INCIDENT 2026-08-28 09:06:35 trigger: php_rss=1568MB ================================================================== load: 2.59 2.24 2.04 4/626 1980808 ncpu:10 mem_avail: 7835MB/13777MB (56.9%) swap_used:736MB swapout:0/s blocked(D):0 running:5 iowait:0.1% steal:0.0% php: 12 procs / 1568MB heaviest user: madalice (8 procs, 1282MB) apache: 43 procs tcp_estab: 55 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2013 madalice 8 1289 root 253 1117 nobody 42 796 mailman 20 399 netdata 7 204 corpkicks 1 164 evolution 6 107 wp-toolkit 3 102 mailnull 5 78 cpanellogin 1 73 dovenull 6 56 named 1 36 zabbix 1 24 dovecot 3 23 polkitd 1 20 lowrange 1 13 kurri 1 8 rpc 1 5 nscd 1 5 --- php workers by user --- USER PROCS RSS_MB madalice 8 1291 corpkicks 1 165 evolution 2 96 root 1 29 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5655 MB Active(file): 4852 MB Inactive(file): 1135 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 540 MB CommitLimit: 10984 MB Committed_AS: 8516 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 06:47:55 11816 /usr/bin/imunify-agent-proxy 1946945 root 06:35 1260 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 2061676 10.1 Ssl 06:47:24 /usr/sbin/mariadbd 1963292 510022 madalice 212024 11.8 R 03:28 php-fpm: pool madalice_com_au 529388 527476 root 178360 0.0 S 06:42:17 spamd child 508924 1 netdata 173956 1.9 Ssl 06:46:53 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1962325 510022 madalice 162068 16.9 S 04:33 php-fpm: pool madalice_com_au 1963285 510022 madalice 161996 11.9 S 03:29 php-fpm: pool madalice_com_au 1963273 510022 madalice 160092 11.0 S 03:29 php-fpm: pool madalice_com_au 529389 527476 root 160052 0.0 S 06:42:17 spamd child 1962793 510022 madalice 159440 15.7 S 04:01 php-fpm: pool madalice_com_au 1963778 510022 madalice 158580 10.5 S 02:58 php-fpm: pool madalice_com_au 1963787 510022 madalice 158324 10.4 S 02:57 php-fpm: pool madalice_com_au 1963777 510022 madalice 157700 10.3 S 02:58 php-fpm: pool madalice_com_au 527476 1 root 117568 0.0 Ss 06:43:56 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1890416 1353308 cpanellogin 75248 0.0 S 21:33 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base default_login_theme cpanel server_locale en 509236 509098 root 69332 0.0 Sl 06:46:50 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1980770 1980229 evolution 68252 13.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 938582 1 wp-toolkit 59652 0.0 Ss 04:54:27 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1353308 1 root 42340 0.0 Ss 37-06:25:16 cpsrvd (SSL) - waiting for connections 508634 1 named 37268 0.0 Ssl 06:46:58 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 938585 1 wp-toolkit 36632 0.0 Ss 04:54:27 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1469 1 root 34492 0.1 Ss 59-22:56:45 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 509266 1 root 33200 0.0 Ss 06:46:50 /usr/lib/systemd/systemd-journald 509098 1 root 32052 0.0 Ss 06:46:51 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion 4180059 4180015 evolution 30868 0.0 Ss 09:06:35 /opt/cpanel/ea-php74/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 510022 1 root 30600 0.0 Ss 06:46:46 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 526869 1 root 29444 0.0 Ss 06:44:19 lfd - sleeping 481558 1 root 28692 0.1 Ssl 06:49:17 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 483898 1 zabbix 25360 0.2 Ssl 06:48:07 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 