INCIDENT 2026-09-07 13:24:17 trigger: php_rss=1831MB ================================================================== load: 3.58 3.55 3.59 4/719 3305649 ncpu:10 mem_avail: 7459MB/13777MB (54.1%) swap_used:2636MB swapout:11/s blocked(D):1 running:3 iowait:9.0% steal:0.0% php: 16 procs / 1831MB heaviest user: madalice (10 procs, 1555MB) apache: 52 procs tcp_estab: 57 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2322 madalice 10 1555 root 254 1071 nobody 51 882 netdata 8 243 tubesupplies 1 125 mailman 20 98 cpanellogin 1 67 wp-toolkit 3 56 dovenull 6 55 kurri 2 24 dovecot 3 22 mailnull 2 17 alison 1 14 zabbix 1 9 evolution 11 9 named 1 7 polkitd 1 6 nscd 1 5 rpc 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 10 1555 tubesupplies 1 126 root 1 23 evolution 3 0 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6894 MB Active(file): 3394 MB Inactive(file): 3537 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 580 MB CommitLimit: 10984 MB Committed_AS: 9969 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 6-11:01:52 4936 /usr/bin/imunify-agent-proxy 4109079 root 2-08:39:30 1952 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 2-08:39:30 51996 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress / --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2987918 1 mysql 2378476 7.2 Ssl 1-17:47:47 /usr/sbin/mariadbd 166870 1 netdata 185348 2.6 Ssl 1-11:01:58 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 167871 1 root 164716 0.0 Ss 1-11:01:51 /usr/lib/systemd/systemd-journald 3277845 167896 madalice 162224 8.7 S 08:14 php-fpm: pool madalice_com_au 923652 904997 root 161568 0.1 S 10:54:34 spamd child 3223532 167896 madalice 161152 18.5 S 20:12 php-fpm: pool madalice_com_au 3257243 167896 madalice 159424 15.8 S 14:02 php-fpm: pool madalice_com_au 3277843 167896 madalice 159044 8.5 S 08:14 php-fpm: pool madalice_com_au 3277842 167896 madalice 158624 8.8 S 08:14 php-fpm: pool madalice_com_au 3257540 167896 madalice 158616 15.9 S 13:42 php-fpm: pool madalice_com_au 3277847 167896 madalice 158616 8.6 S 08:14 php-fpm: pool madalice_com_au 3277848 167896 madalice 158592 8.6 S 08:14 php-fpm: pool madalice_com_au 3277846 167896 madalice 158432 8.5 R 08:14 php-fpm: pool madalice_com_au 3277844 167896 madalice 158276 8.7 S 08:14 php-fpm: pool madalice_com_au 923653 904997 root 137112 0.0 S 10:54:33 spamd child 904997 1 root 130716 0.0 Ss 11:01:21 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3041041 1353308 cpanellogin 68796 0.0 S 01:08:04 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 4109105 4109079 root 51996 1.4 Sl 2-08:39:30 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 1353308 1 root 38744 0.1 Ss 47-10:43:04 cpsrvd (SSL) - waiting for connections 3305618 1469 root 35492 0.0 S 00:01 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3305646 1469 root 35476 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 167562 166914 netdata 34680 0.1 Sl 1-11:01:53 /usr/libexec/netdata/plugins.d/go.d.plugin 1 509236 509098 root 34668 0.0 Sl 10-11:04:38 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1469 1 root 34608 0.1 Ss 70-03:14:33 