INCIDENT 2026-09-05 05:36:42 trigger: php_rss=1517MB ================================================================== load: 2.09 1.45 1.35 7/702 100116 ncpu:10 mem_avail: 6510MB/13777MB (47.3%) swap_used:2051MB swapout:0/s blocked(D):0 running:7 iowait:0.2% steal:0.0% php: 13 procs / 1517MB heaviest user: madalice (8 procs, 1340MB) apache: 24 procs tcp_estab: 39 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3127 root 248 1504 madalice 8 1339 nobody 23 391 netdata 8 258 evolution 11 131 dovenull 6 65 cpanellogin 1 58 wp-toolkit 3 53 kurri 3 42 infinium 3 42 lowrange 2 30 dovecot 3 27 mailman 20 26 mailnull 3 17 candyfabcom 1 14 zabbix 1 10 polkitd 1 7 named 1 5 nscd 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 8 1339 evolution 3 109 root 1 27 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5135 MB Active(file): 4661 MB Inactive(file): 624 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 866 MB CommitLimit: 10984 MB Committed_AS: 8785 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 4-03:14:15 5356 /usr/bin/imunify-agent-proxy 4109079 root 51:53 3884 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 51:53 607016 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3202420 12.1 Ssl 2-15:22:30 /usr/sbin/mariadbd 4109105 4109079 root 607016 13.2 Sl 51:53 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 99834 2601907 madalice 247312 27.4 S 00:30 php-fpm: pool madalice_com_au 1542443 1 netdata 192356 2.6 Ssl 2-03:14:20 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3643624 3626973 root 170932 0.0 S 03:09:52 spamd child 99924 2601907 madalice 162088 23.3 R 00:18 php-fpm: pool madalice_com_au 99934 2601907 madalice 161288 18.7 R 00:17 php-fpm: pool madalice_com_au 99931 2601907 madalice 160804 22.3 S 00:18 php-fpm: pool madalice_com_au 99930 2601907 madalice 160792 21.8 S 00:18 php-fpm: pool madalice_com_au 99925 2601907 madalice 160788 22.7 S 00:18 php-fpm: pool madalice_com_au 99923 2601907 madalice 160744 23.1 R 00:18 php-fpm: pool madalice_com_au 99926 2601907 madalice 159364 21.1 R 00:18 php-fpm: pool madalice_com_au 3626973 1 root 155372 0.0 Ss 03:13:27 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3643625 3626973 root 119872 0.0 S 03:09:52 spamd child 4089624 1353308 cpanellogin 59916 0.0 S 01:00:33 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en docroot /usr/local/cpanel/base cpanel_locale 3127357 3127312 evolution 57968 0.0 Ss 05:36:41 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero_payment_cron.php 3127358 3127320 evolution 54236 0.0 Ss 05:36:41 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 509236 509098 root 43516 0.0 Sl 8-03:17:01 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1542981 1542551 netdata 41004 0.1 Sl 2-03:14:16 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1353308 1 root 39628 0.1 Ss 45-02:55:27 cpsrvd (SSL) - waiting for connections 509266 1 root 39412 0.0 Ss 8-03:17:01 /usr/lib/systemd/systemd-journald 1469 1 root 36824 0.1 Ss 67-19:26:56 