INCIDENT 2026-09-02 06:28:20 trigger: php_rss=1566MB ================================================================== load: 1.20 1.26 1.36 3/642 1509512 ncpu:10 mem_avail: 6457MB/13777MB (46.9%) swap_used:2311MB swapout:0/s blocked(D):0 running:3 iowait:0.0% steal:0.0% php: 14 procs / 1566MB heaviest user: madalice (10 procs, 1149MB) apache: 21 procs tcp_estab: 39 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3307 madalice 10 1157 root 244 1057 corpkicks 2 390 nobody 20 379 mailman 20 355 cpanellogin 1 236 netdata 7 205 dovenull 6 67 wp-toolkit 3 59 infinium 3 42 mailnull 4 32 lowrange 2 29 kurri 2 29 dovecot 3 28 evolution 7 24 zabbix 1 18 vinesit 1 15 candyfabcom 1 14 named 1 12 --- php workers by user --- USER PROCS RSS_MB madalice 10 1159 corpkicks 2 392 root 1 25 evolution 1 8 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4534 MB Active(file): 4065 MB Inactive(file): 753 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 479 MB CommitLimit: 10984 MB Committed_AS: 8261 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 1-04:05:52 4736 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 3387036 10.3 Ssl 5-04:09:12 /usr/sbin/mariadbd 1508612 3929444 madalice 248752 3.3 S 01:20 php-fpm: pool madalice_com_au 1509479 1508649 corpkicks 244988 56.0 S 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 704828 1353308 cpanellogin 242008 0.1 S 03:52:26 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 706070 655564 root 189516 0.0 S 03:50:22 spamd child 508924 1 netdata 184068 2.0 Ssl 5-04:08:41 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 706071 655564 root 181648 0.0 S 03:50:22 spamd child 655564 1 root 174396 0.0 Ss 04:04:58 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1509482 1508367 corpkicks 167020 67.0 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1459487 3929444 madalice 161528 11.2 S 13:33 php-fpm: pool madalice_com_au 1508610 3929444 madalice 158828 4.7 S 01:20 php-fpm: pool madalice_com_au 1508606 3929444 madalice 144708 4.7 S 01:20 php-fpm: pool madalice_com_au 1474876 3929444 madalice 125748 11.6 S 11:03 php-fpm: pool madalice_com_au 1508608 3929444 madalice 107388 6.2 S 01:20 php-fpm: pool madalice_com_au 509640 508992 root 77936 0.0 Sl 5-04:08:36 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1457589 3929444 madalice 72660 11.5 S 16:15 php-fpm: pool madalice_com_au 1508607 3929444 madalice 66724 3.3 S 01:20 php-fpm: pool madalice_com_au 1458274 3929444 madalice 61736 12.0 S 15:28 php-fpm: pool madalice_com_au 509236 509098 root 47852 0.0 Sl 5-04:08:38 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1508613 3929444 madalice 44796 2.0 S 01:19 php-fpm: pool madalice_com_au 1353308 1 root 37668 0.1 Ss 42-03:47:04 cpsrvd (SSL) - waiting for connections 3929420 1 wp-toolkit 37420 0.0 Ss 1-04:05:43 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 654927 1 root 33220 0.0 Ss 04:05:29 lfd - sleeping 1469 1 root 33180 0.1 Ss 64-20:18:33 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3929444 1 root 26140 0.0 Ss 1-04:05:43 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1463 1 root 24008 0.0 Ss 64-20:18:33 tailwatchd 1492926 506832 nobody 23628 0.0 S 04:06 /usr/sbin/httpd -k start 1508367 506832 nobody 22504 0.0 S 01:44 /usr/sbin/httpd -k start 1508398 506832 nobody 22460 0.0 S 01:42 /usr/sbin/httpd -k start 1508647 506832 nobody 22056 0.0 S 01:17 /usr/sbin/httpd -k start 1509026 506832 nobody 21824 0.0 S 00:42 /usr/sbin/httpd -k start 1508661 506832 nobody 21812 0.0 S 01:14 /usr/sbin/httpd -k start 1508642 506832 nobody 21648 0.0 S 01:18 /usr/sbin/httpd -k start 1508528 506832 nobody 21544 0.0 S 01:28 /usr/sbin/httpd -k start 1508657 506832 nobody 21236 0.0 S 01:15 /usr/sbin/httpd -k start 1508646 506832 nobody 21148 0.1 S 01:17 /usr/sbin/httpd -k start 1508649 506832 nobody 20996 0.0 S 01:17 /usr/sbin/httpd -k start 3929564 1 wp-toolkit 20888 0.0 Ss 1-04:05:42 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1491619 506832 nobody 20620 0.0 S 06:27 /usr/sbin/httpd -k start 1508991 506832 nobody 20500 0.0 S 00:43 /usr/sbin/httpd -k start 1508648 506832 nobody 19720 0.1 S 01:17 /usr/sbin/httpd -k start 1508830 506832 nobody 19436 0.0 S 00:55 /usr/sbin/httpd -k start 654684 654679 mailman 19380 0.0 S 04:05:38 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:1:2 -s 654690 654679 mailman 19368 0.0 S 04:05:38 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s 654699 654679 mailman 19348 0.0 S 04:05:38 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s 654685 654679 mailman 19328 0.0 S 04:05:38 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s 1508662 506832 nobody 19264 0.0 S 01:14 /usr/sbin/httpd -k start 1508643 506832 nobody 19252 0.1 S 01:18 /usr/sbin/httpd -k start 483898 1 zabbix 19244 0.2 Ssl 5-04:09:55 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 654689 654679 mailman 19240 0.0 S 04:05:38 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s 654693 654679 mailman 19216 0.0 S 04:05:38 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:2:8 -s 654687 654679 mailman 19176 0.0 S 04:05:38 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:1:4 -s 1508614 506832 nobody 19172 0.2 S 01:19 /usr/sbin/httpd -k start 654692 654679 mailman 19092 0.0 S 04:05:38 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:1:8 -s 654694 654679 mailman 19036 0.0 S 04:05:38 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:3:8 -s 654686 654679 mailman 19032 0.0 S 04:05:38 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:4 -s 654700 654679 mailman 19032 0.0 S 04:05:38 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=RetryRunner:0:1 -s 654698 654679 mailman 19016 0.0 S 04:05:38 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:7:8 -s 654691 654679 mailman 18960 0.0 S 04:05:38 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:8 -s 654696 654679 mailman 18948 0.0 S 04:05:38 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:5:8 -s --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 15742606 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 148 madalice/madalice.com.au-ssl_log 137 evolution/app.evolutionerp.com.au-ssl_log 109 evolution/portal.evolutionerp.com.au-ssl_log 96 customc/customcentral.com.au-ssl_log 91 alison/alisonarts.com.au-ssl_log 75 aaa/aaadownunder.com.au-ssl_log 8 corpkicks/corporatekicks.com.au-ssl_log 5 evolution/evolutionerp.com.au-ssl_log 1 (total vhosts taking traffic: 9) --- top client IPs across all vhosts (last 3 min) --- 117 149.88.19.85 109 40.115.94.245 104 203.54.180.238 89 35.198.17.130 75 182.239.240.254 74 158.23.18.78 59 103.104.164.114 15 98.92.67.18 5 118.127.40.55 3 52.167.144.189 3 40.77.167.1 2 91.92.243.234 2 114.119.130.40 2 103.104.165.99 1 91.108.182.164 --- top request paths across all vhosts (last 