INCIDENT 2026-09-07 11:37:17 trigger: php_rss=1978MB ================================================================== load: 3.41 3.05 2.79 8/712 2889402 ncpu:10 mem_avail: 7255MB/13777MB (52.7%) swap_used:2546MB swapout:229/s blocked(D):1 running:12 iowait:8.1% steal:0.0% php: 16 procs / 1978MB heaviest user: madalice (10 procs, 1799MB) apache: 51 procs tcp_estab: 56 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2397 madalice 10 1758 root 248 1029 nobody 50 848 netdata 8 248 speedlin 1 122 mailman 20 98 cpanellogin 1 77 wp-toolkit 3 55 dovenull 6 55 dovecot 3 22 mailnull 2 17 aaa 1 15 vinesit 1 14 corpkicks 1 14 alison 1 14 zabbix 1 9 kurri 1 9 evolution 11 9 named 1 8 --- php workers by user --- USER PROCS RSS_MB madalice 10 1775 speedlin 1 124 root 1 23 evolution 3 0 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6690 MB Active(file): 3494 MB Inactive(file): 3273 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 581 MB CommitLimit: 10984 MB Committed_AS: 10066 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 6-09:14:52 5428 /usr/bin/imunify-agent-proxy 4109079 root 2-06:52:30 1968 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 2-06:52:30 86548 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress / --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2987918 1 mysql 2454856 6.0 Ssl 1-16:00:47 /usr/sbin/mariadbd 2889311 167896 madalice 231984 42.4 R 00:09 php-fpm: pool madalice_com_au 2889307 167896 madalice 227456 39.5 R 00:10 php-fpm: pool madalice_com_au 2889309 167896 madalice 224924 41.4 R 00:09 php-fpm: pool madalice_com_au 2888808 167896 madalice 210708 15.0 S 00:40 php-fpm: pool madalice_com_au 2889314 167896 madalice 208916 27.3 R 00:09 php-fpm: pool madalice_com_au 166870 1 netdata 190628 2.6 Ssl 1-09:14:58 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2889304 167896 madalice 163000 36.2 S 00:10 php-fpm: pool madalice_com_au 2889312 167896 madalice 162400 31.1 S 00:09 php-fpm: pool madalice_com_au 923652 904997 root 160720 0.1 S 09:07:34 spamd child 2889316 167896 madalice 158784 28.3 R 00:09 php-fpm: pool madalice_com_au 2889313 167896 madalice 158652 29.4 S 00:09 php-fpm: pool madalice_com_au 167871 1 root 148820 0.0 Rs 1-09:14:51 /usr/lib/systemd/systemd-journald 923653 904997 root 141924 0.0 S 09:07:33 spamd child 2889363 2870954 speedlin 133380 56.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 904997 1 root 130728 0.0 Ss 09:14:21 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2889305 167896 madalice 117516 26.6 S 00:10 php-fpm: pool madalice_com_au 4109105 4109079 root 86548 1.4 Sl 2-06:52:30 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2442021 1353308 cpanellogin 79092 0.0 S 01:57:52 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 1469 1 root 40584 0.1 Ss 70-01:27:33 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1353308 1 root 36368 0.1 Ss 47-08:56:04 cpsrvd (SSL) - waiting for connections 509236 509098 root 34728 0.0 Sl 10-09:17:38 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 167562 166914 netdata 34576 0.1 Sl 1-09:14:53 /usr/libexec/netdata/plugins.d/go.d.plugin 1 166645 1 wp-toolkit 31492 0.0 Ss 1-09:15:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 904447 1 root 29816 0.0 Ss 09:14:53 lfd - sleeping 1463 1 root 24056 0.0 Ss 70-01:27:33 tailwatchd 