INCIDENT 2026-09-05 07:47:17 trigger: php_rss=1516MB ================================================================== load: 1.80 1.99 2.11 1/688 552648 ncpu:10 mem_avail: 6784MB/13777MB (49.2%) swap_used:2199MB swapout:1/s blocked(D):1 running:1 iowait:9.8% steal:0.0% php: 14 procs / 1516MB heaviest user: madalice (9 procs, 1345MB) apache: 17 procs tcp_estab: 26 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2980 root 245 1381 madalice 9 1345 nobody 16 290 netdata 8 261 evolution 12 163 dovenull 6 65 wp-toolkit 3 53 cpanellogin 1 53 kurri 2 27 dovecot 3 27 mailman 20 26 lowrange 1 15 corpkicks 1 14 aaa 1 14 zabbix 1 12 polkitd 1 7 named 1 5 mailnull 2 5 nscd 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 9 1345 evolution 4 143 root 1 28 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5828 MB Active(file): 4438 MB Inactive(file): 1456 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 545 MB CommitLimit: 10984 MB Committed_AS: 8742 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 4-05:24:50 4832 /usr/bin/imunify-agent-proxy 4109079 root 03:02:28 3136 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 03:02:28 541388 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3052140 11.8 Ssl 2-17:33:05 /usr/sbin/mariadbd 4109105 4109079 root 541388 8.2 Sl 03:02:28 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 1542443 1 netdata 195088 2.6 Ssl 2-05:24:55 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 496129 2601907 madalice 177040 7.3 S 16:38 php-fpm: pool madalice_com_au 3643624 3626973 root 168464 0.0 S 05:20:27 spamd child 536487 2601907 madalice 161000 8.0 S 02:57 php-fpm: pool madalice_com_au 515304 2601907 madalice 160660 6.7 S 10:50 php-fpm: pool madalice_com_au 536420 2601907 madalice 160656 8.7 S 03:05 php-fpm: pool madalice_com_au 536397 2601907 madalice 160628 6.5 S 03:09 php-fpm: pool madalice_com_au 536493 2601907 madalice 160504 7.4 S 02:55 php-fpm: pool madalice_com_au 536452 2601907 madalice 160468 6.1 S 03:01 php-fpm: pool madalice_com_au 536530 2601907 madalice 138732 7.8 S 02:51 php-fpm: pool madalice_com_au 3626973 1 root 127652 0.0 Ss 05:24:02 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 495842 2601907 madalice 97800 6.8 S 17:01 php-fpm: pool madalice_com_au 3643625 3626973 root 90276 0.0 S 05:20:27 spamd child 509236 509098 root 61056 0.0 Sl 8-05:27:36 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 498558 1353308 cpanellogin 54492 0.0 S 13:22 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 3127357 3127312 evolution 54476 0.0 Ss 07:47:16 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero_payment_cron.php 3127358 3127320 evolution 51296 0.0 Ss 07:47:16 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 509266 1 root 46040 0.0 Ss 8-05:27:36 /usr/lib/systemd/systemd-journald 1353308 1 root 41880 0.1 Ss 45-05:06:02 cpsrvd (SSL) - waiting for connections 1542981 1542551 netdata 41144 0.1 Sl 2-05:24:51 /usr/libexec/netdata/plugins.d/go.d.plugin 1 552619 536403 evolution 40636 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1469 1 root 34496 0.1 Ss 67-21:37:31 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542487 1 wp-toolkit 29348 0.0 Ss 2-05:24:55 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2601907 1 root 28692 0.0 Ss 1-05:23:51 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3626082 1 root 27832 0.0 Ss 05:25:02 lfd - sleeping 1463 1 root 24052 0.0 Ss 67-21:37:31 tailwatchd 516315 506832 nobody 23180 0.0 S 10:13 /usr/sbin/httpd -k start 536403 506832 nobody 22916 0.0 S 03:08 /usr/sbin/httpd -k start 516235 506832 nobody 22888 0.0 S 10:15 /usr/sbin/httpd -k start 536584 506832 nobody 22444 0.0 S 02:47 /usr/sbin/httpd -k start 536600 506832 nobody 21504 0.1 S 02:45 /usr/sbin/httpd -k start 552092 506832 nobody 21384 0.0 S 01:06 /usr/sbin/httpd -k