1946286 506832 nobody 23900 0.0 S 07:17 /usr/sbin/httpd -k start 1463 1 root 22932 0.0 Ss 59-22:56:45 tailwatchd 1962680 506832 nobody 22896 0.0 S 04:08 /usr/sbin/httpd -k start 1962681 506832 nobody 22372 0.0 S 04:08 /usr/sbin/httpd -k start 1963800 506832 nobody 22196 0.1 S 02:57 /usr/sbin/httpd -k start 1963855 506832 nobody 22064 0.0 S 02:56 /usr/sbin/httpd -k start 508857 508814 mailman 21940 0.0 S 06:46:56 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s 508863 508814 mailman 21904 0.0 S 06:46:56 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:5:8 -s 508867 508814 mailman 21824 0.0 S 06:46:56 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s 508856 508814 mailman 21820 0.0 S 06:46:56 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s 508855 508814 mailman 21816 0.0 S 06:46:56 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:2:4 -s 508864 508814 mailman 21796 0.0 S 06:46:56 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:6:8 -s 508858 508814 mailman 21768 0.0 S 06:46:56 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:8 -s 1963783 506832 nobody 21768 0.1 S 02:58 /usr/sbin/httpd -k start 508861 508814 mailman 21716 0.0 S 06:46:56 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:3:8 -s 508865 508814 mailman 21712 0.0 S 06:46:56 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:7:8 -s 938444 1 root 21680 0.0 Ss 04:54:30 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 508860 508814 mailman 21672 0.0 S 06:46:56 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:2:8 -s 508854 508814 mailman 21648 0.0 S 06:46:56 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:1:4 -s 1961989 506832 nobody 21640 0.1 S 05:01 /usr/sbin/httpd -k start 1963804 506832 nobody 21524 0.0 S 02:57 /usr/sbin/httpd -k start 508866 508814 mailman 21512 0.0 S 06:46:56 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s 508859 508814 mailman 21504 0.0 S 06:46:56 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:1:8 -s 1963802 506832 nobody 21476 0.1 S 02:57 /usr/sbin/httpd -k start 508862 508814 mailman 21436 0.0 S 06:46:56 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:4:8 -s 1963847 506832 nobody 21268 0.0 S 02:56 /usr/sbin/httpd -k start 1963751 506832 nobody 21260 0.0 S 03:01 /usr/sbin/httpd -k start 1963774 506832 nobody 21236 0.0 S 02:59 /usr/sbin/httpd -k start 1963830 506832 nobody 21236 0.0 S 02:56 /usr/sbin/httpd -k start 1961987 506832 nobody 21080 0.0 S 05:01 /usr/sbin/httpd -k start 508591 1 polkitd 21040 0.0 Ssl 06:46:58 /usr/lib/polkit-1/polkitd --no-debug 1980000 506832 nobody 20864 0.1 S 00:58 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 894949 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 894790 | root | 108-1481181613 | Execute | 0 | Sending data | select inventory_discounts.* FROM inventory_discounts, quoteitems where quoteitems.contractid=inventory_discounts.contract_id and quoteitems.quoteid = ? | +--------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 696 evolution/evolutionerp.com.au-ssl_log 132 evolution/portal.evolutionerp.com.au-ssl_log 126 kamcool/kamcool.com.au-ssl_log 100 madalice/madalice.com.au-ssl_log 94 candyfabcom/candyfab.com.au-ssl_log 78 coscom/swms.coscom.com.au-ssl_log 75 aaa/aaadownunder.com.au-ssl_log 1 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 301 203.54.180.238 131 14.1.95.251 116 103.104.165.99 112 20.48.160.90 101 101.166.96.210 100 158.158.54.35 88 20.104.104.62 