INCIDENT 2026-09-07 06:16:21 trigger: php_rss=1505MB ================================================================== load: 1.26 1.50 1.59 1/726 1708956 ncpu:10 mem_avail: 8322MB/13777MB (60.4%) swap_used:2806MB swapout:0/s blocked(D):1 running:2 iowait:9.8% steal:0.0% php: 15 procs / 1505MB heaviest user: madalice (10 procs, 1442MB) apache: 55 procs tcp_estab: 55 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1709 madalice 10 1442 root 256 1073 nobody 54 816 netdata 8 242 mailman 20 100 wp-toolkit 3 56 dovenull 6 55 evolution 12 49 mailnull 3 34 infinium 2 28 kurri 2 23 dovecot 3 23 corpkicks 1 14 lowrange 1 13 cpanellogin 1 13 zabbix 1 9 named 1 9 polkitd 1 6 nscd 1 5 --- php workers by user --- USER PROCS RSS_MB madalice 10 1442 evolution 4 39 root 1 23 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 7272 MB Active(file): 4265 MB Inactive(file): 3086 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 608 MB CommitLimit: 10984 MB Committed_AS: 9740 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 1692367 root 03:35 55340 /opt/imunify360/venv/bin/python3 -m imav.run 3926885 root 6-03:53:56 4732 /usr/bin/imunify-agent-proxy 4109079 root 2-01:31:34 1824 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 2-01:31:34 120960 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2987918 1 mysql 1751012 3.0 Ssl 1-10:39:51 /usr/sbin/mariadbd 166870 1 netdata 183880 2.6 Ssl 1-03:54:02 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1708751 167896 madalice 159804 11.9 S 00:20 php-fpm: pool madalice_com_au 1708755 167896 madalice 159464 12.1 S 00:20 php-fpm: pool madalice_com_au 1708580 167896 madalice 159400 10.4 S 00:35 php-fpm: pool madalice_com_au 1708754 167896 madalice 159296 13.0 S 00:20 php-fpm: pool madalice_com_au 1708757 167896 madalice 158520 12.6 S 00:19 php-fpm: pool madalice_com_au 167871 1 root 155820 0.0 Ss 1-03:53:55 /usr/lib/systemd/systemd-journald 923652 904997 root 144500 0.0 S 03:46:38 spamd child 1708752 167896 madalice 136616 7.6 S 00:20 php-fpm: pool madalice_com_au 1708753 167896 madalice 136588 6.6 S 00:20 php-fpm: pool madalice_com_au 1708759 167896 madalice 135828 7.0 S 00:19 php-fpm: pool madalice_com_au 1708761 167896 madalice 135816 6.5 S 00:19 php-fpm: pool madalice_com_au 1708758 167896 madalice 135804 6.9 S 00:19 php-fpm: pool madalice_com_au 904997 1 root 133520 0.0 Ss 03:53:25 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 4109105 4109079 root 120960 1.5 Sl 2-01:31:34 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 923653 904997 root 59956 0.0 S 03:46:37 spamd child 1692367 1 root 55340 0.5 Ssl 03:35 /opt/imunify360/venv/bin/python3 -m imav.run 1353308 1 root 41928 0.1 Ss 47-03:35:08 cpsrvd (SSL) - waiting for connections 1469 1 root 41676 0.1 Ss 69-20:06:37 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1708927 1708894 evolution 40472 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 509236 509098 root 34892 0.0 Sl 10-03:56:42 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 167562 166914 netdata 34268 0.1 Sl 1-03:53:57 /usr/libexec/netdata/plugins.d/go.d.plugin 1 166645 1 wp-toolkit 31644 0.0 Ss 1-03:54:06 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 904447 1 root 29684 0.0 Ss 03:53:57 lfd - sleeping 1692160 1692127 root 25024 0.0 S 03:59 /usr/sbin/exim -q 167896 1 root 23736 0.0 Ss 1-03:53:54 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1463 1 root 23164 0.0 Ss 69-20:06:37 tailwatchd 1692162 1692160 mailnull 20900 0.0 S 03:58 /usr/sbin/exim -q 1692093 506832 nobody 20456 0.0 S 04:03 /usr/sbin/httpd -k start 1692980 506832 nobody 20424 0.0 S 02:43 /usr/sbin/httpd -k start 1691800 506832 nobody 20220 0.0 S 04:34 /usr/sbin/httpd -k start 1691442 506832 nobody 19912 0.0 S 05:10 /usr/sbin/httpd -k start 167845 1 wp-toolkit 19684 0.0 Ss 1-03:53:55 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1708381 506832 nobody 19508 0.0 S 01:00 /usr/sbin/httpd -k start 1693699 506832 nobody 18980 0.0 S 01:45 /usr/sbin/httpd -k start 1674891 506832 nobody 18960 0.0 S 08:50 /usr/sbin/httpd -k start 1693760 506832 nobody 18716 0.0 S 01:41 /usr/sbin/httpd -k start 1693693 506832 nobody 18708 0.1 S 01:46 /usr/sbin/httpd -k start 1708417 506832 nobody 18708 0.0 S 00:55 /usr/sbin/httpd -k start 1708656 506832 nobody 18444 0.2 S 00:28 /usr/sbin/httpd -k start 1708404 506832 nobody 18152 0.0 S 00:57 /usr/sbin/httpd -k start 1708762 506832 nobody 18112 0.0 S 00:19 /usr/sbin/httpd -k start 1708756 506832 nobody 18108 0.1 S 00:20 /usr/sbin/httpd -k start 1708875 506832 nobody 17996 0.2 S 00:04 /usr/sbin/httpd -k start 167566 166914 netdata 17680 2.1 Sl 1-03:53:57 /usr/libexec/netdata/plugins.d/apps.plugin 1 1708295 506832 nobody 16980 0.0 S 01:05 /usr/sbin/httpd -k start 1692952 506832 nobody 16844 0.0 S 02:44 /usr/sbin/httpd -k start 1708771 506832 nobody 16432 0.0 S 00:18 /usr/sbin/httpd -k start 1708855 506832 nobody 16168 0.0 S 00:07 /usr/sbin/httpd -k start 1708873 506832 nobody 16108 0.0 S 00:04 /usr/sbin/httpd -k start 1708886 506832 nobody 16104 0.0 S 00:03 /usr/sbin/httpd -k start 1708773 506832 nobody 16076 0.0 S 00:18 /usr/sbin/httpd -k start 1708884 506832 nobody 16076 0.0 S 00:03 /usr/sbin/httpd -k start 1708872 506832 nobody 16068 0.0 S 00:04 /usr/sbin/httpd -k start 1708876 506832 nobody 16036 0.0 S 00:04 /usr/sbin/httpd -k start 1708883 506832 nobody 16032 0.0 S 00:03 /usr/sbin/httpd -k start 1708887 506832 nobody 16004 0.0 S 00:03 /usr/sbin/httpd -k start 1708784 506832 nobody 16000 0.0 S 00:15 /usr/sbin/httpd -k start 1708871 506832 nobody 15972 0.0 S 00:04 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 1024011 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/portal.evolutionerp.com.au-ssl_log 114 evolution/app.evolutionerp.com.au-ssl_log 100 evolution/my.evolutionerp.com.au-ssl_log 71 whiz/whizengineering.com.au-ssl_log 36 madalice/madalice.com.au-ssl_log 27 aaa/aaadownunder.com.au-ssl_log 3 alison/alisonarts.com.au-ssl_log 1 (total vhosts taking traffic: 7) --- top client IPs across all vhosts (last 3 min) --- 136 203.54.180.238 100 40.115.94.245 36 168.110.14.137 26 182.239.240.254 16 103.104.164.114 15 34.62.101.245 7 64.89.160.5 7 103.104.165.99 2 204.137.14.104 2 192.42.116.68 2 152.53.210.172 1 185.220.101.37 1 152.136.56.202 1 118.127.40.55 --- top request paths across all vhosts (last 3 min) --- 50 GET /factory_session_checker.php 42 POST /functions.php 42 GET /api/getItem/LWFBW2001KG 28 GET /api/getItem/LWHG2001KG 26 GET /factory_session_processed_qty.php 25 GET /factory_session_joiner.php 21 GET /api/getItem/LWPB2001KG 13 GET /heartbeat.php 8 GET / 6 POST /mfreqsave.php 6 GET /index.php 5 GET /web 5 GET /app/ajax.php 3 POST /app/ajax/selectFilterSingle.php 3 POST /app/ajax/selectFilter.php 1 POST /wp-cron.php 1 POST /plugins/csvexporter/plugin.php 1 POST /login.php 1 POST /login2save.php 1 GET /z9x8c7v6b5-debug-trigger-madalice.com.au --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 50 GET /factory_session_checker.php 26 GET /factory_session_processed_qty.php 25 GET /factory_session_joiner.php 13 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [07/Sep/2026:06:15:56 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 133 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [07/Sep/2026:06:15:56 +1000] "GET /factory_session_joiner.php?id=35147 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [07/Sep/2026:06:15:58 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:06:15:58 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:06:16:01 +1000] "GET /heartbeat.php?sentAt=1788725761&bytes=106,157,202,1&_=1788724967984 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [07/Sep/2026:06:16:04 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:06:16:04 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:06:16:05 +1000] "GET /factory_session_joiner.php?id=35142 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [07/Sep/2026:06:16:05 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [07/Sep/2026:06:16:06 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 133 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 42 GET /api/getItem/LWFBW2001KG 28 GET /api/getItem/LWHG2001KG 21 GET /api/getItem/LWPB2001KG 1 GET /api/getItem/H5032 1 GET /api/getItem/H5020 1 GET /api/getItem/H4032 1 GET /api/getItem/H4025 1 GET /api/getItem/H4020 1 GET /api/getItem/H3235 1 GET /api/getItem/H3220 1 GET /api/getItem/H2525 1 GET /api/getItem/H2020 -- last 10 requests -- 40.115.94.245 - - [07/Sep/2026:06:15:16 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:06:15:16 +1000] "GET /api/getItem/H4020 HTTP/1.1" 404 107 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:06:15:16 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:06:15:17 +1000] "GET /api/getItem/H5020 HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:06:15:17 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:06:15:17 +1000] "GET /api/getItem/H4025 HTTP/1.1" 200 1497 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:06:15:17 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:06:15:18 +1000] "GET /api/getItem/H4032 HTTP/1.1" 200 1478 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:06:15:18 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:06:15:18 +1000] "GET /api/getItem/H5032 HTTP/1.1" 200 1478 "-" "RestSharp/106.13.0.0" == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 42 POST /functions.php 6 POST /mfreqsave.php 6 GET /index.php 5 GET /app/ajax.php 3 POST /app/ajax/selectFilterSingle.php 3 POST /app/ajax/selectFilter.php 3 GET / 1 POST /plugins/csvexporter/plugin.php 1 POST /login.php 1 POST /login2save.php -- last 10 requests -- 103.104.164.114 - - [07/Sep/2026:06:15:32 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C 103.104.164.114 - - [07/Sep/2026:06:15:33 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C 103.104.165.99 - - [07/Sep/2026:06:15:42 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=activities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. 203.54.180.238 - - [07/Sep/2026:06:15:49 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=activities&date=11-09-2026&company=PROGRA" "Mozilla/5.0 (Windows NT 10. 203.54.180.238 - - [07/Sep/2026:06:15:49 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=pickingedit&pickingid=38098" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; 203.54.180.238 - - [07/Sep/2026:06:15:51 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 182.239.240.254 - - [07/Sep/2026:06:15:53 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=5281" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 103.104.164.114 - - [07/Sep/2026:06:16:03 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C 103.104.165.99 - - [07/Sep/2026:06:16:12 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=activities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. 