INCIDENT 2026-09-05 07:50:37 trigger: php_rss=1567MB ================================================================== load: 1.91 1.94 2.06 2/699 569196 ncpu:10 mem_avail: 6692MB/13777MB (48.6%) swap_used:2203MB swapout:0/s blocked(D):1 running:2 iowait:9.9% steal:0.0% php: 13 procs / 1567MB heaviest user: madalice (9 procs, 1436MB) apache: 17 procs tcp_estab: 35 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2978 madalice 9 1436 root 250 1405 nobody 16 289 netdata 8 258 evolution 11 123 alison 5 100 dovenull 6 65 wp-toolkit 3 53 cpanellogin 1 53 candyfabcom 2 28 kurri 2 27 dovecot 3 27 mailman 20 26 lowrange 1 15 aaa 1 15 mailnull 3 13 zabbix 1 10 polkitd 1 7 named 1 5 --- php workers by user --- USER PROCS RSS_MB madalice 9 1437 evolution 3 103 root 1 28 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6026 MB Active(file): 4735 MB Inactive(file): 1360 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 544 MB CommitLimit: 10984 MB Committed_AS: 8769 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 4-05:28:10 4832 /usr/bin/imunify-agent-proxy 4109079 root 03:05:48 3136 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 03:05:48 541028 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3049832 11.8 Ssl 2-17:36:25 /usr/sbin/mariadbd 4109105 4109079 root 541028 8.1 Sl 03:05:48 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 1542443 1 netdata 192620 2.6 Ssl 2-05:28:15 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 496129 2601907 madalice 177220 7.4 S 19:58 php-fpm: pool madalice_com_au 3643624 3626973 root 168424 0.0 S 05:23:47 spamd child 536452 2601907 madalice 164480 7.1 R 06:21 php-fpm: pool madalice_com_au 536530 2601907 madalice 164340 7.3 S 06:11 php-fpm: pool madalice_com_au 536487 2601907 madalice 161244 8.1 S 06:17 php-fpm: pool madalice_com_au 495842 2601907 madalice 161204 6.9 S 20:21 php-fpm: pool madalice_com_au 536420 2601907 madalice 161096 8.4 S 06:25 php-fpm: pool madalice_com_au 515304 2601907 madalice 161052 6.9 S 14:10 php-fpm: pool madalice_com_au 536493 2601907 madalice 160960 7.5 S 06:15 php-fpm: pool madalice_com_au 536397 2601907 madalice 160720 7.1 S 06:29 php-fpm: pool madalice_com_au 3626973 1 root 126644 0.0 Ss 05:27:22 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3643625 3626973 root 89384 0.0 S 05:23:47 spamd child 509236 509098 root 60908 0.0 Sl 8-05:30:56 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 498558 1353308 cpanellogin 54492 0.0 S 16:42 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 3127357 3127312 evolution 54388 0.0 Ss 07:50:36 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero_payment_cron.php 3127358 3127320 evolution 51224 0.0 Ss 07:50:36 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 509266 1 root 46040 0.0 Ss 8-05:30:56 /usr/lib/systemd/systemd-journald 1353308 1 root 41880 0.1 Ss 45-05:09:22 cpsrvd (SSL) - waiting for connections 1542981 1542551 netdata 41144 0.1 Sl 2-05:28:11 /usr/libexec/netdata/plugins.d/go.d.plugin 1 553880 508511 alison 40328 0.6 S 01:39 dovecot/imap 569224 554590 alison 40192 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1469 1 root 34428 0.1 Ss 67-21:40:51 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542487 1 wp-toolkit 29348 0.0 Ss 2-05:28:15 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2601907 