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3626082 1 root 30352 0.0 Ss 03:14:27 lfd - sleeping 1542487 1 wp-toolkit 29400 0.0 Ss 2-03:14:20 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2601907 1 root 28656 0.0 Ss 1-03:13:16 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1463 1 root 25320 0.0 Ss 67-19:26:56 tailwatchd 83242 506832 nobody 21820 0.0 S 04:35 /usr/sbin/httpd -k start 99282 506832 nobody 21632 0.0 S 01:20 /usr/sbin/httpd -k start 83272 506832 nobody 21564 0.0 S 04:33 /usr/sbin/httpd -k start 99397 506832 nobody 21020 0.0 S 01:12 /usr/sbin/httpd -k start 99302 506832 nobody 21004 0.0 S 01:17 /usr/sbin/httpd -k start 99402 506832 nobody 20380 0.0 S 01:11 /usr/sbin/httpd -k start 99286 506832 nobody 20264 0.0 S 01:19 /usr/sbin/httpd -k start 2602226 1 root 20216 0.1 Ssl 1-03:13:01 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 99340 506832 nobody 20088 0.0 S 01:15 /usr/sbin/httpd -k start 99349 506832 nobody 20080 0.0 S 01:15 /usr/sbin/httpd -k start 99317 506832 nobody 19996 0.0 S 01:16 /usr/sbin/httpd -k start 99805 506832 nobody 19824 0.0 S 00:31 /usr/sbin/httpd -k start 99323 506832 nobody 19608 0.0 S 01:16 /usr/sbin/httpd -k start 1542531 1 wp-toolkit 19412 0.0 Ss 2-03:14:19 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 99351 506832 nobody 19220 0.0 S 01:15 /usr/sbin/httpd -k start 99300 506832 nobody 18976 0.0 S 01:17 /usr/sbin/httpd -k start 99358 506832 nobody 18864 0.0 S 01:15 /usr/sbin/httpd -k start 99354 506832 nobody 18788 0.0 S 01:15 /usr/sbin/httpd -k start 99343 506832 nobody 18760 0.0 S 01:15 /usr/sbin/httpd -k start 99322 506832 nobody 18756 0.2 S 01:16 /usr/sbin/httpd -k start 1542982 1542551 netdata 18588 2.2 Sl 2-03:14:16 /usr/libexec/netdata/plugins.d/apps.plugin 1 99347 506832 nobody 18428 0.0 S 01:15 /usr/sbin/httpd -k start 99797 506832 nobody 16228 0.0 S 00:32 /usr/sbin/httpd -k start 4020744 508511 lowrange 15760 0.0 S 01:21:03 dovecot/imap 1542141 1 root 15480 0.0 Ss 2-03:14:23 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 3539428 508511 lowrange 15396 0.0 S 03:40:34 dovecot/imap 4158298 508511 infinium 14684 0.0 S 39:53 dovecot/imap 50312 508511 infinium 14640 0.0 S 12:25 dovecot/imap 32624 508511 infinium 14620 0.0 S 18:27 dovecot/imap 4124271 508511 kurri 14548 0.0 S 50:01 dovecot/imap 99849 508511 kurri 14532 0.0 S 00:25 dovecot/imap 99842 508511 candyfabcom 14420 0.0 S 00:27 dovecot/imap 3141944 508511 kurri 14352 0.0 S 05:36:19 dovecot/imap 2508826 1471 root 13344 0.0 S 1-03:39:45 cPhulkd - dbprocessor --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10699075 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 116 madalice/madalice.com.au-ssl_log 21 infinium/infinium.net.au-ssl_log 12 evolution/portal.evolutionerp.com.au-ssl_log 8 nrg/nrgservices.net.au-ssl_log 5 evolution/my.evolutionerp.com.au-ssl_log 3 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 116 40.115.94.245 11 2a02:c207:2347:8850::1 8 203.54.180.238 6 54.148.22.216 3 118.127.40.55 2 85.222.188.107 2 152.52.188.170 2 