INCIDENT 2026-09-03 11:53:11 trigger: php_rss=1742MB ================================================================== load: 1.61 2.09 2.26 12/714 3611536 ncpu:10 mem_avail: 6907MB/13777MB (50.1%) swap_used:1436MB swapout:0/s blocked(D):0 running:15 iowait:0.0% steal:0.0% php: 16 procs / 1742MB heaviest user: madalice (10 procs, 1535MB) apache: 47 procs tcp_estab: 65 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2829 madalice 10 1620 root 253 980 nobody 46 801 netdata 8 254 wp-toolkit 3 98 cpanellogin 1 56 evolution 11 55 dovenull 6 27 mailman 20 26 mailnull 2 20 polkitd 1 15 zabbix 1 13 kurri 1 11 named 1 6 dovecot 3 6 nscd 1 4 cpanelconnecttrack 1 3 dbus 1 2 chrony 1 1 --- php workers by user --- USER PROCS RSS_MB madalice 10 1550 evolution 2 52 root 1 31 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5328 MB Active(file): 4113 MB Inactive(file): 1455 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 530 MB CommitLimit: 10984 MB Committed_AS: 8976 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 2-09:30:44 4904 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 2896992 14.4 Ssl 21:38:59 /usr/sbin/mariadbd 3611492 1542510 madalice 206432 74.6 R 00:03 php-fpm: pool madalice_com_au 3610379 1542510 madalice 202512 16.8 R 01:15 php-fpm: pool madalice_com_au 3611491 1542510 madalice 200216 73.6 R 00:03 php-fpm: pool madalice_com_au 1596047 1543747 root 199488 0.1 S 09:15:24 spamd child 3611490 1542510 madalice 196740 73.0 R 00:03 php-fpm: pool madalice_com_au 3611489 1542510 madalice 190104 70.0 R 00:03 php-fpm: pool madalice_com_au 1542443 1 netdata 179412 2.5 Ssl 09:30:49 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1596048 1543747 root 168504 0.0 S 09:15:24 spamd child 3611440 1542510 madalice 165228 48.6 R 00:08 php-fpm: pool madalice_com_au 3611493 1542510 madalice 161688 64.6 R 00:03 php-fpm: pool madalice_com_au 3611494 1542510 madalice 151332 63.3 R 00:03 php-fpm: pool madalice_com_au 3611488 1542510 madalice 142608 57.6 R 00:03 php-fpm: pool madalice_com_au 3611495 1542510 madalice 139596 52.0 R 00:03 php-fpm: pool madalice_com_au 1543747 1 root 119532 0.0 Ss 09:30:19 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3611533 3611500 evolution 66992 13.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 3192902 1353308 cpanellogin 57920 0.0 S 01:49:35 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale default_login_theme cpanel server_locale en 1542487 1 wp-toolkit 54220 0.0 Ss 09:30:49 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1542981 1542551 netdata 51080 0.1 Sl 09:30:45 /usr/libexec/netdata/plugins.d/go.d.plugin 1 509236 509098 root 48940 0.0 Sl 6-09:33:30 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 509266 1 root 43576 0.0 Ss 6-09:33:30 /usr/lib/systemd/systemd-journald 1353308 1 root 41636 0.1 Ss 43-09:11:56 cpsrvd (SSL) - waiting for connections 1469 1 root 41616 0.1 Ss 66-01:43:25 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542531 1 wp-toolkit 38584 0.0 Ss 09:30:48 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1542141 1 root 35712 0.0 Ss 09:30:52 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 1542510 1 root 32608 0.0 Ss 09:30:48 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1542072 1 root 32084 0.0 Ss 09:30:53 lfd - sleeping 1542188 1 root 25916 0.1 Ssl 