INCIDENT 2026-08-31 11:32:54 trigger: php_rss=2162MB mysql_conn=15 ================================================================== load: 3.36 2.41 2.49 15/688 799325 ncpu:10 mem_avail: 6158MB/13777MB (44.7%) swap_used:2074MB swapout:0/s blocked(D):0 running:17 iowait:0.0% steal:0.0% php: 17 procs / 2162MB heaviest user: madalice (10 procs, 1837MB) apache: 45 procs tcp_estab: 62 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3411 madalice 10 1833 root 252 1033 nobody 44 804 evolution 11 218 netdata 7 204 aaa 2 150 mailman 20 75 cpanellogin 1 66 mailnull 4 61 dovenull 6 46 kurri 3 40 wp-toolkit 3 21 zabbix 1 20 dovecot 3 18 alison 1 15 named 1 11 lowrange 1 11 nscd 1 4 polkitd 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 10 1843 evolution 5 155 aaa 2 152 root 1 22 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5312 MB Active(file): 4139 MB Inactive(file): 1355 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 506 MB CommitLimit: 10984 MB Committed_AS: 9686 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 489033 root 3-09:14:15 4272 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 3493120 8.2 Ssl 3-09:13:44 /usr/sbin/mariadbd 799255 510022 madalice 249064 63.0 R 00:02 php-fpm: pool madalice_com_au 799258 510022 madalice 235096 121 R 00:01 php-fpm: pool madalice_com_au 3036527 3002570 root 203552 0.1 S 09:01:12 spamd child 799263 510022 madalice 202708 99.0 S 00:01 php-fpm: pool madalice_com_au 799262 510022 madalice 198996 96.0 S 00:01 php-fpm: pool madalice_com_au 799268 510022 madalice 190780 95.0 R 00:01 php-fpm: pool madalice_com_au 508924 1 netdata 184276 1.9 Ssl 3-09:13:13 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 796126 510022 madalice 166392 12.5 R 02:39 php-fpm: pool madalice_com_au 796132 510022 madalice 165116 9.8 S 02:39 php-fpm: pool madalice_com_au 799259 510022 madalice 160860 137 R 00:01 php-fpm: pool madalice_com_au 3002570 1 root 147024 0.0 Ss 09:10:08 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 799264 510022 madalice 139792 67.0 R 00:01 php-fpm: pool madalice_com_au 3036528 3002570 root 137240 0.0 S 09:01:12 spamd child 799277 510022 madalice 131148 62.0 R 00:01 php-fpm: pool madalice_com_au 799267 798188 aaa 100148 74.0 S 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 711235 1353308 cpanellogin 68496 0.1 S 21:36 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en cpanel_locale docroot /usr/local/cpanel/base 799289 781705 evolution 67000 0.0 R 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 509640 508992 root 63196 0.0 Sl 3-09:13:08 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 509266 1 root 59960 0.0 Ss 3-09:13:10 /usr/lib/systemd/systemd-journald 799286 798801 aaa 57152 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509236 509098 root 49124 0.0 Sl 3-09:13:10 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 41880 0.1 Ss 40-08:51:36 cpsrvd (SSL) - waiting for connections 3001917 1 root 33980 0.0 Ss 09:10:40 lfd - sleeping 799322 1469 root 29088 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1463 1 root 24932 0.0 Ss 63-01:23:05 tailwatchd 778654 506832 nobody 23760 0.0 S 06:49 /usr/sbin/httpd -k start 763073 506832 nobody 22856 0.0 S 08:41 /usr/sbin/httpd -k start 763081 