114.119.140.234 1 91.92.243.251 1 66.249.65.102 1 66.249.65.100 1 52.167.144.186 1 45.185.68.15 1 44.195.30.193 1 40.77.167.130 --- top request paths across all vhosts (last 3 min) --- 81 GET /api/getItem/LWFB2001KG 17 GET /api/getItem/LWPB2001KG 8 GET /heartbeat.php 5 GET / 3 POST /wp-cron.php 3 POST / 2 GET /robots.txt 2 GET /index.php 1 POST /wp-login.php 1 POST /graphql 1 POST /functions.php 1 POST /api/graphql 1 GET /wp-json/ 1 GET /.well-known/openid-configuration 1 GET /terms-and-conditions/ 1 GET /squashiness4ji-ooywk9qa6.html 1 GET /sitemap_index.xml 1 GET /product-tag/yummy 1 GET /product-tag/wedding 1 GET /product_shipping_class-sitemap.xml --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 81 GET /api/getItem/LWFB2001KG 17 GET /api/getItem/LWPB2001KG 1 GET /api/getItem/RGW100T 1 GET /api/getItem/PC7550 1 GET /api/getItem/PC5025BL 1 GET /api/getItem/PC19 1 GET /api/getItem/PC16 1 GET /api/getItem/PC15050 1 GET /api/getItem/PC1212 1 GET /api/getItem/PC10050 1 GET /api/getItem/L2 1 GET /api/getItem/IPC90NB -- last 10 requests -- 40.115.94.245 - - [05/Sep/2026:05:36:31 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:05:36:32 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:05:36:32 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:05:36:33 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:05:36:33 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:05:36:33 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:05:36:34 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:05:36:34 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:05:36:34 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:05:36:35 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" == madalice/madalice.com.au-ssl_log == -- top paths -- 3 POST / 2 GET / 1 POST /graphql 1 POST /api/graphql 1 GET /wp-json/ 1 GET /.well-known/openid-configuration 1 GET /terms-and-conditions/ 1 GET /robots.txt 1 GET /product-tag/yummy 1 GET /product-tag/wedding 1 GET /product_shipping_class-sitemap.xml 1 GET /product-category/custom-shoes/kids -- last 10 requests -- 2a02:c207:2347:8850::1 - - [05/Sep/2026:05:36:23 +1000] "GET /debug HTTP/1.1" 404 36646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 2a02:c207:2347:8850::1 - - [05/Sep/2026:05:36:23 +1000] "GET /.well-known/openid-configuration HTTP/1.1" 404 36661 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 2a02:c207:2347:8850::1 - - [05/Sep/2026:05:36:23 +1000] "GET /.git/config HTTP/1.1" 404 36649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 2a02:c207:2347:8850::1 - - [05/Sep/2026:05:36:23 +1000] "GET /actuator HTTP/1.1" 404 36646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 2a02:c207:2347:8850::1 - - [05/Sep/2026:05:36:24 +1000] "POST /graphql HTTP/1.1" 404 36648 "-" "-" 2a02:c207:2347:8850::1 - - [05/Sep/2026:05:36:24 +1000] "GET /_debugbar/open?op=find HTTP/1.1" 404 36659 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 2a02:c207:2347:8850::1 - - [05/Sep/2026:05:36:24 +1000] "GET /wp-json/ HTTP/1.1" 