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 166645 1 wp-toolkit 31464 0.0 Ss 1-11:02:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 904447 1 root 29788 0.0 Ss 11:01:53 lfd - sleeping 1463 1 root 23980 0.0 Ss 70-03:14:33 tailwatchd 167896 1 root 23640 0.0 Ss 1-11:01:50 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3305658 3304890 evolution 22196 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3284466 506832 nobody 21536 0.1 S 04:45 /usr/sbin/httpd -k start 3300270 506832 nobody 21028 0.1 S 03:48 /usr/sbin/httpd -k start 3284497 506832 nobody 20976 0.1 S 04:44 /usr/sbin/httpd -k start 3301318 506832 nobody 20856 0.0 S 03:10 /usr/sbin/httpd -k start 3261810 506832 nobody 20820 0.0 S 09:48 /usr/sbin/httpd -k start 3285005 506832 nobody 20528 0.1 S 04:21 /usr/sbin/httpd -k start 3304184 506832 nobody 20512 0.0 S 01:06 /usr/sbin/httpd -k start 3302353 506832 nobody 20404 0.0 S 02:39 /usr/sbin/httpd -k start 3302393 506832 nobody 20188 0.0 S 02:38 /usr/sbin/httpd -k start 3302358 506832 nobody 20148 0.0 S 02:39 /usr/sbin/httpd -k start 3302388 506832 nobody 20112 0.1 S 02:38 /usr/sbin/httpd -k start 3302395 506832 nobody 20064 0.0 S 02:38 /usr/sbin/httpd -k start 3303603 506832 nobody 20024 0.0 S 01:44 /usr/sbin/httpd -k start 3302396 506832 nobody 19960 0.0 S 02:38 /usr/sbin/httpd -k start 3302360 506832 nobody 19912 0.0 S 02:39 /usr/sbin/httpd -k start 3303710 506832 nobody 19836 0.1 S 01:40 /usr/sbin/httpd -k start 3303715 506832 nobody 19656 0.0 S 01:40 /usr/sbin/httpd -k start 3304824 506832 nobody 19612 0.1 S 00:37 /usr/sbin/httpd -k start 167845 1 wp-toolkit 19604 0.0 Ss 1-11:01:51 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 3303562 506832 nobody 19556 0.1 S 01:47 /usr/sbin/httpd -k start 3304185 506832 nobody 19544 0.1 S 01:06 /usr/sbin/httpd -k start 3304869 506832 nobody 19352 0.0 S 00:33 /usr/sbin/httpd -k start 3304176 506832 nobody 19328 0.0 S 01:07 /usr/sbin/httpd -k start 3304896 506832 nobody 19300 0.0 S 00:32 /usr/sbin/httpd -k start 3303716 506832 nobody 19252 0.0 S 01:40 /usr/sbin/httpd -k start 3303638 506832 nobody 19156 0.0 S 01:42 /usr/sbin/httpd -k start 3304825 506832 nobody 19096 0.0 S 00:37 /usr/sbin/httpd -k start 3303709 506832 nobody 18960 0.0 S 01:40 /usr/sbin/httpd -k start 3304732 506832 nobody 18852 0.0 S 00:41 /usr/sbin/httpd -k start 3304177 506832 nobody 18836 0.0 S 01:07 /usr/sbin/httpd -k start 3304895 506832 nobody 18572 0.0 S 00:32 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 3797766 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 467 evolution/portal.evolutionerp.com.au-ssl_log 230 evolution/app.evolutionerp.com.au-ssl_log 117 madalice/madalice.com.au-ssl_log 84 infinium/infinium.net.au-ssl_log 71 customc/customcentral.com.au-ssl_log 68 tubesupplies/tubesupplies.com.au-ssl_log 49 tubesupplies/tubesupplies.com.au 26 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 309 203.54.180.238 138 103.104.164.114 125 45.148.10.12 117 40.115.94.245 97 103.104.165.99 73 84.17.60.251 72 185.177.72.24 61 182.239.240.254 36 116.91.221.245 11 54.209.60.63 10 180.181.236.49 10 165.225.233.87 8 118.127.40.55 7 184.72.121.156 4 54.175.74.27 --- top