506832 nobody 22632 0.0 S 08:40 /usr/sbin/httpd -k start 510022 1 root 22568 0.0 Ss 3-09:13:06 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 796176 506832 nobody 22008 0.0 S 02:37 /usr/sbin/httpd -k start 1469 1 root 21964 0.1 Ss 63-01:23:05 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 780362 506832 nobody 21852 0.1 S 04:48 /usr/sbin/httpd -k start 778715 506832 nobody 21812 0.0 S 06:44 /usr/sbin/httpd -k start 780711 506832 nobody 21376 0.1 S 04:21 /usr/sbin/httpd -k start 781678 506832 nobody 21368 0.2 S 03:07 /usr/sbin/httpd -k start 781705 506832 nobody 21244 0.0 S 03:04 /usr/sbin/httpd -k start 778966 506832 nobody 21112 0.0 S 06:28 /usr/sbin/httpd -k start 781745 506832 nobody 21076 0.1 S 03:01 /usr/sbin/httpd -k start 780646 506832 nobody 20960 0.1 S 04:22 /usr/sbin/httpd -k start 781623 506832 nobody 20744 0.1 S 03:10 /usr/sbin/httpd -k start 797444 506832 nobody 20672 0.0 S 01:51 /usr/sbin/httpd -k start 797683 506832 nobody 20668 0.0 S 01:44 /usr/sbin/httpd -k start 798169 506832 nobody 20592 0.0 S 01:18 /usr/sbin/httpd -k start 483898 1 zabbix 20524 0.2 Ssl 3-09:14:27 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 798163 506832 nobody 20468 0.0 S 01:19 /usr/sbin/httpd -k start 797446 506832 nobody 20416 0.0 S 01:51 /usr/sbin/httpd -k start 781681 506832 nobody 20220 0.0 S 03:07 /usr/sbin/httpd -k start 798434 506832 nobody 19920 0.0 S 00:58 /usr/sbin/httpd -k start 781654 506832 nobody 19876 0.0 S 03:09 /usr/sbin/httpd -k start 798188 506832 nobody 19860 0.0 S 01:17 /usr/sbin/httpd -k start 797419 506832 nobody 19788 0.0 S 01:52 /usr/sbin/httpd -k start 781785 506832 nobody 19520 0.0 S 03:00 /usr/sbin/httpd -k start 797708 506832 nobody 19480 0.0 S 01:43 /usr/sbin/httpd -k start 797501 506832 nobody 19124 0.0 S 01:50 /usr/sbin/httpd -k start 798662 508720 mailnull 19008 0.0 S 00:37 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 798859 506832 nobody 19008 0.1 S 00:22 /usr/sbin/httpd -k start 798448 506832 nobody 18960 0.0 S 00:56 /usr/sbin/httpd -k start 781734 506832 nobody 18576 0.0 S 03:02 /usr/sbin/httpd -k start 781663 506832 nobody 18552 0.0 S 03:08 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 7300361 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 7300360 | root | 304-1705884103 | Execute | 0 | Creating sort index | SELECT dispatchitems.*, dispatch.date, dispatch.status, jobInventory.parentid, jobInventory.referenceid FROM dispatch, dispatchitems, jobInventory WHERE dispatchitems.dispatchid=dispatch.id AND dispatch.jobid='4028' AND dispatchitems.jo | +---------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 1075 evolution/my.evolutionerp.com.au-ssl_log 879 nrg/nrgservices.net.au-ssl_log 348 aaa/aaadownunder.com.au-ssl_log 272 madalice/madalice.com.au-ssl_log 194 evolution/portal.evolutionerp.com.au-ssl_log 188 tubesupplies/tubesupplies.com.au-ssl_log 68 evolution/staging.evolutionerp.com.au-ssl_log 29 olympic/olympicfencing.com.au-ssl_log 17 (total vhosts taking traffic: 9) --- top client IPs across all vhosts (last 3 min) --- 1075 40.115.94.245 504 203.54.180.238 275 195.178.110.102 223 195.178.110.104 164 103.168.66.237 135 103.104.165.99 117 101.166.96.210 102 103.104.164.114 93 180.181.236.49 68 20.63.81.20 68 