INCIDENT 2026-09-10 08:37:42 trigger: php_rss=1508MB ================================================================== load: 0.86 1.15 1.09 1/665 771079 ncpu:10 mem_avail: 6784MB/13777MB (49.2%) swap_used:1487MB swapout:0/s blocked(D):0 running:3 iowait:0.0% steal:0.0% php: 15 procs / 1508MB heaviest user: madalice (10 procs, 1414MB) apache: 63 procs tcp_estab: 64 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2867 madalice 10 1414 nobody 61 1073 root 245 1069 netdata 8 256 mailman 20 190 infinium 2 85 dovenull 6 67 evolution 7 63 wp-toolkit 3 62 cpanellogin 1 52 vinesit 2 29 dovecot 3 28 kurri 2 27 polkitd 1 15 mailnull 3 14 lowrange 1 14 aaa 1 13 zabbix 1 8 sshd 1 6 --- php workers by user --- USER PROCS RSS_MB madalice 10 1414 evolution 3 55 root 1 2 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5596 MB Active(file): 4388 MB Inactive(file): 1357 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 639 MB CommitLimit: 10984 MB Committed_AS: 8882 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 9-06:15:18 3960 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2330591 1 mysql 2935836 13.0 Ssl 2-03:52:15 /usr/sbin/mariadbd 166870 1 netdata 201296 2.7 Ssl 4-06:15:24 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3701672 3652415 root 177464 0.0 S 06:02:30 spamd child 3701673 3652415 root 165232 0.0 S 06:02:30 spamd child 3652415 1 root 164412 0.0 Ss 06:12:51 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 770859 167896 madalice 159056 16.4 S 00:17 php-fpm: pool madalice_com_au 770768 167896 madalice 158928 15.2 S 00:23 php-fpm: pool madalice_com_au 770856 167896 madalice 156688 12.5 S 00:17 php-fpm: pool madalice_com_au 770857 167896 madalice 156680 12.8 S 00:17 php-fpm: pool madalice_com_au 770850 167896 madalice 156676 14.9 S 00:17 php-fpm: pool madalice_com_au 770852 167896 madalice 156504 12.8 S 00:17 php-fpm: pool madalice_com_au 2328754 1 root 145152 0.0 Ss 2-03:52:25 /usr/lib/systemd/systemd-journald 770851 167896 madalice 125912 8.6 S 00:17 php-fpm: pool madalice_com_au 770849 167896 madalice 125904 9.0 S 00:17 php-fpm: pool madalice_com_au 770862 167896 madalice 125904 9.3 S 00:17 php-fpm: pool madalice_com_au 770848 167896 madalice 125900 8.8 S 00:17 php-fpm: pool madalice_com_au 509236 509098 root 67092 0.0 Sl 13-06:18:04 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 770870 1353308 infinium 55704 1.0 S 00:16 webmaild - serving 1.41.252.211 625148 1353308 cpanellogin 54116 0.0 S 40:33 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 1353308 1 root 42504 0.0 Ss 50-05:56:30 cpsrvd (SSL) - waiting for connections 1469 1 root 41564 0.1 Ss 72-22:27:59 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 2495258 1 wp-toolkit 36512 0.0 Ss 1-07:23:49 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 167562 166914 netdata 36404 0.1 Sl 4-06:15:19 /usr/libexec/netdata/plugins.d/go.d.plugin 1 3651775 1 root 32436 0.0 Ss 06:13:25 lfd - sleeping 663720 2495053 infinium 31648 0.0 S 28:42 php-fpm: pool user_infinium 771112 770888 evolution 31324 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2495169 1 wp-toolkit 25344 0.0 Ss 1-07:23:49 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 752661 506832 nobody 23180 0.0 S 05:15 /usr/sbin/httpd -k start 754182 506832 nobody 22304 0.0 S 03:05 /usr/sbin/httpd -k start 753299 506832 nobody 22104 0.0 S 04:13 /usr/sbin/httpd -k start 769417 506832 nobody 22072 0.0 S 02:10 /usr/sbin/httpd -k start 769384 506832 nobody 21536 0.0 S 02:11 /usr/sbin/httpd -k start 753848 506832 nobody 21484 0.0 S 03:33 /usr/sbin/httpd -k start 753240 506832 nobody 21088 0.0 S 04:21 /usr/sbin/httpd -k start 751570 506832 nobody 21028 0.0 S 06:58 /usr/sbin/httpd -k start 769445 506832 nobody 21028 0.0 S 02:10 /usr/sbin/httpd -k start 770176 506832 nobody 21012 0.1 S 01:07 /usr/sbin/httpd -k start 769379 506832 nobody 20996 0.0 S 02:11 /usr/sbin/httpd -k start 753352 506832 nobody 20956 0.0 S 04:10 /usr/sbin/httpd -k start 755002 506832 nobody 20676 0.1 S 02:40 /usr/sbin/httpd -k start 769327 506832 nobody 20552 0.0 S 02:14 /usr/sbin/httpd -k start 769422 506832 nobody 20520 0.0 S 02:10 /usr/sbin/httpd -k start 769425 506832 nobody 20460 0.0 S 02:10 /usr/sbin/httpd -k start 770324 506832 nobody 20232 0.0 S 00:53 /usr/sbin/httpd -k start 769440 506832 nobody 20192 0.0 S 02:10 /usr/sbin/httpd -k start 770293 506832 nobody 20064 0.0 S 00:55 /usr/sbin/httpd -k start 1463 1 root 20020 0.0 Ss 72-22:27:59 tailwatchd 769343 506832 nobody 19956 0.0 S 02:12 /usr/sbin/httpd -k start 754008 506832 nobody 19868 0.0 S 03:17 /usr/sbin/httpd -k start 770322 506832 nobody 19860 0.0 S 00:53 /usr/sbin/httpd -k start 752916 506832 nobody 19808 0.0 S 04:51 /usr/sbin/httpd -k start 770891 506832 nobody 19552 0.0 S 00:14 /usr/sbin/httpd -k start 2495282 1 root 19476 0.1 Ssl 1-07:23:47 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 770767 506832 nobody 19124 0.1 S 00:23 /usr/sbin/httpd -k start 770320 506832 nobody 19112 0.0 S 00:53 /usr/sbin/httpd -k start 770764 506832 nobody 18928 0.0 S 00:23 /usr/sbin/httpd -k start 769378 506832 nobody 18696 0.0 S 02:11 /usr/sbin/httpd -k start 754128 506832 nobody 18404 0.0 S 03:10 /usr/sbin/httpd -k start 770326 506832 nobody 18228 0.0 S 00:53 /usr/sbin/httpd -k start 770170 506832 nobody 18164 0.0 S 01:08 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 8822980 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 593 evolution/portal.evolutionerp.com.au-ssl_log 296 evolution/app.evolutionerp.com.au-ssl_log 90 evolution/pdev.evolutionerp.com.au-ssl_log 41 evolution/my.evolutionerp.com.au 30 evolution/pdev.evolutionerp.com.au 29 madalice/madalice.com.au-ssl_log 11 (total vhosts taking traffic: 7) --- top client IPs across all vhosts (last 3 min) --- 441 203.54.180.238 168 45.148.10.125 116 103.104.165.99 90 40.115.94.245 70 150.228.151.88 62 103.104.164.114 44 118.127.40.55 39 165.225.233.87 26 182.239.240.254 7 147.161.213.71 6 203.54.162.106 5 52.91.99.225 5 180.181.236.49 3 157.55.39.57 2 114.119.131.88 --- top request paths across all vhosts (last 3 min) --- 178 POST /functions.php 112 GET /factory_session_checker.php 97 GET /app/ajax.php 57 GET /factory_session_processed_qty.php 57 GET /factory_session_joiner.php 53 GET /index.php 35 GET /heartbeat.php 24 POST /plugins/csvexporter/plugin.php 22 POST /app/ajax/selectFilter.php 22 GET /companies/85-1516155235/files/Forms%20and%20Templates/1713410864.html 22 GET /companies/85-1516155235/files/Forms%20and%20Templates/1713397831.html 