3 min) --- 95 GET /api/getItem/LWFBW2001KG 39 GET /heartbeat.php 35 GET /app/ajax.php 34 POST /functions.php 33 GET /index.php 25 GET /factory_session_checker.php 20 POST /mfreqsave.php 13 POST /app/ajax/selectFilterSingle.php 13 GET /factory_session_processed_qty.php 13 GET /factory_session_joiner.php 9 POST /app/ajax/selectFilter.php 6 POST /purchaseaddsave.php 5 POST /wp-cron.php 5 GET /store/af1-richmond9/ 4 POST /app/ajax.php 2 POST /wp-login.php 2 GET /simple.php 2 GET / 1 GET /xx.php 1 GET /xmini4.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 35 GET /app/ajax.php 34 POST /functions.php 27 GET /index.php 20 POST /mfreqsave.php 13 POST /app/ajax/selectFilterSingle.php 9 POST /app/ajax/selectFilter.php 6 POST /purchaseaddsave.php 4 POST /app/ajax.php -- last 10 requests -- 103.104.164.114 - - [02/Sep/2026:06:27:51 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=billadd&billid=192" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe 182.239.240.254 - - [02/Sep/2026:06:27:52 +1000] "GET /index.php?page=mfshoporderdetail&id=5557 HTTP/1.1" 200 26967 "https://my.evolutionerp.com.au/index.php?page=mfshoporders" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 182.239.240.254 - - [02/Sep/2026:06:27:53 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dmfshoporderdetail%26id%3D5557&call=getUserSetting&caller=ajaxSubmitLocal&seq=19913756096 HTTP/1.1" 200 105 "https://my.evolutio 182.239.240.254 - - [02/Sep/2026:06:27:54 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=5557" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 182.239.240.254 - - [02/Sep/2026:06:27:54 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 11607 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=5557" "Mozilla/5.0 (Windows NT 10.0; Win64; 182.239.240.254 - - [02/Sep/2026:06:27:55 +1000] "POST /app/ajax/selectFilter.php?call=filterinv&filter=GHR HTTP/1.1" 200 819 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=5557" "Mozilla/5.0 (Window 103.104.164.114 - - [02/Sep/2026:06:28:03 +1000] "GET /index.php?page=purchaseadd&purchaseid=70153 HTTP/1.1" 200 75214 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=70153" "Mozilla/5.0 (Windows NT 103.104.164.114 - - [02/Sep/2026:06:28:04 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=19678934421 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/ind 103.104.164.114 - - [02/Sep/2026:06:28:04 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=18739296658 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/inde 103.104.164.114 - - [02/Sep/2026:06:28:04 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Dpurchaseadd%26purchaseid%3D70153%23&call=getUserSetting&caller=ajaxSubmitLocal&seq=17304305036 HTTP/1.1" 200 == madalice/madalice.com.au-ssl_log == -- top paths -- 5 GET /store/af1-richmond9/ 1 GET /www.zip 1 GET /www.tar.gz 1 GET /www.tar 1 GET /wp-includes/sodium_compat/LICENSE 1 GET /wp-includes/sodium_compat/autoload-php7.php 1 GET /wp-includes/sodium_compat/ 1 GET /wp-includes/sitemaps/providers/wp-includes/sitemaps/ 1 GET /wp-includes/sitemaps/providers//wp-includes/sitemaps/ 1 GET /wp-includes/sitemaps/providers/class-wp-sitemaps-users.php 1 GET /wp-includes/sitemaps/providers/class-wp-sitemaps-taxonomies.php 1 GET /wp-includes/sitemaps/providers/class-wp-sitemaps-posts.php -- last 10 requests -- 149.88.19.85 - - [02/Sep/2026:06:27:55 +1000] "GET /wp-includes/sitemaps/ HTTP/1.1" 200 436 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:27:56 +1000] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 200 360 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:27:56 +1000] "GET /wp-includes/sitemaps/providers//wp-includes/sitemaps/ HTTP/1.1" 301 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:27:58 +1000] "GET /wp-includes/sitemaps/providers/wp-includes/sitemaps/ HTTP/1.1" 404 36641 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:28:00 +1000] "GET /wp-includes/sitemaps/providers/class-wp-sitemaps-posts.php HTTP/1.1" 500 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:28:01 +1000] "GET /wp-includes/sitemaps/providers/class-wp-sitemaps-taxonomies.php HTTP/1.1" 500 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:28:02 +1000] "GET /wp-includes/sitemaps/providers/class-wp-sitemaps-users.php HTTP/1.1" 500 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:28:03 +1000] "GET /wp-includes/sodium_compat/ HTTP/1.1" 200 422 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:28:03 +1000] "GET /wp-includes/sodium_compat/LICENSE HTTP/1.1" 200 528 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:28:03 +1000] "GET /wp-includes/sodium_compat/autoload-php7.php HTTP/1.1" 200 1 "-" "-" == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 95 GET /api/getItem/LWFBW2001KG 1 GET /api/getItem/H8040 1 GET /api/getItem/H8032D 1 GET /api/getItem/H8025D 1 GET /api/getItem/H5032 1 GET /api/getItem/H5025D 1 GET /api/getItem/H5020 1 GET /api/getItem/H4032 1 GET /api/getItem/H4025 1 GET /api/getItem/H4020 1 GET /api/getItem/H3235 1 GET /api/getItem/H3220 -- last 10 requests -- 40.115.94.245 - - [02/Sep/2026:06:27:36 +1000] "GET /api/getItem/H4020 HTTP/1.1" 404 107 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:06:27:37 +1000] "GET /api/getItem/H5020 HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:06:27:37 +1000] "GET /api/getItem/H4025 HTTP/1.1" 200 1497 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:06:27:38 +1000] "GET /api/getItem/H4032 HTTP/1.1" 200 1478 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:06:27:38 +1000] "GET /api/getItem/H5032 HTTP/1.1" 200 1478 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:06:27:38 +1000] "GET /api/getItem/H5025D HTTP/1.1" 200 1505 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:06:27:39 +1000] "GET /api/getItem/H8025D HTTP/1.1" 200 1477 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:06:27:39 +1000] "GET /api/getItem/H8032D HTTP/1.1" 200 1514 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:06:27:39 +1000] "GET /api/getItem/H8040 HTTP/1.1" 200 1509 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:06:27:40 +1000] "GET /api/getItem/H10025 HTTP/1.1" 404 108 "-" "RestSharp/106.13.0.0" --- last 30 samples (run-up to this incident) --- 2026-09-02 06:25:57 L1=1.25 run=5 blk=0 avail=6927 (50.3%) swpO=0 conn=4 myRSS=3307 php=8 phpRSS=876 ap=28 tcp=41 topuser=madalice 2026-09-02 06:25:59 L1=1.71 run=3 blk=0 avail=7036 (51.1%) swpO=0 conn=3 myRSS=3307 php=7 phpRSS=758 ap=27 tcp=34 topuser=madalice 2026-09-02 06:26:07 L1=1.74 run=3 blk=0 avail=7049 (51.2%) swpO=0 conn=4 myRSS=3307 php=6 phpRSS=671 ap=31 tcp=41 topuser=madalice 2026-09-02 06:26:09 L1=1.68 run=1 blk=0 avail=7055 (51.2%) swpO=0 conn=3 myRSS=3307 php=6 phpRSS=671 ap=31 tcp=33 topuser=madalice 2026-09-02 06:26:17 L1=1.54 run=5 