start 546921 506832 nobody 20740 0.1 S 02:07 /usr/sbin/httpd -k start 549563 506832 nobody 20508 0.0 S 02:05 /usr/sbin/httpd -k start 549567 506832 nobody 20356 0.0 S 02:05 /usr/sbin/httpd -k start 548273 506832 nobody 19896 0.0 S 02:06 /usr/sbin/httpd -k start 548277 506832 nobody 19848 0.0 S 02:06 /usr/sbin/httpd -k start 552152 506832 nobody 19748 0.0 S 00:58 /usr/sbin/httpd -k start 2602226 1 root 19304 0.1 Ssl 1-05:23:36 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 1542531 1 wp-toolkit 19264 0.0 Ss 2-05:24:54 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1542982 1542551 netdata 18520 2.2 Sl 2-05:24:51 /usr/libexec/netdata/plugins.d/apps.plugin 1 552521 506832 nobody 18240 0.0 S 00:14 /usr/sbin/httpd -k start 552167 506832 nobody 18208 0.0 S 00:54 /usr/sbin/httpd -k start 306499 1471 root 16420 0.0 S 01:08:13 cPhulkd - dbprocessor 1471 1 root 16336 0.0 Ss 67-21:37:31 cPhulkd - processor 1542141 1 root 15420 0.0 Ss 2-05:24:58 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 3539428 508511 lowrange 15372 0.0 S 05:51:09 dovecot/imap 534505 508511 aaa 14972 0.0 S 06:00 dovecot/imap 552492 508511 corpkicks 14560 0.0 S 00:16 dovecot/imap 552425 508511 kurri 14460 0.0 S 00:25 dovecot/imap 3141944 508511 kurri 13864 0.0 S 07:46:54 dovecot/imap 690505 508511 dovenull 13276 0.0 S 19:14:27 dovecot/imap-login 690514 508511 dovecot 13276 0.0 S 19:14:27 dovecot/auth 690509 508511 dovenull 13068 0.0 S 19:14:27 dovecot/imap-login 483898 1 zabbix 12424 0.2 Ssl 8-05:28:53 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 506832 1 root 12356 0.0 Ss 8-05:28:09 /usr/sbin/httpd -k start 690511 508511 dovenull 11532 0.0 S 19:14:27 dovecot/pop3-login 690507 508511 dovenull 11024 0.0 S 19:14:27 dovecot/pop3-login --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10753447 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 191 evolution/app.evolutionerp.com.au-ssl_log 109 evolution/portal.evolutionerp.com.au-ssl_log 7 tubesupplies/tubesupplies.com.au 4 (total vhosts taking traffic: 4) --- top client IPs across all vhosts (last 3 min) --- 130 139.28.219.70 109 40.115.94.245 56 195.178.110.22 7 203.54.180.238 4 62.60.130.198 2 114.119.143.14 1 114.119.146.16 1 114.119.143.104 1 114.119.140.234 --- top request paths across all vhosts (last 3 min) --- 50 GET /api/getItem/LWPB2001KG 17 GET /api/getItem/LWFBW2001KG 7 GET /heartbeat.php 4 GET /store/hand-painted-vans-slip-on-shoes-joker/ 4 GET /api/getItem/LWHG2001KG 3 GET /wp-content/uploads/dump.sql 3 GET /wp-content/uploads/database.sql 3 GET /wp-content/uploads/backup.sql 3 GET /wp-content/mysql.sql 3 GET /wp-content/database.sql 3 GET /db.sqlite 3 GET /db.bak 3 GET /database.bak 3 GET /data.bak 3 GET /cpanel.zip 3 GET /cpanel.tar.gz 3 GET /cpanel.sql 3 GET /cpanel.madalice.com.au.zip 3 GET /cpanel.madalice.com.au.sql 3 GET /cpanel.madalice.com.au_db.sql --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 4 GET /store/hand-painted-vans-slip-on-shoes-joker/ 3 GET /wp-content/uploads/dump.sql 3 GET /wp-content/uploads/database.sql 3 GET /wp-content/uploads/backup.sql 3 GET /wp-content/mysql.sql 3 GET /wp-content/database.sql 3 GET /db.sqlite 3 GET /db.bak 3 GET /database.bak 3 GET /data.bak 3 GET /cpanel.zip 3 GET /cpanel.tar.gz -- last 10 requests -- 139.28.219.70 - - [05/Sep/2026:07:46:51 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/product-reviews-title.asset.php HTTP/1.1" 200 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:46:51 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/product-reviews-title/ HTTP/1.1" 200 326 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:46:52 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/product-reviews-title//wp-content/plugins/woocommerce/assets/client/blocks/ HTTP/1.1" 301 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:46:53 