INCIDENT 2026-09-07 08:54:47 trigger: php_rss=1593MB ================================================================== load: 2.48 2.09 2.19 9/710 2275027 ncpu:10 mem_avail: 7925MB/13777MB (57.5%) swap_used:2667MB swapout:219/s blocked(D):1 running:10 iowait:8.8% steal:0.0% php: 14 procs / 1593MB heaviest user: madalice (9 procs, 1513MB) apache: 42 procs tcp_estab: 63 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2118 madalice 9 1511 root 249 905 nobody 41 683 netdata 8 244 evolution 15 105 mailman 20 98 wp-toolkit 3 56 dovenull 6 55 cpanellogin 1 47 mailnull 3 31 kurri 2 24 dovecot 3 23 lowrange 1 13 zabbix 1 10 named 1 8 polkitd 1 6 nscd 1 5 rpc 1 3 dbus 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 9 1445 evolution 4 57 root 1 23 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 7326 MB Active(file): 3909 MB Inactive(file): 3565 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 592 MB CommitLimit: 10984 MB Committed_AS: 9395 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 6-06:32:22 5316 /usr/bin/imunify-agent-proxy 4109079 root 2-04:10:00 1808 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 2-04:10:00 91912 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress / --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2987918 1 mysql 2169784 4.1 Ssl 1-13:18:17 /usr/sbin/mariadbd 2274961 167896 madalice 245720 129 R 00:01 php-fpm: pool madalice_com_au 2274963 167896 madalice 218968 115 R 00:01 php-fpm: pool madalice_com_au 166870 1 netdata 186136 2.6 Ssl 1-06:32:28 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2273966 167896 madalice 178848 11.0 R 01:12 php-fpm: pool madalice_com_au 2274950 167896 madalice 170464 109 R 00:02 php-fpm: pool madalice_com_au 2274969 167896 madalice 164016 86.0 R 00:01 php-fpm: pool madalice_com_au 2274971 167896 madalice 156908 73.0 R 00:01 php-fpm: pool madalice_com_au 923652 904997 root 155928 0.0 S 06:25:04 spamd child 2274960 167896 madalice 135940 134 S 00:01 php-fpm: pool madalice_com_au 2274954 167896 madalice 135244 68.5 R 00:02 php-fpm: pool madalice_com_au 2274953 167896 madalice 135068 65.5 S 00:02 php-fpm: pool madalice_com_au 904997 1 root 130752 0.0 Ss 06:31:51 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 167871 1 root 113780 0.0 Ss 1-06:32:21 /usr/lib/systemd/systemd-journald 4109105 4109079 root 91912 1.5 Sl 2-04:10:00 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2274925 2273908 evolution 58376 2.0 S 00:04 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 923653 904997 root 54600 0.0 S 06:25:03 spamd child 2164564 1353308 cpanellogin 49024 0.0 S 29:49 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 1353308 1 root 42036 0.1 Ss 47-06:13:34 cpsrvd (SSL) - waiting for connections 1469 1 root 41648 0.1 Ss 69-22:45:03 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2274929 2274928 evolution 36148 1.7 Sl 00:04 /usr/local/bin/wkhtmltopdf --enable-local-file-access --encoding utf-8 --title TAX INVOICE --header-html /home/evolution/my.evolutioner 167562 166914 netdata 35200 0.1 Sl 1-06:32:23 /usr/libexec/netdata/plugins.d/go.d.plugin 1 509236 509098 root 