INCIDENT 2026-09-05 07:14:50 trigger: php_rss=1546MB ================================================================== load: 1.99 1.98 1.84 2/696 426524 ncpu:10 mem_avail: 6731MB/13777MB (48.9%) swap_used:2171MB swapout:0/s blocked(D):1 running:2 iowait:10.0% steal:0.0% php: 13 procs / 1546MB heaviest user: madalice (9 procs, 1413MB) apache: 16 procs tcp_estab: 34 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2997 root 251 1420 madalice 9 1418 nobody 15 259 netdata 8 258 evolution 11 124 dovenull 6 65 cpanellogin 1 55 wp-toolkit 3 53 kurri 3 42 infinium 3 42 lowrange 2 30 dovecot 3 27 mailman 20 26 aaa 1 14 zabbix 1 10 polkitd 1 7 named 1 5 nscd 1 3 mailnull 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 9 1420 evolution 3 104 root 1 28 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5024 MB Active(file): 3947 MB Inactive(file): 1138 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 571 MB CommitLimit: 10984 MB Committed_AS: 8717 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 4-04:52:23 4832 /usr/bin/imunify-agent-proxy 4109079 root 02:30:01 3620 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 02:30:01 547812 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3068980 11.8 Ssl 2-17:00:38 /usr/sbin/mariadbd 4109105 4109079 root 547812 9.9 Sl 02:30:01 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 424513 2601907 madalice 235736 6.6 R 02:33 php-fpm: pool madalice_com_au 1542443 1 netdata 192812 2.6 Ssl 2-04:52:28 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3643624 3626973 root 169004 0.0 S 04:48:00 spamd child 407474 2601907 madalice 164304 19.5 S 07:55 php-fpm: pool madalice_com_au 407388 2601907 madalice 164188 20.8 S 08:08 php-fpm: pool madalice_com_au 408460 2601907 madalice 163916 14.6 S 05:56 php-fpm: pool madalice_com_au 424514 2601907 madalice 163764 8.3 S 02:33 php-fpm: pool madalice_com_au 424517 2601907 madalice 160820 8.0 S 02:32 php-fpm: pool madalice_com_au 424518 2601907 madalice 160640 7.7 S 02:32 php-fpm: pool madalice_com_au 3626973 1 root 133504 0.0 Ss 04:51:35 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 424515 2601907 madalice 132976 9.4 S 02:33 php-fpm: pool madalice_com_au 424516 2601907 madalice 118940 7.7 S 02:33 php-fpm: pool madalice_com_au 3643625 3626973 root 94700 0.0 S 04:48:00 spamd child 509236 509098 root 61240 0.0 Sl 8-04:55:09 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 203496 1353308 cpanellogin 56932 0.0 S 01:07:38 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 3127357 3127312 evolution 54856 0.0 Ss 07:14:49 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero_payment_cron.php 3127358 3127320 evolution 51596 0.0 Ss 07:14:49 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 509266 1 root 43756 0.0 Ss 8-04:55:09 /usr/lib/systemd/systemd-journald 1542981 1542551 netdata 41144 0.1 Sl 2-04:52:24 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1353308 1 root 40756 0.1 Ss 45-04:33:35 cpsrvd (SSL) - waiting for connections 1469 1 root 34916 0.1 Ss 67-21:05:04 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542487 1 wp-toolkit 29352 0.0 Ss 2-04:52:28 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2601907 1 root 28696 0.0 Ss 1-04:51:24 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3626082 1 root 28116 0.0 Ss 04:52:35 lfd - sleeping 1463 1 root 24200 0.0 Ss 67-21:05:04 tailwatchd 425206 506832 nobody 21840 0.0 S 02:09 /usr/sbin/httpd -k start 425244 506832 nobody 21644 0.0 S 02:08 /usr/sbin/httpd -k start 425251 506832 nobody 21168 0.0 S 02:08 /usr/sbin/httpd -k start 425249 506832 nobody 21128 0.0 S 02:08 /usr/sbin/httpd -k start 425149 506832 nobody 20448 0.0 S 02:11 /usr/sbin/httpd -k start 425177 506832 nobody 20396 0.0 S 02:10 /usr/sbin/httpd -k start 425271 506832 nobody 20004 0.0 S 02:08 /usr/sbin/httpd -k start 425203 506832 nobody 19812 0.0 S 02:09 /usr/sbin/httpd -k start 425252 506832 nobody 19676 0.2 S 02:08 /usr/sbin/httpd -k start 2602226 1 root 19388 0.1 Ssl 1-04:51:09 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 424500 506832 nobody 19312 0.0 S 02:35 /usr/sbin/httpd -k start 1542531 1 wp-toolkit 19264 0.0 Ss 2-04:52:27 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 425195 506832 nobody 19132 0.0 S 02:09 /usr/sbin/httpd -k start 425263 506832 nobody 19104 0.0 S 02:08 /usr/sbin/httpd -k start 1542982 1542551 netdata 18544 2.2 Sl 2-04:52:24 /usr/libexec/netdata/plugins.d/apps.plugin 1 306499 1471 root 16408 0.0 S 35:46 cPhulkd - dbprocessor 426360 506832 nobody 16104 0.0 S 00:21 /usr/sbin/httpd -k start 4020744 508511 lowrange 15788 0.0 S 02:59:11 dovecot/imap 1542141 1 root 15420 0.0 Ss 2-04:52:31 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 3539428 508511 lowrange 15372 0.0 S 05:18:42 dovecot/imap 4124271 508511 kurri 15320 0.0 S 02:28:09 dovecot/imap 1471 1 root 14900 0.0 Ss 67-21:05:04 cPhulkd - processor 424143 508511 aaa 14784 0.0 S 03:21 dovecot/imap 373493 508511 infinium 14744 0.0 S 17:50 dovecot/imap 426487 508511 kurri 14636 0.0 S 00:05 dovecot/imap 425142 508511 infinium 14596 0.0 S 02:12 dovecot/imap 289344 508511 infinium 14588 0.0 S 41:06 dovecot/imap 3141944 508511 kurri 13964 0.0 S 07:14:27 dovecot/imap 690505 508511 dovenull 13276 0.0 S 18:42:00 dovecot/imap-login 690514 508511 dovecot 13276 0.0 S 18:42:00 dovecot/auth 690509 508511 dovenull 13068 0.0 S 18:42:00 dovecot/imap-login 424096 508511 root 12928 0.0 S 03:27 dovecot/auth -w 426415 1471 root 12756 0.0 S 00:17 cPhulkd - processor - http socket --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10739644 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 161 evolution/app.evolutionerp.com.au-ssl_log 137 evolution/portal.evolutionerp.com.au-ssl_log 16 (total vhosts taking traffic: 3) --- top client IPs across all vhosts (last 3 min) --- 139 139.28.219.70 137 40.115.94.245 16 203.54.180.238 12 34.185.88.19 3 85.206.128.219 2 114.119.159.70 1 114.119.146.16 1 114.119.140.234 1 114.119.137.101 1 114.119.131.88 1 114.119.130.40 --- top request paths across all vhosts (last 3 min) --- 51 GET /api/getItem/LWFBW2001KG 16 GET /heartbeat.php 6 GET /store/lover-custom-nike-dunks/ 2 GET /api/getItem/H5025D 2 GET /api/getItem/GEB12-DL 1 POST / 1 GET /www/.git/config 1 GET /wp-includes/php-ai-client/src/Providers/wp-includes/php-ai-client/src/ 1 GET /wp-includes/php-ai-client/src/Providers//wp-includes/php-ai-client/src/ 1 GET /wp-includes/php-ai-client/src/Providers/Models/wp-includes/php-ai-client/src/Providers/ 1 GET /wp-includes/php-ai-client/src/Providers/Models//wp-includes/php-ai-client/src/Providers/ 1 GET /wp-includes/php-ai-client/src/Providers/Models/TextToSpeechConversion//wp-includes/php-ai-client/src/Providers/Models/ 1 GET /wp-includes/php-ai-client/src/Providers/Models/TextToSpeechConversion/ 1 GET /wp-includes/php-ai-client/src/Providers/Models/TextGeneration/wp-includes/php-ai-client/src/Providers/Models/ 1 GET /wp-includes/php-ai-client/src/Providers/Models/TextGeneration//wp-includes/php-ai-client/src/Providers/Models/ 1 GET /wp-includes/php-ai-client/src/Providers/Models/TextGeneration/Contracts/wp-includes/php-ai-client/src/Providers/Models/TextGeneration/ 