INCIDENT 2026-09-05 07:13:32 trigger: php_rss=1556MB ================================================================== load: 1.82 1.94 1.81 2/718 425693 ncpu:10 mem_avail: 6598MB/13777MB (47.9%) swap_used:2171MB swapout:0/s blocked(D):1 running:2 iowait:9.8% steal:0.0% php: 13 procs / 1556MB heaviest user: madalice (9 procs, 1424MB) apache: 33 procs tcp_estab: 30 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2997 root 252 1418 madalice 9 1332 nobody 32 524 netdata 8 260 evolution 11 124 dovenull 6 65 cpanellogin 1 55 wp-toolkit 3 53 kurri 3 42 infinium 3 42 lowrange 2 30 dovecot 3 27 mailman 20 26 corpkicks 1 14 aaa 1 14 candyfabcom 1 13 zabbix 1 10 polkitd 1 7 named 1 5 --- php workers by user --- USER PROCS RSS_MB madalice 9 1332 evolution 3 104 root 1 28 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4868 MB Active(file): 3945 MB Inactive(file): 984 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 571 MB CommitLimit: 10984 MB Committed_AS: 8942 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 4-04:51:05 4832 /usr/bin/imunify-agent-proxy 4109079 root 02:28:43 3620 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 02:28:43 547864 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3068972 11.8 Ssl 2-16:59:20 /usr/sbin/mariadbd 4109105 4109079 root 547864 10.0 Sl 02:28:43 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 1542443 1 netdata 194104 2.6 Ssl 2-04:51:10 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3643624 3626973 root 169004 0.0 S 04:46:42 spamd child 407388 2601907 madalice 163956 23.4 S 06:50 php-fpm: pool madalice_com_au 408460 2601907 madalice 163928 17.5 S 04:38 php-fpm: pool madalice_com_au 424516 2601907 madalice 163628 9.5 S 01:15 php-fpm: pool madalice_com_au 424517 2601907 madalice 160808 10.4 S 01:14 php-fpm: pool madalice_com_au 424518 2601907 madalice 160612 8.4 S 01:14 php-fpm: pool madalice_com_au 424515 2601907 madalice 159564 12.1 S 01:15 php-fpm: pool madalice_com_au 407474 2601907 madalice 157740 21.8 S 06:37 php-fpm: pool madalice_com_au 3626973 1 root 133504 0.0 Ss 04:50:17 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 424514 2601907 madalice 122920 9.6 S 01:15 php-fpm: pool madalice_com_au 424513 2601907 madalice 111656 6.4 S 01:15 php-fpm: pool madalice_com_au 3643625 3626973 root 94700 0.0 S 04:46:42 spamd child 509236 509098 root 61240 0.0 Sl 8-04:53:51 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 203496 1353308 cpanellogin 56920 0.0 S 01:06:20 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 3127357 3127312 evolution 54856 0.0 Ss 07:13:31 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero_payment_cron.php 3127358 3127320 evolution 51596 0.0 Ss 07:13:31 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 509266 1 root 41992 0.0 Ss 8-04:53:51 /usr/lib/systemd/systemd-journald 1542981 1542551 netdata 41144 0.1 Sl 2-04:51:06 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1353308 1 root 40708 0.1 Ss 45-04:32:17 cpsrvd (SSL) - waiting for connections 1469 1 root 34916 0.1 Ss 67-21:03:46 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542487 1 wp-toolkit 29352 0.0 Ss 2-04:51:10 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2601907 1 root 28696 0.0 Ss 1-04:50:06 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3626082 1 root 28116 0.0 Ss 04:51:17 