34436 0.0 Sl 10-06:35:08 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 166645 1 wp-toolkit 31792 0.0 Ss 1-06:32:32 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 904447 1 root 29904 0.0 Ss 06:32:23 lfd - sleeping 167896 1 root 23788 0.0 Ss 1-06:32:20 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1463 1 root 23556 0.0 Ss 69-22:45:03 tailwatchd 2253596 506832 nobody 22392 0.0 S 08:40 /usr/sbin/httpd -k start 2255854 506832 nobody 21168 0.0 S 05:56 /usr/sbin/httpd -k start 2271878 506832 nobody 21072 0.1 S 03:56 /usr/sbin/httpd -k start 2256752 506832 nobody 20916 0.0 S 05:02 /usr/sbin/httpd -k start 2273050 506832 nobody 20720 0.1 S 02:29 /usr/sbin/httpd -k start 2272561 506832 nobody 20536 0.0 S 03:15 /usr/sbin/httpd -k start 2273565 506832 nobody 20464 0.0 S 01:49 /usr/sbin/httpd -k start 2272984 506832 nobody 20460 0.0 S 02:32 /usr/sbin/httpd -k start 2256597 506832 nobody 19988 0.0 S 05:11 /usr/sbin/httpd -k start 2273563 506832 nobody 19592 0.1 S 01:49 /usr/sbin/httpd -k start 167845 1 wp-toolkit 19584 0.0 Ss 1-06:32:21 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 2274173 506832 nobody 18680 0.0 S 00:55 /usr/sbin/httpd -k start 2274172 506832 nobody 18580 0.1 S 00:55 /usr/sbin/httpd -k start 2273821 506832 nobody 18480 0.0 S 01:25 /usr/sbin/httpd -k start 2274543 506832 nobody 18312 0.0 S 00:32 /usr/sbin/httpd -k start 2274635 506832 nobody 18272 0.1 S 00:29 /usr/sbin/httpd -k start 2274951 506832 nobody 18056 0.5 S 00:02 /usr/sbin/httpd -k start 2274939 506832 nobody 18044 0.3 S 00:03 /usr/sbin/httpd -k start 2274952 506832 nobody 18020 0.5 S 00:02 /usr/sbin/httpd -k start 2273908 506832 nobody 17968 0.0 S 01:20 /usr/sbin/httpd -k start 167566 166914 netdata 17736 2.1 Sl 1-06:32:23 /usr/libexec/netdata/plugins.d/apps.plugin 1 2274630 506832 nobody 17556 0.0 S 00:30 /usr/sbin/httpd -k start 2273549 506832 nobody 17492 0.0 S 01:50 /usr/sbin/httpd -k start 2273078 506832 nobody 17368 0.0 S 02:27 /usr/sbin/httpd -k start 2273077 506832 nobody 17340 0.1 S 02:27 /usr/sbin/httpd -k start 2274524 506832 nobody 16452 0.0 S 00:33 /usr/sbin/httpd -k start 2274489 506832 nobody 16316 0.0 S 00:36 /usr/sbin/httpd -k start 2273748 506832 nobody 16128 0.0 S 01:31 /usr/sbin/httpd -k start 2273564 506832 nobody 16120 0.0 S 01:49 /usr/sbin/httpd -k start 2274663 506832 nobody 16020 0.1 S 00:26 /usr/sbin/httpd -k start 2273804 506832 nobody 15996 0.0 S 01:27 /usr/sbin/httpd -k start 2274514 506832 nobody 15976 0.0 S 00:34 /usr/sbin/httpd -k start 2274162 506832 nobody 15960 0.0 S 00:56 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 1789562 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 572 evolution/portal.evolutionerp.com.au-ssl_log 170 evolution/app.evolutionerp.com.au-ssl_log 137 madalice/madalice.com.au-ssl_log 9 (total vhosts taking traffic: 4) --- top client IPs across all vhosts (last 3 min) --- 423 203.54.180.238 137 40.115.94.245 105 103.104.165.99 86 103.104.164.114 57 116.91.221.245 43 182.239.240.254 7 203.166.236.147 5 203.40.84.196 4 1.145.70.156 3 157.55.39.202 2 52.167.144.232 2 40.77.167.152 2 165.225.233.87 2 114.119.146.16 