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/product-reviews-title/wp-content/plugins/woocommerce/assets/client/blocks/ HTTP/1.1" 404 36663 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:46:55 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/product-reviews.asset.php HTTP/1.1" 200 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:46:55 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/product-reviews/ HTTP/1.1" 200 323 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:46:55 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/product-reviews//wp-content/plugins/woocommerce/assets/client/blocks/ HTTP/1.1" 301 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:46:57 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/product-reviews/wp-content/plugins/woocommerce/assets/client/blocks/ HTTP/1.1" 404 36659 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:46:58 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/product-sale-badge/ HTTP/1.1" 200 328 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:46:59 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/product-sale-badge//wp-content/plugins/woocommerce/assets/client/blocks/ HTTP/1.1" 301 1 "-" "-" == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 50 GET /api/getItem/LWPB2001KG 17 GET /api/getItem/LWFBW2001KG 4 GET /api/getItem/LWHG2001KG 2 GET /api/getItem/H10032 2 GET /api/getItem/GEB12-DL 1 GET /api/getItem/SPHDG15040 1 GET /api/getItem/S6 1 GET /api/getItem/S5 1 GET /api/getItem/S4 1 GET /api/getItem/S3 1 GET /api/getItem/S2 1 GET /api/getItem/S1 -- last 10 requests -- 40.115.94.245 - - [05/Sep/2026:07:46:30 +1000] "GET /api/getItem/GDB370 HTTP/1.1" 200 1674 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:46:30 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:46:30 +1000] "GET /api/getItem/GDB430 HTTP/1.1" 200 1666 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:46:30 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:46:30 +1000] "GET /api/getItem/GDB600 HTTP/1.1" 200 1540 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:46:30 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:46:31 +1000] "GET /api/getItem/GDB850 HTTP/1.1" 200 1668 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:46:31 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:46:31 +1000] "GET /api/getItem/FPDB900-BG HTTP/1.1" 200 1700 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:46:31 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 7 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [05/Sep/2026:07:45:07 +1000] "GET /heartbeat.php?sentAt=1788558307&bytes=106,155,59,227&_=1788436625397 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:45:17 +1000] "GET /heartbeat.php?sentAt=1788558317&bytes=106,155,59,237&_=1788436625398 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:45:27 +1000] "GET /heartbeat.php?sentAt=1788558327&bytes=106,155,59,247&_=1788436625399 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:45:37 +1000] "GET /heartbeat.php?sentAt=1788558337&bytes=106,155,60,1&_=1788436625400 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" " 203.54.180.238 - - [05/Sep/2026:07:45:47 +1000] "GET /heartbeat.php?sentAt=1788558347&bytes=106,155,60,11&_=1788436625401 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:45:57 +1000] "GET /heartbeat.php?sentAt=1788558357&bytes=106,155,60,21&_=1788436625402 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:46:07 +1000] "GET /heartbeat.php?sentAt=1788558367&bytes=106,155,60,31&_=1788436625403 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" --- last 30 samples (run-up to this incident) --- 2026-09-05 07:44:54 L1=1.98 run=2 blk=1 avail=6802 (49.4%) swpO=0 conn=3 myRSS=2985 php=13 phpRSS=1398 ap=30 tcp=38 topuser=madalice 2026-09-05 07:44:56 L1=1.98 run=2 blk=1 