INCIDENT 2026-09-07 13:36:34 trigger: php_rss=1739MB ================================================================== load: 2.98 3.04 3.30 1/706 3364408 ncpu:10 mem_avail: 7655MB/13777MB (55.6%) swap_used:2665MB swapout:0/s blocked(D):1 running:3 iowait:9.4% steal:0.0% php: 16 procs / 1739MB heaviest user: madalice (10 procs, 1553MB) apache: 41 procs tcp_estab: 47 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2311 madalice 10 1553 root 250 994 nobody 40 701 netdata 8 242 infinium 1 124 mailman 20 98 cpanellogin 1 67 wp-toolkit 3 55 dovenull 6 55 evolution 12 49 mailnull 4 33 candyfabcom 2 27 dovecot 3 22 alison 1 14 zabbix 1 10 kurri 1 9 named 1 7 polkitd 1 6 nscd 1 5 --- php workers by user --- USER PROCS RSS_MB madalice 10 1553 infinium 1 124 evolution 4 39 root 1 22 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6820 MB Active(file): 3322 MB Inactive(file): 3591 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 580 MB CommitLimit: 10984 MB Committed_AS: 9789 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 6-11:14:09 4936 /usr/bin/imunify-agent-proxy 4109079 root 2-08:51:47 1952 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 2-08:51:47 51136 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress / --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2987918 1 mysql 2366808 7.3 Ssl 1-18:00:04 /usr/sbin/mariadbd 166870 1 netdata 183600 2.6 Ssl 1-11:14:15 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 167871 1 root 166908 0.0 Ss 1-11:14:08 /usr/lib/systemd/systemd-journald 3277845 167896 madalice 162528 8.1 S 20:31 php-fpm: pool madalice_com_au 3320986 167896 madalice 160620 8.0 S 11:24 php-fpm: pool madalice_com_au 3277843 167896 madalice 159932 8.2 S 20:31 php-fpm: pool madalice_com_au 3277848 167896 madalice 159692 8.1 S 20:31 php-fpm: pool madalice_com_au 3257243 167896 madalice 158340 12.3 S 26:19 php-fpm: pool madalice_com_au 3257540 167896 madalice 158268 12.2 S 25:59 php-fpm: pool madalice_com_au 923652 904997 root 158136 0.1 S 11:06:51 spamd child 3277842 167896 madalice 158040 8.4 S 20:31 php-fpm: pool madalice_com_au 3277847 167896 madalice 157984 8.2 S 20:31 php-fpm: pool madalice_com_au 3277846 167896 madalice 157912 8.3 S 20:31 php-fpm: pool madalice_com_au 3277844 167896 madalice 157744 8.4 S 20:31 php-fpm: pool madalice_com_au 923653 904997 root 136168 0.0 S 11:06:50 spamd child 904997 1 root 130684 0.0 Ss 11:13:38 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3364371 3363927 infinium 127168 45.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3041041 1353308 cpanellogin 68804 0.0 S 01:20:21 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 4109105 4109079 root 51136 1.4 Sl 2-08:51:47 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 3364374 3364214 evolution 40568 2.