18 POST /clienteditsave.php 17 POST /app/ajax/selectFilterSingle.php 16 POST /app/ajax.php 12 POST /jobeditsave.php 11 POST /portal/register 7 POST /logsave.php 7 POST //functions.php 6 POST /quoteditsave.php 5 POST /purchaseaddsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 178 POST /functions.php 97 GET /app/ajax.php 38 GET /index.php 24 POST /plugins/csvexporter/plugin.php 22 POST /app/ajax/selectFilter.php 22 GET /companies/85-1516155235/files/Forms%20and%20Templates/1713410864.html 22 GET /companies/85-1516155235/files/Forms%20and%20Templates/1713397831.html 18 POST /clienteditsave.php 17 POST /app/ajax/selectFilterSingle.php 16 POST /app/ajax.php 12 POST /jobeditsave.php 7 POST /logsave.php -- last 10 requests -- 182.239.240.254 - - [10/Sep/2026:08:37:40 +1000] "GET /app/ajax.php?cn=tsDisabledViewCB&furi=false&uri=&call=getUserSetting&caller=ajaxSubmitLocal&seq=14694276478 HTTP/1.1" 200 90 "https://my.evolutionerp.com.au/index.ph 182.239.240.254 - - [10/Sep/2026:08:37:40 +1000] "GET /app/ajax.php?cn=tsSimpleViewCB&furi=true&uri=%2F&call=getUserSetting&caller=ajaxSubmitLocal&seq=19944497491 HTTP/1.1" 200 90 "https://my.evolutionerp.com.au/index.ph 182.239.240.254 - - [10/Sep/2026:08:37:40 +1000] "POST /clienteditsave.php?clientid=80&call=getCategoryDiscounts HTTP/1.1" 200 25 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=4172" "Mozilla/5.0 (Windows NT 1 182.239.240.254 - - [10/Sep/2026:08:37:40 +1000] "POST /clienteditsave.php?call=getSettings HTTP/1.1" 200 60 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=4172" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 182.239.240.254 - - [10/Sep/2026:08:37:40 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=11847674982 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/ind 182.239.240.254 - - [10/Sep/2026:08:37:40 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=16934581338 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/inde 182.239.240.254 - - [10/Sep/2026:08:37:40 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Djobedit%26id%3D4172&call=getUserSetting&caller=ajaxSubmitLocal&seq=13461650200 HTTP/1.1" 200 160 "https://my.evolutionerp.com.a 182.239.240.254 - - [10/Sep/2026:08:37:40 +1000] "GET /app/ajax.php?cn=&furi=true&uri=&call=getUserSetting&caller=ajaxSubmitLocal&seq=13977973897 HTTP/1.1" 200 201 "https://my.evolutionerp.com.au/index.php?page=jobedit&i 182.239.240.254 - - [10/Sep/2026:08:37:40 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Djobedit%26id%3D4172&call=getUserSetting&caller=ajaxSubmitLocal&seq=14250162142 HTTP/1.1" 200 111 "https://my. 45.148.10.125 - - [10/Sep/2026:08:37:40 +1000] "GET /info.php HTTP/1.1" 403 13 "http://www.my.evolutionerp.com.au/info.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/ == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 112 GET /factory_session_checker.php 57 GET /factory_session_processed_qty.php 57 GET /factory_session_joiner.php 35 GET /heartbeat.php 15 GET /index.php 11 POST /portal/register 3 POST /inventory.php 3 GET /uploadsave.php 2 POST /factory_functions.php 1 PATCH /api/dispatch-items.php -- last 10 requests -- 203.54.180.238 - - [10/Sep/2026:08:37:33 +1000] "GET /factory_session_joiner.php?id=35256 