INCIDENT 2026-09-07 06:36:45 trigger: php_rss=1719MB ================================================================== load: 2.19 2.18 1.99 3/748 1779866 ncpu:10 mem_avail: 7919MB/13777MB (57.5%) swap_used:2834MB swapout:163/s blocked(D):1 running:4 iowait:7.0% steal:0.0% php: 14 procs / 1719MB heaviest user: madalice (10 procs, 1696MB) apache: 85 procs tcp_estab: 70 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1722 madalice 10 1616 nobody 84 1197 root 250 990 netdata 8 242 mailman 20 100 wp-toolkit 3 56 dovenull 6 55 cpanellogin 1 33 lowrange 2 28 kurri 2 24 mailnull 3 22 dovecot 3 22 infinium 1 14 zabbix 1 10 named 1 9 evolution 11 9 polkitd 1 6 nscd 1 5 rpc 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 10 1622 root 1 23 evolution 3 0 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 7171 MB Active(file): 4023 MB Inactive(file): 3222 MB Dirty: 2 MB Writeback: 0 MB SReclaimable: 597 MB CommitLimit: 10984 MB Committed_AS: 10289 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 6-04:14:20 4728 /usr/bin/imunify-agent-proxy 4109079 root 2-01:51:58 1820 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 2-01:51:58 109644 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2987918 1 mysql 1764036 3.0 Ssl 1-11:00:15 /usr/sbin/mariadbd 1779669 167896 madalice 233836 49.5 R 00:11 php-fpm: pool madalice_com_au 1779735 167896 madalice 222284 46.2 R 00:07 php-fpm: pool madalice_com_au 166870 1 netdata 183736 2.6 Ssl 1-04:14:26 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 167871 1 root 161528 0.0 Ss 1-04:14:19 /usr/lib/systemd/systemd-journald 1779725 167896 madalice 159796 55.6 S 00:08 php-fpm: pool madalice_com_au 1779723 167896 madalice 159680 57.2 S 00:08 php-fpm: pool madalice_com_au 1779727 167896 madalice 158916 45.2 S 00:08 php-fpm: pool madalice_com_au 1779728 167896 madalice 158888 44.0 S 00:08 php-fpm: pool madalice_com_au 1779726 167896 madalice 158828 42.5 S 00:08 php-fpm: pool madalice_com_au 1779724 167896 madalice 158544 44.0 S 00:08 php-fpm: pool madalice_com_au 923652 904997 root 144580 0.0 S 04:07:02 spamd child 1779787 167896 madalice 136692 45.0 S 00:03 php-fpm: pool madalice_com_au 1779788 167896 madalice 136604 44.3 S 00:03 php-fpm: pool madalice_com_au 904997 1 root 132968 0.0 Ss 04:13:49 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 4109105 4109079 root 109644 1.5 Sl 2-01:51:58 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 923653 904997 root 55100 0.0 S 04:07:01 spamd child 1353308 1 root 41976 0.1 Ss 47-03:55:32 cpsrvd (SSL) - waiting for connections 1469 1 root 41676 0.1 Ss 69-20:27:01 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 509236 509098 root 34720 0.0 Sl 10-04:17:06 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1693681 1353308 cpanellogin 34548 0.0 S 22:12 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 167562 166914 netdata 34268 0.1 Sl 1-04:14:21 /usr/libexec/netdata/plugins.d/go.d.plugin 1 166645 1 wp-toolkit 31644 0.0 Ss 1-04:14:30 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 904447 1 root 29764 0.0 Ss 04:14:21 lfd - sleeping 1466 1 root 25720 0.0 Ss 69-20:27:01 dnsadmin - server mode 167896 1 root 23852 0.0 Ss 1-04:14:18 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1463 1 root 22936 0.0 Ss 69-20:27:01 tailwatchd 1772409 506832 nobody 21040 0.0 S 01:37 /usr/sbin/httpd -k start 1763063 506832 nobody 20920 0.1 S 03:43 /usr/sbin/httpd -k start 1763565 506832 nobody 20360 0.0 S 03:07 /usr/sbin/httpd -k start 1779098 506832 nobody 20180 0.1 S 00:58 /usr/sbin/httpd -k start 1778860 506832 nobody 20024 0.0 S 01:23 /usr/sbin/httpd -k start 1763467 506832 nobody 19968 0.0 S 03:18 /usr/sbin/httpd -k start 1773968 506832 nobody 19772 0.0 S 01:36 /usr/sbin/httpd -k start 167845 1 wp-toolkit 19560 0.0 Ss 1-04:14:19 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1779128 506832 nobody 19128 0.0 S 00:55 /usr/sbin/httpd -k start 1779337 506832 nobody 18828 0.0 S 00:41 /usr/sbin/httpd -k start 1779114 506832 nobody 18440 0.0 S 00:56 /usr/sbin/httpd -k start 1779754 506832 nobody 18184 0.4 S 00:05 /usr/sbin/httpd -k start 1779760 506832 nobody 18116 0.5 S 00:04 /usr/sbin/httpd -k start 1779764 506832 nobody 18104 0.2 S 00:04 /usr/sbin/httpd -k start 1779772 506832 nobody 18100 0.3 S 00:03 /usr/sbin/httpd -k start 1779773 506832 nobody 18096 0.3 S 00:03 /usr/sbin/httpd -k start 1779774 506832 nobody 18092 0.3 S 00:03 /usr/sbin/httpd -k start 1779777 506832 nobody 18092 0.6 S 00:03 /usr/sbin/httpd -k start 1779761 506832 nobody 18072 0.2 S 00:04 /usr/sbin/httpd -k start 1779775 506832 nobody 18028 0.3 S 00:03 /usr/sbin/httpd -k start 1779762 506832 nobody 18012 0.5 S 00:04 /usr/sbin/httpd -k start 1779131 506832 nobody 18004 0.0 S 00:55 /usr/sbin/httpd -k start 1779763 506832 nobody 18000 0.5 S 00:04 /usr/sbin/httpd -k start 167566 166914 netdata 17848 2.1 Sl 1-04:14:21 /usr/libexec/netdata/plugins.d/apps.plugin 1 1779127 506832 nobody 17464 0.0 S 00:55 /usr/sbin/httpd -k start 1779116 506832 nobody 16660 0.0 S 00:56 /usr/sbin/httpd -k start 1779734 506832 nobody 16428 0.0 S 00:07 /usr/sbin/httpd -k start 1779797 506832 nobody 16404 0.0 S 00:02 /usr/sbin/httpd -k start 1779125 506832 nobody 16340 0.0 S 00:55 /usr/sbin/httpd -k start 1779102 506832 nobody 16260 0.0 S 00:57 /usr/sbin/httpd -k start 1779786 506832 nobody 16196 0.6 S 00:03 /usr/sbin/httpd -k start 1779784 506832 nobody 16148 0.0 S 00:03 /usr/sbin/httpd -k start 1779783 506832 nobody 16104 0.0 S 00:03 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 1063113 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 151 evolution/my.evolutionerp.com.au-ssl_log 139 evolution/portal.evolutionerp.com.au-ssl_log 133 madalice/madalice.com.au-ssl_log 131 aaa/aaadownunder.com.au-ssl_log 17 corpkicks/corporatekicks.com.au-ssl_log 3 customc/customcentral.com.au-ssl_log 3 evolution/evolutionerp.com.au-ssl_log 3 tubesupplies/tubesupplies.com.au-ssl_log 2 alison/alisonarts.com.au 1 alison/alisonarts.com.au-ssl_log 1 (total vhosts taking traffic: 11) --- top client IPs across all vhosts (last 3 min) --- 155 203.54.180.238 151 40.115.94.245 104 213.35.106.249 61 103.104.164.114 59 182.239.240.254 18 118.127.40.55 14 35.222.118.210 5 103.104.165.99 2 91.92.243.249 2 91.92.243.234 2 44.221.75.220 2 43.165.198.144 2 