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 35424 0.1 Ss 47-10:55:21 cpsrvd (SSL) - waiting for connections 167562 166914 netdata 34640 0.1 Sl 1-11:14:10 /usr/libexec/netdata/plugins.d/go.d.plugin 1 509236 509098 root 34464 0.0 Sl 10-11:16:55 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1469 1 root 33464 0.1 Ss 70-03:26:50 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 166645 1 wp-toolkit 31464 0.0 Ss 1-11:14:19 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 904447 1 root 29828 0.0 Ss 11:14:10 lfd - sleeping 1463 1 root 23912 0.0 Ss 70-03:26:50 tailwatchd 167896 1 root 23532 0.0 Ss 1-11:14:07 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3345866 506832 nobody 21532 0.0 S 03:24 /usr/sbin/httpd -k start 3345873 506832 nobody 21504 0.1 S 03:24 /usr/sbin/httpd -k start 3344378 506832 nobody 21304 0.0 S 04:52 /usr/sbin/httpd -k start 3348310 506832 nobody 21296 0.1 S 01:36 /usr/sbin/httpd -k start 3347235 506832 nobody 21276 0.1 S 02:20 /usr/sbin/httpd -k start 3344873 506832 nobody 21260 0.0 S 04:23 /usr/sbin/httpd -k start 3345851 506832 nobody 21144 0.0 S 03:25 /usr/sbin/httpd -k start 3347286 506832 nobody 21040 0.1 S 02:12 /usr/sbin/httpd -k start 3348306 506832 nobody 20960 0.1 S 01:36 /usr/sbin/httpd -k start 3360846 506832 nobody 20836 0.0 S 01:23 /usr/sbin/httpd -k start 3360845 506832 nobody 20808 0.1 S 01:23 /usr/sbin/httpd -k start 3359594 506832 nobody 20772 0.1 S 01:24 /usr/sbin/httpd -k start 3362258 506832 nobody 20148 0.0 S 01:22 /usr/sbin/httpd -k start 3358291 506832 nobody 20120 0.1 S 01:25 /usr/sbin/httpd -k start 3345767 506832 nobody 20080 0.1 S 03:32 /usr/sbin/httpd -k start 3345909 506832 nobody 20020 0.0 S 03:23 /usr/sbin/httpd -k start 3362262 506832 nobody 20008 0.1 S 01:22 /usr/sbin/httpd -k start 3345868 506832 nobody 19904 0.1 S 03:24 /usr/sbin/httpd -k start 3348257 506832 nobody 19716 0.1 S 01:39 /usr/sbin/httpd -k start 167845 1 wp-toolkit 19576 0.0 Ss 1-11:14:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 3359593 506832 nobody 19560 0.0 S 01:24 /usr/sbin/httpd -k start 3348289 506832 nobody 19540 0.0 S 01:37 /usr/sbin/httpd -k start 3363557 506832 nobody 19440 0.0 S 00:55 /usr/sbin/httpd -k start 3348280 506832 nobody 18912 0.0 S 01:38 /usr/sbin/httpd -k start 3363848 506832 nobody 18628 0.1 S 00:37 /usr/sbin/httpd -k start 3362252 506832 nobody 18528 0.1 S 01:22 /usr/sbin/httpd -k start 3364066 506832 nobody 18352 0.0 S 00:22 /usr/sbin/httpd -k start 3345852 506832 nobody 18324 0.0 S 03:25 /usr/sbin/httpd -k start 3363837 506832 nobody 18308 0.0 S 00:38 /usr/sbin/httpd -k start 167566 166914 netdata 18124 2.1 Sl 1-11:14:10 /usr/libexec/netdata/plugins.d/apps.plugin 1 3363849 506832 nobody 18012 0.0 S 00:37 /usr/sbin/httpd -k start 3363846 506832 nobody 17940 0.0 S 00:37 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 3878198 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 509 evolution/portal.evolutionerp.com.au-ssl_log 201 madalice/madalice.com.au-ssl_log 107 evolution/app.evolutionerp.com.au-ssl_log 98 otterfencing/otterfencing.com.au-ssl_log 38 corpkicks/corporatekicks.com.au-ssl_log 13 evolution/pdev.evolutionerp.com.au-ssl_log 8 (total vhosts taking traffic: 7) --- top client IPs across all vhosts (last 3 min) --- 499 203.54.180.238 134 182.239.240.254 98 40.115.94.245 90 185.177.72.24 32 34.88.205.132 27 116.91.221.245 23 103.104.165.99 9 54.157.112.104 9 103.104.164.114 8 180.181.236.49 4 216.73.216.230 4 118.127.40.55 4 107.21.1.152 3 165.225.233.87 3 157.55.39.60 --- top request paths across all vhosts (last 3 min) --- 211 POST /functions.php 111 GET /app/ajax.php 76 GET /heartbeat.php 60 GET /factory_session_checker.php 53 GET /index.php 39 GET /api/getItem/LWFB2001KG 30 GET /factory_session_processed_qty.php 30 GET /factory_session_joiner.php 28 POST /clienteditsave.php 22 POST /plugins/csvexporter/plugin.php 20 POST /app/ajax.php 19 POST / 18 POST /app/ajax/selectFilterSingle.php 14 POST /jobeditsave.php 10 GET /api/getItem/LWPG2001KG 9 POST /logsave.php 6 POST //functions.php 4 POST /wp-cron.php 4 POST /app/ajax/selectFilter.php 3 POST /invoiceaddsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 211 POST /functions.php 111 GET /app/ajax.php 48 GET /index.php 28 POST /clienteditsave.php 22 POST /plugins/csvexporter/plugin.php 20 POST /app/ajax.php 18 POST /app/ajax/selectFilterSingle.php 14 POST /jobeditsave.php 9 POST /logsave.php 6 POST //functions.php 4 POST /app/ajax/selectFilter.php 3 POST /invoiceaddsave.php -- last 10 requests -- 203.54.180.238 - - [07/Sep/2026:13:36:27 +1000] "POST //functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au//index.php?page=jobedit&id=29605&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64 182.239.240.254 - - [07/Sep/2026:13:36:28 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 2655 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=4209&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 182.239.240.254 - - [07/Sep/2026:13:36:28 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 13659 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=4209&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Wi 182.239.240.254 - - [07/Sep/2026:13:36:28 +1000] "POST /app/ajax/selectFilter.php?call=filterstaffandcontractors&filter=&cursel=&curseltext=&fromMS=1&&nolimit=LIMIT%201000&excludelabour=1&include=40&contactid=15&returnob 182.239.240.254 - - [07/Sep/2026:13:36:30 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=4209&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ 203.54.180.238 - - [07/Sep/2026:13:36:30 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 285 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29594&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 182.239.240.254 - - [07/Sep/2026:13:36:30 +1000] "POST /dispatchsave.php?call=fetch_inventory HTTP/1.1" 200 23 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=4209&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; 203.54.180.238 - - [07/Sep/2026:13:36:30 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=26125&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 116.91.221.245 - - [07/Sep/2026:13:36:31 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=inventory&string=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK 203.54.180.238 - - [07/Sep/2026:13:36:31 +1000] "POST //functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au//index.php?page=jobedit&id=29605&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64 == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 76 GET /heartbeat.php 60 GET /factory_session_checker.php 30 GET /factory_session_processed_qty.php 30 GET /factory_session_joiner.php 3 GET /index.php 1 POST /factory_functions.php 1 GET /uploadsave.php -- last 10 requests -- 203.54.180.238 - - [07/Sep/2026:13:36:24 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [07/Sep/2026:13:36:24 +1000] "GET /factory_session_joiner.php?id=35170 