200 52321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 2a02:c207:2347:8850::1 - - [05/Sep/2026:05:36:25 +1000] "GET /debug/vars HTTP/1.1" 404 36650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 2a02:c207:2347:8850::1 - - [05/Sep/2026:05:36:26 +1000] "GET /actuator/env HTTP/1.1" 404 36649 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 2a02:c207:2347:8850::1 - - [05/Sep/2026:05:36:27 +1000] "POST /api/graphql HTTP/1.1" 404 36648 "-" "-" == infinium/infinium.net.au-ssl_log == -- top paths -- 3 POST /wp-cron.php 2 GET / 1 POST /wp-login.php 1 GET /sitemap_index.xml 1 GET /robots.txt 1 GET /post-sitemap.xml 1 GET /page-sitemap.xml 1 GET /category-sitemap.xml 1 GET /author-sitemap.xml -- last 10 requests -- 118.127.40.55 - - [05/Sep/2026:05:35:20 +1000] "POST /wp-cron.php?doing_wp_cron=1788550520.9630138874053955078125 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://infinium.net.au" 54.148.22.216 - - [05/Sep/2026:05:35:20 +1000] "GET /robots.txt HTTP/1.1" 200 173 "-" "SeltzSitemapFetcher/1.0" 54.148.22.216 - - [05/Sep/2026:05:35:21 +1000] "GET /sitemap_index.xml HTTP/1.1" 200 780 "-" "SeltzSitemapFetcher/1.0" 54.148.22.216 - - [05/Sep/2026:05:35:22 +1000] "GET /post-sitemap.xml HTTP/1.1" 200 2882 "-" "SeltzSitemapFetcher/1.0" 54.148.22.216 - - [05/Sep/2026:05:35:23 +1000] "GET /category-sitemap.xml HTTP/1.1" 200 873 "-" "SeltzSitemapFetcher/1.0" 54.148.22.216 - - [05/Sep/2026:05:35:24 +1000] "GET /page-sitemap.xml HTTP/1.1" 200 6854 "-" "SeltzSitemapFetcher/1.0" 54.148.22.216 - - [05/Sep/2026:05:35:25 +1000] "GET /author-sitemap.xml HTTP/1.1" 200 731 "-" "SeltzSitemapFetcher/1.0" 118.127.40.55 - - [05/Sep/2026:05:35:43 +1000] "POST /wp-cron.php?doing_wp_cron=1788550543.6978039741516113281250 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://infinium.net.au" 152.52.188.170 - - [05/Sep/2026:05:35:43 +1000] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 152.52.188.170 - - [05/Sep/2026:05:35:46 +1000] "GET / HTTP/1.1" 200 95118 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" --- last 30 samples (run-up to this incident) --- 2026-09-05 05:34:19 L1=0.80 run=2 blk=1 avail=7514 (54.5%) swpO=0 conn=4 myRSS=3149 php=6 phpRSS=418 ap=13 tcp=27 topuser=madalice 2026-09-05 05:34:21 L1=0.80 run=1 blk=1 avail=7741 (56.2%) swpO=0 conn=4 myRSS=3149 php=4 phpRSS=138 ap=13 tcp=26 topuser=evolution 2026-09-05 05:34:29 L1=0.91 run=3 blk=1 avail=7591 (55.1%) swpO=0 conn=4 myRSS=3149 php=6 phpRSS=340 ap=14 tcp=33 topuser=olympic 2026-09-05 05:34:31 L1=0.91 run=2 blk=1 avail=7622 (55.3%) swpO=0 conn=4 myRSS=3149 php=5 phpRSS=269 ap=16 tcp=29 topuser=olympic 2026-09-05 05:34:39 L1=0.93 run=1 blk=1 avail=7744 (56.2%) swpO=0 conn=4 myRSS=3149 php=4 phpRSS=138 ap=14 tcp=27 topuser=evolution 2026-09-05 05:34:41 L1=0.93 run=2 blk=1 avail=7601 (55.2%) swpO=0 conn=4 myRSS=3149 php=5 phpRSS=301 ap=14 tcp=28 topuser=madalice 2026-09-05 05:34:49 L1=1.01 run=1 blk=1 avail=7637 (55.4%) swpO=0 conn=4 myRSS=3149 php=5 phpRSS=272 ap=14 tcp=25 topuser=madalice 