INCIDENT 2026-09-02 06:38:37 trigger: php_rss=1572MB ================================================================== load: 1.86 1.61 1.46 4/642 1547941 ncpu:10 mem_avail: 6415MB/13777MB (46.6%) swap_used:2304MB swapout:0/s blocked(D):0 running:6 iowait:0.1% steal:0.0% php: 13 procs / 1572MB heaviest user: madalice (10 procs, 1426MB) apache: 30 procs tcp_estab: 45 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3310 madalice 10 1430 root 242 966 nobody 29 553 mailman 20 355 cpanellogin 1 237 netdata 7 204 otterfencing 1 117 dovenull 6 67 wp-toolkit 3 59 infinium 3 42 lowrange 2 29 kurri 2 29 dovecot 3 28 candyfabcom 2 28 evolution 7 24 zabbix 1 18 mailnull 2 17 vinesit 1 14 named 1 12 --- php workers by user --- USER PROCS RSS_MB madalice 10 1433 otterfencing 1 118 root 1 25 evolution 1 8 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4698 MB Active(file): 4112 MB Inactive(file): 822 MB Dirty: 2 MB Writeback: 0 MB SReclaimable: 482 MB CommitLimit: 10984 MB Committed_AS: 8418 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 1-04:16:08 4736 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 3389608 10.3 Ssl 5-04:19:29 /usr/sbin/mariadbd 704828 1353308 cpanellogin 242700 0.1 S 04:02:43 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 1508606 3929444 madalice 237760 5.0 R 11:37 php-fpm: pool madalice_com_au 706070 655564 root 189516 0.0 S 04:00:39 spamd child 508924 1 netdata 183900 2.0 Ssl 5-04:18:58 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 706071 655564 root 181648 0.0 S 04:00:39 spamd child 655564 1 root 174396 0.0 Ss 04:15:15 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1474876 3929444 madalice 167152 8.6 S 21:20 php-fpm: pool madalice_com_au 1508613 3929444 madalice 161384 5.4 S 11:36 php-fpm: pool madalice_com_au 1508612 3929444 madalice 161084 5.3 S 11:37 php-fpm: pool madalice_com_au 1525403 3929444 madalice 160996 6.1 S 07:18 php-fpm: pool madalice_com_au 1510435 3929444 madalice 160860 6.2 S 09:05 php-fpm: pool madalice_com_au 1546591 3929444 madalice 160804 4.3 S 01:29 php-fpm: pool madalice_com_au 1547907 1545623 otterfencing 125464 49.0 R 00:02 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1508610 3929444 madalice 103268 4.9 S 11:37 php-fpm: pool madalice_com_au 1508608 3929444 madalice 97172 5.3 S 11:37 php-fpm: pool madalice_com_au 1508607 3929444 madalice 67816 4.5 S 11:37 php-fpm: pool madalice_com_au 509236 509098 root 47852 0.0 Sl 5-04:18:55 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 37668 0.1 Ss 42-03:57:21 cpsrvd (SSL) - waiting for connections 3929420 1 wp-toolkit 37420 0.0 Ss 1-04:16:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 654927 1 root 33220 0.0 Ss 04:15:46 lfd - sleeping 1469 1 root 33180 0.1 Ss 64-20:28:50 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3929444 1 root 26140 0.0 Ss 1-04:16:00 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1463 1 root 24008 0.0 Ss 64-20:28:50 tailwatchd 1529768 506832 nobody 23436 0.1 S 04:02 /usr/sbin/httpd -k start 1544154 506832 nobody 23252 0.0 S 03:21 /usr/sbin/httpd -k start 1525164 506832 nobody 23204 0.1 S 07:39 /usr/sbin/httpd -k start 1545256 506832 nobody 22856 0.0 S 02:47 /usr/sbin/httpd -k start 1546845 506832 nobody 22804 0.1 S 01:11 /usr/sbin/httpd -k start 1546871 506832 nobody 22636 0.1 S 01:09 /usr/sbin/httpd -k start 1545623 506832 nobody 22332 0.0 S 02:27 /usr/sbin/httpd -k start 1547250 506832 nobody 22056 