1 root 28692 0.0 Ss 1-05:27:11 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3626082 1 root 27776 0.0 Ss 05:28:22 lfd - sleeping 1463 1 root 24044 0.0 Ss 67-21:40:51 tailwatchd 516315 506832 nobody 23360 0.0 S 13:33 /usr/sbin/httpd -k start 549563 506832 nobody 23276 0.0 S 05:25 /usr/sbin/httpd -k start 548273 506832 nobody 22472 0.0 S 05:26 /usr/sbin/httpd -k start 552167 506832 nobody 22316 0.0 S 04:14 /usr/sbin/httpd -k start 553821 506832 nobody 21932 0.0 S 01:44 /usr/sbin/httpd -k start 553323 506832 nobody 21588 0.1 S 02:20 /usr/sbin/httpd -k start 548277 506832 nobody 21428 0.1 S 05:26 /usr/sbin/httpd -k start 552152 506832 nobody 21388 0.0 S 04:18 /usr/sbin/httpd -k start 536584 506832 nobody 21088 0.0 S 06:07 /usr/sbin/httpd -k start 552092 506832 nobody 20840 0.1 S 04:26 /usr/sbin/httpd -k start 554027 506832 nobody 20440 0.0 S 01:23 /usr/sbin/httpd -k start 554590 506832 nobody 19456 0.0 S 00:39 /usr/sbin/httpd -k start 2602226 1 root 19292 0.1 Ssl 1-05:26:56 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 1542531 1 wp-toolkit 19264 0.0 Ss 2-05:28:14 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 554625 506832 nobody 18880 0.0 S 00:38 /usr/sbin/httpd -k start 1542982 1542551 netdata 18520 2.2 Sl 2-05:28:11 /usr/libexec/netdata/plugins.d/apps.plugin 1 306499 1471 root 16328 0.0 S 01:11:33 cPhulkd - dbprocessor 1471 1 root 16264 0.0 Ss 67-21:40:51 cPhulkd - processor 553913 508511 alison 16084 0.0 S 01:39 dovecot/imap 534505 508511 aaa 15916 0.0 S 09:20 dovecot/imap 553883 508511 alison 15700 0.0 S 01:39 dovecot/imap 1542141 1 root 15420 0.0 Ss 2-05:28:18 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 3539428 508511 lowrange 15372 0.0 S 05:54:29 dovecot/imap 568966 508511 alison 15340 0.0 S 00:25 dovecot/imap 554020 1471 root 15004 0.0 S 01:25 cPhulkd - processor - http socket 553914 508511 alison 14952 0.0 S 01:39 dovecot/imap 569061 508511 candyfabcom 14864 0.0 S 00:18 dovecot/imap 569155 508511 kurri 14476 0.0 S 00:05 dovecot/imap 568983 508511 candyfabcom 14328 0.0 S 00:21 dovecot/imap 3141944 508511 kurri 13864 0.0 S 07:50:14 dovecot/imap 690505 508511 dovenull 13276 0.0 S 19:17:47 dovecot/imap-login --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10755186 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 143 evolution/app.evolutionerp.com.au-ssl_log 124 evolution/portal.evolutionerp.com.au-ssl_log 13 tubesupplies/tubesupplies.com.au 9 aaa/aaadownunder.com.au-ssl_log 4 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 133 139.28.219.70 124 40.115.94.245 13 203.54.180.238 9 62.60.130.198 3 89.222.112.108 3 114.119.137.101 2 118.127.40.55 2 114.119.140.234 1 67.205.2.98 1 54.236.1.216 1 209.141.37.195 1 114.119.146.16 --- top request paths across all vhosts (last 3 min) --- 51 GET /api/getItem/LWPB2001KG 31 GET /api/getItem/LWFB2001KG 13 GET /heartbeat.php 5 GET /store/hand-painted-nike-cartoonsketchy/ 3 POST /wp-json/batch/v1 2 POST /wp-cron.php 2 GET /api/getItem/PC1212 1 GET /wp-login.php 1 GET /wp-includes/style-engine.php 1 GET /wp-includes/speculative-loading.php 1 GET /wp-includes/script-modules.php 1 GET /wp-includes/robots-template.php 1 GET /wp-includes/json-schema.php 1 GET /wp-includes/icons.php 1 GET /wp-includes/https-migration.php 1 GET /wp-includes/https-detection.php 