1 GET /wp-includes/php-ai-client/src/Providers/Models/TextGeneration/Contracts//wp-includes/php-ai-client/src/Providers/Models/TextGeneration/ 1 GET /wp-includes/php-ai-client/src/Providers/Models/TextGeneration/Contracts/TextGenerationOperationModelInterface.php 1 GET /wp-includes/php-ai-client/src/Providers/Models/TextGeneration/Contracts/TextGenerationModelInterface.php 1 GET /wp-includes/php-ai-client/src/Providers/Models/TextGeneration/Contracts/ --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 6 GET /store/lover-custom-nike-dunks/ 1 POST / 1 GET /www/.git/config 1 GET /wp-includes/php-ai-client/src/Providers/wp-includes/php-ai-client/src/ 1 GET /wp-includes/php-ai-client/src/Providers//wp-includes/php-ai-client/src/ 1 GET /wp-includes/php-ai-client/src/Providers/Models/wp-includes/php-ai-client/src/Providers/ 1 GET /wp-includes/php-ai-client/src/Providers/Models//wp-includes/php-ai-client/src/Providers/ 1 GET /wp-includes/php-ai-client/src/Providers/Models/TextToSpeechConversion//wp-includes/php-ai-client/src/Providers/Models/ 1 GET /wp-includes/php-ai-client/src/Providers/Models/TextToSpeechConversion/ 1 GET /wp-includes/php-ai-client/src/Providers/Models/TextGeneration/wp-includes/php-ai-client/src/Providers/Models/ 1 GET /wp-includes/php-ai-client/src/Providers/Models/TextGeneration//wp-includes/php-ai-client/src/Providers/Models/ 1 GET /wp-includes/php-ai-client/src/Providers/Models/TextGeneration/Contracts/wp-includes/php-ai-client/src/Providers/Models/TextGeneration/ -- last 10 requests -- 139.28.219.70 - - [05/Sep/2026:07:14:32 +1000] "GET /wp-includes/php-ai-client/src/Providers/Models/SpeechGeneration/Contracts/SpeechGenerationOperationModelInterface.php HTTP/1.1" 200 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:14:32 +1000] "GET /wp-includes/php-ai-client/src/Providers/Models/TextGeneration//wp-includes/php-ai-client/src/Providers/Models/ HTTP/1.1" 301 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:14:34 +1000] "GET /wp-includes/php-ai-client/src/Providers/Models/TextGeneration/wp-includes/php-ai-client/src/Providers/Models/ HTTP/1.1" 404 36676 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:14:35 +1000] "GET /wp-includes/php-ai-client/src/Providers/Models/TextGeneration/Contracts/ HTTP/1.1" 200 361 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:14:36 +1000] "GET /wp-includes/php-ai-client/src/Providers/Models/TextGeneration/Contracts//wp-includes/php-ai-client/src/Providers/Models/TextGeneration/ HTTP/1.1" 301 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:14:37 +1000] "GET /wp-includes/php-ai-client/src/Providers/Models/TextGeneration/Contracts/wp-includes/php-ai-client/src/Providers/Models/TextGeneration/ HTTP/1.1" 404 36684 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:14:39 +1000] "GET /wp-includes/php-ai-client/src/Providers/Models/TextGeneration/Contracts/TextGenerationModelInterface.php HTTP/1.1" 200 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:14:39 +1000] "GET /wp-includes/php-ai-client/src/Providers/Models/TextGeneration/Contracts/TextGenerationOperationModelInterface.php HTTP/1.1" 200 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:14:40 +1000] "GET /wp-includes/php-ai-client/src/Providers/Models/TextToSpeechConversion/ HTTP/1.1" 200 335 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:14:40 +1000] "GET /wp-includes/php-ai-client/src/Providers/Models/TextToSpeechConversion//wp-includes/php-ai-client/src/Providers/Models/ HTTP/1.1" 301 1 "-" "-" == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 51 GET /api/getItem/LWFBW2001KG 2 GET /api/getItem/H5025D 2 GET /api/getItem/GEB12-DL 1 GET /api/getItem/SPHDG15040 1 GET /api/getItem/S6 1 GET /api/getItem/S5 1 GET /api/getItem/S4 1 GET /api/getItem/S3 1 GET /api/getItem/S2 1 GET /api/getItem/S1 1 GET /api/getItem/RGW90 1 GET /api/getItem/RGW80 -- last 10 requests -- 40.115.94.245 - - [05/Sep/2026:07:14:10 +1000] "GET /api/getItem/RGW90 HTTP/1.1" 200 1182 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:14:11 +1000] "GET /api/getItem/RGW100 HTTP/1.1" 200 1732 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:14:11 +1000] "GET /api/getItem/RGW120 HTTP/1.1" 200 1737 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:14:11 +1000] "GET /api/getItem/RGW160 HTTP/1.1" 200 1607 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:14:12 +1000] "GET /api/getItem/RGW117T HTTP/1.1" 404 109 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:14:12 +1000] "GET /api/getItem/RGW80 HTTP/1.1" 200 1604 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:14:13 +1000] "GET /api/getItem/GP150x200x8 HTTP/1.1" 200 1522 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:14:13 +1000] "GET /api/getItem/K125MSGB HTTP/1.1" 200 1447 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:14:13 +1000] "GET /api/getItem/253-40SP HTTP/1.1" 200 1312 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:14:14 +1000] "GET /api/getItem/300558 HTTP/1.1" 200 1327 "-" "RestSharp/106.13.0.0" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 16 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [05/Sep/2026:07:13:07 +1000] "GET /heartbeat.php?sentAt=1788556387&bytes=106,155,52,99&_=1788436625205 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:13:17 +1000] "GET /heartbeat.php?sentAt=1788556397&bytes=106,155,52,109&_=1788436625206 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:13:27 +1000] "GET /heartbeat.php?sentAt=1788556407&bytes=106,155,52,119&_=1788436625207 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:13:37 +1000] "GET /heartbeat.php?sentAt=1788556417&bytes=106,155,52,129&_=1788436625208 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:13:47 +1000] "GET /heartbeat.php?sentAt=1788556427&bytes=106,155,52,139&_=1788436625209 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:13:57 +1000] "GET /heartbeat.php?sentAt=1788556437&bytes=106,155,52,149&_=1788436625210 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:14:07 +1000] "GET /heartbeat.php?sentAt=1788556447&bytes=106,155,52,159&_=1788436625211 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:14:17 +1000] "GET /heartbeat.php?sentAt=1788556457&bytes=106,155,52,169&_=1788436625212 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:14:27 +1000] "GET /heartbeat.php?sentAt=1788556467&bytes=106,155,52,179&_=1788436625213 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:14:37 +1000] "GET /heartbeat.php?sentAt=1788556477&bytes=106,155,52,189&_=1788436625214 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" --- last 30 samples (run-up to this incident) --- 2026-09-05 07:12:21 L1=2.16 run=2 blk=1 avail=6739 (48.9%) swpO=1134 conn=4 myRSS=3007 php=13 phpRSS=1443 ap=27 tcp=34 topuser=madalice 2026-09-05 07:12:29 L1=2.06 run=1 blk=1 avail=6729 (48.8%) swpO=1031 conn=3 myRSS=3007 php=14 phpRSS=1546 ap=19 tcp=29 topuser=madalice 2026-09-05 07:12:31 L1=2.06 run=3 blk=1 avail=6689 (48.6%) swpO=0 conn=5 myRSS=3007 php=15 phpRSS=1621 ap=18 tcp=34 topuser=madalice 2026-09-05 07:12:39 L1=1.90 run=1 blk=1 avail=6940 (50.4%) swpO=0 conn=3 myRSS=3007 php=13 phpRSS=1267 ap=25 tcp=55 topuser=madalice 2026-09-05 07:12:41 L1=1.90 run=4 blk=1 avail=6454 (46.9%) swpO=0 conn=7 myRSS=3007 php=16 phpRSS=1656 ap=49 tcp=88 topuser=madalice 2026-09-05 07:12:49 L1=1.91 run=3 blk=1 avail=6375 (46.3%) swpO=0 conn=4 myRSS=3007 php=13 phpRSS=1488 ap=75 tcp=32 topuser=madalice 2026-09-05 07:12:51 L1=1.91 run=2 blk=1 avail=6374 (46.3%) swpO=0 conn=7 myRSS=3007 php=13 phpRSS=1499 ap=73 tcp=31 topuser=madalice 2026-09-05 07:12:59 L1=1.85 run=2 blk=1 avail=6480 (47.0%) swpO=0 conn=4 myRSS=3007 php=13 phpRSS=1445 ap=65 tcp=46 topuser=madalice 2026-09-05 07:13:02 L1=1.85 run=15 blk=1 avail=5696 (41.3%) swpO=349 conn=10 myRSS=2997 php=20 phpRSS=2464 ap=63 tcp=48 topuser=madalice 2026-09-05 07:13:09 L1=1.95 run=3 blk=1 avail=6533 (47.4%) swpO=384 conn=5 myRSS=2997 php=14 phpRSS=1502 ap=55 tcp=33 topuser=madalice 2026-09-05 07:13:12 L1=1.95 run=2 blk=2 avail=6510 (47.3%) swpO=0 conn=4 myRSS=2997 php=14 phpRSS=1539 ap=53 tcp=31 topuser=madalice 2026-09-05 07:13:19 L1=1.88 run=2 blk=1 avail=6704 (48.7%) swpO=0 conn=5 myRSS=2997 php=13 phpRSS=1368 ap=45 tcp=31 topuser=madalice 2026-09-05 07:13:22 L1=1.88 run=1 blk=2 avail=6777 (49.2%) swpO=0 conn=4 myRSS=2997 php=13 phpRSS=1311 ap=43 tcp=31 topuser=madalice 2026-09-05 07:13:29 L1=1.82 run=2 blk=1 avail=6718 (48.8%) swpO=0 conn=5 myRSS=2997 php=13 phpRSS=1418 ap=35 tcp=32 topuser=madalice 2026-09-05 07:13:32 L1=1.82 run=2 blk=1 avail=6598 (47.9%) swpO=0 conn=3 myRSS=2997 php=13 phpRSS=1556 ap=33 tcp=30 topuser=madalice 2026-09-05 07:13:39 L1=1.85 run=2 blk=1 avail=6739 (48.9%) swpO=0 conn=5 myRSS=2997 php=13 phpRSS=1468 ap=25 tcp=33 topuser=madalice 2026-09-05 07:13:42 L1=1.85 run=1 blk=1 avail=6895 (50.0%) swpO=0 conn=3 myRSS=2997 php=13 phpRSS=1349 ap=22 tcp=36 topuser=madalice 2026-09-05 07:13:49 L1=1.94 run=3 blk=1 avail=6777 (49.2%) swpO=0 conn=4 myRSS=2997 php=13 phpRSS=1478 ap=19 tcp=39 topuser=madalice 2026-09-05 07:13:52 L1=1.94 run=1 blk=1 avail=7011 (50.9%) swpO=0 conn=3 myRSS=2997 php=13 phpRSS=1249 ap=19 tcp=38 topuser=madalice 2026-09-05 07:14:00 L1=2.17 run=5 blk=1 avail=6939 (50.4%) swpO=0 conn=4 myRSS=2997 php=13 phpRSS=1333 ap=17 tcp=38 topuser=madalice 2026-09-05 07:14:02 L1=2.17 run=2 blk=1 avail=6863 (49.8%) swpO=0 conn=3 myRSS=2997 php=13 phpRSS=1406 ap=17 tcp=38 topuser=madalice 2026-09-05 07:14:10 L1=2.15 run=2 blk=1 avail=6651 (48.3%) swpO=0 conn=4 myRSS=2997 php=13 phpRSS=1616 ap=17 tcp=39 topuser=madalice 2026-09-05 07:14:12 L1=2.15 run=1 blk=1 avail=6806 (49.4%) swpO=0 conn=3 myRSS=2997 php=13 phpRSS=1459 ap=17 tcp=38 topuser=madalice 2026-09-05 07:14:20 L1=2.05 run=2 blk=1 avail=6955 (50.5%) swpO=0 conn=4 myRSS=2997 php=13 phpRSS=1320 ap=17 tcp=37 topuser=madalice 2026-09-05 07:14:22 L1=2.05 run=1 blk=1 avail=6852 (49.7%) swpO=0 conn=3 myRSS=2997 php=13 phpRSS=1411 ap=17 tcp=39 topuser=madalice 2026-09-05 07:14:30 L1=1.97 run=1 blk=1 avail=6807 (49.4%) swpO=0 conn=4 myRSS=2997 php=13 phpRSS=1445 ap=18 tcp=40 topuser=madalice 2026-09-05 07:14:32 L1=1.97 run=1 blk=1 avail=6919 (50.2%) swpO=0 conn=3 myRSS=2997 php=13 phpRSS=1344 ap=18 tcp=36 topuser=madalice 2026-09-05 07:14:40 L1=1.89 run=1 blk=1 avail=6897 (50.1%) swpO=0 conn=4 myRSS=2997 php=13 phpRSS=1369 ap=17 tcp=35 topuser=madalice 2026-09-05 07:14:42 L1=1.89 run=2 blk=1 avail=6786 (49.3%) swpO=0 conn=4 myRSS=2997 php=13 phpRSS=1486 ap=17 tcp=34 topuser=madalice 2026-09-05 07:14:50 L1=1.99 run=2 blk=1 avail=6731 (48.9%) swpO=0 conn=4 myRSS=2997 php=13 phpRSS=1546 ap=16 tcp=34 topuser=madalice