78 52.139.37.240 76 180.181.236.49 75 158.23.184.117 33 103.104.164.114 31 147.161.213.71 18 20.151.129.194 17 124.168.5.234 7 1.145.102.184 --- top request paths across all vhosts (last 3 min) --- 235 POST /functions.php 150 GET /app/ajax.php 71 GET /index.php 47 POST /plugins/csvexporter/plugin.php 45 GET /heartbeat.php 38 POST /quoteditsave.php 31 GET /factory_session_checker.php 27 POST /app/ajax/selectFilter.php 26 POST /app/ajax/selectFilterSingle.php 24 POST /app/ajax.php 18 POST /itemModify.php 16 GET /factory_session_processed_qty.php 16 GET /factory_session_joiner.php 15 POST /plugins/fencecosting/plugin.php 12 POST /clienteditsave.php 7 POST /inveditsave.php 6 POST /purchaseaddsave.php 5 POST /billaddsave.php 5 GET /admin.php 5 GET /1.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 235 POST /functions.php 150 GET /app/ajax.php 61 GET /index.php 47 POST /plugins/csvexporter/plugin.php 38 POST /quoteditsave.php 27 POST /app/ajax/selectFilter.php 26 POST /app/ajax/selectFilterSingle.php 24 POST /app/ajax.php 18 POST /itemModify.php 15 POST /plugins/fencecosting/plugin.php 12 POST /clienteditsave.php 7 POST /inveditsave.php -- last 10 requests -- 103.104.165.99 - - [28/Aug/2026:09:06:32 +1000] "GET /index.php?page=invoiceadd&invoiceid=65557 HTTP/1.1" 200 48040 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=65557&tab=maintab" "Mozilla/5.0 (Win 103.104.165.99 - - [28/Aug/2026:09:06:33 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=65557&tab=maintab" "Mozilla/5.0 (Windows NT 10.0; 103.104.165.99 - - [28/Aug/2026:09:06:33 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=10986063379 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/index 103.104.165.99 - - [28/Aug/2026:09:06:33 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=11305542464 HTTP/1.1" 200 98 "https://my.evolutionerp.com.au/inde 103.104.165.99 - - [28/Aug/2026:09:06:33 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Dinvoiceadd%26invoiceid%3D65557%26tab%3Dmaintab&call=getUserSetting&caller=ajaxSubmitLocal&seq=13707580165 HTTP 103.104.165.99 - - [28/Aug/2026:09:06:33 +1000] "POST /clienteditsave.php?clientid=3093&call=getCategoryDiscounts HTTP/1.1" 200 25 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=65557&tab=maintab" "M 103.104.165.99 - - [28/Aug/2026:09:06:33 +1000] "POST /clienteditsave.php?call=getSettings HTTP/1.1" 200 60 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=65557&tab=maintab" "Mozilla/5.0 (Windows NT 103.104.165.99 - - [28/Aug/2026:09:06:33 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinvoiceadd%26invoiceid%3D65557%26tab%3Dmaintab&call=getUserSetting&caller=ajaxSubmitLocal&seq=15875719986 HTTP/1.1" 200 173 "htt 203.54.180.238 - - [28/Aug/2026:09:06:33 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=dispatchedit&dispatchid=33954" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 203.54.180.238 - - [28/Aug/2026:09:06:33 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29461&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; == evolution/evolutionerp.com.au-ssl_log == -- top paths -- 2 GET /wp-content/plugins/hellopress/wp_filemanager.php 2 GET /this_is_a_new_hello_world.php 2 GET /ops.php 2 GET /media.php 2 GET /mac.php 2 GET /images.php 2 GET /goods.php 2 GET /admin.php 2 GET /4PJcpMFsD8B.php 2 GET /3PJcpMFsD8B.php 2 GET /1.php 1 POST /wp-cron.php -- last 10 requests -- 20.48.160.90 - - [28/Aug/2026:09:05:30 +1000] "GET /wp-admin/w.php HTTP/1.1" 