09:30:51 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 1463 1 root 24680 0.0 Ss 66-01:43:25 tailwatchd 3593649 1 root 24412 0.0 S 03:37 /usr/sbin/exim -Mc 1x1wa9-0000000F4rw-1k13 3592934 506832 nobody 22304 0.0 S 04:23 /usr/sbin/httpd -k start 3594274 506832 nobody 21896 0.0 S 03:11 /usr/sbin/httpd -k start 3609934 506832 nobody 21780 0.1 S 01:43 /usr/sbin/httpd -k start 3594273 506832 nobody 21480 0.0 S 03:11 /usr/sbin/httpd -k start 3609182 506832 nobody 21244 0.0 S 02:21 /usr/sbin/httpd -k start 3593612 506832 nobody 21156 0.0 S 03:40 /usr/sbin/httpd -k start 3609954 506832 nobody 20712 0.1 S 01:42 /usr/sbin/httpd -k start 3593556 506832 nobody 20628 0.0 S 03:42 /usr/sbin/httpd -k start 3609955 506832 nobody 20496 0.0 S 01:42 /usr/sbin/httpd -k start 3593029 506832 nobody 20268 0.0 S 04:19 /usr/sbin/httpd -k start 3609136 506832 nobody 20220 0.0 S 02:22 /usr/sbin/httpd -k start 3609184 506832 nobody 20108 0.0 S 02:21 /usr/sbin/httpd -k start 3609884 506832 nobody 19992 0.1 S 01:45 /usr/sbin/httpd -k start 3609178 506832 nobody 19800 0.0 S 02:21 /usr/sbin/httpd -k start 3608766 506832 nobody 19696 0.0 S 02:43 /usr/sbin/httpd -k start 3593487 506832 nobody 19676 0.1 S 03:44 /usr/sbin/httpd -k start 3609958 506832 nobody 19444 0.0 S 01:42 /usr/sbin/httpd -k start 3610633 506832 nobody 19328 0.0 S 00:58 /usr/sbin/httpd -k start 3610858 506832 nobody 19052 0.1 S 00:41 /usr/sbin/httpd -k start 3609898 506832 nobody 18876 0.0 S 01:44 /usr/sbin/httpd -k start 3593653 3593649 mailnull 18676 0.0 S 03:37 /usr/sbin/exim -Mc 1x1wa9-0000000F4rw-1k13 3611182 506832 nobody 18612 0.0 S 00:25 /usr/sbin/httpd -k start 3610740 506832 nobody 18564 0.0 S 00:48 /usr/sbin/httpd -k start 3610859 506832 nobody 18512 0.0 S 00:41 /usr/sbin/httpd -k start 3610308 506832 nobody 18376 0.0 S 01:18 /usr/sbin/httpd -k start 3610825 506832 nobody 18272 0.0 S 00:43 /usr/sbin/httpd -k start 3610694 506832 nobody 18212 0.0 S 00:51 /usr/sbin/httpd -k start 3611151 506832 nobody 17924 0.1 S 00:27 /usr/sbin/httpd -k start 3610842 506832 nobody 17868 0.1 S 00:42 /usr/sbin/httpd -k start 3611169 506832 nobody 17712 0.0 S 00:26 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4425758 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 590 evolution/portal.evolutionerp.com.au-ssl_log 167 evolution/app.evolutionerp.com.au-ssl_log 117 coscom/coscom.com.au-ssl_log 16 madalice/madalice.com.au-ssl_log 16 otter2/otterfencing.net.au-ssl_log 16 cosgrovecreative/cosgrovecreative.com.au-ssl_log 14 otterfencing/otterfencing.com.au-ssl_log 14 infinium/infinium.net.au-ssl_log 1 (total vhosts taking traffic: 9) --- top client IPs across all vhosts (last 3 min) --- 396 203.54.180.238 117 40.115.94.245 79 182.239.240.254 73 103.104.164.114 60 146.190.251.165 47 101.166.96.210 42 165.225.233.87 39 180.181.236.49 26 120.150.225.142 20 103.104.165.99 15 203.40.84.196 8 118.127.40.55 6 1.145.70.156 3 85.206.128.219 2 66.249.68.68 --- top request paths across all vhosts (last 3 min) --- 177 POST /functions.php 128 GET /app/ajax.php 67 GET /index.php 52 GET /heartbeat.php 38 GET /factory_session_checker.php 29 POST /app/ajax/selectFilterSingle.php 24 POST /plugins/csvexporter/plugin.php 20 POST /quoteditsave.php 20 POST /app/ajax.php 19 GET /factory_session_processed_qty.php 19 GET /factory_session_joiner.php 18 POST /portal/register 17 POST /clienteditsave.php 12 POST /jobeditsave.php 12 GET / 11 GET //app/ajax.php 9 GET /plugins/fensa/fensa-ajax.php 8 POST /plugins/fencecosting/plugin.php 8 POST /mfreqsave.php 8 POST /app/ajax/selectFilter.