150.228.243.152 64 20.48.179.39 63 1.144.107.82 17 4.204.224.164 16 182.9.34.248 --- top request paths across all vhosts (last 3 min) --- 314 POST /functions.php 170 GET / 160 GET /app/ajax.php 135 GET /api/getItem/LWPG2001KG 135 GET /api/getItem/LWPB2001KG 135 GET /api/getItem/LWHG2001KG 135 GET /api/getItem/LWFBW2001KG 135 GET /api/getItem/LWFB2001KG 90 GET /index.php 71 GET /heartbeat.php 51 POST /plugins/csvexporter/plugin.php 51 GET /factory_session_checker.php 46 POST /app/ajax.php 42 POST /wordpress/ 40 POST /app/ajax/selectFilter.php 39 POST /wp/ 29 POST /wordpress/index.php 29 POST /app/ajax/selectFilterSingle.php 27 POST /wp/index.php 27 POST /blog/ --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 135 GET /api/getItem/LWPG2001KG 135 GET /api/getItem/LWPB2001KG 135 GET /api/getItem/LWHG2001KG 135 GET /api/getItem/LWFBW2001KG 135 GET /api/getItem/LWFB2001KG 9 GET /api/getItem/NA 4 GET /api/getItem/PWFBW3151KG 2 GET /api/getItem/SHSG8989508 2 GET /api/getItem/SHSG8989358 2 GET /api/getItem/SHSG8989258 2 GET /api/getItem/SHSG8989208 2 GET /api/getItem/SHSG7575508 -- last 10 requests -- 40.115.94.245 - - [31/Aug/2026:11:31:17 +1000] "GET /api/getItem/RGW90 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:11:31:17 +1000] "GET /api/getItem/RGW100 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:11:31:17 +1000] "GET /api/getItem/RGW120 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:11:31:17 +1000] "GET /api/getItem/RGW160 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:11:31:17 +1000] "GET /api/getItem/RGW117T HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:11:31:17 +1000] "GET /api/getItem/RGW80 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:11:31:17 +1000] "GET /api/getItem/GP150x200x8 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:11:31:17 +1000] "GET /api/getItem/K125MSGB HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:11:31:17 +1000] "GET /api/getItem/253-40SP HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [31/Aug/2026:11:31:18 +1000] "GET /api/getItem/300558 HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 309 POST /functions.php 160 GET /app/ajax.php 77 GET /index.php 50 POST /plugins/csvexporter/plugin.php 40 POST /app/ajax/selectFilter.php 39 POST /app/ajax.php 29 POST /app/ajax/selectFilterSingle.php 23 POST /quoteditsave.php 23 POST /purchaseaddsave.php 22 POST /support_releasenotes.php 17 POST /inveditsave.php 14 POST /plugins/fencecosting/plugin.php -- last 10 requests -- 103.104.165.99 - - [31/Aug/2026:11:32:51 +1000] "POST /purchaseaddsave.php?call=fetch HTTP/1.1" 200 4741 "https://my.evolutionerp.com.au/index.php?page=purchasereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ 150.228.243.152 - - [31/Aug/2026:11:32:52 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=invedit&id=3657&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; 150.228.243.152 - - [31/Aug/2026:11:32:52 +1000] "GET /index.php?page=inventory&string= HTTP/1.1" 200 30225 "https://my.evolutionerp.com.au/index.php?page=invedit&id=3649&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Wi 182.239.240.254 - - [31/Aug/2026:11:32:52 +1000] "POST /jobeditsave.php?call=filter HTTP/1.1" 200 522 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 