avail=6847 (49.7%) swpO=0 conn=4 myRSS=2985 php=13 phpRSS=1347 ap=29 tcp=45 topuser=madalice 2026-09-05 07:45:04 L1=1.90 run=2 blk=1 avail=6770 (49.1%) swpO=0 conn=4 myRSS=2985 php=14 phpRSS=1453 ap=28 tcp=37 topuser=madalice 2026-09-05 07:45:06 L1=1.83 run=3 blk=1 avail=6799 (49.4%) swpO=0 conn=4 myRSS=2985 php=14 phpRSS=1449 ap=26 tcp=39 topuser=madalice 2026-09-05 07:45:14 L1=1.92 run=2 blk=1 avail=6778 (49.2%) swpO=163 conn=4 myRSS=2980 php=14 phpRSS=1394 ap=39 tcp=40 topuser=madalice 2026-09-05 07:45:16 L1=1.93 run=2 blk=1 avail=6716 (48.7%) swpO=163 conn=4 myRSS=2980 php=14 phpRSS=1471 ap=37 tcp=37 topuser=madalice 2026-09-05 07:45:24 L1=2.02 run=2 blk=1 avail=6779 (49.2%) swpO=0 conn=4 myRSS=2980 php=14 phpRSS=1442 ap=29 tcp=31 topuser=madalice 2026-09-05 07:45:26 L1=2.01 run=2 blk=1 avail=6860 (49.8%) swpO=0 conn=4 myRSS=2980 php=14 phpRSS=1372 ap=27 tcp=34 topuser=madalice 2026-09-05 07:45:34 L1=1.93 run=2 blk=1 avail=6864 (49.8%) swpO=0 conn=4 myRSS=2980 php=13 phpRSS=1397 ap=19 tcp=30 topuser=madalice 2026-09-05 07:45:37 L1=2.02 run=1 blk=1 avail=6817 (49.5%) swpO=0 conn=4 myRSS=2980 php=13 phpRSS=1451 ap=19 tcp=28 topuser=madalice 2026-09-05 07:45:44 L1=2.02 run=1 blk=1 avail=6813 (49.4%) swpO=0 conn=4 myRSS=2980 php=13 phpRSS=1457 ap=18 tcp=29 topuser=madalice 2026-09-05 07:45:47 L1=2.02 run=1 blk=1 avail=6843 (49.7%) swpO=0 conn=4 myRSS=2980 php=13 phpRSS=1429 ap=18 tcp=30 topuser=madalice 2026-09-05 07:45:54 L1=1.93 run=3 blk=1 avail=6923 (50.3%) swpO=0 conn=4 myRSS=2980 php=13 phpRSS=1347 ap=18 tcp=26 topuser=madalice 2026-09-05 07:45:57 L1=1.93 run=1 blk=1 avail=6855 (49.8%) swpO=0 conn=3 myRSS=2980 php=13 phpRSS=1417 ap=18 tcp=28 topuser=madalice 2026-09-05 07:46:04 L1=1.94 run=2 blk=1 avail=6730 (48.8%) swpO=0 conn=4 myRSS=2980 php=13 phpRSS=1557 ap=17 tcp=26 topuser=madalice 2026-09-05 07:46:07 L1=1.94 run=2 blk=1 avail=6847 (49.7%) swpO=0 conn=3 myRSS=2980 php=13 phpRSS=1446 ap=17 tcp=28 topuser=madalice 2026-09-05 07:46:15 L1=1.95 run=1 blk=1 avail=6951 (50.5%) swpO=0 conn=4 myRSS=2980 php=13 phpRSS=1329 ap=17 tcp=28 topuser=madalice 2026-09-05 07:46:17 L1=1.95 run=3 blk=1 avail=6898 (50.1%) swpO=0 conn=3 myRSS=2980 php=14 phpRSS=1414 ap=17 tcp=28 topuser=madalice 2026-09-05 07:46:25 L1=1.81 run=2 blk=1 avail=6932 (50.3%) swpO=0 conn=4 myRSS=2980 php=13 phpRSS=1325 ap=19 tcp=30 topuser=madalice 2026-09-05 07:46:27 L1=1.81 run=2 blk=2 avail=6936 (50.3%) swpO=0 conn=3 myRSS=2980 php=14 phpRSS=1336 ap=19 tcp=33 topuser=madalice 2026-09-05 07:46:35 L1=1.83 run=1 blk=1 avail=6941 (50.4%) swpO=0 conn=4 myRSS=2980 php=13 phpRSS=1311 ap=19 tcp=33 topuser=madalice 2026-09-05 07:46:37 L1=1.83 run=2 blk=1 avail=6900 (50.1%) swpO=0 conn=3 myRSS=2980 php=14 phpRSS=1383 ap=19 tcp=29 topuser=madalice 2026-09-05 07:46:45 L1=1.78 run=2 blk=1 avail=7027 (51.0%) swpO=0 conn=4 myRSS=2980 php=13 phpRSS=1228 ap=19 tcp=28 topuser=madalice 2026-09-05 07:46:47 L1=1.78 run=1 blk=1 avail=7073 (51.3%) swpO=0 conn=3 myRSS=2980 php=14 phpRSS=1226 ap=17 tcp=31 topuser=madalice 2026-09-05 07:46:55 L1=1.82 run=2 blk=1 avail=6938 (50.4%) swpO=0 conn=4 myRSS=2980 php=13 phpRSS=1333 ap=17 tcp=29 topuser=madalice 2026-09-05 07:46:57 L1=1.82 run=2 blk=1 avail=6906 (50.1%) swpO=0 conn=5 myRSS=2980 php=14 phpRSS=1400 ap=17 tcp=30 topuser=madalice 2026-09-05 07:47:05 L1=1.76 run=2 blk=1 avail=6869 (49.9%) swpO=0 conn=4 myRSS=2980 php=13 phpRSS=1402 ap=18 tcp=30 topuser=madalice 2026-09-05 07:47:07 L1=1.76 run=3 blk=1 avail=6913 (50.2%) swpO=0 conn=5 myRSS=2980 php=14 phpRSS=1381 ap=18 tcp=29 topuser=madalice 2026-09-05 07:47:15 L1=1.80 run=2 blk=1 avail=6782 (49.2%) swpO=1 conn=4 myRSS=2980 php=13 phpRSS=1490 ap=18 tcp=26 topuser=madalice 2026-09-05 07:47:17 L1=1.80 run=1 blk=1 avail=6784 (49.2%) swpO=1 conn=4 myRSS=2980 php=14 phpRSS=1516 ap=17 tcp=26 topuser=madalice