blk=0 avail=6965 (50.6%) swpO=0 conn=4 myRSS=3307 php=7 phpRSS=669 ap=25 tcp=37 topuser=madalice 2026-09-02 06:26:19 L1=1.42 run=3 blk=0 avail=7041 (51.1%) swpO=0 conn=2 myRSS=3307 php=6 phpRSS=731 ap=24 tcp=34 topuser=madalice 2026-09-02 06:26:27 L1=1.39 run=2 blk=0 avail=7070 (51.3%) swpO=0 conn=4 myRSS=3307 php=7 phpRSS=736 ap=23 tcp=36 topuser=madalice 2026-09-02 06:26:29 L1=1.43 run=2 blk=0 avail=7105 (51.6%) swpO=0 conn=2 myRSS=3307 php=6 phpRSS=671 ap=23 tcp=35 topuser=madalice 2026-09-02 06:26:37 L1=1.40 run=3 blk=0 avail=7067 (51.3%) swpO=0 conn=4 myRSS=3307 php=7 phpRSS=789 ap=24 tcp=39 topuser=madalice 2026-09-02 06:26:39 L1=1.37 run=2 blk=0 avail=7113 (51.6%) swpO=0 conn=2 myRSS=3307 php=7 phpRSS=719 ap=25 tcp=38 topuser=madalice 2026-09-02 06:26:47 L1=1.34 run=5 blk=0 avail=7019 (51.0%) swpO=0 conn=4 myRSS=3307 php=8 phpRSS=847 ap=24 tcp=37 topuser=madalice 2026-09-02 06:26:49 L1=1.47 run=2 blk=0 avail=7132 (51.8%) swpO=0 conn=2 myRSS=3307 php=7 phpRSS=707 ap=24 tcp=32 topuser=madalice 2026-09-02 06:26:57 L1=1.59 run=3 blk=0 avail=7073 (51.3%) swpO=0 conn=4 myRSS=3307 php=8 phpRSS=796 ap=24 tcp=40 topuser=madalice 2026-09-02 06:26:59 L1=1.71 run=2 blk=0 avail=7334 (53.2%) swpO=0 conn=2 myRSS=3307 php=7 phpRSS=499 ap=24 tcp=37 topuser=madalice 2026-09-02 06:27:07 L1=1.65 run=3 blk=0 avail=6445 (46.8%) swpO=0 conn=4 myRSS=3307 php=14 phpRSS=1479 ap=34 tcp=49 topuser=madalice 2026-09-02 06:27:09 L1=1.52 run=3 blk=0 avail=6699 (48.6%) swpO=0 conn=2 myRSS=3307 php=14 phpRSS=1240 ap=33 tcp=42 topuser=madalice 2026-09-02 06:27:17 L1=1.40 run=2 blk=0 avail=6883 (50.0%) swpO=0 conn=4 myRSS=3307 php=14 phpRSS=1114 ap=25 tcp=34 topuser=madalice 2026-09-02 06:27:19 L1=1.28 run=3 blk=0 avail=6883 (50.0%) swpO=0 conn=3 myRSS=3307 php=13 phpRSS=1082 ap=24 tcp=38 topuser=madalice 2026-09-02 06:27:27 L1=1.18 run=1 blk=0 avail=7080 (51.4%) swpO=0 conn=4 myRSS=3307 php=12 phpRSS=854 ap=25 tcp=39 topuser=madalice 2026-09-02 06:27:30 L1=1.25 run=1 blk=0 avail=7143 (51.8%) swpO=0 conn=3 myRSS=3307 php=12 phpRSS=792 ap=25 tcp=32 topuser=madalice 2026-09-02 06:27:37 L1=1.23 run=2 blk=0 avail=7254 (52.7%) swpO=0 conn=4 myRSS=3307 php=14 phpRSS=753 ap=25 tcp=40 topuser=madalice 2026-09-02 06:27:40 L1=1.13 run=1 blk=0 avail=7265 (52.7%) swpO=0 conn=3 myRSS=3307 php=12 phpRSS=666 ap=27 tcp=40 topuser=madalice 2026-09-02 06:27:47 L1=1.04 run=1 blk=0 avail=7101 (51.5%) swpO=0 conn=4 myRSS=3307 php=12 phpRSS=843 ap=25 tcp=39 topuser=madalice 2026-09-02 06:27:50 L1=0.95 run=2 blk=0 avail=6973 (50.6%) swpO=0 conn=3 myRSS=3307 php=13 phpRSS=996 ap=25 tcp=41 topuser=madalice 2026-09-02 06:27:57 L1=0.88 run=3 blk=0 avail=6981 (50.7%) swpO=0 conn=1 myRSS=3307 php=12 phpRSS=949 ap=25 tcp=40 topuser=madalice 2026-09-02 06:28:00 L1=0.97 run=2 blk=0 avail=6885 (50.0%) swpO=0 conn=3 myRSS=3307 php=12 phpRSS=1045 ap=25 tcp=38 topuser=madalice 2026-09-02 06:28:08 L1=1.05 run=1 blk=0 avail=6857 (49.8%) swpO=0 conn=1 myRSS=3307 php=13 phpRSS=1101 ap=23 tcp=40 topuser=madalice 2026-09-02 06:28:10 L1=1.05 run=1 blk=0 avail=6952 (50.5%) swpO=0 conn=3 myRSS=3307 php=12 phpRSS=992 ap=23 tcp=35 topuser=madalice 2026-09-02 06:28:18 L1=1.04 run=3 blk=0 avail=7013 (50.9%) swpO=0 conn=1 myRSS=3307 php=12 phpRSS=944 ap=21 tcp=37 topuser=madalice 2026-09-02 06:28:20 L1=1.20 run=3 blk=0 avail=6457 (46.9%) swpO=0 conn=4 myRSS=3307 php=14 phpRSS=1566 ap=21 tcp=39 topuser=madalice