INCIDENT 2026-09-02 12:10:16 trigger: php_rss=1557MB ================================================================== load: 1.76 1.59 1.51 2/736 2776621 ncpu:10 mem_avail: 5852MB/13777MB (42.5%) swap_used:2395MB swapout:0/s blocked(D):0 running:4 iowait:0.2% steal:0.0% php: 14 procs / 1557MB heaviest user: madalice (8 procs, 1230MB) apache: 117 procs tcp_estab: 54 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3474 nobody 116 2107 madalice 8 1230 root 249 886 mailman 20 298 olympic 2 216 netdata 7 204 dovenull 6 68 evolution 8 63 wp-toolkit 3 57 dovecot 3 28 alison 2 28 aaa 2 28 zabbix 1 19 cpanellogin 1 18 mailnull 2 17 lowrange 1 14 kurri 1 13 named 1 11 nscd 1 4 --- php workers by user --- USER PROCS RSS_MB madalice 8 1230 olympic 2 219 root 1 25 evolution 1 8 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5078 MB Active(file): 4546 MB Inactive(file): 699 MB Dirty: 162 MB Writeback: 0 MB SReclaimable: 450 MB CommitLimit: 10984 MB Committed_AS: 10013 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2725882 root 10:15 1356 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 2762494 root 00:16 1392 /bin/sh -c bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || : 3926885 root 1-09:47:48 5952 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 3557732 11.0 Ssl 5-09:51:08 /usr/sbin/mariadbd 508924 1 netdata 183944 2.0 Ssl 5-09:50:37 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 706070 655564 root 183028 0.1 S 09:32:18 spamd child 2761607 3929444 madalice 162856 12.6 S 01:17 php-fpm: pool madalice_com_au 2761969 3929444 madalice 162296 13.1 S 00:55 php-fpm: pool madalice_com_au 2762303 3929444 madalice 159864 8.0 S 00:32 php-fpm: pool madalice_com_au 2761948 3929444 madalice 159636 14.0 S 00:57 php-fpm: pool madalice_com_au 2761960 3929444 madalice 156704 8.7 S 00:56 php-fpm: pool madalice_com_au 2762299 3929444 madalice 155488 8.0 S 00:32 php-fpm: pool madalice_com_au 2762301 3929444 madalice 151876 7.9 S 00:32 php-fpm: pool madalice_com_au 2762300 3929444 madalice 151796 8.0 S 00:32 php-fpm: pool madalice_com_au 706071 655564 root 149684 0.0 S 09:32:18 spamd child 2776573 2762101 olympic 135116 52.0 S 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 655564 1 root 114196 0.0 Ss 09:46:54 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2776589 2761694 olympic 93768 53.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509236 509098 root 43984 0.0 Sl 5-09:50:34 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 41704 0.1 Ss 42-09:29:00 cpsrvd (SSL) - waiting for connections 1469 1 root 38392 0.1 Ss 65-02:00:29 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3929420 1 wp-toolkit 37172 0.0 Ss 1-09:47:39 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 654927 1 root 28108 0.0 Ss 09:47:25 lfd - sleeping 509266 1 root 27332 0.0 Ss 5-09:50:34 /usr/lib/systemd/systemd-journald 3929444 1 root 26132 0.0 Ss 1-09:47:39 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 2740170 506832 nobody 23528 0.0 S 09:50 /usr/sbin/httpd -k start 2759774 506832 nobody 22804 0.0 S 03:29 /usr/sbin/httpd -k start 2743440 506832 