167896 1 root 23696 0.0 Rs 1-09:14:50 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 2870948 506832 nobody 22104 0.0 S 04:05 /usr/sbin/httpd -k start 2871876 506832 nobody 21260 0.0 S 03:06 /usr/sbin/httpd -k start 2870553 506832 nobody 21144 0.0 S 04:29 /usr/sbin/httpd -k start 2872035 506832 nobody 20552 0.0 S 02:54 /usr/sbin/httpd -k start 2887690 506832 nobody 20468 0.0 S 01:34 /usr/sbin/httpd -k start 2872171 506832 nobody 20444 0.0 S 02:46 /usr/sbin/httpd -k start 2871855 506832 nobody 20148 0.0 S 03:08 /usr/sbin/httpd -k start 2888963 506832 nobody 20136 0.2 S 00:29 /usr/sbin/httpd -k start 2888098 506832 nobody 19876 0.1 S 01:14 /usr/sbin/httpd -k start 2872362 506832 nobody 19816 0.0 S 02:38 /usr/sbin/httpd -k start 2885824 506832 nobody 19720 0.0 S 02:06 /usr/sbin/httpd -k start 2887163 506832 nobody 19668 0.0 S 02:05 /usr/sbin/httpd -k start 2888146 506832 nobody 19656 0.1 S 01:12 /usr/sbin/httpd -k start 167845 1 wp-toolkit 19492 0.0 Ss 1-09:14:51 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 2889027 506832 nobody 19280 0.1 S 00:23 /usr/sbin/httpd -k start 2870164 506832 nobody 18968 0.0 S 04:41 /usr/sbin/httpd -k start 2887529 506832 nobody 18968 0.0 S 01:42 /usr/sbin/httpd -k start 2888150 506832 nobody 18964 0.1 S 01:12 /usr/sbin/httpd -k start 2888143 506832 nobody 18932 0.1 S 01:12 /usr/sbin/httpd -k start 2888099 506832 nobody 18908 0.0 S 01:14 /usr/sbin/httpd -k start 2870936 506832 nobody 18904 0.0 S 04:06 /usr/sbin/httpd -k start 2889065 506832 nobody 18884 0.1 S 00:21 /usr/sbin/httpd -k start 2887168 506832 nobody 18852 0.0 S 02:05 /usr/sbin/httpd -k start 2888080 506832 nobody 18812 0.0 S 01:15 /usr/sbin/httpd -k start 2888119 506832 nobody 18724 0.0 S 01:13 /usr/sbin/httpd -k start 2888155 506832 nobody 18584 0.0 S 01:12 /usr/sbin/httpd -k start 2888118 506832 nobody 18460 0.1 S 01:13 /usr/sbin/httpd -k start 2889028 506832 nobody 18404 0.0 S 00:23 /usr/sbin/httpd -k start 2888149 506832 nobody 18348 0.0 S 01:12 /usr/sbin/httpd -k start 2870954 506832 nobody 18112 0.1 S 04:05 /usr/sbin/httpd -k start 2889067 506832 nobody 18112 0.0 S 00:21 /usr/sbin/httpd -k start 2889334 506832 nobody 17924 0.1 S 00:08 /usr/sbin/httpd -k start 167566 166914 netdata 17908 2.1 Sl 1-09:14:53 /usr/libexec/netdata/plugins.d/apps.plugin 1 --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+-------------+-------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+-------------+-------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 2916528 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 2916515 | madalice_wp | madalice_wp | Query | 0 | starting | SELECT option_value FROM AMuqf6qZ_options WHERE option_name = 'woocommerce_ppcp-applepay_settings' LIMIT 1 | +---------+-------------+-------------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 704 infinium/infinium.net.au-ssl_log 299 evolution/portal.evolutionerp.com.au-ssl_log 136 evolution/app.evolutionerp.com.au-ssl_log 121 speedlin/speedlinefencing.com.au-ssl_log 86 speedlin/speedlinefencing.com.au 54 evolution/staging.evolutionerp.com.au-ssl_log 23 madalice/madalice.com.au-ssl_log 18 aaa/aaadownunder.com.au-ssl_log 17 corpkicks/corporatekicks.com.au-ssl_log 2 coscom/coscom.com.au-ssl_log 1 (total vhosts taking traffic: 11) --- top client IPs across all vhosts (last 3 min) --- 