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [07/Sep/2026:13:36:24 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:13:36:24 +1000] "GET /heartbeat.php?sentAt=1788752177&bytes=106,158,49,49&_=1788749672861 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [07/Sep/2026:13:36:26 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:13:36:27 +1000] "GET /heartbeat.php?sentAt=1788752181&bytes=106,158,49,53&_=1788739087784 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [07/Sep/2026:13:36:28 +1000] "GET /heartbeat.php?sentAt=1788752188&bytes=106,158,49,60&_=1788751718510 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=8" 203.54.180.238 - - [07/Sep/2026:13:36:29 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [07/Sep/2026:13:36:30 +1000] "GET /heartbeat.php?sentAt=1788752190&bytes=106,158,49,62&_=1788751430037 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=7" 203.54.180.238 - - [07/Sep/2026:13:36:31 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 == madalice/madalice.com.au-ssl_log == -- top paths -- 3 GET /store/blue-wildflowers-custom-af1-shoes/ 3 GET /robots.txt 2 POST / 2 GET /store/blue-butterfly-premium-pack-limited/ 2 GET /.git/config 1 GET /webcal 1 GET /warranty 1 GET /warranties 1 GET /warehouse 1 GET /versions 1 GET /tracking 1 GET /track -- last 10 requests -- 185.177.72.24 - - [07/Sep/2026:13:36:09 +1000] "GET /compare HTTP/1.1" 301 1 "-" "curl/8.7.1" 185.177.72.24 - - [07/Sep/2026:13:36:11 +1000] "GET /compare/ HTTP/1.1" 200 34897 "-" "curl/8.7.1" 185.177.72.24 - - [07/Sep/2026:13:36:12 +1000] "GET /merge HTTP/1.1" 404 36641 "-" "curl/8.7.1" 185.177.72.24 - - [07/Sep/2026:13:36:14 +1000] "GET /branch HTTP/1.1" 404 36642 "-" "curl/8.7.1" 114.119.159.70 - - [07/Sep/2026:13:36:15 +1000] "GET /store/kids-swarovski-blinged-diamond-kicks/?rating=2&wcpr_page=2&wcpr_image=1 HTTP/1.1" 200 54559 "https://madalice.com.au/store/kids-swarovski-blinged-diamond-kicks/ 185.177.72.24 - - [07/Sep/2026:13:36:15 +1000] "GET /branches HTTP/1.1" 404 36643 "-" "curl/8.7.1" 185.177.72.24 - - [07/Sep/2026:13:36:17 +1000] "GET /tag HTTP/1.1" 404 36639 "-" "curl/8.7.1" 185.177.72.24 - - [07/Sep/2026:13:36:19 +1000] "GET /tags HTTP/1.1" 404 36640 "-" "curl/8.7.1" 185.177.72.24 - - [07/Sep/2026:13:36:20 +1000] "GET /deploys HTTP/1.1" 404 36646 "-" "curl/8.7.1" 185.177.72.24 - - [07/Sep/2026:13:36:22 +1000] "GET /deployments HTTP/1.1" 404 36644 "-" "curl/8.7.1" --- last 30 samples (run-up to this incident) --- 2026-09-07 13:34:13 L1=2.36 run=2 blk=1 avail=7771 (56.4%) swpO=0 conn=2 myRSS=2310 php=14 phpRSS=1584 ap=38 tcp=51 topuser=madalice 2026-09-07 13:34:13 L1=2.36 run=4 blk=1 avail=7771 (56.4%) swpO=0 conn=2 myRSS=2310 php=14 phpRSS=1585 ap=38 tcp=51 topuser=madalice 2026-09-07 13:34:23 L1=2.47 run=4 blk=1 avail=7736 (56.1%) swpO=0 conn=2 myRSS=2310 php=15 phpRSS=1631 ap=42 tcp=42 topuser=madalice 2026-09-07 13:34:23 L1=2.47 run=3 blk=1 avail=7736 (56.2%) swpO=0 conn=2 myRSS=2310 php=15 phpRSS=1631 ap=42 tcp=42 topuser=madalice 2026-09-07 13:34:33 L1=2.71 run=5 blk=1 avail=7590 (55.1%) swpO=0 conn=4 myRSS=2311 php=18 phpRSS=1804 ap=48 tcp=58 topuser=madalice 2026-09-07 13:34:33 L1=2.71 run=5 blk=1 avail=7591 (55.1%) swpO=0 conn=4 myRSS=2311 