request paths across all vhosts (last 3 min) --- 168 POST /functions.php 91 GET /app/ajax.php 86 GET /factory_session_checker.php 70 GET /index.php 45 GET /factory_session_joiner.php 44 GET /factory_session_processed_qty.php 42 GET /heartbeat.php 22 POST /clienteditsave.php 20 POST / 19 POST /app/ajax/selectFilter.php 19 GET /api/getItem/LWHG2001KG 18 POST /app/ajax.php 17 POST /app/ajax/selectFilterSingle.php 14 POST /index.php 13 POST /plugins/csvexporter/plugin.php 10 POST /blog/wp-json/batch/v1 10 POST /blog/ 9 GET /blog/ 7 POST /wp-cron.php 7 POST /logsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 168 POST /functions.php 91 GET /app/ajax.php 65 GET /index.php 22 POST /clienteditsave.php 19 POST /app/ajax/selectFilter.php 18 POST /app/ajax.php 17 POST /app/ajax/selectFilterSingle.php 13 POST /plugins/csvexporter/plugin.php 7 POST /logsave.php 7 POST /jobeditsave.php 5 POST /quoteditsave.php 5 POST /plugins/fencecosting/plugin.php -- last 10 requests -- 203.54.180.238 - - [07/Sep/2026:13:24:11 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 5172 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29594&tab=filestab" "Mozilla/5.0 (Windows NT 10.0; Win64; x 103.104.164.114 - - [07/Sep/2026:13:24:12 +1000] "POST /app/ajax/selectFilter.php?call=filterinv&filter=stc125&cursel=Please%20Select&curseltext=stc125&fromMS=1&&nolimit=LIMIT%2050&include=&tid=%25%25&invjobid=0&clientid 116.91.221.245 - - [07/Sep/2026:13:24:12 +1000] "POST /invaddsave.php?call=getCodes&string=re HTTP/1.1" 200 41 "https://my.evolutionerp.com.au/index.php?page=inventory&string=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 182.239.240.254 - - [07/Sep/2026:13:24:12 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 203.54.180.238 - - [07/Sep/2026:13:24:13 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=dispatchedit&dispatchid=34138" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 203.54.180.238 - - [07/Sep/2026:13:24:13 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29594&tab=filestab" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Geck 116.91.221.245 - - [07/Sep/2026:13:24:13 +1000] "POST /invaddsave.php?call=getCodes&string=RE HTTP/1.1" 200 41 "https://my.evolutionerp.com.au/index.php?page=inventory&string=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 182.239.240.254 - - [07/Sep/2026:13:24:16 +1000] "GET /index.php?page=jobregister HTTP/1.1" 200 15772 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 182.239.240.254 - - [07/Sep/2026:13:24:16 +1000] "POST /jobeditsave.php?call=filter HTTP/1.1" 200 6668 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 182.239.240.254 - - [07/Sep/2026:13:24:16 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Djobregister&call=getUserSetting&caller=ajaxSubmitLocal&seq=19825120218 HTTP/1.1" 200 93 "https://my.evolutionerp.com.au/index.p == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 86 GET /factory_session_checker.php 45 GET /factory_session_joiner.php 44 GET /factory_session_processed_qty.php 42 GET /heartbeat.php 5 GET /index.php 3 GET /uploadsave.php 2 POST /inventory.php 1 POST /uploadsave.php 1 POST /portal/register 