2026-09-05 05:34:51 L1=1.01 run=2 blk=1 avail=7637 (55.4%) swpO=0 conn=4 myRSS=3149 php=5 phpRSS=272 ap=14 tcp=26 topuser=madalice 2026-09-05 05:34:59 L1=1.02 run=1 blk=0 avail=7590 (55.1%) swpO=0 conn=4 myRSS=3149 php=5 phpRSS=293 ap=17 tcp=36 topuser=madalice 2026-09-05 05:35:01 L1=1.02 run=3 blk=0 avail=7560 (54.9%) swpO=0 conn=4 myRSS=3149 php=6 phpRSS=347 ap=17 tcp=35 topuser=madalice 2026-09-05 05:35:09 L1=1.53 run=3 blk=0 avail=7575 (55.0%) swpO=2 conn=4 myRSS=3149 php=5 phpRSS=293 ap=20 tcp=27 topuser=madalice 2026-09-05 05:35:11 L1=1.53 run=3 blk=0 avail=7387 (53.6%) swpO=2 conn=4 myRSS=3149 php=6 phpRSS=512 ap=19 tcp=27 topuser=corpkicks 2026-09-05 05:35:19 L1=1.74 run=1 blk=0 avail=7604 (55.2%) swpO=2 conn=3 myRSS=3149 php=5 phpRSS=293 ap=16 tcp=29 topuser=madalice 2026-09-05 05:35:21 L1=1.74 run=3 blk=0 avail=7572 (55.0%) swpO=2 conn=4 myRSS=3149 php=6 phpRSS=350 ap=16 tcp=32 topuser=madalice 2026-09-05 05:35:29 L1=1.78 run=2 blk=0 avail=7076 (51.4%) swpO=0 conn=3 myRSS=3149 php=6 phpRSS=383 ap=79 tcp=105 topuser=madalice 2026-09-05 05:35:31 L1=1.78 run=4 blk=0 avail=6845 (49.7%) swpO=0 conn=4 myRSS=3149 php=7 phpRSS=641 ap=85 tcp=90 topuser=madalice 2026-09-05 05:35:39 L1=1.82 run=1 blk=1 avail=7079 (51.4%) swpO=0 conn=3 myRSS=3149 php=6 phpRSS=414 ap=78 tcp=28 topuser=madalice 2026-09-05 05:35:41 L1=1.82 run=1 blk=1 avail=7091 (51.5%) swpO=0 conn=4 myRSS=3149 php=6 phpRSS=414 ap=76 tcp=30 topuser=madalice 2026-09-05 05:35:49 L1=1.76 run=1 blk=1 avail=7117 (51.7%) swpO=0 conn=3 myRSS=3149 php=6 phpRSS=444 ap=68 tcp=30 topuser=madalice 2026-09-05 05:35:52 L1=1.76 run=1 blk=1 avail=7130 (51.8%) swpO=0 conn=4 myRSS=3149 php=6 phpRSS=444 ap=66 tcp=30 topuser=madalice 2026-09-05 05:35:59 L1=1.73 run=1 blk=1 avail=7318 (53.1%) swpO=0 conn=3 myRSS=3149 php=5 phpRSS=291 ap=58 tcp=34 topuser=madalice 2026-09-05 05:36:02 L1=1.73 run=1 blk=1 avail=7329 (53.2%) swpO=0 conn=4 myRSS=3149 php=5 phpRSS=291 ap=56 tcp=35 topuser=madalice 2026-09-05 05:36:09 L1=1.61 run=1 blk=1 avail=7361 (53.4%) swpO=0 conn=3 myRSS=3149 php=5 phpRSS=291 ap=48 tcp=55 topuser=madalice 2026-09-05 05:36:12 L1=1.61 run=1 blk=1 avail=7469 (54.2%) swpO=0 conn=3 myRSS=3149 php=4 phpRSS=138 ap=50 tcp=69 topuser=evolution 2026-09-05 05:36:19 L1=1.59 run=2 blk=0 avail=7371 (53.5%) swpO=0 conn=4 myRSS=3149 php=5 phpRSS=293 ap=45 tcp=37 topuser=madalice 2026-09-05 05:36:22 L1=1.59 run=2 blk=0 avail=7387 (53.6%) swpO=0 conn=3 myRSS=3149 php=5 phpRSS=292 ap=43 tcp=35 topuser=madalice 2026-09-05 05:36:30 L1=2.29 run=6 blk=0 avail=6500 (47.2%) swpO=797 conn=4 myRSS=3127 php=13 phpRSS=1442 ap=35 tcp=49 topuser=madalice 2026-09-05 05:36:32 L1=2.29 run=1 blk=0 avail=6536 (47.4%) swpO=876 conn=3 myRSS=3127 php=12 phpRSS=1390 ap=34 tcp=41 topuser=madalice 2026-09-05 05:36:40 L1=2.09 run=1 blk=0 avail=6594 (47.9%) swpO=0 conn=4 myRSS=3127 php=12 phpRSS=1390 ap=26 tcp=30 topuser=madalice 2026-09-05 05:36:42 L1=2.09 run=7 blk=0 avail=6510 (47.3%) swpO=0 conn=7 myRSS=3127 php=13 phpRSS=1517 ap=24 tcp=39 topuser=madalice