php=18 phpRSS=1804 ap=48 tcp=58 topuser=madalice 2026-09-07 13:34:43 L1=2.68 run=3 blk=1 avail=7627 (55.4%) swpO=31 conn=4 myRSS=2310 php=17 phpRSS=1778 ap=46 tcp=47 topuser=madalice 2026-09-07 13:34:43 L1=2.68 run=3 blk=1 avail=7614 (55.3%) swpO=31 conn=3 myRSS=2310 php=16 phpRSS=1771 ap=45 tcp=45 topuser=madalice 2026-09-07 13:34:53 L1=2.65 run=4 blk=1 avail=7770 (56.4%) swpO=0 conn=3 myRSS=2310 php=16 phpRSS=1692 ap=36 tcp=39 topuser=madalice 2026-09-07 13:34:53 L1=2.65 run=3 blk=1 avail=7797 (56.6%) swpO=0 conn=2 myRSS=2310 php=15 phpRSS=1629 ap=35 tcp=42 topuser=madalice 2026-09-07 13:35:03 L1=2.63 run=5 blk=1 avail=7679 (55.7%) swpO=0 conn=2 myRSS=2310 php=14 phpRSS=1622 ap=46 tcp=48 topuser=madalice 2026-09-07 13:35:03 L1=2.63 run=2 blk=1 avail=7744 (56.2%) swpO=0 conn=1 myRSS=2310 php=14 phpRSS=1572 ap=46 tcp=46 topuser=madalice 2026-09-07 13:35:13 L1=3.23 run=4 blk=1 avail=7611 (55.2%) swpO=2 conn=3 myRSS=2310 php=15 phpRSS=1647 ap=58 tcp=59 topuser=madalice 2026-09-07 13:35:13 L1=3.23 run=1 blk=1 avail=7665 (55.6%) swpO=2 conn=1 myRSS=2310 php=14 phpRSS=1575 ap=58 tcp=58 topuser=madalice 2026-09-07 13:35:23 L1=2.96 run=2 blk=1 avail=7634 (55.4%) swpO=0 conn=2 myRSS=2310 php=14 phpRSS=1666 ap=50 tcp=44 topuser=madalice 2026-09-07 13:35:24 L1=2.96 run=2 blk=1 avail=7726 (56.1%) swpO=0 conn=2 myRSS=2310 php=14 phpRSS=1579 ap=49 tcp=45 topuser=madalice 2026-09-07 13:35:33 L1=2.81 run=3 blk=1 avail=7635 (55.4%) swpO=0 conn=3 myRSS=2310 php=15 phpRSS=1765 ap=40 tcp=42 topuser=madalice 2026-09-07 13:35:34 L1=2.81 run=5 blk=1 avail=7697 (55.9%) swpO=0 conn=3 myRSS=2310 php=15 phpRSS=1706 ap=39 tcp=42 topuser=madalice 2026-09-07 13:35:44 L1=2.84 run=4 blk=1 avail=7699 (55.9%) swpO=0 conn=4 myRSS=2310 php=16 phpRSS=1712 ap=38 tcp=51 topuser=madalice 2026-09-07 13:35:44 L1=2.84 run=5 blk=1 avail=7665 (55.6%) swpO=0 conn=5 myRSS=2310 php=18 phpRSS=1804 ap=38 tcp=51 topuser=madalice 2026-09-07 13:35:54 L1=2.71 run=5 blk=1 avail=7675 (55.7%) swpO=0 conn=4 myRSS=2310 php=16 phpRSS=1764 ap=37 tcp=45 topuser=madalice 2026-09-07 13:35:54 L1=2.71 run=3 blk=1 avail=7670 (55.7%) swpO=0 conn=4 myRSS=2310 php=16 phpRSS=1769 ap=37 tcp=45 topuser=madalice 2026-09-07 13:36:04 L1=3.06 run=4 blk=1 avail=7582 (55.0%) swpO=10 conn=3 myRSS=2311 php=16 phpRSS=1798 ap=43 tcp=60 topuser=madalice 2026-09-07 13:36:04 L1=3.06 run=5 blk=1 avail=7685 (55.8%) swpO=10 conn=3 myRSS=2311 php=15 phpRSS=1664 ap=43 tcp=59 topuser=madalice 2026-09-07 13:36:14 L1=2.98 run=5 blk=1 avail=7680 (55.7%) swpO=0 conn=4 myRSS=2311 php=16 phpRSS=1712 ap=44 tcp=53 topuser=madalice 2026-09-07 13:36:14 L1=2.98 run=3 blk=1 avail=7673 (55.7%) swpO=0 conn=4 myRSS=2311 php=16 phpRSS=1717 ap=44 tcp=48 topuser=madalice 2026-09-07 13:36:24 L1=2.98 run=2 blk=1 avail=7662 (55.6%) swpO=0 conn=3 myRSS=2311 php=16 phpRSS=1651 ap=45 tcp=52 topuser=madalice 2026-09-07 13:36:24 L1=2.98 run=4 blk=1 avail=7612 (55.3%) swpO=0 conn=3 myRSS=2311 php=16 phpRSS=1699 ap=45 tcp=52 topuser=madalice 2026-09-07 13:36:34 L1=2.98 run=3 blk=1 avail=7655 (55.6%) swpO=0 conn=3 myRSS=2311 php=16 phpRSS=1739 ap=41 tcp=47 topuser=madalice 2026-09-07 13:36:34 L1=2.98 run=3 blk=1 avail=7652 (55.5%) swpO=0 conn=3 myRSS=2311 php=16 phpRSS=1740 ap=41 tcp=48 topuser=madalice