1 POST /factory_functions.php -- last 10 requests -- 203.54.180.238 - - [07/Sep/2026:13:24:07 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:13:24:07 +1000] "GET /heartbeat.php?sentAt=1788751441&bytes=106,158,46,81&_=1788739087710 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [07/Sep/2026:13:24:09 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:13:24:11 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:13:24:10 +1000] "GET /heartbeat.php?sentAt=1788751450&bytes=106,158,46,90&_=1788751429963 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=7" 203.54.180.238 - - [07/Sep/2026:13:24:12 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [07/Sep/2026:13:24:12 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:13:24:12 +1000] "GET /factory_session_joiner.php?id=35164 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [07/Sep/2026:13:24:11 +1000] "GET /heartbeat.php?sentAt=1788751451&bytes=106,158,46,91&_=1788751215536 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [07/Sep/2026:13:24:14 +1000] "GET /factory_session_joiner.php?id=35169 HTTP/1.1" 200 86 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 19 GET /api/getItem/LWHG2001KG 4 GET /api/getItem/PWFBW3151KG 2 GET /api/getItem/SHSG404016-DP25-24-DI-110 2 GET /api/getItem/CLPBNSTD50315KK 1 GET /api/getItem/SHSG909020-8 1 GET /api/getItem/SHSG898950-8 1 GET /api/getItem/SHSG898935-8 1 GET /api/getItem/SHSG898930-8 1 GET /api/getItem/SHSG898920-8 1 GET /api/getItem/SHSG757550-8 1 GET /api/getItem/SHSG757540-8 1 GET /api/getItem/SHSG757530-8 -- last 10 requests -- 40.115.94.245 - - [07/Sep/2026:13:24:04 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:13:24:04 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:13:24:05 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:13:24:05 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:13:24:06 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:13:24:06 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:13:24:06 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:13:24:07 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:13:24:07 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [07/Sep/2026:13:24:08 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" --- last 30 samples (run-up to this incident) --- 2026-09-07 13:21:56 L1=3.43 run=4 blk=1 avail=7532 (54.7%) swpO=0 conn=2 myRSS=2338 php=14 phpRSS=1584 ap=64 tcp=58 topuser=madalice 2026-09-07 13:21:56 L1=3.43 run=2 blk=1 avail=7530 (54.7%) swpO=0 conn=2 myRSS=2338 php=14 phpRSS=1587 ap=63 tcp=52 topuser=madalice 2026-09-07 13:22:06 L1=3.30 run=2 blk=1 avail=7520 (54.6%) swpO=0 conn=1 myRSS=2338 php=14 phpRSS=1671 ap=54 tcp=58 topuser=madalice 2026-09-07 13:22:06 L1=3.30 run=1 blk=1 avail=7609 (55.2%) swpO=0 conn=1 myRSS=2338 php=14 phpRSS=1579 ap=53 tcp=58 topuser=madalice 2026-09-07 13:22:16 L1=3.18 run=1 blk=1 avail=7628 (55.4%) swpO=0 conn=1 myRSS=2338 php=14 phpRSS=1581 ap=50 tcp=54 topuser=madalice 2026-09-07 13:22:16 L1=3.18 run=2 blk=1 avail=7620 (55.3%) swpO=0 conn=1 myRSS=2338 php=15 phpRSS=1607 ap=50 tcp=54 topuser=madalice 2026-09-07 13:22:26 L1=2.92 run=2 blk=1 avail=7649 (55.5%) swpO=0 conn=3 myRSS=2338 php=14 phpRSS=1628 ap=43 tcp=49 topuser=madalice 2026-09-07 13:22:26 L1=2.92 run=2 blk=1 avail=7619 (55.3%) swpO=0 conn=2 myRSS=2338 php=14 phpRSS=1657 ap=43 tcp=51 topuser=madalice 2026-09-07 13:22:36 L1=2.63 run=2 blk=1 avail=7567 (54.9%) swpO=0 conn=1 myRSS=2338 php=14 phpRSS=1676 ap=48 tcp=60 topuser=madalice 2026-09-07 13:22:36 L1=2.63 run=3 blk=1 avail=7647 (55.5%) swpO=0 conn=1 myRSS=2338 php=14 phpRSS=1583 ap=48 tcp=59 topuser=madalice 2026-09-07 13:22:46 L1=2.69 run=2 blk=1 avail=7634 (55.4%) swpO=134 conn=2 myRSS=2334 php=14 phpRSS=1586 ap=51 tcp=45 topuser=madalice 2026-09-07 13:22:46 L1=2.69 run=2 blk=1 avail=7620 (55.3%) swpO=134 conn=2 myRSS=2334 php=14 phpRSS=1602 ap=51 tcp=45 topuser=madalice 2026-09-07 13:22:56 L1=2.58 run=2 blk=1 avail=7664 (55.6%) swpO=62 conn=2 myRSS=2332 php=15 phpRSS=1684 ap=41 tcp=44 topuser=madalice 2026-09-07 13:22:56 L1=2.58 run=2 blk=1 avail=7646 (55.5%) swpO=62 conn=2 myRSS=2332 php=15 phpRSS=1700 ap=41 tcp=43 topuser=madalice 2026-09-07 13:23:06 L1=2.80 run=5 blk=1 avail=7710 (56.0%) swpO=85 conn=3 myRSS=2330 php=15 phpRSS=1650 ap=37 tcp=46 topuser=madalice 2026-09-07 13:23:06 L1=2.80 run=3 blk=1 avail=7701 (55.9%) swpO=85 conn=3 myRSS=2330 php=15 phpRSS=1668 ap=37 tcp=47 topuser=madalice 2026-09-07 13:23:16 L1=2.67 run=3 blk=1 avail=7664 (55.6%) swpO=57 conn=2 myRSS=2329 php=15 phpRSS=1684 ap=41 tcp=47 topuser=madalice 2026-09-07 13:23:17 L1=2.67 run=6 blk=1 avail=7652 (55.5%) swpO=52 conn=2 myRSS=2329 php=15 phpRSS=1698 ap=41 tcp=47 topuser=madalice 2026-09-07 13:23:27 L1=2.87 run=1 blk=1 avail=7751 (56.3%) swpO=0 conn=1 myRSS=2329 php=14 phpRSS=1581 ap=39 tcp=46 topuser=madalice 2026-09-07 13:23:27 L1=2.96 run=5 blk=1 avail=7751 (56.3%) swpO=0 conn=1 myRSS=2329 php=14 phpRSS=1581 ap=39 tcp=48 topuser=madalice 2026-09-07 13:23:37 L1=2.88 run=2 blk=1 avail=7717 (56.0%) swpO=0 conn=2 myRSS=2329 php=14 phpRSS=1629 ap=37 tcp=51 topuser=madalice 2026-09-07 13:23:37 L1=2.88 run=6 blk=1 avail=7673 (55.7%) swpO=0 conn=4 myRSS=2329 php=17 phpRSS=1769 ap=37 tcp=53 topuser=madalice 2026-09-07 13:23:47 L1=2.97 run=6 blk=1 avail=7587 (55.1%) swpO=40 conn=2 myRSS=2328 php=14 phpRSS=1625 ap=57 tcp=62 topuser=madalice 2026-09-07 13:23:47 L1=2.97 run=6 blk=1 avail=7556 (54.8%) swpO=40 conn=3 myRSS=2328 php=14 phpRSS=1653 ap=57 tcp=62 topuser=madalice 2026-09-07 13:23:57 L1=3.22 run=5 blk=1 avail=7649 (55.5%) swpO=116 conn=2 myRSS=2325 php=14 phpRSS=1582 ap=48 tcp=59 topuser=madalice 2026-09-07 13:23:57 L1=3.22 run=2 blk=1 avail=7658 (55.6%) swpO=116 conn=2 myRSS=2325 php=14 phpRSS=1585 ap=48 tcp=59 topuser=madalice 2026-09-07 13:24:07 L1=3.41 run=5 blk=1 avail=7635 (55.4%) swpO=96 conn=2 myRSS=2322 php=15 phpRSS=1641 ap=48 tcp=60 topuser=madalice 2026-09-07 13:24:07 L1=3.41 run=2 blk=1 avail=7603 (55.2%) swpO=96 conn=2 myRSS=2322 php=14 phpRSS=1633 ap=48 tcp=60 topuser=madalice 2026-09-07 13:24:17 L1=3.58 run=3 blk=1 avail=7459 (54.1%) swpO=11 conn=2 myRSS=2322 php=16 phpRSS=1831 ap=52 tcp=57 topuser=madalice 2026-09-07 13:24:17 L1=3.58 run=5 blk=1 avail=7649 (55.5%) swpO=11 conn=2 myRSS=2322 php=14 phpRSS=1578 ap=51 tcp=55 topuser=madalice