567 203.54.180.238 259 45.148.10.9 140 161.33.202.176 121 40.115.94.245 82 116.91.221.245 79 103.104.165.99 53 165.225.233.87 35 74.7.227.181 35 180.181.236.49 28 1.144.107.82 18 103.104.164.114 14 118.127.40.55 11 136.66.236.29 7 182.239.240.254 4 207.46.13.6 --- top request paths across all vhosts (last 3 min) --- 256 POST /functions.php 146 GET /app/ajax.php 89 GET /api/getItem/LWFB2001KG 79 GET /wp-admin/index.php 76 GET /index.php 50 GET /factory_session_checker.php 45 POST /plugins/csvexporter/plugin.php 43 POST /app/ajax.php 43 GET /wp-login.php 38 GET / 32 POST /clienteditsave.php 25 POST /app/ajax/selectFilterSingle.php 25 GET /heartbeat.php 25 GET /factory_session_processed_qty.php 25 GET /factory_session_joiner.php 21 POST /wordpress/ 21 POST /blog/ 19 POST /wp-login.php 16 POST /jobeditsave.php 16 GET /api/getItem/LWPB2001KG --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 250 POST /functions.php 144 GET /app/ajax.php 66 GET /index.php 45 POST /plugins/csvexporter/plugin.php 41 POST /app/ajax.php 32 POST /clienteditsave.php 25 POST /app/ajax/selectFilterSingle.php 16 POST /jobeditsave.php 13 POST /logsave.php 12 POST /dispatchsave.php 9 POST /app/ajax/selectFilter.php 8 POST /quoteditsave.php -- last 10 requests -- 103.104.165.99 - - [07/Sep/2026:11:37:16 +1000] "POST /app/ajax/selectFilter.php?call=filterstaff&filter=DISPATCH%20OLYMPIC HTTP/1.1" 200 498 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=11871" "Mozilla/5.0 203.54.180.238 - - [07/Sep/2026:11:37:16 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=invedit&id=475&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 203.54.180.238 - - [07/Sep/2026:11:37:16 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:11:37:16 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=activities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. 203.54.180.238 - - [07/Sep/2026:11:37:16 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 284 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29629" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi 203.54.180.238 - - [07/Sep/2026:11:37:16 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 284 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29491&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [07/Sep/2026:11:37:16 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=inventory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 203.54.180.238 - - [07/Sep/2026:11:37:17 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=40452&tab=maintab" "Mozilla/5.0 (Windows NT 10.0; 203.54.180.238 - - [07/Sep/2026:11:37:17 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=chainlinkWizard"eid=79173" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 203.54.180.238 - - [07/Sep/2026:11:37:17 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29704&tab=jobeditmf" "Mozilla/5.0 (Windows NT 10.0; Win64; x == infinium/infinium.net.au-ssl_log == -- top paths -- 34 GET / 21 POST /wordpress/ 21 POST /blog/ 14 POST /wordpress/index.php 14 POST /blog/index.php 13 POST /wp/ 9 GET /wp/ 9 GET /wordpress/ 9 GET /blog/ 8 POST /wp/index.php 7 POST /wordpress/wp-json/Batch/v1 7 POST /wordpress/wp-json/batch/v1/ -- last 10 requests -- 45.148.10.9 - - [07/Sep/2026:11:36:27 +1000] "GET /blog/wp/v2/posts/99999 HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.7.227.181 - - [07/Sep/2026:11:36:26 +1000] "GET /?locale=nb HTTP/1.1" 200 12593 "https://cpanel.infinium.net.au/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) 45.148.10.9 - - [07/Sep/2026:11:36:27 +1000] "GET /blog/?rest_route=/wp/v2/posts/99999 HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 74.7.227.181 - - [07/Sep/2026:11:36:27 +1000] "GET /?locale=sv HTTP/1.1" 200 12598 "https://cpanel.infinium.net.au/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) 45.148.10.9 - - [07/Sep/2026:11:36:27 +1000] "GET /blog/wp/v2/posts/9999999 HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.9 - - [07/Sep/2026:11:36:28 +1000] "GET /blog/?rest_route=/wp/v2/posts/9999999 HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537. 74.7.227.181 - - [07/Sep/2026:11:36:27 +1000] "GET /?locale=pt_br HTTP/1.1" 200 12598 "https://cpanel.infinium.net.au/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptb 45.148.10.9 - - [07/Sep/2026:11:36:28 +1000] "GET /blog/wp/v2/users HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 74.7.227.181 - - [07/Sep/2026:11:36:28 +1000] "GET /resetpass?start=1 HTTP/1.1" 200 1110 "https://cpanel.infinium.net.au/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/g 45.148.10.9 - - [07/Sep/2026:11:36:28 +1000] "GET /blog/?rest_route=/wp/v2/users HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 50 GET /factory_session_checker.php 25 GET /heartbeat.php 25 GET /factory_session_processed_qty.php 25 GET /factory_session_joiner.php 8 GET /index.php 2 GET /uploadsave.php 1 PATCH /api/pickings.php -- last 10 requests -- 203.54.180.238 - - [07/Sep/2026:11:36:58 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 122 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [07/Sep/2026:11:36:59 +1000] "GET /factory_session_joiner.php?id=35154 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [07/Sep/2026:11:36:59 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:11:36:58 +1000] "GET /heartbeat.php?sentAt=1788745019&bytes=106,158,21,59&_=1788744363777 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [07/Sep/2026:11:37:02 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:11:37:02 +1000] "GET /factory_session_joiner.php?id=35161 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [07/Sep/2026:11:37:02 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [07/Sep/2026:11:37:04 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:11:37:07 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:11:37:07 +1000] "GET /heartbeat.php?sentAt=1788745021&bytes=106,158,21,61&_=1788739087068 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" --- last 30 samples (run-up to this incident) --- 2026-09-07 11:34:56 L1=3.08 run=2 blk=1 avail=8758 (63.6%) swpO=0 conn=2 myRSS=2404 php=6 phpRSS=256 ap=45 tcp=54 topuser=madalice 2026-09-07 11:34:56 L1=3.08 run=3 blk=1 avail=8700 (63.1%) swpO=0 conn=2 myRSS=2404 php=7 phpRSS=351 ap=45 tcp=56 topuser=madalice 2026-09-07 11:35:06 L1=3.22 run=7 blk=1 avail=8807 (63.9%) swpO=0 conn=2 myRSS=2404 php=7 phpRSS=181 ap=41 tcp=55 topuser=madalice 2026-09-07 11:35:06 L1=3.22 run=4 blk=1 avail=8734 (63.4%) swpO=0 conn=3 myRSS=2404 php=6 phpRSS=226 ap=40 tcp=55 topuser=madalice 2026-09-07 11:35:16 L1=3.03 run=2 blk=1 avail=8767 (63.6%) swpO=0 conn=2 myRSS=2404 php=5 phpRSS=146 