2 114.119.137.101 --- top request paths across all vhosts (last 3 min) --- 221 POST /functions.php 89 GET /app/ajax.php 64 GET /index.php 64 GET /factory_session_checker.php 40 GET /api/getItem/LWHG2001KG 37 POST /app/ajax/selectFilter.php 37 GET /heartbeat.php 34 GET /factory_session_processed_qty.php 33 POST /plugins/csvexporter/plugin.php 33 GET /factory_session_joiner.php 22 POST /clienteditsave.php 16 POST /app/ajax/selectFilterSingle.php 10 POST /app/ajax.php 10 GET //app/ajax.php 9 GET /plugins/fensa/fensa-ajax.php 8 POST /quoteditsave.php 8 POST /invoiceaddsave.php 5 POST /logsave.php 4 POST /purchaseaddsave.php 4 POST /itemModify.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 221 POST /functions.php 89 GET /app/ajax.php 63 GET /index.php 37 POST /app/ajax/selectFilter.php 33 POST /plugins/csvexporter/plugin.php 22 POST /clienteditsave.php 16 POST /app/ajax/selectFilterSingle.php 10 POST /app/ajax.php 10 GET //app/ajax.php 9 GET /plugins/fensa/fensa-ajax.php 8 POST /quoteditsave.php 8 POST /invoiceaddsave.php -- last 10 requests -- 182.239.240.254 - - [07/Sep/2026:08:54:44 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 116.91.221.245 - - [07/Sep/2026:08:54:44 +1000] "GET /index.php?page=invedit&id=3674&string= HTTP/1.1" 200 35566 "https://my.evolutionerp.com.au/index.php?page=inveditsub&id=3674" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 203.166.236.147 - - [07/Sep/2026:08:54:44 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=37114§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win 116.91.221.245 - - [07/Sep/2026:08:54:44 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=invedit&id=3674&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; 116.91.221.245 - - [07/Sep/2026:08:54:45 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinvedit%26id%3D3674%26tab%3Dgeneraltab&call=getUserSetting&caller=ajaxSubmitLocal&seq=18669505274 HTTP/1.1" 200 110 "https://my. 203.54.180.238 - - [07/Sep/2026:08:54:45 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79166" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K 103.104.165.99 - - [07/Sep/2026:08:54:45 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinvoiceadd%26invoiceid%3D65631%26tab%3Dmaintab&call=getUserSetting&caller=ajaxSubmitLocal&seq=18995161921 HTTP/1.1" 200 112 "htt 103.104.165.99 - - [07/Sep/2026:08:54:45 +1000] "POST /clienteditsave.php?clientid=3958&call=getCategoryDiscounts HTTP/1.1" 200 357 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=65631&tab=maintab" " 103.104.165.99 - - [07/Sep/2026:08:54:45 +1000] "POST /clienteditsave.php?call=getSettings HTTP/1.1" 200 60 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=65631&tab=maintab" "Mozilla/5.0 (Windows NT 116.91.221.245 - - [07/Sep/2026:08:54:46 +1000] "GET /index.php?page=inveditsub&id=3674 HTTP/1.1" 200 19290 "https://my.evolutionerp.com.au/index.php?page=invedit&id=3674&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Wi == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 64 GET /factory_session_checker.php 37 GET /heartbeat.php 34 GET /factory_session_processed_qty.php 33 GET /factory_session_joiner.php 1 POST /portal/register 1 GET /index.php -- last 10 requests -- 203.54.180.238 - - [07/Sep/2026:08:54:34 +1000] "GET /factory_session_joiner.php?id=35155 HTTP/1.1" 200 86 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [07/Sep/2026:08:54:37 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:08:54:38 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:08:54:40 +1000] "GET /heartbeat.php?sentAt=1788735281&bytes=106,157,239,49&_=1788734341147 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=9" 203.54.180.238 - - [07/Sep/2026:08:54:41 +1000] "GET /heartbeat.php?sentAt=1788735281&bytes=106,157,239,49&_=1788732817113 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [07/Sep/2026:08:54:42 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:08:54:43 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:08:54:43 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [07/Sep/2026:08:54:43 +1000] "GET /factory_session_joiner.php?id=35150 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [07/Sep/2026:08:54:44 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 124 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 40 GET /api/getItem/LWHG2001KG 4 GET /api/getItem/PWFBW3151KG 2 GET /api/getItem/SHSG404016-DP25-24-DI-110 2 GET /api/getItem/CLPBNSTD45250KK 1 GET /api/getItem/SHSG909020-8 1 GET /api/getItem/SHSG898950-8 1 GET /api/getItem/SHSG898935-8 1 GET /api/getItem/SHSG898930-8 1 GET /api/getItem/SHSG898920-8 1 GET /api/getItem/SHSG757550-8 1 GET /api/getItem/SHSG757540-8 1 GET /api/getItem/SHSG757530-8 -- last 10 requests -- 40.115.94.245 - - [07/Sep/2026:08:54:11 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:08:54:12 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:08:54:12 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:08:54:13 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:08:54:13 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:08:54:13 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:08:54:14 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:08:54:14 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:08:54:14 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:08:54:15 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" --- last 30 samples (run-up to this incident) --- 2026-09-07 08:52:26 L1=1.62 run=6 blk=1 avail=9263 (67.2%) swpO=0 conn=1 myRSS=2121 php=5 phpRSS=80 ap=42 tcp=48 topuser=evolution 2026-09-07 08:52:27 L1=1.62 run=2 blk=1 avail=9260 (67.2%) swpO=0 conn=1 myRSS=2121 php=6 phpRSS=116 ap=41 tcp=47 topuser=evolution 2026-09-07 08:52:36 L1=1.52 run=1 blk=1 avail=9211 (66.9%) swpO=0 conn=1 myRSS=2122 php=6 phpRSS=177 ap=39 tcp=37 topuser=madalice 2026-09-07 08:52:37 L1=1.52 run=1 blk=1 avail=9220 (66.9%) swpO=0 conn=1 myRSS=2122 php=5 phpRSS=156 ap=38 tcp=35 topuser=madalice 2026-09-07 08:52:46 L1=1.66 run=1 blk=1 avail=9287 (67.4%) swpO=0 conn=1 myRSS=2122 php=5 phpRSS=156 ap=29 tcp=38 topuser=madalice 2026-09-07 08:52:47 L1=1.66 run=1 blk=1 avail=9287 (67.4%) swpO=0 conn=1 myRSS=2122 php=5 phpRSS=156 ap=28 tcp=36 topuser=madalice 2026-09-07 08:52:56 L1=1.64 run=4 