40.77.167.255 2 216.244.66.243 1 66.249.73.160 --- top request paths across all vhosts (last 3 min) --- 70 GET /wp-admin/index.php 59 GET /factory_session_checker.php 51 POST /functions.php 38 POST /wp-login.php 33 GET /app/ajax.php 29 GET /factory_session_processed_qty.php 29 GET /factory_session_joiner.php 20 GET /index.php 15 GET /heartbeat.php 13 POST / 6 GET / 5 POST /wp-cron.php 5 POST /clienteditsave.php 5 POST /app/ajax/selectFilter.php 4 POST /jobeditsave.php 4 POST /app/ajax/selectFilterSingle.php 4 POST /app/ajax.php 3 POST /dispatchsave.php 2 POST /logsave.php 2 GET /z9x8c7v6b5-debug-trigger-www.madalice.com.au --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 2 GET /api/getItem/SHSG252516-8 2 GET /api/getItem/SHSG252516-6.5 2 GET /api/getItem/RHSG7550408 2 GET /api/getItem/RHSG7550308 2 GET /api/getItem/RHSG7550258 2 GET /api/getItem/RHSG15050308 2 GET /api/getItem/RHSG15050208 2 GET /api/getItem/RHSG150100408 2 GET /api/getItem/RHSG12575408 2 GET /api/getItem/RHSG12575308 2 GET /api/getItem/RHSG1257530 2 GET /api/getItem/RHSG10050208 -- last 10 requests -- 40.115.94.245 - - [07/Sep/2026:06:36:19 +1000] "GET /api/getItem/SHSG10010040-8 HTTP/1.1" 200 1867 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:06:36:20 +1000] "GET /api/getItem/SHSG10010050-12 HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:06:36:20 +1000] "GET /api/getItem/SHSG10010050-8 HTTP/1.1" 200 1838 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:06:36:20 +1000] "GET /api/getItem/SHSG12512540-8 HTTP/1.1" 200 1844 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:06:36:21 +1000] "GET /api/getItem/SHSG12512550-12 HTTP/1.1" 200 1386 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:06:36:21 +1000] "GET /api/getItem/SHSG12512550-8 HTTP/1.1" 200 1355 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:06:36:21 +1000] "GET /api/getItem/SHSG15015040-8 HTTP/1.1" 200 1459 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:06:36:22 +1000] "GET /api/getItem/SHSG202012-8 HTTP/1.1" 200 1352 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:06:36:22 +1000] "GET /api/getItem/SHSG202016-8 HTTP/1.1" 200 1476 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:06:36:23 +1000] "GET /api/getItem/SHSG252516--6.5 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 51 POST /functions.php 33 GET /app/ajax.php 19 GET /index.php 5 POST /clienteditsave.php 5 POST /app/ajax/selectFilter.php 4 POST /jobeditsave.php 4 POST /app/ajax/selectFilterSingle.php 4 POST /app/ajax.php 3 POST /dispatchsave.php 3 GET / 2 POST /logsave.php 1 POST /staffeditsave.php -- last 10 requests -- 103.104.164.114 - - [07/Sep/2026:06:36:13 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dstafflist&call=getUserSetting&caller=ajaxSubmitLocal&seq=17872443739 HTTP/1.1" 200 91 "https://my.evolutionerp.com.au/index.php 103.104.164.114 - - [07/Sep/2026:06:36:13 +1000] "POST /staffeditsave.php?call=getStaff HTTP/1.1" 200 1447 "https://my.evolutionerp.com.au/index.php?page=stafflist" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ 103.104.164.114 - - [07/Sep/2026:06:36:14 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=stafflist" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. 