nobody 22744 0.0 S 05:57 /usr/sbin/httpd -k start 2758468 506832 nobody 22716 0.0 S 04:42 /usr/sbin/httpd -k start 1463 1 root 22560 0.0 Ss 65-02:00:29 tailwatchd 2761677 506832 nobody 22344 0.1 S 01:15 /usr/sbin/httpd -k start 2743043 506832 nobody 22148 0.0 S 06:22 /usr/sbin/httpd -k start 2759265 506832 nobody 21808 0.0 S 04:00 /usr/sbin/httpd -k start 2740916 506832 nobody 21444 0.0 S 09:03 /usr/sbin/httpd -k start 2760498 506832 nobody 21420 0.0 S 02:40 /usr/sbin/httpd -k start 2759865 506832 nobody 21356 0.0 S 03:24 /usr/sbin/httpd -k start 2761402 506832 nobody 21312 0.0 S 01:36 /usr/sbin/httpd -k start 2759266 506832 nobody 21156 0.0 S 04:00 /usr/sbin/httpd -k start 2760541 506832 nobody 21116 0.0 S 02:38 /usr/sbin/httpd -k start 2762128 506832 nobody 21048 0.0 S 00:43 /usr/sbin/httpd -k start 2760524 506832 nobody 20852 0.0 S 02:39 /usr/sbin/httpd -k start 2760322 506832 nobody 20772 0.0 S 02:52 /usr/sbin/httpd -k start 2760536 506832 nobody 20772 0.0 S 02:38 /usr/sbin/httpd -k start 2762157 506832 nobody 20728 0.0 S 00:41 /usr/sbin/httpd -k start 2762111 506832 nobody 20644 0.0 S 00:44 /usr/sbin/httpd -k start 2762105 506832 nobody 20528 0.0 S 00:44 /usr/sbin/httpd -k start 2761693 506832 nobody 20484 0.0 S 01:14 /usr/sbin/httpd -k start 2762231 506832 nobody 20396 0.0 S 00:40 /usr/sbin/httpd -k start 2762101 506832 nobody 20364 0.0 S 00:45 /usr/sbin/httpd -k start 2762219 506832 nobody 20312 0.0 S 00:40 /usr/sbin/httpd -k start 2762147 506832 nobody 20304 0.0 S 00:42 /usr/sbin/httpd -k start 2762173 506832 nobody 20236 0.0 S 00:41 /usr/sbin/httpd -k start 2762000 506832 nobody 20220 0.1 S 00:53 /usr/sbin/httpd -k start 2762175 506832 nobody 20168 0.0 S 00:41 /usr/sbin/httpd -k start 2761382 506832 nobody 20164 0.0 S 01:38 /usr/sbin/httpd -k start 2761403 506832 nobody 20104 0.1 S 01:36 /usr/sbin/httpd -k start 2760539 506832 nobody 19964 0.0 S 02:38 /usr/sbin/httpd -k start 2762171 506832 nobody 19832 0.1 S 00:41 /usr/sbin/httpd -k start 2760183 506832 nobody 19812 0.0 S 03:03 /usr/sbin/httpd -k start 483898 1 zabbix 19756 0.2 Ssl 5-09:51:51 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 3929564 1 wp-toolkit 19756 0.0 Ss 1-09:47:38 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 2762210 506832 nobody 19744 0.0 S 00:40 /usr/sbin/httpd -k start 2762262 506832 nobody 19732 0.0 S 00:39 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 18045351 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 452 evolution/portal.evolutionerp.com.au-ssl_log 255 evolution/app.evolutionerp.com.au-ssl_log 119 madalice/madalice.com.au-ssl_log 25 tubesupplies/tubesupplies.com.au 4 tubesupplies/tubesupplies.com.au-ssl_log 4 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 492 203.54.180.238 119 40.115.94.245 76 103.104.165.99 47 124.168.5.234 30 150.228.151.47 28 103.104.164.114 19 2001:8004:14b3:854f:95d1:bdfe:1050:32b5 8 62.60.130.198 8 1.144.107.82 6 182.239.240.254 4 147.161.213.78 4 120.150.225.142 3 40.77.167.132 2 207.46.13.92 2 180.181.236.49 --- top request paths across all vhosts (last 3 min) --- 170 POST /functions.php 104 GET /factory_session_checker.php 90 GET /app/ajax.php 60 GET /api/getItem/LWPG2001KG 54 GET /factory_session_processed_qty.php 54 GET /factory_session_joiner.php 48 GET /index.php 40 GET /heartbeat.php 29 POST /plugins/csvexporter/plugin.php 18 POST /app/ajax/selectFilterSingle.php 14 POST /quoteditsave.php 10 POST /app/ajax/selectFilter.php 9 POST /clienteditsave.php 8 POST /inveditsave.php 8 POST /app/ajax.php 8 GET /api/getItem/LWHG2001KG 7 POST //functions.php 6 POST /staffeditsave.php 6 POST /itemModify.php 5 POST /staffqualaddsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 170 POST /functions.php 90 GET /app/ajax.php 47 GET /index.php 29 POST /plugins/csvexporter/plugin.php 18 POST /app/ajax/selectFilterSingle.php 14 POST /quoteditsave.php 10 POST /app/ajax/selectFilter.php 9 POST /clienteditsave.php 8 POST /inveditsave.php 8 POST /app/ajax.php 7 POST //functions.php 6 POST /staffeditsave.php -- last 10 requests -- 203.54.180.238 - - [02/Sep/2026:12:10:14 +1000] "GET /index.php?page=invoiceadd&invoiceid=40642 HTTP/1.1" 200 49477 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29638&tab=invoicingtab" "Mozilla/5.0 (Windows 203.54.180.238 - - [02/Sep/2026:12:10:14 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=40642&tab=maintab" "Mozilla/5.0 (Windows NT 10.0; 203.54.180.238 - - [02/Sep/2026:12:10:15 +1000] "POST /clienteditsave.php?clientid=20914&call=getCategoryDiscounts HTTP/1.1" 200 25 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=40642&tab=maintab" " 203.54.180.238 - - [02/Sep/2026:12:10:15 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=17215731744 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/index 203.54.180.238 - - [02/Sep/2026:12:10:15 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=15255919767 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/inde 203.54.180.238 - - [02/Sep/2026:12:10:15 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Dinvoiceadd%26invoiceid%3D40642%26tab%3Dmaintab&call=getUserSetting&caller=ajaxSubmitLocal&seq=13151970635 HTTP 203.54.180.238 - - [02/Sep/2026:12:10:15 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinvoiceadd%26invoiceid%3D40642%26tab%3Dmaintab&call=getUserSetting&caller=ajaxSubmitLocal&seq=11132279047 HTTP/1.1" 200 113 "htt 203.54.180.238 - - [02/Sep/2026:12:10:15 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=inventory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 203.54.180.238 - - [02/Sep/2026:12:10:15 +1000] "POST /clienteditsave.php?call=getSettings HTTP/1.1" 200 60 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=40642&tab=maintab" "Mozilla/5.0 (Windows NT 203.54.180.238 - - [02/Sep/2026:12:10:16 +1000] "POST /inveditsave.php?call=fetch_inventory HTTP/1.1" 200 4554 "https://my.evolutionerp.com.au/index.php?page=inventory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 104 GET /factory_session_checker.php 54 GET /factory_session_processed_qty.php 54 GET /factory_session_joiner.php 40 GET /heartbeat.php 1 POST /portal/register 1 POST /factory_functions.php 1 GET /index.php -- last 10 requests -- 203.54.180.238 - - [02/Sep/2026:12:10:08 +1000] "GET /factory_session_joiner.php?id=35036 HTTP/1.1" 200 92 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [02/Sep/2026:12:10:09 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:12:10:09 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:12:10:10 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:12:10:11 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:12:10:10 +1000] "GET /heartbeat.php?sentAt=1788315010&bytes=106,151,133,130&_=1788314159801 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=5 203.54.180.238 - - [02/Sep/2026:12:10:13 +1000] "GET /factory_session_joiner.php?id=35041 HTTP/1.1" 200 79 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [02/Sep/2026:12:10:13 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 127 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [02/Sep/2026:12:10:13 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 123 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [02/Sep/2026:12:10:13 +1000] "GET /factory_session_joiner.php?id=35037 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 60 GET /api/getItem/LWPG2001KG 8 GET /api/getItem/LWHG2001KG 4 GET /api/getItem/PWFBW3151KG 2 GET /api/getItem/CLPGNSTD32250KK 1 GET /api/getItem/SHSG757520-SP25-8 1 GET /api/getItem/SHSG757520-DP25-8-DI 1 GET /api/getItem/SHSG757520-DP25-8 1 GET /api/getItem/SHSG656520-SP25-8 1 GET /api/getItem/SHSG656520-DP25-8-DI 1 GET /api/getItem/SHSG656520-DP25-8 1 GET /api/getItem/SHSG505016-SP25-8 1 GET /api/getItem/SHSG505016-SP19-8 -- last 10 requests -- 40.115.94.245 - - [02/Sep/2026:12:09:20 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:12:09:20 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:12:09:21 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:12:09:21 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:12:09:21 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:12:09:21 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:12:09:21 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:12:09:21 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:12:09:22 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:12:09:22 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" --- last 30 samples (run-up to this incident) --- 2026-09-02 12:07:46 L1=1.71 run=2 blk=0 avail=7409 (53.8%) swpO=0 conn=2 myRSS=3487 php=5 phpRSS=263 ap=51 tcp=43 topuser=madalice 2026-09-02 12:07:55 L1=1.60 run=2 blk=0 avail=7471 (54.2%) swpO=0 conn=2 myRSS=3487 php=5 phpRSS=295 ap=45 tcp=47 topuser=madalice 2026-09-02 12:07:56 L1=1.60 run=3 blk=0 avail=7506 (54.5%) swpO=0 conn=2 myRSS=3487 php=5 phpRSS=255 ap=45 tcp=43 topuser=madalice 2026-09-02 12:08:05 L1=2.04 run=4 blk=0 avail=7418 (53.8%) swpO=3 conn=2 myRSS=3487 php=7 phpRSS=431 ap=45 tcp=41 topuser=madalice 2026-09-02 12:08:06 L1=2.04 run=1 blk=0 avail=7534 (54.7%) swpO=3 conn=2 myRSS=3487 php=4 phpRSS=228 ap=44 tcp=39 topuser=madalice 2026-09-02 12:08:15 L1=1.87 run=2 blk=0 avail=7545 (54.8%) swpO=0 conn=2 myRSS=3487 php=4 phpRSS=237 ap=40 tcp=51 topuser=madalice 2026-09-02 12:08:16 L1=1.87 run=2 blk=0 avail=7480 (54.3%) swpO=0 