blk=1 avail=9192 (66.7%) swpO=0 conn=1 myRSS=2122 php=8 phpRSS=331 ap=28 tcp=47 topuser=madalice 2026-09-07 08:52:57 L1=1.64 run=3 blk=1 avail=9246 (67.1%) swpO=0 conn=1 myRSS=2122 php=5 phpRSS=178 ap=29 tcp=47 topuser=madalice 2026-09-07 08:53:06 L1=1.69 run=2 blk=1 avail=9205 (66.8%) swpO=0 conn=1 myRSS=2122 php=6 phpRSS=215 ap=36 tcp=37 topuser=madalice 2026-09-07 08:53:07 L1=1.69 run=2 blk=1 avail=9217 (66.9%) swpO=0 conn=1 myRSS=2122 php=5 phpRSS=178 ap=35 tcp=35 topuser=madalice 2026-09-07 08:53:16 L1=1.58 run=1 blk=1 avail=9229 (67.0%) swpO=0 conn=1 myRSS=2122 php=5 phpRSS=178 ap=31 tcp=41 topuser=madalice 2026-09-07 08:53:17 L1=1.58 run=1 blk=1 avail=9222 (66.9%) swpO=0 conn=1 myRSS=2122 php=5 phpRSS=178 ap=32 tcp=43 topuser=madalice 2026-09-07 08:53:26 L1=1.49 run=4 blk=1 avail=9156 (66.5%) swpO=0 conn=1 myRSS=2122 php=5 phpRSS=178 ap=36 tcp=45 topuser=madalice 2026-09-07 08:53:27 L1=1.49 run=1 blk=1 avail=9168 (66.5%) swpO=0 conn=1 myRSS=2122 php=5 phpRSS=178 ap=36 tcp=41 topuser=madalice 2026-09-07 08:53:36 L1=1.49 run=4 blk=1 avail=9046 (65.7%) swpO=0 conn=1 myRSS=2122 php=7 phpRSS=401 ap=34 tcp=40 topuser=madalice 2026-09-07 08:53:37 L1=1.49 run=2 blk=1 avail=9223 (66.9%) swpO=0 conn=1 myRSS=2122 php=5 phpRSS=155 ap=34 tcp=36 topuser=madalice 2026-09-07 08:53:46 L1=1.50 run=4 blk=1 avail=9256 (67.2%) swpO=0 conn=1 myRSS=2122 php=6 phpRSS=190 ap=31 tcp=40 topuser=madalice 2026-09-07 08:53:47 L1=1.50 run=5 blk=1 avail=9244 (67.1%) swpO=0 conn=1 myRSS=2122 php=6 phpRSS=193 ap=31 tcp=43 topuser=madalice 2026-09-07 08:53:56 L1=1.58 run=1 blk=1 avail=9227 (67.0%) swpO=0 conn=1 myRSS=2123 php=5 phpRSS=155 ap=34 tcp=43 topuser=madalice 2026-09-07 08:53:57 L1=1.58 run=2 blk=1 avail=9223 (66.9%) swpO=0 conn=2 myRSS=2123 php=5 phpRSS=160 ap=34 tcp=41 topuser=madalice 2026-09-07 08:54:06 L1=1.57 run=2 blk=1 avail=9176 (66.6%) swpO=0 conn=1 myRSS=2123 php=6 phpRSS=232 ap=32 tcp=39 topuser=madalice 2026-09-07 08:54:07 L1=1.57 run=2 blk=1 avail=9177 (66.6%) swpO=0 conn=2 myRSS=2123 php=6 phpRSS=233 ap=32 tcp=39 topuser=madalice 2026-09-07 08:54:17 L1=2.32 run=5 blk=1 avail=9050 (65.7%) swpO=0 conn=2 myRSS=2123 php=9 phpRSS=364 ap=42 tcp=56 topuser=evolution 2026-09-07 08:54:17 L1=2.32 run=9 blk=1 avail=9070 (65.8%) swpO=0 conn=2 myRSS=2123 php=10 phpRSS=345 ap=42 tcp=58 topuser=evolution 2026-09-07 08:54:27 L1=2.49 run=3 blk=1 avail=9068 (65.8%) swpO=0 conn=2 myRSS=2123 php=6 phpRSS=234 ap=46 tcp=51 topuser=madalice 2026-09-07 08:54:27 L1=2.49 run=4 blk=1 avail=9055 (65.7%) swpO=0 conn=2 myRSS=2123 php=6 phpRSS=234 ap=46 tcp=48 topuser=madalice 2026-09-07 08:54:37 L1=2.57 run=1 blk=1 avail=9159 (66.5%) swpO=0 conn=2 myRSS=2124 php=5 phpRSS=178 ap=39 tcp=41 topuser=madalice 2026-09-07 08:54:37 L1=2.57 run=2 blk=1 avail=9119 (66.2%) swpO=0 conn=2 myRSS=2124 php=7 phpRSS=273 ap=39 tcp=36 topuser=madalice 2026-09-07 08:54:47 L1=2.48 run=10 blk=1 avail=8171 (59.3%) swpO=219 conn=2 myRSS=2118 php=14 phpRSS=1337 ap=42 tcp=65 topuser=madalice 2026-09-07 08:54:47 L1=2.48 run=10 blk=1 avail=7925 (57.5%) swpO=219 conn=9 myRSS=2118 php=14 phpRSS=1593 ap=42 tcp=63 topuser=madalice