INCIDENT 2026-09-05 07:49:36 trigger: php_rss=1566MB ================================================================== load: 1.73 1.92 2.06 6/697 554218 ncpu:10 mem_avail: 6694MB/13777MB (48.6%) swap_used:2203MB swapout:0/s blocked(D):1 running:2 iowait:9.7% steal:0.0% php: 13 procs / 1566MB heaviest user: madalice (9 procs, 1435MB) apache: 16 procs tcp_estab: 32 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2978 madalice 9 1436 root 250 1405 nobody 15 273 netdata 8 259 evolution 11 123 alison 5 99 dovenull 6 65 wp-toolkit 3 53 cpanellogin 1 53 kurri 2 27 dovecot 3 27 mailman 20 26 lowrange 1 15 aaa 1 15 vinesit 1 14 zabbix 1 11 polkitd 1 7 named 1 5 mailnull 2 5 --- php workers by user --- USER PROCS RSS_MB madalice 9 1437 evolution 3 103 root 1 28 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5854 MB Active(file): 4591 MB Inactive(file): 1331 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 544 MB CommitLimit: 10984 MB Committed_AS: 8729 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 4-05:27:09 4832 /usr/bin/imunify-agent-proxy 4109079 root 03:04:47 3136 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 03:04:47 541116 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3049728 11.8 Ssl 2-17:35:24 /usr/sbin/mariadbd 4109105 4109079 root 541116 8.1 Sl 03:04:47 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 1542443 1 netdata 193472 2.6 Ssl 2-05:27:14 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 496129 2601907 madalice 177108 7.3 S 18:57 php-fpm: pool madalice_com_au 536420 2601907 madalice 169788 8.4 R 05:24 php-fpm: pool madalice_com_au 3643624 3626973 root 168424 0.0 S 05:22:46 spamd child 495842 2601907 madalice 161188 6.8 S 19:20 php-fpm: pool madalice_com_au 536530 2601907 madalice 161160 7.3 S 05:10 php-fpm: pool madalice_com_au 536487 2601907 madalice 161152 7.9 S 05:16 php-fpm: pool madalice_com_au 515304 2601907 madalice 161036 6.7 S 13:09 php-fpm: pool madalice_com_au 536397 2601907 madalice 160684 7.2 S 05:28 php-fpm: pool madalice_com_au 536493 2601907 madalice 160632 7.2 S 05:14 php-fpm: pool madalice_com_au 536452 2601907 madalice 160608 6.9 S 05:20 php-fpm: pool madalice_com_au 3626973 1 root 126644 0.0 Ss 05:26:21 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3643625 3626973 root 89384 0.0 S 05:22:46 spamd child 509236 509098 root 60964 0.0 Sl 8-05:29:55 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 498558 1353308 cpanellogin 54492 0.0 S 15:41 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 3127357 3127312 evolution 54388 0.0 Ss 07:49:35 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero_payment_cron.php 3127358 3127320 evolution 51224 0.0 Ss 07:49:35 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 509266 1 root 46040 0.0 Ss 8-05:29:55 /usr/lib/systemd/systemd-journald 1353308 1 root 41880 0.1 Ss 45-05:08:21 cpsrvd (SSL) - waiting for connections 1542981 1542551 netdata 41144 0.1 Sl 2-05:27:10 /usr/libexec/netdata/plugins.d/go.d.plugin 1 553880 508511 alison 40392 0.7 S 00:38 dovecot/imap 1469 1 root 34428 0.1 Ss 67-21:39:50 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542487 1 wp-toolkit 29348 0.0 Ss 2-05:27:14 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2601907 1 root 28692 0.0 Ss 1-05:26:10 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3626082 1 root 27776 0.0 Ss 05:27:21 lfd - sleeping 1463 1 root 24044 0.0 Ss 67-21:39:50 tailwatchd 516315 506832 nobody 23352 0.0 S 12:32 /usr/sbin/httpd -k start 536584 506832 nobody 22764 0.0 S 05:06 /usr/sbin/httpd -k start 549563 506832 nobody 22244 0.0 S 04:24 /usr/sbin/httpd -k start 552521 506832 nobody 21756 0.1 S 02:33 /usr/sbin/httpd -k start 552167 506832 nobody 21724 0.0 S 03:13 /usr/sbin/httpd -k start 552092 506832 nobody 21560 0.1 S 03:25 /usr/sbin/httpd -k start 548277 506832 nobody 21364 0.0 S 04:25 /usr/sbin/httpd -k start 548273 506832 nobody 21308 0.0 S 04:25 /usr/sbin/httpd -k start 553292 506832 nobody 20984 0.0 S 01:21 /usr/sbin/httpd -k start 552152 506832 nobody 20520 0.0 S 03:17 /usr/sbin/httpd -k start 553323 506832 nobody 20004 0.1 S 01:19 /usr/sbin/httpd -k start 2602226 1 root 19292 0.1 Ssl 1-05:25:55 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 1542531 1 wp-toolkit 19264 0.0 Ss 2-05:27:13 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 553821 506832 nobody 18764 0.0 S 00:43 /usr/sbin/httpd -k start 1542982 1542551 netdata 18520 2.2 Sl 2-05:27:10 /usr/libexec/netdata/plugins.d/apps.plugin 1 554027 506832 nobody 17760 0.0 S 00:22 /usr/sbin/httpd -k start 306499 1471 root 16328 0.0 S 01:10:32 cPhulkd - dbprocessor 1471 1 root 16264 0.0 Ss 67-21:39:50 cPhulkd - processor 534505 508511 aaa 15916 0.0 S 08:19 dovecot/imap 553913 508511 alison 15716 0.0 S 00:38 dovecot/imap 553883 508511 alison 15700 0.1 S 00:38 dovecot/imap 1542141 1 root 15420 0.0 Ss 2-05:27:17 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 3539428 508511 lowrange 15372 0.0 S 05:53:28 dovecot/imap 554020 1471 root 15004 0.0 S 00:24 cPhulkd - processor - http socket 553914 508511 alison 14952 0.0 S 00:38 dovecot/imap 554107 508511 vinesit 14800 0.0 S 00:13 dovecot/imap 553881 508511 alison 14772 0.0 S 00:38 dovecot/imap 554183 508511 kurri 14488 0.0 S 00:04 dovecot/imap 3141944 508511 kurri 13864 0.0 S 07:49:13 dovecot/imap 690505 508511 dovenull 13276 0.0 S 19:16:46 dovecot/imap-login 690514 508511 dovecot 13276 0.0 S 19:16:46 dovecot/auth 690509 508511 dovenull 13068 0.0 S 19:16:46 dovecot/imap-login --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10754530 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 172 evolution/app.evolutionerp.com.au-ssl_log 119 evolution/portal.evolutionerp.com.au-ssl_log 7 aaa/aaadownunder.com.au-ssl_log 4 corpkicks/corporatekicks.com.au-ssl_log 2 nrg/nrgservices.net.au-ssl_log 1 tubesupplies/tubesupplies.com.au-ssl_log 1 (total vhosts taking traffic: 7) --- top client IPs across all vhosts (last 3 min) --- 162 139.28.219.70 119 40.115.94.245 7 203.54.180.238 3 89.222.112.108 3 118.127.40.55 2 114.119.137.101 1 67.205.2.98 1 62.60.130.198 1 45.173.71.121 1 34.196.51.17 1 2a02:598:96:8a00::b00:24c 1 209.141.37.195 1 114.119.146.16 1 114.119.143.104 1 114.119.140.234 --- top request paths across all vhosts (last 3 min) --- 60 GET /api/getItem/LWPB2001KG 7 GET /heartbeat.php 3 POST /wp-json/batch/v1 3 POST /wp-cron.php 3 GET /store/hand-painted-nike-cartoonsketchy/ 2 GET /store/hand-painted-rainbow/ 2 GET /api/getItem/K90MSGB 2 GET /api/getItem/IPC2525 1 HEAD / 1 GET /wp-login.php 1 GET /wp-includes/class-wpdb.php 1 GET /wp-content/plugins/woocommerce/assets/images/wp-content/plugins/woocommerce/assets/ 1 GET /wp-content/plugins/woocommerce/assets/images//wp-content/plugins/woocommerce/assets/ 