1 GET /wp-includes/global-styles-and-settings.php 1 GET /wp-content/plugins/woocommerce/assets/js//wp-content/plugins/woocommerce/assets/ 1 GET /wp-content/plugins/woocommerce/assets/images/wp-content/plugins/woocommerce/assets/ 1 GET /wp-content/plugins/woocommerce/assets/images//wp-content/plugins/woocommerce/assets/ --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 5 GET /store/hand-painted-nike-cartoonsketchy/ 3 POST /wp-json/batch/v1 1 GET /wp-content/plugins/woocommerce/assets/js//wp-content/plugins/woocommerce/assets/ 1 GET /wp-content/plugins/woocommerce/assets/images/wp-content/plugins/woocommerce/assets/ 1 GET /wp-content/plugins/woocommerce/assets/images//wp-content/plugins/woocommerce/assets/ 1 GET /wp-content/plugins/woocommerce/assets/images/template-placeholders/wp-content/plugins/woocommerce/assets/images/ 1 GET /wp-content/plugins/woocommerce/assets/images/template-placeholders//wp-content/plugins/woocommerce/assets/images/ 1 GET /wp-content/plugins/woocommerce/assets/images/template-placeholders/ 1 GET /wp-content/plugins/woocommerce/assets/images/task_list/wp-content/plugins/woocommerce/assets/images/ 1 GET /wp-content/plugins/woocommerce/assets/images/task_list//wp-content/plugins/woocommerce/assets/images/ 1 GET /wp-content/plugins/woocommerce/assets/images/task_list/ 1 GET /wp-content/plugins/woocommerce/assets/images/shipping_providers/wp-content/plugins/woocommerce/assets/images/ -- last 10 requests -- 139.28.219.70 - - [05/Sep/2026:07:50:05 +1000] "GET /wp-content/plugins/woocommerce/assets/images/shipping_providers/ HTTP/1.1" 200 1518 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:50:05 +1000] "GET /wp-content/plugins/woocommerce/assets/images/shipping_providers//wp-content/plugins/woocommerce/assets/images/ HTTP/1.1" 301 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:50:06 +1000] "GET /wp-content/plugins/woocommerce/assets/images/shipping_providers/wp-content/plugins/woocommerce/assets/images/ HTTP/1.1" 404 36658 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:50:08 +1000] "GET /wp-content/plugins/woocommerce/assets/images/task_list/ HTTP/1.1" 200 474 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:50:08 +1000] "GET /wp-content/plugins/woocommerce/assets/images/task_list//wp-content/plugins/woocommerce/assets/images/ HTTP/1.1" 301 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:50:10 +1000] "GET /wp-content/plugins/woocommerce/assets/images/task_list/wp-content/plugins/woocommerce/assets/images/ HTTP/1.1" 404 36660 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:50:11 +1000] "GET /wp-content/plugins/woocommerce/assets/images/template-placeholders/ HTTP/1.1" 200 366 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:50:12 +1000] "GET /wp-content/plugins/woocommerce/assets/images/template-placeholders//wp-content/plugins/woocommerce/assets/images/ HTTP/1.1" 301 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:50:13 +1000] "GET /wp-content/plugins/woocommerce/assets/images/template-placeholders/wp-content/plugins/woocommerce/assets/images/ HTTP/1.1" 404 36665 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:50:15 +1000] "GET /wp-content/plugins/woocommerce/assets/js//wp-content/plugins/woocommerce/assets/ HTTP/1.1" 301 1 "-" "-" == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 51 GET /api/getItem/LWPB2001KG 31 GET /api/getItem/LWFB2001KG 2 GET /api/getItem/PC1212 1 GET /api/getItem/SGC-100 1 GET /api/getItem/RGW90-HC 1 GET /api/getItem/RGW%2CBM80 1 GET /api/getItem/RGW%2CBM117T 1 GET /api/getItem/RGW160 1 GET /api/getItem/RGW120 1 GET /api/getItem/RGW100T 1 GET /api/getItem/RGW100 1 GET /api/getItem/PC7550 -- last 10 requests -- 40.115.94.245 - - [05/Sep/2026:07:50:13 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:50:13 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:50:14 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:50:14 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:50:14 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:50:15 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:50:15 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:50:15 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:50:16 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:50:16 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 13 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [05/Sep/2026:07:48:37 +1000] "GET /heartbeat.php?sentAt=1788558517&bytes=106,155,60,181&_=1788436625418 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:48:47 +1000] "GET /heartbeat.php?sentAt=1788558527&bytes=106,155,60,191&_=1788436625419 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:48:57 +1000] "GET /heartbeat.php?sentAt=1788558537&bytes=106,155,60,201&_=1788436625420 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:49:07 +1000] "GET /heartbeat.php?sentAt=1788558547&bytes=106,155,60,211&_=1788436625421 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:49:17 +1000] "GET /heartbeat.php?sentAt=1788558557&bytes=106,155,60,221&_=1788436625422 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:49:27 +1000] "GET /heartbeat.php?sentAt=1788558567&bytes=106,155,60,231&_=1788436625423 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:49:37 +1000] "GET /heartbeat.php?sentAt=1788558577&bytes=106,155,60,241&_=1788436625424 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:49:47 +1000] "GET /heartbeat.php?sentAt=1788558587&bytes=106,155,60,251&_=1788436625425 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:49:57 +1000] "GET /heartbeat.php?sentAt=1788558597&bytes=106,155,61,5&_=1788436625426 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" " 203.54.180.238 - - [05/Sep/2026:07:50:07 +1000] "GET /heartbeat.php?sentAt=1788558607&bytes=106,155,61,15&_=1788436625427 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" --- last 30 samples (run-up to this incident) --- 2026-09-05 07:48:07 L1=2.06 run=2 blk=1 avail=6846 (49.7%) swpO=0 conn=4 myRSS=2980 php=14 phpRSS=1439 ap=18 tcp=31 topuser=madalice 2026-09-05 07:48:15 L1=2.05 run=1 blk=1 avail=7314 (53.1%) swpO=1 conn=4 myRSS=2980 php=13 phpRSS=943 ap=21 tcp=34 topuser=madalice 2026-09-05 07:48:18 L1=2.05 run=1 blk=1 avail=7441 (54.0%) swpO=1 conn=4 myRSS=2980 php=14 phpRSS=827 ap=22 tcp=35 topuser=madalice 2026-09-05 07:48:25 L1=2.11 run=3 blk=1 avail=7118 (51.7%) swpO=1 conn=4 myRSS=2980 php=14 phpRSS=1179 ap=19 tcp=34 topuser=madalice 2026-09-05 07:48:28 L1=2.11 run=3 blk=1 avail=6879 (49.9%) swpO=1 conn=4 myRSS=2980 php=15 phpRSS=1442 ap=18 tcp=33 topuser=madalice 2026-09-05 07:48:35 L1=2.10 