150.228.243.152 - - [31/Aug/2026:11:32:53 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=inventory&string=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe 150.228.243.152 - - [31/Aug/2026:11:32:53 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dinventory%26string%3D&call=getUserSetting&caller=ajaxSubmitLocal&seq=19477380737 HTTP/1.1" 200 99 "https://my.evolutionerp.com. 150.228.243.152 - - [31/Aug/2026:11:32:53 +1000] "POST /inveditsave.php?call=fetch_inventory HTTP/1.1" 200 4326 "https://my.evolutionerp.com.au/index.php?page=inventory&string=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 103.104.164.114 - - [31/Aug/2026:11:32:54 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=1817§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 103.104.165.99 - - [31/Aug/2026:11:32:53 +1000] "POST /purchaseaddsave.php?call=fetch HTTP/1.1" 200 1738 "https://my.evolutionerp.com.au/index.php?page=purchasereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ 203.54.180.238 - - [31/Aug/2026:11:32:54 +1000] "POST //functions.php?call=heartbeat HTTP/1.1" 200 284 "https://my.evolutionerp.com.au//index.php?page=jobedit&id=29568&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64 == nrg/nrgservices.net.au-ssl_log == -- top paths -- 21 POST /wordpress/ 21 POST /blog/ 18 POST /wp/ 14 POST /wordpress/index.php 14 POST /blog/index.php 12 POST /wp/index.php 9 GET /wp/ 9 GET /wordpress/ 9 GET /blog/ 7 POST /wp/wordpress/wp-json/batch/v1 7 POST /wordpress/wp-json/Batch/v1 7 POST /wordpress/wp-json/batch/v1/ -- last 10 requests -- 20.48.179.39 - - [31/Aug/2026:11:32:47 +1000] "GET /wp-includes/index.php HTTP/1.1" 401 36 "-" "-" 20.48.179.39 - - [31/Aug/2026:11:32:48 +1000] "GET /dk.php HTTP/1.1" 401 36 "-" "-" 20.48.179.39 - - [31/Aug/2026:11:32:48 +1000] "GET /wp-content/mod/adminfuns.php HTTP/1.1" 401 36 "-" "-" 20.48.179.39 - - [31/Aug/2026:11:32:49 +1000] "GET /xc.php HTTP/1.1" 401 36 "-" "-" 20.48.179.39 - - [31/Aug/2026:11:32:49 +1000] "GET /wp-content/l.php HTTP/1.1" 401 36 "-" "-" 20.48.179.39 - - [31/Aug/2026:11:32:50 +1000] "GET /wp-admin/w.php HTTP/1.1" 401 36 "-" "-" 20.48.179.39 - - [31/Aug/2026:11:32:50 +1000] "GET /wp-content/k.php HTTP/1.1" 401 36 "-" "-" 20.48.179.39 - - [31/Aug/2026:11:32:50 +1000] "GET /dev.php HTTP/1.1" 401 36 "-" "-" 20.48.179.39 - - [31/Aug/2026:11:32:51 +1000] "GET /wp-activate.php HTTP/1.1" 401 36 "-" "-" 20.48.179.39 - - [31/Aug/2026:11:32:51 +1000] "GET /wp_blog_footer.php HTTP/1.1" 401 36 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-31 11:30:24 L1=2.63 run=5 blk=0 avail=7151 (51.9%) swpO=0 conn=2 myRSS=3410 php=10 phpRSS=853 ap=58 tcp=67 topuser=madalice 2026-08-31 11:30:33 L1=3.14 run=4 blk=0 avail=7632 (55.4%) swpO=0 conn=4 myRSS=3410 php=9 phpRSS=343 ap=57 tcp=56 topuser=madalice 2026-08-31 11:30:34 L1=2.97 run=3 blk=0 avail=7647 (55.5%) swpO=0 conn=2 myRSS=3410 php=7 phpRSS=265 ap=57 tcp=54 topuser=madalice 2026-08-31 11:30:43 L1=2.97 run=3 blk=0 avail=7497 (54.4%) swpO=0 conn=4 myRSS=3410 php=9 phpRSS=499 ap=55 tcp=61 topuser=madalice 2026-08-31 11:30:44 L1=2.89 run=2 blk=0 avail=7557 (54.9%) swpO=0 conn=2 myRSS=3410 php=6 phpRSS=338 ap=55 tcp=56 topuser=madalice 2026-08-31 11:30:53 L1=2.82 run=3 blk=0 