1 GET /wp-content/plugins/woocommerce/assets/images/payment-methods-cards/ 1 GET /wp-content/plugins/woocommerce/assets/images/pattern-placeholders/wp-content/plugins/woocommerce/assets/images/ 1 GET /wp-content/plugins/woocommerce/assets/images/pattern-placeholders//wp-content/plugins/woocommerce/assets/images/ 1 GET /wp-content/plugins/woocommerce/assets/images/pattern-placeholders/ 1 GET /wp-content/plugins/woocommerce/assets/images/onboarding/wp-content/plugins/woocommerce/assets/images/ 1 GET /wp-content/plugins/woocommerce/assets/images/onboarding//wp-content/plugins/woocommerce/assets/images/ 1 GET /wp-content/plugins/woocommerce/assets/images/onboarding/icons/wp-content/plugins/woocommerce/assets/images/onboarding/ --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 3 POST /wp-json/batch/v1 3 GET /store/hand-painted-nike-cartoonsketchy/ 2 GET /store/hand-painted-rainbow/ 1 GET /wp-content/plugins/woocommerce/assets/images/wp-content/plugins/woocommerce/assets/ 1 GET /wp-content/plugins/woocommerce/assets/images//wp-content/plugins/woocommerce/assets/ 1 GET /wp-content/plugins/woocommerce/assets/images/payment-methods-cards/ 1 GET /wp-content/plugins/woocommerce/assets/images/pattern-placeholders/wp-content/plugins/woocommerce/assets/images/ 1 GET /wp-content/plugins/woocommerce/assets/images/pattern-placeholders//wp-content/plugins/woocommerce/assets/images/ 1 GET /wp-content/plugins/woocommerce/assets/images/pattern-placeholders/ 1 GET /wp-content/plugins/woocommerce/assets/images/onboarding/wp-content/plugins/woocommerce/assets/images/ 1 GET /wp-content/plugins/woocommerce/assets/images/onboarding//wp-content/plugins/woocommerce/assets/images/ 1 GET /wp-content/plugins/woocommerce/assets/images/onboarding/icons/wp-content/plugins/woocommerce/assets/images/onboarding/ -- last 10 requests -- 139.28.219.70 - - [05/Sep/2026:07:49:23 +1000] "GET /wp-content/plugins/woocommerce/assets/images/onboarding/ HTTP/1.1" 200 858 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:49:23 +1000] "GET /wp-content/plugins/woocommerce/assets/images/onboarding//wp-content/plugins/woocommerce/assets/images/ HTTP/1.1" 301 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:49:25 +1000] "GET /wp-content/plugins/woocommerce/assets/images/onboarding/wp-content/plugins/woocommerce/assets/images/ HTTP/1.1" 404 36658 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:49:27 +1000] "GET /wp-content/plugins/woocommerce/assets/images/onboarding/icons/ HTTP/1.1" 200 937 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:49:27 +1000] "GET /wp-content/plugins/woocommerce/assets/images/onboarding/icons//wp-content/plugins/woocommerce/assets/images/onboarding/ HTTP/1.1" 301 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:49:28 +1000] "GET /wp-content/plugins/woocommerce/assets/images/onboarding/icons/wp-content/plugins/woocommerce/assets/images/onboarding/ HTTP/1.1" 404 36664 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:49:30 +1000] "GET /wp-content/plugins/woocommerce/assets/images/pattern-placeholders/ HTTP/1.1" 200 1001 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:49:30 +1000] "GET /wp-content/plugins/woocommerce/assets/images/pattern-placeholders//wp-content/plugins/woocommerce/assets/images/ HTTP/1.1" 301 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:49:32 +1000] "GET /wp-content/plugins/woocommerce/assets/images/pattern-placeholders/wp-content/plugins/woocommerce/assets/images/ HTTP/1.1" 404 36659 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:49:33 +1000] "GET /wp-content/plugins/woocommerce/assets/images/payment-methods-cards/ HTTP/1.1" 200 392 "-" "-" == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 60 GET /api/getItem/LWPB2001KG 2 GET /api/getItem/K90MSGB 2 GET /api/getItem/IPC2525 1 GET /api/getItem/SGC-100 1 GET /api/getItem/RGW90-HC 1 GET /api/getItem/RGW%2CBM80 1 GET /api/getItem/RGW%2CBM117T 1 GET /api/getItem/RGW160 1 GET /api/getItem/RGW120 1 GET /api/getItem/RGW100 1 GET /api/getItem/PT75M 1 GET /api/getItem/PT65M -- last 10 requests -- 40.115.94.245 - - [05/Sep/2026:07:48:55 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:48:55 +1000] "GET /api/getItem/IPC6516 HTTP/1.1" 200 1480 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:48:55 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:48:55 +1000] "GET /api/getItem/IPC6565 HTTP/1.1" 200 1469 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:48:55 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:48:55 +1000] "GET /api/getItem/IPC7550 HTTP/1.1" 200 1321 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:48:56 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:48:56 +1000] "GET /api/getItem/IPC7575 HTTP/1.1" 200 1473 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:48:56 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:48:56 +1000] "GET /api/getItem/IPC90NB HTTP/1.1" 200 1338 "-" "RestSharp/106.13.0.0" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 7 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [05/Sep/2026:07:47:07 +1000] "GET /heartbeat.php?sentAt=1788558427&bytes=106,155,60,91&_=1788436625409 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:47:17 +1000] "GET /heartbeat.php?sentAt=1788558437&bytes=106,155,60,101&_=1788436625410 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:47:27 +1000] "GET /heartbeat.php?sentAt=1788558447&bytes=106,155,60,111&_=1788436625411 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:47:37 +1000] "GET /heartbeat.php?sentAt=1788558457&bytes=106,155,60,121&_=1788436625412 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:47:47 +1000] "GET /heartbeat.php?sentAt=1788558467&bytes=106,155,60,131&_=1788436625413 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:47:57 +1000] "GET /heartbeat.php?sentAt=1788558477&bytes=106,155,60,141&_=1788436625414 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:48:07 +1000] "GET /heartbeat.php?sentAt=1788558487&bytes=106,155,60,151&_=1788436625415 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" --- last 30 samples (run-up to this incident) --- 2026-09-05 07:47:07 L1=1.76 run=3 blk=1 avail=6913 (50.2%) swpO=0 conn=5 myRSS=2980 php=14 phpRSS=1381 ap=18 tcp=29 topuser=madalice 2026-09-05 07:47:15 L1=1.80 run=2 blk=1 avail=6782 (49.2%) swpO=1 conn=4 myRSS=2980 php=13 phpRSS=1490 ap=18 tcp=26 topuser=madalice 2026-09-05 07:47:17 L1=1.80 run=1 blk=1 avail=6784 (49.2%) swpO=1 conn=4 myRSS=2980 php=14 phpRSS=1516 ap=17 tcp=26 topuser=madalice 2026-09-05 07:47:25 L1=1.83 run=4 blk=1 avail=6691 (48.6%) swpO=0 conn=5 myRSS=2980 php=14 phpRSS=1605 ap=18 tcp=31 topuser=madalice 2026-09-05 07:47:27 L1=1.83 run=2 blk=1 avail=6813 (49.5%) swpO=0 conn=4 myRSS=2980 php=14 