ap=54 tcp=54 topuser=madalice 2026-09-07 11:35:17 L1=3.03 run=3 blk=1 avail=8745 (63.5%) swpO=0 conn=3 myRSS=2404 php=7 phpRSS=231 ap=53 tcp=56 topuser=madalice 2026-09-07 11:35:26 L1=3.10 run=3 blk=1 avail=8740 (63.4%) swpO=0 conn=2 myRSS=2404 php=6 phpRSS=257 ap=47 tcp=53 topuser=madalice 2026-09-07 11:35:27 L1=3.10 run=4 blk=1 avail=8679 (63.0%) swpO=0 conn=3 myRSS=2404 php=7 phpRSS=336 ap=47 tcp=52 topuser=madalice 2026-09-07 11:35:36 L1=2.93 run=4 blk=1 avail=8714 (63.2%) swpO=0 conn=2 myRSS=2404 php=9 phpRSS=352 ap=48 tcp=58 topuser=madalice 2026-09-07 11:35:37 L1=2.93 run=4 blk=1 avail=8643 (62.7%) swpO=0 conn=3 myRSS=2404 php=8 phpRSS=381 ap=52 tcp=58 topuser=madalice 2026-09-07 11:35:46 L1=2.87 run=4 blk=1 avail=8735 (63.4%) swpO=0 conn=3 myRSS=2404 php=9 phpRSS=287 ap=54 tcp=56 topuser=evolution 2026-09-07 11:35:47 L1=2.87 run=8 blk=1 avail=8632 (62.7%) swpO=0 conn=3 myRSS=2404 php=12 phpRSS=486 ap=54 tcp=54 topuser=evolution 2026-09-07 11:35:56 L1=2.81 run=5 blk=1 avail=8709 (63.2%) swpO=0 conn=3 myRSS=2404 php=7 phpRSS=313 ap=47 tcp=44 topuser=speedlin 2026-09-07 11:35:57 L1=2.81 run=6 blk=1 avail=8752 (63.5%) swpO=0 conn=3 myRSS=2404 php=8 phpRSS=312 ap=47 tcp=44 topuser=madalice 2026-09-07 11:36:06 L1=2.84 run=3 blk=1 avail=8581 (62.3%) swpO=0 conn=3 myRSS=2404 php=7 phpRSS=269 ap=75 tcp=62 topuser=madalice 2026-09-07 11:36:07 L1=2.84 run=3 blk=1 avail=8546 (62.0%) swpO=0 conn=3 myRSS=2404 php=7 phpRSS=309 ap=75 tcp=58 topuser=madalice 2026-09-07 11:36:16 L1=2.96 run=3 blk=1 avail=8579 (62.3%) swpO=0 conn=3 myRSS=2404 php=13 phpRSS=476 ap=65 tcp=70 topuser=evolution 2026-09-07 11:36:17 L1=2.96 run=5 blk=1 avail=8548 (62.0%) swpO=0 conn=3 myRSS=2404 php=13 phpRSS=515 ap=65 tcp=70 topuser=evolution 2026-09-07 11:36:27 L1=2.89 run=4 blk=1 avail=8532 (61.9%) swpO=0 conn=3 myRSS=2404 php=9 phpRSS=328 ap=63 tcp=56 topuser=evolution 2026-09-07 11:36:27 L1=2.89 run=3 blk=1 avail=8604 (62.5%) swpO=0 conn=3 myRSS=2404 php=10 phpRSS=391 ap=63 tcp=55 topuser=evolution 2026-09-07 11:36:37 L1=3.06 run=2 blk=1 avail=8680 (63.0%) swpO=0 conn=3 myRSS=2405 php=6 phpRSS=293 ap=53 tcp=45 topuser=speedlin 2026-09-07 11:36:37 L1=3.06 run=2 blk=1 avail=8786 (63.8%) swpO=0 conn=3 myRSS=2405 php=6 phpRSS=190 ap=53 tcp=45 topuser=madalice 2026-09-07 11:36:47 L1=3.15 run=3 blk=1 avail=8716 (63.3%) swpO=0 conn=3 myRSS=2405 php=7 phpRSS=337 ap=45 tcp=43 topuser=madalice 2026-09-07 11:36:47 L1=3.15 run=4 blk=1 avail=8802 (63.9%) swpO=0 conn=3 myRSS=2405 php=8 phpRSS=288 ap=45 tcp=41 topuser=madalice 2026-09-07 11:36:57 L1=3.21 run=2 blk=1 avail=8622 (62.6%) swpO=0 conn=3 myRSS=2405 php=7 phpRSS=317 ap=61 tcp=65 topuser=madalice 2026-09-07 11:36:57 L1=3.21 run=2 blk=1 avail=8588 (62.3%) swpO=0 conn=3 myRSS=2405 php=6 phpRSS=323 ap=61 tcp=68 topuser=madalice 2026-09-07 11:37:07 L1=3.03 run=5 blk=1 avail=8685 (63.0%) swpO=0 conn=3 myRSS=2405 php=8 phpRSS=335 ap=53 tcp=48 topuser=madalice 2026-09-07 11:37:07 L1=3.03 run=2 blk=1 avail=8685 (63.0%) swpO=0 conn=2 myRSS=2405 php=6 phpRSS=276 ap=53 tcp=48 topuser=madalice 2026-09-07 11:37:17 L1=3.41 run=12 blk=1 avail=7255 (52.7%) swpO=229 conn=7 myRSS=2397 php=16 phpRSS=1978 ap=51 tcp=56 topuser=madalice 2026-09-07 11:37:17 L1=3.41 run=9 blk=2 avail=7106 (51.6%) swpO=318 conn=8 myRSS=2394 php=15 phpRSS=2085 ap=51 tcp=57 topuser=madalice