lfd - sleeping 1463 1 root 24200 0.0 Ss 67-21:03:46 tailwatchd 424105 506832 nobody 21728 0.0 S 02:08 /usr/sbin/httpd -k start 424506 506832 nobody 20572 0.0 S 01:17 /usr/sbin/httpd -k start 424489 506832 nobody 20444 0.0 S 01:20 /usr/sbin/httpd -k start 424507 506832 nobody 20260 0.0 S 01:17 /usr/sbin/httpd -k start 2602226 1 root 19388 0.1 Ssl 1-04:49:51 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 425178 506832 nobody 19304 0.0 S 00:52 /usr/sbin/httpd -k start 1542531 1 wp-toolkit 19264 0.0 Ss 2-04:51:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 425180 506832 nobody 18892 0.0 S 00:52 /usr/sbin/httpd -k start 425244 506832 nobody 18876 0.0 S 00:50 /usr/sbin/httpd -k start 425202 506832 nobody 18812 0.0 S 00:51 /usr/sbin/httpd -k start 424491 506832 nobody 18768 0.0 S 01:19 /usr/sbin/httpd -k start 425206 506832 nobody 18768 0.0 S 00:51 /usr/sbin/httpd -k start 425251 506832 nobody 18752 0.0 S 00:50 /usr/sbin/httpd -k start 425241 506832 nobody 18672 0.0 S 00:50 /usr/sbin/httpd -k start 425252 506832 nobody 18624 0.0 S 00:50 /usr/sbin/httpd -k start 1542982 1542551 netdata 18544 2.2 Sl 2-04:51:06 /usr/libexec/netdata/plugins.d/apps.plugin 1 425265 506832 nobody 18472 0.0 S 00:50 /usr/sbin/httpd -k start 424500 506832 nobody 18164 0.0 S 01:17 /usr/sbin/httpd -k start 425149 506832 nobody 18084 0.0 S 00:53 /usr/sbin/httpd -k start 425201 506832 nobody 17808 0.0 S 00:51 /usr/sbin/httpd -k start 425247 506832 nobody 17756 0.0 S 00:50 /usr/sbin/httpd -k start 425181 506832 nobody 17736 0.0 S 00:52 /usr/sbin/httpd -k start 425203 506832 nobody 17584 0.0 S 00:51 /usr/sbin/httpd -k start 425271 506832 nobody 17456 0.0 S 00:50 /usr/sbin/httpd -k start 425249 506832 nobody 17360 0.0 S 00:50 /usr/sbin/httpd -k start 425263 506832 nobody 17248 0.0 S 00:50 /usr/sbin/httpd -k start 425148 506832 nobody 17056 0.0 S 00:53 /usr/sbin/httpd -k start 425177 506832 nobody 17036 0.0 S 00:52 /usr/sbin/httpd -k start 425205 506832 nobody 17008 0.0 S 00:51 /usr/sbin/httpd -k start 425183 506832 nobody 17000 0.0 S 00:52 /usr/sbin/httpd -k start 425146 506832 nobody 16996 0.0 S 00:53 /usr/sbin/httpd -k start 306499 1471 root 16392 0.0 S 34:28 cPhulkd - dbprocessor 425195 506832 nobody 16192 0.0 S 00:51 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10738859 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 118 evolution/app.evolutionerp.com.au-ssl_log 96 evolution/portal.evolutionerp.com.au-ssl_log 12 (total vhosts taking traffic: 3) --- top client IPs across all vhosts (last 3 min) --- 97 139.28.219.70 96 40.115.94.245 12 34.185.88.19 10 203.54.180.238 3 85.206.128.219 2 114.119.131.88 2 114.119.130.40 2 101.182.108.127 1 114.119.159.70 1 114.119.140.234 --- top request paths across all vhosts (last 3 min) --- 96 GET /api/getItem/LWFBW2001KG 10 GET /heartbeat.php 6 GET /store/lover-custom-nike-dunks/ 2 GET /index.php 1 POST / 1 GET /www/.git/config 1 GET /wp-includes/php-ai-client/wp-includes/ 1 GET /wp-includes/php-ai-client//wp-includes/ 1 GET /wp-includes/php-ai-client/src/wp-includes/php-ai-client/ 1 GET /wp-includes/php-ai-client/src//wp-includes/php-ai-client/ 1 GET /wp-includes/php-ai-client/src/Providers/wp-includes/php-ai-client/src/ 1 GET /wp-includes/php-ai-client/src/Providers//wp-includes/php-ai-client/src/ 1 GET /wp-includes/php-ai-client/src/Providers/Contracts/wp-includes/php-ai-client/src/Providers/ 1 GET /wp-includes/php-ai-client/src/Providers/Contracts//wp-includes/php-ai-client/src/Providers/ 1 GET /wp-includes/php-ai-client/src/Providers/Contracts/ 1 GET /wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/wp-includes/php-ai-client/src/Providers/ 1 GET /wp-includes/php-ai-client/src/Providers/ApiBasedImplementation//wp-includes/php-ai-client/src/Providers/ 1 GET /wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/ListModelsApiBasedProviderAvailability.php 1 GET /wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/GenerateTextApiBasedProviderAvailability.php 1 GET /wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/Contracts/wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/ --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 6 GET /store/lover-custom-nike-dunks/ 1 POST / 1 GET /www/.git/config 1 GET /wp-includes/php-ai-client/wp-includes/ 1 GET /wp-includes/php-ai-client//wp-includes/ 1 GET /wp-includes/php-ai-client/src/wp-includes/php-ai-client/ 1 GET /wp-includes/php-ai-client/src//wp-includes/php-ai-client/ 1 GET /wp-includes/php-ai-client/src/Providers/wp-includes/php-ai-client/src/ 1 GET /wp-includes/php-ai-client/src/Providers//wp-includes/php-ai-client/src/ 1 GET /wp-includes/php-ai-client/src/Providers/Contracts/wp-includes/php-ai-client/src/Providers/ 1 GET /wp-includes/php-ai-client/src/Providers/Contracts//wp-includes/php-ai-client/src/Providers/ 1 GET /wp-includes/php-ai-client/src/Providers/Contracts/ -- last 10 requests -- 114.119.159.70 - - [05/Sep/2026:07:13:01 +1000] "GET /store/lover-custom-nike-dunks/?image=1&rating=1&wcpr_rating=3&wcpr_page=4 HTTP/1.1" 200 52187 "https://madalice.com.au/store/lover-custom-nike-dunks/?image=1&rating=1 139.28.219.70 - - [05/Sep/2026:07:13:03 +1000] "GET /wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/AbstractApiProvider.php HTTP/1.1" 500 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:13:04 +1000] "GET /wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/Contracts//wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/ HTTP/1.1" 301 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:13:05 +1000] "GET /wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/Contracts/wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/ HTTP/1.1" 404 36684 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:13:07 +1000] "GET /wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/Contracts/ApiBasedModelInterface.php HTTP/1.1" 500 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:13:07 +1000] "GET /wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/GenerateTextApiBasedProviderAvailability.php HTTP/1.1" 500 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:13:07 +1000] "GET /wp-includes/php-ai-client/src/Providers/ApiBasedImplementation/ListModelsApiBasedProviderAvailability.php HTTP/1.1" 500 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:13:08 +1000] "GET /wp-includes/php-ai-client/src/Providers/Contracts/ HTTP/1.1" 200 412 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:13:08 +1000] "GET /wp-includes/php-ai-client/src/Providers/Contracts//wp-includes/php-ai-client/src/Providers/ HTTP/1.1" 301 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:13:10 +1000] "GET /wp-includes/php-ai-client/src/Providers/Contracts/wp-includes/php-ai-client/src/Providers/ HTTP/1.1" 404 36672 "-" "-" == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 96 GET /api/getItem/LWFBW2001KG -- last 10 requests -- 40.115.94.245 - - [05/Sep/2026:07:12:32 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:12:32 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:12:32 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:12:33 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:12:33 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:12:34 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:12:34 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:12:34 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:12:35 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:12:35 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 10 GET /heartbeat.php 2 GET /index.php -- last 10 requests -- 203.54.180.238 - - [05/Sep/2026:07:11:17 +1000] "GET /heartbeat.php?sentAt=1788556277&bytes=106,155,51,245&_=1788436625194 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 101.182.108.127 - - [05/Sep/2026:07:11:22 +1000] "GET /index.php?page=projectinfo&projectid=29032 HTTP/1.1" 200 12854 "https://portal.evolutionerp.com.au/index.php?page=projects_register" "Mozilla/5.0 (iPhone; CPU iPhone 203.54.180.238 - - [05/Sep/2026:07:11:27 +1000] "GET /heartbeat.php?sentAt=1788556287&bytes=106,155,51,255&_=1788436625195 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:11:37 +1000] "GET /heartbeat.php?sentAt=1788556297&bytes=106,155,52,9&_=1788436625196 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" " 203.54.180.238 - - [05/Sep/2026:07:11:47 +1000] "GET /heartbeat.php?sentAt=1788556307&bytes=106,155,52,19&_=1788436625197 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:11:57 +1000] "GET /heartbeat.php?sentAt=1788556317&bytes=106,155,52,29&_=1788436625198 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:12:07 +1000] "GET /heartbeat.php?sentAt=1788556327&bytes=106,155,52,39&_=1788436625199 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:12:17 +1000] "GET /heartbeat.php?sentAt=1788556337&bytes=106,155,52,49&_=1788436625200 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:12:27 +1000] "GET /heartbeat.php?sentAt=1788556347&bytes=106,155,52,59&_=1788436625201 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:12:37 +1000] "GET /heartbeat.php?sentAt=1788556357&bytes=106,155,52,69&_=1788436625202 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" --- last 30 samples (run-up to this incident) --- 2026-09-05 07:11:08 L1=2.23 run=5 blk=1 avail=7398 (53.7%) swpO=0 conn=4 myRSS=3049 php=8 phpRSS=652 ap=19 tcp=38 topuser=madalice 2026-09-05 07:11:11 L1=2.14 run=3 blk=1 avail=7338 (53.3%) swpO=0 conn=4 myRSS=3049 php=8 phpRSS=729 ap=18 tcp=38 topuser=madalice 2026-09-05 07:11:18 L1=2.20 run=4 blk=1 avail=7378 (53.6%) swpO=0 conn=4 myRSS=3049 php=8 phpRSS=685 ap=18 tcp=37 topuser=madalice 2026-09-05 07:11:21 L1=2.19 run=6 blk=1 avail=7399 (53.7%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=650 ap=17 tcp=35 topuser=madalice 2026-09-05 07:11:28 L1=2.33 run=1 blk=1 avail=7502 (54.5%) swpO=2 conn=4 myRSS=3049 php=8 phpRSS=561 ap=18 tcp=32 topuser=madalice 2026-09-05 07:11:31 L1=2.23 run=1 blk=1 avail=7558 (54.9%) swpO=2 conn=4 myRSS=3049 php=7 phpRSS=482 ap=17 