203.54.180.238 - - [07/Sep/2026:06:16:16 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 284 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29694" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi --- last 30 samples (run-up to this incident) --- 2026-09-07 06:13:58 L1=1.54 run=1 blk=1 avail=9319 (67.6%) swpO=0 conn=1 myRSS=1716 php=8 phpRSS=609 ap=20 tcp=35 topuser=madalice 2026-09-07 06:14:00 L1=1.54 run=2 blk=1 avail=9311 (67.6%) swpO=0 conn=2 myRSS=1716 php=9 phpRSS=629 ap=20 tcp=34 topuser=madalice 2026-09-07 06:14:08 L1=1.61 run=1 blk=1 avail=9318 (67.6%) swpO=0 conn=1 myRSS=1716 php=7 phpRSS=584 ap=20 tcp=32 topuser=madalice 2026-09-07 06:14:10 L1=1.61 run=1 blk=1 avail=9319 (67.6%) swpO=0 conn=1 myRSS=1716 php=7 phpRSS=584 ap=20 tcp=33 topuser=madalice 2026-09-07 06:14:18 L1=1.51 run=2 blk=1 avail=9537 (69.2%) swpO=0 conn=1 myRSS=1716 php=6 phpRSS=338 ap=20 tcp=34 topuser=madalice 2026-09-07 06:14:21 L1=1.51 run=1 blk=1 avail=9446 (68.6%) swpO=0 conn=1 myRSS=1716 php=6 phpRSS=428 ap=20 tcp=30 topuser=madalice 2026-09-07 06:14:28 L1=1.51 run=1 blk=1 avail=9545 (69.3%) swpO=1 conn=1 myRSS=1716 php=6 phpRSS=335 ap=20 tcp=35 topuser=madalice 2026-09-07 06:14:31 L1=1.51 run=2 blk=1 avail=9511 (69.0%) swpO=1 conn=1 myRSS=1716 php=6 phpRSS=371 ap=20 tcp=37 topuser=madalice 2026-09-07 06:14:38 L1=1.58 run=3 blk=1 avail=9277 (67.3%) swpO=0 conn=1 myRSS=1716 php=7 phpRSS=563 ap=25 tcp=38 topuser=madalice 2026-09-07 06:14:41 L1=1.58 run=1 blk=1 avail=9369 (68.0%) swpO=0 conn=1 myRSS=1716 php=6 phpRSS=428 ap=26 tcp=43 topuser=madalice 2026-09-07 06:14:49 L1=1.49 run=1 blk=1 avail=9489 (68.9%) swpO=0 conn=1 myRSS=1716 php=6 phpRSS=337 ap=22 tcp=31 topuser=madalice 2026-09-07 06:14:51 L1=1.49 run=2 blk=1 avail=9408 (68.3%) swpO=0 conn=1 myRSS=1716 php=6 phpRSS=427 ap=21 tcp=31 topuser=madalice 2026-09-07 06:14:59 L1=1.50 run=1 blk=1 avail=9430 (68.5%) swpO=0 conn=1 myRSS=1716 php=6 phpRSS=428 ap=18 tcp=29 topuser=madalice 2026-09-07 06:15:01 L1=1.50 run=11 blk=1 avail=9380 (68.1%) swpO=0 conn=1 myRSS=1716 php=7 phpRSS=484 ap=18 tcp=31 topuser=madalice 2026-09-07 06:15:09 L1=1.58 run=3 blk=1 avail=9450 (68.6%) swpO=0 conn=1 myRSS=1716 php=8 phpRSS=471 ap=17 tcp=31 topuser=madalice 2026-09-07 06:15:11 L1=1.58 run=1 blk=1 avail=9501 (69.0%) swpO=56 conn=2 myRSS=1715 php=7 phpRSS=393 ap=17 tcp=31 topuser=madalice 2026-09-07 06:15:19 L1=1.57 run=2 blk=1 avail=9476 (68.8%) swpO=56 conn=1 myRSS=1715 php=8 phpRSS=433 ap=20 tcp=36 topuser=madalice 2026-09-07 06:15:21 L1=1.57 run=2 blk=1 avail=9472 (68.8%) swpO=0 conn=2 myRSS=1715 php=7 phpRSS=400 ap=21 tcp=35 topuser=madalice 2026-09-07 06:15:29 L1=1.48 run=1 blk=1 avail=9450 (68.6%) swpO=0 conn=1 myRSS=1715 php=6 phpRSS=336 ap=29 tcp=35 topuser=madalice 2026-09-07 06:15:31 L1=1.48 run=1 blk=1 avail=9459 (68.7%) swpO=0 conn=2 myRSS=1715 php=6 phpRSS=336 ap=28 tcp=35 topuser=madalice 2026-09-07 06:15:39 L1=1.41 run=1 blk=1 avail=9499 (68.9%) swpO=0 conn=1 myRSS=1715 php=6 phpRSS=336 ap=22 tcp=29 topuser=madalice 2026-09-07 06:15:41 L1=1.41 run=4 blk=1 avail=9534 (69.2%) swpO=0 conn=2 myRSS=1715 php=6 phpRSS=336 ap=19 tcp=30 topuser=madalice 2026-09-07 06:15:49 L1=1.42 run=1 blk=1 avail=9714 (70.5%) swpO=0 conn=1 myRSS=1715 php=5 phpRSS=145 ap=18 tcp=27 topuser=madalice 2026-09-07 06:15:51 L1=1.42 run=1 blk=1 avail=9716 (70.5%) swpO=0 conn=2 myRSS=1715 php=5 phpRSS=145 ap=18 tcp=31 topuser=madalice 2026-09-07 06:15:59 L1=1.36 run=1 blk=1 avail=9684 (70.3%) swpO=0 conn=1 myRSS=1715 php=5 phpRSS=145 ap=19 tcp=30 topuser=madalice 2026-09-07 06:16:01 L1=1.36 run=2 blk=1 avail=9684 (70.3%) swpO=0 conn=2 myRSS=1715 php=5 phpRSS=145 ap=19 tcp=32 topuser=madalice 2026-09-07 06:16:09 L1=1.30 run=2 blk=1 avail=8470 (61.5%) swpO=348 conn=1 myRSS=1709 php=14 phpRSS=1493 ap=29 tcp=33 topuser=madalice 2026-09-07 06:16:11 L1=1.30 run=1 blk=1 avail=8554 (62.1%) swpO=348 conn=1 myRSS=1709 php=14 phpRSS=1420 ap=27 tcp=35 topuser=madalice 2026-09-07 06:16:19 L1=1.26 run=3 blk=1 avail=8335 (60.5%) swpO=0 conn=1 myRSS=1709 php=14 phpRSS=1492 ap=56 tcp=66 topuser=madalice 2026-09-07 06:16:21 L1=1.26 run=2 blk=1 avail=8322 (60.4%) swpO=0 conn=2 myRSS=1709 php=15 phpRSS=1505 ap=55 tcp=55 topuser=madalice