phpRSS=1469 ap=18 tcp=29 topuser=madalice 2026-09-05 07:47:35 L1=1.94 run=3 blk=1 avail=6844 (49.7%) swpO=0 conn=5 myRSS=2980 php=14 phpRSS=1447 ap=19 tcp=30 topuser=madalice 2026-09-05 07:47:37 L1=1.94 run=1 blk=1 avail=6917 (50.2%) swpO=0 conn=4 myRSS=2980 php=14 phpRSS=1367 ap=19 tcp=31 topuser=madalice 2026-09-05 07:47:45 L1=1.95 run=1 blk=1 avail=6935 (50.3%) swpO=0 conn=5 myRSS=2980 php=13 phpRSS=1319 ap=19 tcp=29 topuser=madalice 2026-09-05 07:47:47 L1=1.95 run=3 blk=1 avail=6797 (49.3%) swpO=0 conn=4 myRSS=2980 php=14 phpRSS=1490 ap=19 tcp=31 topuser=madalice 2026-09-05 07:47:55 L1=1.89 run=1 blk=1 avail=6854 (49.8%) swpO=0 conn=5 myRSS=2980 php=13 phpRSS=1402 ap=20 tcp=26 topuser=madalice 2026-09-05 07:47:57 L1=1.89 run=1 blk=1 avail=6883 (50.0%) swpO=0 conn=4 myRSS=2980 php=14 phpRSS=1404 ap=18 tcp=29 topuser=madalice 2026-09-05 07:48:05 L1=2.06 run=3 blk=1 avail=6787 (49.3%) swpO=0 conn=4 myRSS=2980 php=13 phpRSS=1471 ap=18 tcp=32 topuser=madalice 2026-09-05 07:48:07 L1=2.06 run=2 blk=1 avail=6846 (49.7%) swpO=0 conn=4 myRSS=2980 php=14 phpRSS=1439 ap=18 tcp=31 topuser=madalice 2026-09-05 07:48:15 L1=2.05 run=1 blk=1 avail=7314 (53.1%) swpO=1 conn=4 myRSS=2980 php=13 phpRSS=943 ap=21 tcp=34 topuser=madalice 2026-09-05 07:48:18 L1=2.05 run=1 blk=1 avail=7441 (54.0%) swpO=1 conn=4 myRSS=2980 php=14 phpRSS=827 ap=22 tcp=35 topuser=madalice 2026-09-05 07:48:25 L1=2.11 run=3 blk=1 avail=7118 (51.7%) swpO=1 conn=4 myRSS=2980 php=14 phpRSS=1179 ap=19 tcp=34 topuser=madalice 2026-09-05 07:48:28 L1=2.11 run=3 blk=1 avail=6879 (49.9%) swpO=1 conn=4 myRSS=2980 php=15 phpRSS=1442 ap=18 tcp=33 topuser=madalice 2026-09-05 07:48:35 L1=2.10 run=7 blk=1 avail=6685 (48.5%) swpO=0 conn=5 myRSS=2980 php=13 phpRSS=1586 ap=18 tcp=32 topuser=madalice 2026-09-05 07:48:38 L1=2.10 run=3 blk=1 avail=6726 (48.8%) swpO=0 conn=5 myRSS=2980 php=14 phpRSS=1568 ap=18 tcp=35 topuser=madalice 2026-09-05 07:48:46 L1=1.93 run=1 blk=1 avail=6707 (48.7%) swpO=0 conn=3 myRSS=2980 php=13 phpRSS=1557 ap=18 tcp=31 topuser=madalice 2026-09-05 07:48:48 L1=1.93 run=2 blk=1 avail=6689 (48.6%) swpO=0 conn=5 myRSS=2980 php=14 phpRSS=1602 ap=17 tcp=33 topuser=madalice 2026-09-05 07:48:56 L1=1.78 run=2 blk=1 avail=6609 (48.0%) swpO=0 conn=3 myRSS=2980 php=13 phpRSS=1653 ap=18 tcp=31 topuser=madalice 2026-09-05 07:48:58 L1=1.78 run=1 blk=1 avail=6677 (48.5%) swpO=0 conn=3 myRSS=2980 php=14 phpRSS=1599 ap=18 tcp=38 topuser=madalice 2026-09-05 07:49:06 L1=1.74 run=3 blk=1 avail=6598 (47.9%) swpO=0 conn=4 myRSS=2980 php=13 phpRSS=1652 ap=18 tcp=38 topuser=madalice 2026-09-05 07:49:08 L1=1.74 run=1 blk=1 avail=6700 (48.6%) swpO=0 conn=3 myRSS=2980 php=13 phpRSS=1561 ap=16 tcp=36 topuser=madalice 2026-09-05 07:49:16 L1=1.70 run=1 blk=1 avail=6693 (48.6%) swpO=117 conn=3 myRSS=2978 php=13 phpRSS=1561 ap=17 tcp=33 topuser=madalice 2026-09-05 07:49:18 L1=1.70 run=2 blk=1 avail=6691 (48.6%) swpO=117 conn=4 myRSS=2978 php=13 phpRSS=1561 ap=17 tcp=35 topuser=madalice 2026-09-05 07:49:26 L1=1.67 run=2 blk=1 avail=6647 (48.3%) swpO=0 conn=4 myRSS=2978 php=13 phpRSS=1607 ap=17 tcp=34 topuser=madalice 2026-09-05 07:49:28 L1=1.67 run=2 blk=1 avail=6634 (48.2%) swpO=0 conn=4 myRSS=2978 php=13 phpRSS=1619 ap=16 tcp=35 topuser=madalice 2026-09-05 07:49:36 L1=1.73 run=2 blk=1 avail=6694 (48.6%) swpO=0 conn=4 myRSS=2978 php=13 phpRSS=1566 ap=16 tcp=32 topuser=madalice