404 5749 "-" "-" 20.151.129.194 - - [28/Aug/2026:09:05:29 +1000] "GET /mac.php HTTP/1.1" 404 123939 "-" "-" 20.48.160.90 - - [28/Aug/2026:09:05:30 +1000] "GET /wp-content/k.php HTTP/1.1" 404 5749 "-" "-" 20.48.160.90 - - [28/Aug/2026:09:05:31 +1000] "GET /os.php HTTP/1.1" 404 5749 "-" "-" 20.48.160.90 - - [28/Aug/2026:09:05:31 +1000] "GET /htio.php HTTP/1.1" 404 5749 "-" "-" 20.48.160.90 - - [28/Aug/2026:09:05:32 +1000] "GET /dev.php?p HTTP/1.1" 404 5749 "-" "-" 20.151.129.194 - - [28/Aug/2026:09:05:31 +1000] "GET /1.php HTTP/1.1" 404 123937 "-" "-" 20.48.160.90 - - [28/Aug/2026:09:05:32 +1000] "GET /gos.php HTTP/1.1" 404 5749 "-" "-" 136.116.129.132 - - [28/Aug/2026:09:05:31 +1000] "GET / HTTP/1.1" 200 258705 "-" "Mozilla/5.0 (compatible; zgrab/2.0)" 20.48.160.90 - - [28/Aug/2026:09:05:33 +1000] "GET /132.php HTTP/1.1" 404 5749 "-" "-" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 45 GET /heartbeat.php 31 GET /factory_session_checker.php 16 GET /factory_session_processed_qty.php 16 GET /factory_session_joiner.php 10 GET /index.php 2 POST /portal/register 2 GET /uploadsave.php 1 POST /login.php 1 POST /inventory.php 1 GET /userlogin.php 1 GET /logoff.php -- last 10 requests -- 203.54.180.238 - - [28/Aug/2026:09:06:22 +1000] "GET /heartbeat.php?sentAt=1787871982&bytes=106,144,194,238&_=1787835393052 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [28/Aug/2026:09:06:22 +1000] "GET /heartbeat.php?sentAt=1787871982&bytes=106,144,194,238&_=1787870789347 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [28/Aug/2026:09:06:26 +1000] "GET /factory_session_joiner.php?id=34936 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [28/Aug/2026:09:06:27 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 133 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [28/Aug/2026:09:06:26 +1000] "GET /heartbeat.php?sentAt=1787871984&bytes=106,144,194,240&_=1787865012608 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [28/Aug/2026:09:06:27 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [28/Aug/2026:09:06:27 +1000] "POST /inventory.php HTTP/1.1" 302 20 "https://portal.evolutionerp.com.au/index.php?page=delivery_commit&id=33949" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (K 203.54.180.238 - - [28/Aug/2026:09:06:29 +1000] "GET /index.php?page=delivery_commit&id=33949 HTTP/1.1" 200 93864 "https://portal.evolutionerp.com.au/index.php?page=delivery_commit&id=33949" "Mozilla/5.0 (Linux; Android 203.54.180.238 - - [28/Aug/2026:09:06:29 +1000] "GET /uploadsave.php?call=get_uploads&sourceId=33949&subType=delivery_commit HTTP/1.1" 200 22 "https://portal.evolutionerp.com.au/index.php?page=delivery_commit&id=33949" " 203.54.180.238 - - [28/Aug/2026:09:06:31 +1000] "GET /index.php?page=dispatches HTTP/1.1" 200 59198 "https://portal.evolutionerp.com.au/index.php?page=delivery_commit&id=33949" "Mozilla/5.0 (Linux; Android 10; K) AppleWe --- last 30 samples (run-up to this incident) --- 2026-08-28 09:04:04 L1=2.88 run=2 blk=0 avail=7715 (56.0%) swpO=0 conn=2 myRSS=2010 php=10 phpRSS=1313 ap=89 tcp=61 topuser=madalice 2026-08-28 09:04:14 L1=2.90 run=12 blk=0 avail=7660 (55.6%) swpO=0 conn=4 myRSS=2010 php=17 phpRSS=1614 ap=79 tcp=65 topuser=madalice 2026-08-28 09:04:14 L1=2.90 run=2 blk=0 avail=7692 (55.8%) swpO=0 conn=2 myRSS=2010 php=12 phpRSS=1443 ap=79 tcp=68 topuser=madalice 2026-08-28 09:04:24 L1=2.75 run=4 blk=0 avail=7738 (56.2%) swpO=0 conn=4 myRSS=2010 php=11 phpRSS=1463 ap=69 tcp=49 topuser=madalice 