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 177 POST /functions.php 128 GET /app/ajax.php 47 GET /index.php 29 POST /app/ajax/selectFilterSingle.php 24 POST /plugins/csvexporter/plugin.php 20 POST /quoteditsave.php 20 POST /app/ajax.php 17 POST /clienteditsave.php 12 POST /jobeditsave.php 11 GET //app/ajax.php 9 GET /plugins/fensa/fensa-ajax.php 8 POST /plugins/fencecosting/plugin.php -- last 10 requests -- 203.54.180.238 - - [03/Sep/2026:11:53:03 +1000] "POST /itemModify.php?call=getBOM HTTP/1.1" 200 22 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79091§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [03/Sep/2026:11:53:04 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79088§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 203.54.180.238 - - [03/Sep/2026:11:53:05 +1000] "GET /modalload.php?key=notifications&id=0 HTTP/1.1" 200 881 "https://my.evolutionerp.com.au/index.php?page=mfreqedit&id=20834" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) A 203.54.180.238 - - [03/Sep/2026:11:53:05 +1000] "POST /quoteditsave.php?call=addLineItem HTTP/1.1" 200 272 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79091§ionid=0" "Mozilla/5.0 (Windows NT 10.0; 101.166.96.210 - - [03/Sep/2026:11:53:06 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=37078§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 203.54.180.238 - - [03/Sep/2026:11:53:06 +1000] "POST /mfreqsave.php?reqsave=2 HTTP/1.1" 302 34 "https://my.evolutionerp.com.au/index.php?page=mfreqedit&id=20834" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 1.145.70.156 - - [03/Sep/2026:11:53:06 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=quotereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ( 203.54.180.238 - - [03/Sep/2026:11:53:06 +1000] "GET /index.php?page=mfreqedit&id=20834 HTTP/1.1" 200 24020 "https://my.evolutionerp.com.au/index.php?page=mfreqedit&id=20834" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap 203.54.180.238 - - [03/Sep/2026:11:53:07 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=mfreqedit&id=20834" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe 203.54.180.238 - - [03/Sep/2026:11:53:07 +1000] "GET /download.php?id=293157&inline=1 HTTP/1.1" 200 128087 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79091§ionid=0" "Mozilla/5.0 (Windows NT 10.0; == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 52 GET /heartbeat.php 38 GET /factory_session_checker.php 20 GET /index.php 19 GET /factory_session_processed_qty.php 19 GET /factory_session_joiner.php 18 POST /portal/register 1 GET /uploadsave.php -- last 10 requests -- 203.54.180.238 - - [03/Sep/2026:11:53:01 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [03/Sep/2026:11:53:01 +1000] "GET /factory_session_joiner.php?id=35096 HTTP/1.1" 200 79 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [03/Sep/2026:11:53:01 +1000] "GET /index.php?page=inventory_picking_goods&pickid=38055&seq=9688949189595 HTTP/1.1" 200 10901 "https://portal.evolutionerp.com.au/index.php?page=inventory_picking" "Mozil 203.54.180.238 - - [03/Sep/2026:11:53:02 +1000] "POST /portal/register HTTP/1.1" 404 - "https://portal.evolutionerp.com.au/index.php?page=inventory_picking_goods&pickid=38055&seq=9688949189595" "Mozilla/5.0 (Linux; Andro 203.54.180.238 - - [03/Sep/2026:11:53:02 +1000] "GET /heartbeat.php?sentAt=1788400382&bytes=106,152,210,254&_=1788398069659 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [03/Sep/2026:11:53:03 +1000] "GET /heartbeat.php?sentAt=1788400383&bytes=106,152,210,255&_=1788349195604 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [03/Sep/2026:11:53:03 +1000] "GET /heartbeat.php?sentAt=1788400383&bytes=106,152,210,255&_=1788400273475 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=1 203.54.180.238 - - [03/Sep/2026:11:53:04 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [03/Sep/2026:11:53:08 +1000] "GET /heartbeat.php?sentAt=1788400386&bytes=106,152,211,2&_=1788387673993 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [03/Sep/2026:11:53:09 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 2 GET /api/getItem/SHSG404016-DP25-24-DI-110 2 GET /api/getItem/SHSG252516-8 2 GET /api/getItem/SHSG252516--8 2 GET /api/getItem/SHSG252516-6.5 2 GET /api/getItem/19R-8000 2 GET /api/getItem/19R-7320 1 GET /api/getItem/SHSG909020-8 1 GET /api/getItem/SHSG898950-8 1 GET /api/getItem/SHSG898935-8 1 GET /api/getItem/SHSG898930-8 1 GET /api/getItem/SHSG898920-8 1 GET /api/getItem/SHSG757550-8 -- last 10 requests -- 40.115.94.245 - - [03/Sep/2026:11:52:40 +1000] "GET /api/getItem/SHSG656520-DP25-8-DI HTTP/1.1" 200 1398 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:11:52:41 +1000] "GET /api/getItem/SHSG656520-SP25-8 HTTP/1.1" 200 1402 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:11:52:41 +1000] "GET /api/getItem/SHSG757520-DP25-8 HTTP/1.1" 200 1551 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:11:52:41 +1000] "GET /api/getItem/SHSG757520-DP25-8-DI HTTP/1.1" 200 1403 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:11:52:42 +1000] "GET /api/getItem/SHSG757520-SP25-8 HTTP/1.1" 200 1547 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:11:52:42 +1000] "GET /api/getItem/CLSGNSTD50250KK HTTP/1.1" 200 1551 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:11:52:43 +1000] "GET /api/getItem/CLPBNSTD50250KK HTTP/1.1" 200 1539 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:11:52:43 +1000] "GET /api/getItem/CLFBNSTD50315KK HTTP/1.1" 200 1551 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:11:52:43 +1000] "GET /api/getItem/CLPBNSTD50400KK HTTP/1.1" 200 1559 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:11:52:44 +1000] "GET /api/getItem/CLFBNSTD50250KK HTTP/1.1" 200 1552 "-" "RestSharp/106.13.0.0" --- last 30 samples (run-up to this incident) --- 2026-09-03 11:50:48 L1=1.55 run=1 blk=0 avail=8305 (60.3%) swpO=0 conn=2 myRSS=2829 php=4 phpRSS=206 ap=33 tcp=47 topuser=madalice 2026-09-03 11:50:50 L1=1.91 run=6 blk=0 avail=8233 (59.8%) swpO=0 conn=2 myRSS=2829 php=4 phpRSS=231 ap=40 tcp=50 topuser=madalice 2026-09-03 11:50:58 L1=1.92 run=2 blk=0 avail=8306 (60.3%) swpO=0 conn=2 myRSS=2829 php=4 phpRSS=139 ap=44 tcp=50 topuser=evolution 2026-09-03 11:51:01 L1=2.16 run=4 blk=0 avail=8037 (58.3%) swpO=0 conn=2 myRSS=2829 php=6 phpRSS=466 ap=42 tcp=48 topuser=infinium 2026-09-03 11:51:08 L1=2.07 run=3 blk=0 avail=8138 (59.1%) swpO=0 conn=2 myRSS=2829 