swpO=0 conn=2 myRSS=3387 php=13 phpRSS=1659 ap=42 tcp=40 topuser=madalice 2026-08-31 12:17:40 L1=2.94 run=1 blk=0 avail=6367 (46.2%) swpO=0 conn=2 myRSS=3387 php=13 phpRSS=1659 ap=42 tcp=43 topuser=madalice 2026-08-31 12:17:50 L1=2.87 run=3 blk=0 avail=6395 (46.4%) swpO=0 conn=4 myRSS=3387 php=17 phpRSS=1722 ap=45 tcp=49 topuser=madalice 2026-08-31 12:17:50 L1=2.87 run=3 blk=0 avail=6527 (47.4%) swpO=0 conn=4 myRSS=3387 php=16 phpRSS=1569 ap=45 tcp=49 topuser=madalice 2026-08-31 12:18:00 L1=2.96 run=3 blk=0 avail=6180 (44.9%) swpO=0 conn=4 myRSS=3387 php=13 phpRSS=1772 ap=52 tcp=55 topuser=madalice 2026-08-31 12:18:00 L1=2.96 run=3 blk=0 avail=6125 (44.5%) swpO=0 conn=4 myRSS=3387 php=13 phpRSS=1825 ap=52 tcp=53 topuser=madalice 2026-08-31 12:18:10 L1=2.81 run=4 blk=0 avail=6242 (45.3%) swpO=0 conn=3 myRSS=3388 php=13 phpRSS=1749 ap=43 tcp=50 topuser=madalice 2026-08-31 12:18:10 L1=2.81 run=2 blk=0 avail=6344 (46.1%) swpO=0 conn=2 myRSS=3388 php=13 phpRSS=1657 ap=43 tcp=50 topuser=madalice 2026-08-31 12:18:20 L1=2.45 run=1 blk=0 avail=6817 (49.5%) swpO=0 conn=3 myRSS=3388 php=13 phpRSS=1125 ap=54 tcp=46 topuser=madalice 2026-08-31 12:18:20 L1=2.45 run=2 blk=0 avail=6853 (49.7%) swpO=0 conn=2 myRSS=3388 php=14 phpRSS=1116 ap=54 tcp=50 topuser=madalice 2026-08-31 12:18:30 L1=2.24 run=3 blk=0 avail=6854 (49.7%) swpO=0 conn=3 myRSS=3388 php=13 phpRSS=1127 ap=47 tcp=49 topuser=madalice 2026-08-31 12:18:30 L1=2.24 run=2 blk=0 avail=6805 (49.4%) swpO=0 conn=2 myRSS=3388 php=13 phpRSS=1176 ap=47 tcp=50 topuser=madalice 2026-08-31 12:18:40 L1=2.43 run=6 blk=0 avail=6646 (48.2%) swpO=0 conn=3 myRSS=3388 php=19 phpRSS=1390 ap=57 tcp=59 topuser=madalice 2026-08-31 12:18:40 L1=2.43 run=8 blk=0 avail=6545 (47.5%) swpO=0 conn=8 myRSS=3388 php=22 phpRSS=1644 ap=57 tcp=59 topuser=madalice