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [10/Sep/2026:08:37:33 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [10/Sep/2026:08:37:33 +1000] "GET /factory_session_joiner.php?id=35254 HTTP/1.1" 200 79 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [10/Sep/2026:08:37:35 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [10/Sep/2026:08:37:34 +1000] "GET /heartbeat.php?sentAt=1788993454&bytes=106,161,223,174&_=1788987691339 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [10/Sep/2026:08:37:37 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [10/Sep/2026:08:37:37 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [10/Sep/2026:08:37:38 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [10/Sep/2026:08:37:39 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 125 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [10/Sep/2026:08:37:39 +1000] "GET /factory_session_joiner.php?id=35258 HTTP/1.1" 200 86 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 4 GET /api/getItem/SHSG656516 3 GET /api/getItem/SHSG656520 2 GET /api/getItem/SHSG505050 2 GET /api/getItem/SHSG505040 2 GET /api/getItem/SHSG505030 2 GET /api/getItem/SHSG505025 2 GET /api/getItem/SHSG505020 2 GET /api/getItem/SHSG505016 2 GET /api/getItem/SHSG404030 2 GET /api/getItem/SHSG404025 2 GET /api/getItem/SHSG404016 2 GET /api/getItem/PXLG50 -- last 10 requests -- 40.115.94.245 - - [10/Sep/2026:08:37:09 +1000] "GET /api/getItem/SHSG505040 HTTP/1.1" 200 1532 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:37:09 +1000] "GET /api/getItem/SHSG125125408 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:37:09 +1000] "GET /api/getItem/SHSG505050 HTTP/1.1" 200 1530 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:37:09 +1000] "GET /api/getItem/SHSG125125508 HTTP/1.1" 404 115 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:37:10 +1000] "GET /api/getItem/SHSG656516 HTTP/1.1" 200 1591 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:37:10 +1000] "GET /api/getItem/FBG50x5 HTTP/1.1" 200 1320 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:37:10 +1000] "GET /api/getItem/SHSG656520 HTTP/1.1" 200 1595 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:37:10 +1000] "GET /api/getItem/SHSG2525168 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:37:10 +1000] "GET /api/getItem/SHSG656516 HTTP/1.1" 200 1591 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [10/Sep/2026:08:37:11 +1000] "GET /api/getItem/SHSG2525208 HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" --- last 30 samples (run-up to this incident) --- 2026-09-10 08:35:20 L1=1.57 run=1 blk=0 avail=7914 (57.4%) swpO=0 conn=2 myRSS=2886 php=6 phpRSS=308 ap=46 tcp=35 topuser=madalice 2026-09-10 08:35:21 L1=1.57 run=5 blk=0 avail=7929 (57.6%) swpO=0 conn=2 myRSS=2886 php=7 phpRSS=331 ap=45 tcp=36 topuser=madalice 2026-09-10 08:35:30 L1=1.47 run=1 blk=0 avail=7826 (56.8%) swpO=0 conn=2 myRSS=2886 php=6 phpRSS=308 ap=55 tcp=142 topuser=madalice 2026-09-10 08:35:31 L1=1.47 run=1 blk=0 avail=7714 (56.0%) swpO=0 conn=2 myRSS=2886 php=6 phpRSS=308 ap=71 tcp=142 topuser=madalice 2026-09-10 08:35:40 L1=1.62 run=4 blk=0 avail=7671 (55.7%) swpO=115 conn=2 myRSS=2883 php=4 phpRSS=137 ap=96 tcp=39 topuser=madalice 2026-09-10 08:35:41 