conn=3 myRSS=3487 php=4 phpRSS=301 ap=41 tcp=49 topuser=madalice 2026-09-02 12:08:25 L1=2.06 run=2 blk=0 avail=7366 (53.5%) swpO=0 conn=2 myRSS=3487 php=5 phpRSS=418 ap=43 tcp=53 topuser=evolution 2026-09-02 12:08:26 L1=2.06 run=1 blk=0 avail=7522 (54.6%) swpO=0 conn=3 myRSS=3487 php=4 phpRSS=229 ap=43 tcp=50 topuser=madalice 2026-09-02 12:08:35 L1=1.89 run=1 blk=0 avail=7543 (54.8%) swpO=0 conn=2 myRSS=3487 php=4 phpRSS=229 ap=41 tcp=44 topuser=madalice 2026-09-02 12:08:36 L1=1.89 run=2 blk=0 avail=7547 (54.8%) swpO=0 conn=3 myRSS=3487 php=4 phpRSS=229 ap=40 tcp=43 topuser=madalice 2026-09-02 12:08:45 L1=1.83 run=1 blk=0 avail=7662 (55.6%) swpO=0 conn=2 myRSS=3487 php=3 phpRSS=74 ap=44 tcp=44 topuser=evolution 2026-09-02 12:08:46 L1=1.83 run=2 blk=0 avail=7664 (55.6%) swpO=0 conn=3 myRSS=3487 php=4 phpRSS=116 ap=43 tcp=42 topuser=evolution 2026-09-02 12:08:55 L1=1.77 run=1 blk=0 avail=7696 (55.9%) swpO=0 conn=2 myRSS=3487 php=4 phpRSS=96 ap=38 tcp=47 topuser=evolution 2026-09-02 12:08:56 L1=1.77 run=1 blk=0 avail=7695 (55.9%) swpO=0 conn=3 myRSS=3487 php=3 phpRSS=73 ap=38 tcp=43 topuser=evolution 2026-09-02 12:09:06 L1=1.87 run=2 blk=0 avail=7315 (53.1%) swpO=0 conn=2 myRSS=3487 php=5 phpRSS=420 ap=53 tcp=51 topuser=corpkicks 2026-09-02 12:09:06 L1=1.87 run=2 blk=0 avail=7244 (52.6%) swpO=0 conn=3 myRSS=3487 php=5 phpRSS=481 ap=52 tcp=52 topuser=corpkicks 2026-09-02 12:09:16 L1=1.66 run=1 blk=0 avail=7546 (54.8%) swpO=1 conn=2 myRSS=3487 php=4 phpRSS=208 ap=47 tcp=46 topuser=madalice 2026-09-02 12:09:16 L1=1.66 run=3 blk=1 avail=7520 (54.6%) swpO=1 conn=2 myRSS=3487 php=5 phpRSS=262 ap=46 tcp=47 topuser=madalice 2026-09-02 12:09:26 L1=1.41 run=3 blk=0 avail=6979 (50.7%) swpO=0 conn=2 myRSS=3487 php=8 phpRSS=871 ap=46 tcp=55 topuser=madalice 2026-09-02 12:09:26 L1=1.41 run=2 blk=0 avail=6993 (50.8%) swpO=0 conn=2 myRSS=3487 php=6 phpRSS=711 ap=47 tcp=52 topuser=madalice 2026-09-02 12:09:36 L1=1.34 run=2 blk=0 avail=6693 (48.6%) swpO=0 conn=2 myRSS=3487 php=8 phpRSS=716 ap=109 tcp=188 topuser=madalice 2026-09-02 12:09:36 L1=1.34 run=1 blk=0 avail=6500 (47.2%) swpO=0 conn=2 myRSS=3487 php=6 phpRSS=637 ap=141 tcp=187 topuser=madalice 2026-09-02 12:09:46 L1=1.44 run=3 blk=0 avail=5791 (42.0%) swpO=767 conn=4 myRSS=3474 php=13 phpRSS=1383 ap=148 tcp=109 topuser=madalice 2026-09-02 12:09:46 L1=1.44 run=5 blk=0 avail=5779 (41.9%) swpO=767 conn=2 myRSS=3474 php=13 phpRSS=1421 ap=147 tcp=108 topuser=madalice 2026-09-02 12:09:56 L1=1.29 run=2 blk=0 avail=5873 (42.6%) swpO=0 conn=4 myRSS=3474 php=11 phpRSS=1309 ap=138 tcp=46 topuser=madalice 2026-09-02 12:09:56 L1=1.29 run=5 blk=0 avail=5940 (43.1%) swpO=0 conn=2 myRSS=3474 php=11 phpRSS=1241 ap=137 tcp=58 topuser=madalice 2026-09-02 12:10:06 L1=1.99 run=3 blk=0 avail=5930 (43.0%) swpO=0 conn=4 myRSS=3474 php=12 phpRSS=1331 ap=127 tcp=45 topuser=madalice 2026-09-02 12:10:06 L1=1.99 run=2 blk=0 avail=5948 (43.2%) swpO=0 conn=2 myRSS=3474 php=10 phpRSS=1266 ap=127 tcp=43 topuser=madalice 2026-09-02 12:10:16 L1=1.76 run=4 blk=0 avail=5852 (42.5%) swpO=0 conn=4 myRSS=3474 php=14 phpRSS=1557 ap=117 tcp=54 topuser=madalice