php=6 phpRSS=372 ap=41 tcp=46 topuser=madalice 2026-09-03 11:51:11 L1=2.07 run=1 blk=0 avail=8212 (59.6%) swpO=1 conn=2 myRSS=2829 php=3 phpRSS=164 ap=40 tcp=43 topuser=madalice 2026-09-03 11:51:18 L1=2.14 run=1 blk=0 avail=8272 (60.0%) swpO=1 conn=2 myRSS=2829 php=4 phpRSS=205 ap=36 tcp=45 topuser=madalice 2026-09-03 11:51:21 L1=2.13 run=1 blk=0 avail=8394 (60.9%) swpO=0 conn=2 myRSS=2829 php=2 phpRSS=31 ap=35 tcp=40 topuser=root 2026-09-03 11:51:28 L1=2.28 run=3 blk=0 avail=8342 (60.6%) swpO=0 conn=2 myRSS=2829 php=5 phpRSS=145 ap=37 tcp=56 topuser=evolution 2026-09-03 11:51:31 L1=2.50 run=1 blk=0 avail=8211 (59.6%) swpO=0 conn=1 myRSS=2829 php=3 phpRSS=165 ap=49 tcp=54 topuser=madalice 2026-09-03 11:51:38 L1=2.38 run=3 blk=0 avail=8185 (59.4%) swpO=0 conn=3 myRSS=2829 php=6 phpRSS=297 ap=45 tcp=53 topuser=madalice 2026-09-03 11:51:41 L1=2.27 run=3 blk=0 avail=8097 (58.8%) swpO=0 conn=1 myRSS=2829 php=7 phpRSS=403 ap=45 tcp=58 topuser=evolution 2026-09-03 11:51:48 L1=2.73 run=2 blk=0 avail=8205 (59.6%) swpO=0 conn=3 myRSS=2829 php=5 phpRSS=272 ap=44 tcp=50 topuser=madalice 2026-09-03 11:51:51 L1=2.83 run=1 blk=0 avail=8358 (60.7%) swpO=0 conn=1 myRSS=2829 php=2 phpRSS=31 ap=45 tcp=46 topuser=root 2026-09-03 11:51:58 L1=2.92 run=2 blk=0 avail=8099 (58.8%) swpO=0 conn=3 myRSS=2829 php=6 phpRSS=366 ap=47 tcp=61 topuser=madalice 2026-09-03 11:52:01 L1=2.85 run=2 blk=0 avail=8205 (59.6%) swpO=0 conn=1 myRSS=2829 php=3 phpRSS=165 ap=47 tcp=53 topuser=madalice 2026-09-03 11:52:08 L1=2.62 run=1 blk=0 avail=8270 (60.0%) swpO=0 conn=3 myRSS=2829 php=4 phpRSS=206 ap=40 tcp=39 topuser=madalice 2026-09-03 11:52:11 L1=2.41 run=2 blk=0 avail=8293 (60.2%) swpO=0 conn=1 myRSS=2829 php=3 phpRSS=165 ap=37 tcp=43 topuser=madalice 2026-09-03 11:52:18 L1=2.22 run=2 blk=0 avail=8166 (59.3%) swpO=0 conn=3 myRSS=2829 php=4 phpRSS=301 ap=39 tcp=51 topuser=madalice 2026-09-03 11:52:21 L1=2.04 run=3 blk=0 avail=8224 (59.7%) swpO=0 conn=1 myRSS=2829 php=4 phpRSS=232 ap=40 tcp=55 topuser=madalice 2026-09-03 11:52:28 L1=2.12 run=5 blk=0 avail=8095 (58.8%) swpO=0 conn=3 myRSS=2829 php=5 phpRSS=361 ap=42 tcp=55 topuser=madalice 2026-09-03 11:52:31 L1=2.11 run=2 blk=0 avail=8069 (58.6%) swpO=0 conn=1 myRSS=2829 php=4 phpRSS=253 ap=56 tcp=56 topuser=madalice 2026-09-03 11:52:39 L1=2.02 run=3 blk=0 avail=8004 (58.1%) swpO=0 conn=2 myRSS=2829 php=4 phpRSS=229 ap=54 tcp=47 topuser=madalice 2026-09-03 11:52:41 L1=1.94 run=3 blk=0 avail=8112 (58.9%) swpO=0 conn=1 myRSS=2829 php=3 phpRSS=189 ap=51 tcp=44 topuser=madalice 2026-09-03 11:52:49 L1=1.78 run=2 blk=0 avail=8032 (58.3%) swpO=0 conn=2 myRSS=2829 php=4 phpRSS=229 ap=64 tcp=64 topuser=madalice 2026-09-03 11:52:51 L1=1.64 run=2 blk=0 avail=8032 (58.3%) swpO=0 conn=1 myRSS=2829 php=4 phpRSS=254 ap=61 tcp=51 topuser=madalice 2026-09-03 11:52:59 L1=1.67 run=2 blk=0 avail=8048 (58.4%) swpO=0 conn=2 myRSS=2829 php=7 phpRSS=345 ap=56 tcp=55 topuser=madalice 2026-09-03 11:53:01 L1=1.53 run=2 blk=0 avail=8121 (58.9%) swpO=0 conn=1 myRSS=2829 php=3 phpRSS=189 ap=53 tcp=48 topuser=madalice 2026-09-03 11:53:09 L1=1.57 run=3 blk=0 avail=7843 (56.9%) swpO=0 conn=2 myRSS=2829 php=6 phpRSS=597 ap=46 tcp=43 topuser=madalice 2026-09-03 11:53:11 L1=1.61 run=15 blk=0 avail=6907 (50.1%) swpO=0 conn=11 myRSS=2829 php=16 phpRSS=1742 ap=47 tcp=65 topuser=madalice