2026-08-28 09:04:24 L1=2.75 run=2 blk=0 avail=7812 (56.7%) swpO=0 conn=2 myRSS=2010 php=11 phpRSS=1379 ap=69 tcp=48 topuser=madalice 2026-08-28 09:04:34 L1=2.56 run=2 blk=0 avail=7876 (57.2%) swpO=0 conn=4 myRSS=2010 php=11 phpRSS=1383 ap=59 tcp=60 topuser=madalice 2026-08-28 09:04:34 L1=2.56 run=2 blk=0 avail=7857 (57.0%) swpO=0 conn=2 myRSS=2010 php=11 phpRSS=1403 ap=59 tcp=58 topuser=madalice 2026-08-28 09:04:44 L1=2.54 run=4 blk=0 avail=7896 (57.3%) swpO=0 conn=2 myRSS=2010 php=14 phpRSS=1514 ap=49 tcp=55 topuser=madalice 2026-08-28 09:04:44 L1=2.54 run=4 blk=0 avail=7894 (57.3%) swpO=0 conn=2 myRSS=2010 php=12 phpRSS=1465 ap=49 tcp=58 topuser=madalice 2026-08-28 09:04:54 L1=2.31 run=4 blk=0 avail=7932 (57.6%) swpO=0 conn=3 myRSS=2010 php=12 phpRSS=1385 ap=45 tcp=46 topuser=madalice 2026-08-28 09:04:55 L1=2.31 run=3 blk=0 avail=7916 (57.5%) swpO=0 conn=2 myRSS=2010 php=11 phpRSS=1438 ap=45 tcp=46 topuser=madalice 2026-08-28 09:05:04 L1=2.58 run=6 blk=0 avail=7833 (56.9%) swpO=0 conn=4 myRSS=2010 php=12 phpRSS=1559 ap=43 tcp=45 topuser=madalice 2026-08-28 09:05:05 L1=2.58 run=11 blk=0 avail=7979 (57.9%) swpO=0 conn=2 myRSS=2010 php=11 phpRSS=1393 ap=43 tcp=45 topuser=madalice 2026-08-28 09:05:15 L1=2.50 run=2 blk=0 avail=7987 (58.0%) swpO=0 conn=2 myRSS=2010 php=11 phpRSS=1431 ap=39 tcp=46 topuser=madalice 2026-08-28 09:05:16 L1=2.50 run=5 blk=0 avail=8043 (58.4%) swpO=0 conn=4 myRSS=2011 php=12 phpRSS=1415 ap=39 tcp=43 topuser=madalice 2026-08-28 09:05:25 L1=2.50 run=3 blk=0 avail=8101 (58.8%) swpO=0 conn=2 myRSS=2012 php=10 phpRSS=1319 ap=36 tcp=37 topuser=madalice 2026-08-28 09:05:26 L1=2.50 run=3 blk=0 avail=8019 (58.2%) swpO=0 conn=4 myRSS=2012 php=11 phpRSS=1426 ap=35 tcp=43 topuser=madalice 2026-08-28 09:05:35 L1=2.44 run=3 blk=0 avail=8028 (58.3%) swpO=0 conn=2 myRSS=2012 php=11 phpRSS=1405 ap=38 tcp=47 topuser=madalice 2026-08-28 09:05:36 L1=2.44 run=1 blk=0 avail=8081 (58.7%) swpO=0 conn=4 myRSS=2012 php=10 phpRSS=1313 ap=38 tcp=48 topuser=madalice 2026-08-28 09:05:45 L1=2.36 run=4 blk=0 avail=7873 (57.1%) swpO=0 conn=3 myRSS=2012 php=11 phpRSS=1567 ap=37 tcp=40 topuser=madalice 2026-08-28 09:05:46 L1=2.36 run=4 blk=0 avail=8096 (58.8%) swpO=0 conn=4 myRSS=2012 php=11 phpRSS=1355 ap=37 tcp=41 topuser=madalice 2026-08-28 09:05:55 L1=2.29 run=5 blk=0 avail=8008 (58.1%) swpO=0 conn=3 myRSS=2013 php=12 phpRSS=1449 ap=36 tcp=52 topuser=madalice 2026-08-28 09:05:56 L1=2.29 run=2 blk=0 avail=7971 (57.9%) swpO=0 conn=4 myRSS=2013 php=12 phpRSS=1483 ap=37 tcp=55 topuser=madalice 2026-08-28 09:06:05 L1=2.25 run=3 blk=0 avail=7956 (57.7%) swpO=0 conn=4 myRSS=2013 php=11 phpRSS=1360 ap=52 tcp=56 topuser=madalice 2026-08-28 09:06:06 L1=2.25 run=1 blk=0 avail=7966 (57.8%) swpO=0 conn=4 myRSS=2013 php=11 phpRSS=1352 ap=52 tcp=52 topuser=madalice 2026-08-28 09:06:15 L1=2.52 run=2 blk=0 avail=7970 (57.9%) swpO=0 conn=4 myRSS=2013 php=10 phpRSS=1367 ap=48 tcp=48 topuser=madalice 2026-08-28 09:06:16 L1=2.52 run=3 blk=0 avail=8016 (58.2%) swpO=0 conn=4 myRSS=2013 php=12 phpRSS=1387 ap=47 tcp=48 topuser=madalice 2026-08-28 09:06:25 L1=2.43 run=3 blk=0 avail=8006 (58.1%) swpO=0 conn=4 myRSS=2013 php=10 phpRSS=1315 ap=47 tcp=44 topuser=madalice 2026-08-28 09:06:26 L1=2.43 run=2 blk=0 avail=7967 (57.8%) swpO=0 conn=4 myRSS=2013 php=12 phpRSS=1417 ap=47 tcp=45 topuser=madalice 2026-08-28 09:06:35 L1=2.59 run=5 blk=0 avail=7835 (56.9%) swpO=0 conn=4 myRSS=2013 php=12 phpRSS=1568 ap=43 tcp=55 topuser=madalice