203.54.180.238 - - [07/Sep/2026:06:36:15 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=dispatchedit&dispatchid=34113" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 203.54.180.238 - - [07/Sep/2026:06:36:21 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:06:36:23 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=activities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. 203.54.180.238 - - [07/Sep/2026:06:36:23 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=mfstatus" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 203.54.180.238 - - [07/Sep/2026:06:36:23 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page%3Dactivities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 182.239.240.254 - - [07/Sep/2026:06:36:22 +1000] "POST /print.php HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/index.php?page=dispatchedit&dispatchid=3884" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 103.104.165.99 - - [07/Sep/2026:06:36:28 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=activities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 59 GET /factory_session_checker.php 29 GET /factory_session_processed_qty.php 29 GET /factory_session_joiner.php 15 GET /heartbeat.php 1 GET /index.php -- last 10 requests -- 203.54.180.238 - - [07/Sep/2026:06:36:17 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:06:36:19 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [07/Sep/2026:06:36:19 +1000] "GET /factory_session_joiner.php?id=35148 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [07/Sep/2026:06:36:20 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:06:36:21 +1000] "GET /heartbeat.php?sentAt=1788726981&bytes=106,157,206,197&_=1788724968106 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [07/Sep/2026:06:36:23 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:06:36:25 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:06:36:27 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [07/Sep/2026:06:36:27 +1000] "GET /factory_session_joiner.php?id=35142 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [07/Sep/2026:06:36:28 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 --- last 30 samples (run-up to this incident) --- 2026-09-07 06:34:16 L1=2.53 run=2 blk=1 avail=8687 (63.1%) swpO=0 conn=1 myRSS=1722 php=14 phpRSS=1365 ap=24 tcp=35 topuser=madalice 2026-09-07 06:34:24 L1=2.30 run=2 blk=1 avail=8723 (63.3%) swpO=0 conn=4 myRSS=1722 php=14 phpRSS=1305 ap=26 tcp=41 topuser=madalice 2026-09-07 06:34:26 L1=2.30 run=1 blk=1 avail=8722 (63.3%) swpO=0 conn=1 myRSS=1722 php=14 phpRSS=1301 ap=26 tcp=40 topuser=madalice 2026-09-07 06:34:34 L1=2.18 run=2 blk=1 avail=8779 (63.7%) swpO=0 conn=1 myRSS=1722 php=14 phpRSS=1225 ap=25 tcp=36 topuser=madalice 2026-09-07 06:34:36 L1=2.18 run=2 blk=1 avail=8772 (63.7%) swpO=0 conn=1 myRSS=1722 php=14 phpRSS=1240 ap=25 tcp=37 topuser=madalice 2026-09-07 06:34:44 L1=2.07 run=3 blk=1 avail=8821 (64.0%) swpO=0 conn=1 myRSS=1722 php=14 phpRSS=1216 ap=20 tcp=36 topuser=madalice 2026-09-07 06:34:47 L1=2.07 run=4 