tcp=33 topuser=madalice 2026-09-05 07:11:38 L1=2.29 run=2 blk=1 avail=7401 (53.7%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=660 ap=14 tcp=36 topuser=madalice 2026-09-05 07:11:41 L1=2.18 run=2 blk=1 avail=7448 (54.1%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=612 ap=14 tcp=33 topuser=madalice 2026-09-05 07:11:48 L1=2.17 run=2 blk=1 avail=7444 (54.0%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=614 ap=14 tcp=33 topuser=madalice 2026-09-05 07:11:51 L1=2.16 run=1 blk=1 avail=7477 (54.3%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=580 ap=14 tcp=32 topuser=madalice 2026-09-05 07:11:58 L1=2.06 run=3 blk=1 avail=7435 (54.0%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=621 ap=15 tcp=37 topuser=madalice 2026-09-05 07:12:01 L1=1.98 run=1 blk=1 avail=7506 (54.5%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=535 ap=16 tcp=33 topuser=madalice 2026-09-05 07:12:08 L1=1.98 run=2 blk=1 avail=7433 (54.0%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=610 ap=16 tcp=32 topuser=madalice 2026-09-05 07:12:11 L1=1.90 run=2 blk=1 avail=7433 (54.0%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=612 ap=16 tcp=43 topuser=madalice 2026-09-05 07:12:18 L1=1.83 run=14 blk=1 avail=6225 (45.2%) swpO=0 conn=12 myRSS=3049 php=13 phpRSS=1615 ap=29 tcp=44 topuser=madalice 2026-09-05 07:12:21 L1=2.16 run=2 blk=1 avail=6739 (48.9%) swpO=1134 conn=4 myRSS=3007 php=13 phpRSS=1443 ap=27 tcp=34 topuser=madalice 2026-09-05 07:12:29 L1=2.06 run=1 blk=1 avail=6729 (48.8%) swpO=1031 conn=3 myRSS=3007 php=14 phpRSS=1546 ap=19 tcp=29 topuser=madalice 2026-09-05 07:12:31 L1=2.06 run=3 blk=1 avail=6689 (48.6%) swpO=0 conn=5 myRSS=3007 php=15 phpRSS=1621 ap=18 tcp=34 topuser=madalice 2026-09-05 07:12:39 L1=1.90 run=1 blk=1 avail=6940 (50.4%) swpO=0 conn=3 myRSS=3007 php=13 phpRSS=1267 ap=25 tcp=55 topuser=madalice 2026-09-05 07:12:41 L1=1.90 run=4 blk=1 avail=6454 (46.9%) swpO=0 conn=7 myRSS=3007 php=16 phpRSS=1656 ap=49 tcp=88 topuser=madalice 2026-09-05 07:12:49 L1=1.91 run=3 blk=1 avail=6375 (46.3%) swpO=0 conn=4 myRSS=3007 php=13 phpRSS=1488 ap=75 tcp=32 topuser=madalice 2026-09-05 07:12:51 L1=1.91 run=2 blk=1 avail=6374 (46.3%) swpO=0 conn=7 myRSS=3007 php=13 phpRSS=1499 ap=73 tcp=31 topuser=madalice 2026-09-05 07:12:59 L1=1.85 run=2 blk=1 avail=6480 (47.0%) swpO=0 conn=4 myRSS=3007 php=13 phpRSS=1445 ap=65 tcp=46 topuser=madalice 2026-09-05 07:13:02 L1=1.85 run=15 blk=1 avail=5696 (41.3%) swpO=349 conn=10 myRSS=2997 php=20 phpRSS=2464 ap=63 tcp=48 topuser=madalice 2026-09-05 07:13:09 L1=1.95 run=3 blk=1 avail=6533 (47.4%) swpO=384 conn=5 myRSS=2997 php=14 phpRSS=1502 ap=55 tcp=33 topuser=madalice 2026-09-05 07:13:12 L1=1.95 run=2 blk=2 avail=6510 (47.3%) swpO=0 conn=4 myRSS=2997 php=14 phpRSS=1539 ap=53 tcp=31 topuser=madalice 2026-09-05 07:13:19 L1=1.88 run=2 blk=1 avail=6704 (48.7%) swpO=0 conn=5 myRSS=2997 php=13 phpRSS=1368 ap=45 tcp=31 topuser=madalice 2026-09-05 07:13:22 L1=1.88 run=1 blk=2 avail=6777 (49.2%) swpO=0 conn=4 myRSS=2997 php=13 phpRSS=1311 ap=43 tcp=31 topuser=madalice 2026-09-05 07:13:29 L1=1.82 run=2 blk=1 avail=6718 (48.8%) swpO=0 conn=5 myRSS=2997 php=13 phpRSS=1418 ap=35 tcp=32 topuser=madalice 2026-09-05 07:13:32 L1=1.82 run=2 blk=1 avail=6598 (47.9%) swpO=0 conn=3 myRSS=2997 php=13 phpRSS=1556 ap=33 tcp=30 topuser=madalice