avail=7723 (56.1%) swpO=0 conn=3 myRSS=3410 php=9 phpRSS=320 ap=49 tcp=46 topuser=madalice 2026-08-31 11:30:54 L1=2.68 run=1 blk=0 avail=7762 (56.3%) swpO=0 conn=2 myRSS=3410 php=6 phpRSS=201 ap=48 tcp=44 topuser=madalice 2026-08-31 11:31:03 L1=2.62 run=11 blk=0 avail=7253 (52.7%) swpO=0 conn=3 myRSS=3410 php=15 phpRSS=955 ap=51 tcp=60 topuser=evolution 2026-08-31 11:31:04 L1=2.89 run=3 blk=0 avail=7240 (52.6%) swpO=0 conn=2 myRSS=3410 php=7 phpRSS=689 ap=59 tcp=59 topuser=madalice 2026-08-31 11:31:14 L1=2.74 run=9 blk=0 avail=7285 (52.9%) swpO=0 conn=3 myRSS=3410 php=16 phpRSS=881 ap=60 tcp=63 topuser=madalice 2026-08-31 11:31:14 L1=3.08 run=6 blk=0 avail=7136 (51.8%) swpO=0 conn=2 myRSS=3410 php=8 phpRSS=826 ap=59 tcp=62 topuser=madalice 2026-08-31 11:31:24 L1=3.00 run=3 blk=0 avail=7238 (52.5%) swpO=1 conn=3 myRSS=3410 php=10 phpRSS=811 ap=55 tcp=50 topuser=madalice 2026-08-31 11:31:24 L1=2.92 run=2 blk=0 avail=7273 (52.8%) swpO=1 conn=2 myRSS=3410 php=6 phpRSS=661 ap=54 tcp=53 topuser=madalice 2026-08-31 11:31:34 L1=2.92 run=2 blk=0 avail=7409 (53.8%) swpO=0 conn=3 myRSS=3410 php=9 phpRSS=642 ap=47 tcp=56 topuser=madalice 2026-08-31 11:31:34 L1=2.93 run=3 blk=0 avail=7507 (54.5%) swpO=0 conn=1 myRSS=3410 php=8 phpRSS=500 ap=47 tcp=57 topuser=madalice 2026-08-31 11:31:44 L1=2.77 run=5 blk=0 avail=7549 (54.8%) swpO=0 conn=3 myRSS=3411 php=10 phpRSS=493 ap=53 tcp=55 topuser=madalice 2026-08-31 11:31:45 L1=2.55 run=3 blk=0 avail=7635 (55.4%) swpO=0 conn=1 myRSS=3411 php=6 phpRSS=281 ap=53 tcp=47 topuser=madalice 2026-08-31 11:31:54 L1=2.67 run=1 blk=0 avail=7546 (54.8%) swpO=0 conn=3 myRSS=3411 php=8 phpRSS=476 ap=48 tcp=53 topuser=madalice 2026-08-31 11:31:55 L1=2.45 run=2 blk=0 avail=7565 (54.9%) swpO=0 conn=1 myRSS=3411 php=6 phpRSS=402 ap=48 tcp=50 topuser=madalice 2026-08-31 11:32:04 L1=2.66 run=3 blk=0 avail=7444 (54.0%) swpO=0 conn=3 myRSS=3411 php=9 phpRSS=604 ap=50 tcp=50 topuser=madalice 2026-08-31 11:32:05 L1=2.53 run=2 blk=0 avail=7413 (53.8%) swpO=0 conn=1 myRSS=3411 php=6 phpRSS=542 ap=50 tcp=48 topuser=madalice 2026-08-31 11:32:14 L1=2.40 run=1 blk=0 avail=7613 (55.3%) swpO=0 conn=3 myRSS=3411 php=8 phpRSS=440 ap=44 tcp=38 topuser=madalice 2026-08-31 11:32:15 L1=2.21 run=6 blk=0 avail=7548 (54.8%) swpO=0 conn=1 myRSS=3411 php=6 phpRSS=460 ap=44 tcp=34 topuser=madalice 2026-08-31 11:32:24 L1=2.03 run=2 blk=0 avail=7417 (53.8%) swpO=0 conn=3 myRSS=3411 php=9 phpRSS=672 ap=41 tcp=46 topuser=madalice 2026-08-31 11:32:25 L1=2.19 run=5 blk=0 avail=7440 (54.0%) swpO=0 conn=1 myRSS=3411 php=8 phpRSS=614 ap=41 tcp=45 topuser=madalice 2026-08-31 11:32:34 L1=2.09 run=5 blk=0 avail=7352 (53.4%) swpO=0 conn=3 myRSS=3411 php=8 phpRSS=681 ap=44 tcp=43 topuser=madalice 2026-08-31 11:32:35 L1=2.01 run=5 blk=0 avail=7404 (53.7%) swpO=2 conn=1 myRSS=3411 php=10 phpRSS=719 ap=44 tcp=46 topuser=madalice 2026-08-31 11:32:44 L1=1.85 run=3 blk=0 avail=7412 (53.8%) swpO=2 conn=3 myRSS=3411 php=7 phpRSS=638 ap=43 tcp=53 topuser=madalice 2026-08-31 11:32:45 L1=2.02 run=3 blk=0 avail=7425 (53.9%) swpO=0 conn=1 myRSS=3411 php=7 phpRSS=630 ap=43 tcp=50 topuser=madalice 2026-08-31 11:32:54 L1=2.18 run=17 blk=0 avail=6158 (44.7%) swpO=0 conn=15 myRSS=3411 php=17 phpRSS=2162 ap=45 tcp=62 topuser=madalice