blk=1 avail=8854 (64.3%) swpO=0 conn=1 myRSS=1722 php=14 phpRSS=1188 ap=20 tcp=32 topuser=madalice 2026-09-07 06:34:55 L1=1.91 run=2 blk=1 avail=8786 (63.8%) swpO=0 conn=1 myRSS=1722 php=14 phpRSS=1269 ap=19 tcp=37 topuser=madalice 2026-09-07 06:34:57 L1=1.91 run=1 blk=1 avail=8921 (64.8%) swpO=0 conn=1 myRSS=1722 php=14 phpRSS=1112 ap=19 tcp=34 topuser=madalice 2026-09-07 06:35:05 L1=1.93 run=4 blk=1 avail=8740 (63.4%) swpO=0 conn=1 myRSS=1722 php=16 phpRSS=1357 ap=19 tcp=37 topuser=madalice 2026-09-07 06:35:07 L1=1.93 run=6 blk=1 avail=8812 (64.0%) swpO=0 conn=1 myRSS=1722 php=15 phpRSS=1244 ap=19 tcp=36 topuser=madalice 2026-09-07 06:35:15 L1=2.01 run=1 blk=1 avail=8847 (64.2%) swpO=0 conn=1 myRSS=1722 php=14 phpRSS=1183 ap=21 tcp=31 topuser=madalice 2026-09-07 06:35:17 L1=2.01 run=2 blk=1 avail=8844 (64.2%) swpO=0 conn=1 myRSS=1722 php=15 phpRSS=1245 ap=19 tcp=31 topuser=madalice 2026-09-07 06:35:25 L1=2.15 run=2 blk=1 avail=8812 (64.0%) swpO=0 conn=1 myRSS=1722 php=14 phpRSS=1222 ap=22 tcp=38 topuser=madalice 2026-09-07 06:35:27 L1=2.30 run=5 blk=1 avail=8791 (63.8%) swpO=0 conn=1 myRSS=1722 php=14 phpRSS=1242 ap=22 tcp=36 topuser=madalice 2026-09-07 06:35:35 L1=2.20 run=1 blk=1 avail=8825 (64.1%) swpO=0 conn=1 myRSS=1722 php=14 phpRSS=1190 ap=25 tcp=35 topuser=madalice 2026-09-07 06:35:37 L1=2.10 run=2 blk=1 avail=8757 (63.6%) swpO=0 conn=1 myRSS=1722 php=15 phpRSS=1287 ap=25 tcp=32 topuser=madalice 2026-09-07 06:35:45 L1=2.17 run=3 blk=1 avail=8836 (64.1%) swpO=0 conn=1 myRSS=1722 php=14 phpRSS=1217 ap=20 tcp=28 topuser=madalice 2026-09-07 06:35:47 L1=2.24 run=3 blk=1 avail=8751 (63.5%) swpO=0 conn=1 myRSS=1722 php=15 phpRSS=1341 ap=18 tcp=35 topuser=madalice 2026-09-07 06:35:55 L1=2.14 run=4 blk=1 avail=8698 (63.1%) swpO=0 conn=1 myRSS=1722 php=16 phpRSS=1330 ap=31 tcp=41 topuser=madalice 2026-09-07 06:35:57 L1=2.13 run=2 blk=1 avail=8728 (63.4%) swpO=0 conn=1 myRSS=1722 php=14 phpRSS=1242 ap=31 tcp=40 topuser=madalice 2026-09-07 06:36:05 L1=2.20 run=1 blk=1 avail=8633 (62.7%) swpO=0 conn=1 myRSS=1722 php=14 phpRSS=1329 ap=32 tcp=45 topuser=madalice 2026-09-07 06:36:07 L1=2.18 run=2 blk=1 avail=8719 (63.3%) swpO=0 conn=1 myRSS=1722 php=14 phpRSS=1260 ap=32 tcp=42 topuser=madalice 2026-09-07 06:36:15 L1=2.17 run=2 blk=1 avail=8988 (65.2%) swpO=0 conn=1 myRSS=1722 php=11 phpRSS=958 ap=26 tcp=32 topuser=madalice 2026-09-07 06:36:17 L1=2.07 run=1 blk=1 avail=9003 (65.3%) swpO=0 conn=1 myRSS=1722 php=11 phpRSS=958 ap=24 tcp=36 topuser=madalice 2026-09-07 06:36:25 L1=1.99 run=1 blk=1 avail=9466 (68.7%) swpO=0 conn=1 myRSS=1722 php=8 phpRSS=310 ap=25 tcp=46 topuser=madalice 2026-09-07 06:36:27 L1=1.91 run=1 blk=1 avail=9769 (70.9%) swpO=0 conn=1 myRSS=1722 php=4 phpRSS=23 ap=25 tcp=39 topuser=root 2026-09-07 06:36:35 L1=1.84 run=3 blk=1 avail=9718 (70.5%) swpO=0 conn=2 myRSS=1722 php=5 phpRSS=138 ap=23 tcp=35 topuser=madalice 2026-09-07 06:36:37 L1=1.77 run=1 blk=1 avail=9722 (70.6%) swpO=0 conn=1 myRSS=1722 php=5 phpRSS=144 ap=22 tcp=31 topuser=madalice 2026-09-07 06:36:45 L1=2.19 run=4 blk=1 avail=7919 (57.5%) swpO=163 conn=3 myRSS=1722 php=14 phpRSS=1719 ap=85 tcp=70 topuser=madalice