run=7 blk=1 avail=6685 (48.5%) swpO=0 conn=5 myRSS=2980 php=13 phpRSS=1586 ap=18 tcp=32 topuser=madalice 2026-09-05 07:48:38 L1=2.10 run=3 blk=1 avail=6726 (48.8%) swpO=0 conn=5 myRSS=2980 php=14 phpRSS=1568 ap=18 tcp=35 topuser=madalice 2026-09-05 07:48:46 L1=1.93 run=1 blk=1 avail=6707 (48.7%) swpO=0 conn=3 myRSS=2980 php=13 phpRSS=1557 ap=18 tcp=31 topuser=madalice 2026-09-05 07:48:48 L1=1.93 run=2 blk=1 avail=6689 (48.6%) swpO=0 conn=5 myRSS=2980 php=14 phpRSS=1602 ap=17 tcp=33 topuser=madalice 2026-09-05 07:48:56 L1=1.78 run=2 blk=1 avail=6609 (48.0%) swpO=0 conn=3 myRSS=2980 php=13 phpRSS=1653 ap=18 tcp=31 topuser=madalice 2026-09-05 07:48:58 L1=1.78 run=1 blk=1 avail=6677 (48.5%) swpO=0 conn=3 myRSS=2980 php=14 phpRSS=1599 ap=18 tcp=38 topuser=madalice 2026-09-05 07:49:06 L1=1.74 run=3 blk=1 avail=6598 (47.9%) swpO=0 conn=4 myRSS=2980 php=13 phpRSS=1652 ap=18 tcp=38 topuser=madalice 2026-09-05 07:49:08 L1=1.74 run=1 blk=1 avail=6700 (48.6%) swpO=0 conn=3 myRSS=2980 php=13 phpRSS=1561 ap=16 tcp=36 topuser=madalice 2026-09-05 07:49:16 L1=1.70 run=1 blk=1 avail=6693 (48.6%) swpO=117 conn=3 myRSS=2978 php=13 phpRSS=1561 ap=17 tcp=33 topuser=madalice 2026-09-05 07:49:18 L1=1.70 run=2 blk=1 avail=6691 (48.6%) swpO=117 conn=4 myRSS=2978 php=13 phpRSS=1561 ap=17 tcp=35 topuser=madalice 2026-09-05 07:49:26 L1=1.67 run=2 blk=1 avail=6647 (48.3%) swpO=0 conn=4 myRSS=2978 php=13 phpRSS=1607 ap=17 tcp=34 topuser=madalice 2026-09-05 07:49:28 L1=1.67 run=2 blk=1 avail=6634 (48.2%) swpO=0 conn=4 myRSS=2978 php=13 phpRSS=1619 ap=16 tcp=35 topuser=madalice 2026-09-05 07:49:36 L1=1.73 run=2 blk=1 avail=6694 (48.6%) swpO=0 conn=4 myRSS=2978 php=13 phpRSS=1566 ap=16 tcp=32 topuser=madalice 2026-09-05 07:49:38 L1=1.73 run=3 blk=1 avail=6626 (48.1%) swpO=0 conn=5 myRSS=2978 php=13 phpRSS=1637 ap=16 tcp=36 topuser=madalice 2026-09-05 07:49:46 L1=1.69 run=2 blk=1 avail=6691 (48.6%) swpO=0 conn=4 myRSS=2978 php=13 phpRSS=1566 ap=16 tcp=32 topuser=madalice 2026-09-05 07:49:48 L1=1.69 run=2 blk=1 avail=6692 (48.6%) swpO=0 conn=4 myRSS=2978 php=13 phpRSS=1564 ap=16 tcp=34 topuser=madalice 2026-09-05 07:49:56 L1=1.74 run=2 blk=1 avail=6692 (48.6%) swpO=0 conn=4 myRSS=2978 php=13 phpRSS=1565 ap=16 tcp=34 topuser=madalice 2026-09-05 07:49:58 L1=1.74 run=2 blk=1 avail=6687 (48.5%) swpO=0 conn=4 myRSS=2978 php=13 phpRSS=1564 ap=17 tcp=39 topuser=madalice 2026-09-05 07:50:06 L1=1.93 run=3 blk=1 avail=6667 (48.4%) swpO=0 conn=4 myRSS=2978 php=13 phpRSS=1561 ap=19 tcp=34 topuser=madalice 2026-09-05 07:50:08 L1=1.93 run=6 blk=1 avail=6671 (48.4%) swpO=0 conn=4 myRSS=2978 php=14 phpRSS=1581 ap=18 tcp=36 topuser=madalice 2026-09-05 07:50:16 L1=1.94 run=3 blk=1 avail=6626 (48.1%) swpO=0 conn=4 myRSS=2978 php=13 phpRSS=1618 ap=18 tcp=34 topuser=madalice 2026-09-05 07:50:18 L1=1.94 run=2 blk=1 avail=6670 (48.4%) swpO=0 conn=4 myRSS=2978 php=13 phpRSS=1565 ap=18 tcp=35 topuser=madalice 2026-09-05 07:50:26 L1=1.80 run=2 blk=1 avail=6668 (48.4%) swpO=0 conn=4 myRSS=2978 php=13 phpRSS=1586 ap=17 tcp=31 topuser=madalice 2026-09-05 07:50:28 L1=1.80 run=2 blk=1 avail=6647 (48.2%) swpO=0 conn=4 myRSS=2978 php=13 phpRSS=1608 ap=16 tcp=33 topuser=madalice 2026-09-05 07:50:37 L1=1.91 run=2 blk=1 avail=6692 (48.6%) swpO=0 conn=4 myRSS=2978 php=13 phpRSS=1567 ap=17 tcp=35 topuser=madalice