L1=1.62 run=1 blk=0 avail=7801 (56.6%) swpO=115 conn=2 myRSS=2883 php=3 phpRSS=2 ap=95 tcp=40 topuser=root 2026-09-10 08:35:50 L1=1.69 run=4 blk=0 avail=7845 (56.9%) swpO=0 conn=2 myRSS=2883 php=3 phpRSS=2 ap=86 tcp=47 topuser=root 2026-09-10 08:35:51 L1=1.69 run=4 blk=0 avail=7839 (56.9%) swpO=0 conn=2 myRSS=2883 php=4 phpRSS=58 ap=85 tcp=53 topuser=evolution 2026-09-10 08:36:00 L1=1.81 run=3 blk=0 avail=7881 (57.2%) swpO=54 conn=2 myRSS=2881 php=5 phpRSS=98 ap=76 tcp=49 topuser=evolution 2026-09-10 08:36:01 L1=1.81 run=3 blk=0 avail=7929 (57.6%) swpO=54 conn=2 myRSS=2881 php=3 phpRSS=2 ap=75 tcp=53 topuser=root 2026-09-10 08:36:10 L1=1.53 run=4 blk=0 avail=7890 (57.3%) swpO=0 conn=2 myRSS=2881 php=6 phpRSS=187 ap=66 tcp=44 topuser=olympic 2026-09-10 08:36:12 L1=1.53 run=4 blk=0 avail=7760 (56.3%) swpO=0 conn=2 myRSS=2881 php=7 phpRSS=353 ap=65 tcp=48 topuser=olympic 2026-09-10 08:36:20 L1=1.37 run=2 blk=0 avail=7931 (57.6%) swpO=0 conn=2 myRSS=2881 php=4 phpRSS=148 ap=56 tcp=52 topuser=evolution 2026-09-10 08:36:22 L1=1.37 run=1 blk=0 avail=8057 (58.5%) swpO=0 conn=2 myRSS=2881 php=3 phpRSS=2 ap=55 tcp=52 topuser=root 2026-09-10 08:36:30 L1=1.24 run=1 blk=0 avail=8021 (58.2%) swpO=0 conn=2 myRSS=2881 php=4 phpRSS=137 ap=46 tcp=39 topuser=madalice 2026-09-10 08:36:32 L1=1.24 run=1 blk=0 avail=8021 (58.2%) swpO=0 conn=2 myRSS=2881 php=4 phpRSS=137 ap=45 tcp=49 topuser=madalice 2026-09-10 08:36:40 L1=1.05 run=2 blk=0 avail=8011 (58.1%) swpO=0 conn=2 myRSS=2881 php=5 phpRSS=176 ap=46 tcp=51 topuser=madalice 2026-09-10 08:36:42 L1=1.05 run=2 blk=0 avail=8011 (58.1%) swpO=0 conn=2 myRSS=2881 php=5 phpRSS=167 ap=46 tcp=50 topuser=madalice 2026-09-10 08:36:50 L1=0.97 run=1 blk=0 avail=7909 (57.4%) swpO=0 conn=2 myRSS=2881 php=5 phpRSS=196 ap=58 tcp=67 topuser=madalice 2026-09-10 08:36:52 L1=0.97 run=2 blk=0 avail=7909 (57.4%) swpO=0 conn=2 myRSS=2881 php=5 phpRSS=184 ap=59 tcp=66 topuser=madalice 2026-09-10 08:37:00 L1=1.12 run=2 blk=0 avail=7875 (57.2%) swpO=0 conn=2 myRSS=2881 php=8 phpRSS=307 ap=56 tcp=63 topuser=madalice 2026-09-10 08:37:02 L1=1.12 run=3 blk=0 avail=7638 (55.4%) swpO=0 conn=2 myRSS=2881 php=11 phpRSS=613 ap=57 tcp=66 topuser=corpkicks 2026-09-10 08:37:10 L1=1.18 run=1 blk=0 avail=7902 (57.4%) swpO=0 conn=2 myRSS=2881 php=6 phpRSS=235 ap=56 tcp=49 topuser=madalice 2026-09-10 08:37:12 L1=1.18 run=2 blk=0 avail=7922 (57.5%) swpO=0 conn=2 myRSS=2881 php=5 phpRSS=195 ap=55 tcp=50 topuser=madalice 2026-09-10 08:37:20 L1=1.00 run=2 blk=0 avail=7796 (56.6%) swpO=0 conn=3 myRSS=2881 php=6 phpRSS=313 ap=60 tcp=62 topuser=madalice 2026-09-10 08:37:22 L1=1.00 run=2 blk=0 avail=7898 (57.3%) swpO=0 conn=2 myRSS=2881 php=5 phpRSS=173 ap=60 tcp=55 topuser=madalice 2026-09-10 08:37:30 L1=0.92 run=1 blk=0 avail=6763 (49.1%) swpO=811 conn=3 myRSS=2866 php=14 phpRSS=1423 ap=73 tcp=74 topuser=madalice 2026-09-10 08:37:32 L1=0.92 run=7 blk=0 avail=6771 (49.1%) swpO=811 conn=2 myRSS=2866 php=13 phpRSS=1384 ap=73 tcp=71 topuser=madalice 2026-09-10 08:37:40 L1=0.86 run=1 blk=0 avail=6792 (49.3%) swpO=0 conn=3 myRSS=2866 php=14 phpRSS=1456 ap=64 tcp=63 topuser=madalice 2026-09-10 08:37:42 L1=0.86 run=3 blk=0 avail=6784 (49.2%) swpO=0 conn=2 myRSS=2867 php=15 phpRSS=1508 ap=63 tcp=64 topuser=madalice