0.1 S 00:57 /usr/sbin/httpd -k start 1547303 506832 nobody 21476 0.0 S 00:55 /usr/sbin/httpd -k start 1546535 506832 nobody 21268 0.1 S 01:33 /usr/sbin/httpd -k start 1546335 506832 nobody 21256 0.0 S 01:51 /usr/sbin/httpd -k start 1545585 506832 nobody 21220 0.0 S 02:29 /usr/sbin/httpd -k start 1547233 506832 nobody 21192 0.0 S 00:58 /usr/sbin/httpd -k start 1546868 506832 nobody 21136 0.1 S 01:09 /usr/sbin/httpd -k start 1546856 506832 nobody 21008 0.1 S 01:10 /usr/sbin/httpd -k start 3929564 1 wp-toolkit 20888 0.0 Ss 1-04:15:59 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1546344 506832 nobody 20748 0.1 S 01:50 /usr/sbin/httpd -k start 1547248 506832 nobody 20720 0.0 S 00:57 /usr/sbin/httpd -k start 1546870 506832 nobody 20116 0.0 S 01:09 /usr/sbin/httpd -k start 1546869 506832 nobody 20084 0.0 S 01:09 /usr/sbin/httpd -k start 1546855 506832 nobody 19968 0.0 S 01:10 /usr/sbin/httpd -k start 1547725 506832 nobody 19496 0.1 S 00:17 /usr/sbin/httpd -k start 654684 654679 mailman 19380 0.0 S 04:15:55 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:1:2 -s 654690 654679 mailman 19368 0.0 S 04:15:55 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s 654699 654679 mailman 19348 0.0 S 04:15:55 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s 483898 1 zabbix 19336 0.2 Ssl 5-04:20:12 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 654685 654679 mailman 19320 0.0 S 04:15:55 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s 654689 654679 mailman 19236 0.0 S 04:15:55 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s 654693 654679 mailman 19200 0.0 S 04:15:55 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:2:8 -s 654687 654679 mailman 19176 0.0 S 04:15:55 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:1:4 -s 1547232 506832 nobody 19148 0.0 S 00:58 /usr/sbin/httpd -k start 654692 654679 mailman 19092 0.0 S 04:15:55 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:1:8 -s 654694 654679 mailman 19036 0.0 S 04:15:55 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:3:8 -s 654686 654679 mailman 19032 0.0 S 04:15:55 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:4 -s 654698 654679 mailman 19016 0.0 S 04:15:55 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:7:8 -s 654691 654679 mailman 18960 0.0 S 04:15:55 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:8 -s --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 15767366 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 247 customc/customcentral.com.au-ssl_log 178 madalice/madalice.com.au-ssl_log 165 evolution/release.evolutionerp.com.au 130 evolution/app.evolutionerp.com.au-ssl_log 109 otterfencing/otterfencing.com.au-ssl_log 59 evolution/portal.evolutionerp.com.au-ssl_log 46 candyfabcom/candyfab.com.au-ssl_log 42 speedlin/speedlinefencing.com.au-ssl_log 9 tubesupplies/tubesupplies.com.au-ssl_log 8 (total vhosts taking traffic: 10) --- top client IPs across all vhosts (last 3 min) --- 254 20.151.10.161 176 4.205.62.107 153 149.88.19.85 123 203.54.180.238 109 40.115.94.245 55 216.73.216.220 41 20.220.211.172 23 103.104.164.114 10 103.104.165.99 5 118.127.40.55 4 175.36.227.212 3 52.26.129.107 3 52.167.144.173 3 114.119.146.16 3 114.119.143.14 --- top request paths across all vhosts (last 3 min) --- 61 POST /functions.php 39 GET /heartbeat.php 29 GET /index.php 21 GET / 14 GET /app/ajax.php 12 POST /plugins/csvexporter/plugin.php 6 GET /admin.php 5 POST /wp-cron.php 5 POST /inveditsave.php 5 GET /store/af1-richmond9/ 5 GET /robots.txt 4 GET /wp-content/themes/index.php 4 GET /wp-content/plugins/hellopress/wp_filemanager.php 4 GET /this_is_a_new_hello_world.php 4 GET /ms-edit.php 3 POST /wp-login.php 3 GET /wp-login.php 3 GET /w.php 3 GET /wp-blog.php 3 GET /wp-admin/css/colors/sunrise/ --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 61 POST /functions.php 22 GET /index.php 14 GET /app/ajax.php 12 POST /plugins/csvexporter/plugin.php 5 POST /inveditsave.php 3 GET /admin.php 2 POST /stocktakesave.php 2 POST /itemModify.php 2 GET /wp-content/themes/index.php 2 GET /av.php 1 POST /reports/invstckmovementSave.php 1 POST /jobeditsave.php -- last 10 requests -- 203.54.180.238 - - [02/Sep/2026:06:38:30 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=mfstatus" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 203.54.180.238 - - [02/Sep/2026:06:38:30 +1000] "POST /stocktakesave.php?call=getitems&sortby=code HTTP/1.1" 200 9915 "https://my.evolutionerp.com.au/index.php?page=stocktakeedit&id=250" "Mozilla/5.0 (Windows NT 10.0; Wi 20.151.10.161 - - [02/Sep/2026:06:38:30 +1000] "GET /wp-admin/maint/index.php HTTP/1.1" 404 - "-" "-" 20.151.10.161 - - [02/Sep/2026:06:38:30 +1000] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 404 - "-" "-" 20.151.10.161 - - [02/Sep/2026:06:38:31 +1000] "GET /qazwsx.php HTTP/1.1" 404 - "-" "-" 20.151.10.161 - - [02/Sep/2026:06:38:31 +1000] "GET /cae2.2.php HTTP/1.1" 404 - "-" "-" 203.54.180.238 - - [02/Sep/2026:06:38:31 +1000] "POST /stocktakesave.php?call=getitems&sortby=code HTTP/1.1" 200 13090 "https://my.evolutionerp.com.au/index.php?page=stocktakeedit&id=250" "Mozilla/5.0 (Windows NT 10.0; W 20.151.10.161 - - [02/Sep/2026:06:38:32 +1000] "GET /b8.php HTTP/1.1" 404 - "-" "-" 103.104.164.114 - - [02/Sep/2026:06:38:32 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 20.151.10.161 - - [02/Sep/2026:06:38:32 +1000] "GET /xs.php HTTP/1.1" 404 - "-" "-" == customc/customcentral.com.au-ssl_log == -- top paths -- 2 GET /ms-edit.php 2 GET /koiy.php 2 GET /doc.php 2 GET / 1 GET /zz.php 1 GET /zaza.php 1 GET /xza.php 1 GET /xve22.php 1 GET /xqq.php 1 GET /xp.php 1 GET /xmy.php 1 GET /xin1.php -- last 10 requests -- 4.205.62.107 - - [02/Sep/2026:06:37:29 +1000] "GET /myfile.php HTTP/1.1" 401 36 "-" "-" 4.205.62.107 - - [02/Sep/2026:06:37:29 +1000] "GET /fff.php HTTP/1.1" 401 36 "-" "-" 4.205.62.107 - - [02/Sep/2026:06:37:30 +1000] "GET /bootstrap.php HTTP/1.1" 401 36 "-" "-" 4.205.62.107 - - [02/Sep/2026:06:37:30 +1000] "GET /server_info.php HTTP/1.1" 401 36 "-" "-" 4.205.62.107 - - [02/Sep/2026:06:37:31 +1000] "GET /X57.php HTTP/1.1" 401 36 "-" "-" 4.205.62.107 - - [02/Sep/2026:06:37:31 +1000] "GET /temp.php HTTP/1.1" 401 36 "-" "-" 4.205.62.107 - - [02/Sep/2026:06:37:32 +1000] "GET /aws.php HTTP/1.1" 401 36 "-" "-" 4.205.62.107 - - [02/Sep/2026:06:37:32 +1000] "GET /services.php HTTP/1.1" 401 36 "-" "-" 4.205.62.107 - - [02/Sep/2026:06:37:33 +1000] "GET /radio.php HTTP/1.1" 401 36 "-" "-" 4.205.62.107 - - [02/Sep/2026:06:37:33 +1000] "GET /fleen.php HTTP/1.1" 401 36 "-" "-" == madalice/madalice.com.au-ssl_log == -- top paths -- 5 GET /store/af1-richmond9/ 3 GET / 2 GET /wp-login.php 1 GET /wp-content/plugins/woocommerce/assets/client/blocks/@woocommerce/stores/wp-content/plugins/woocommerce/assets/client/blocks/@woocommerce/ 1 GET /wp-content/plugins/woocommerce/assets/client/blocks/@woocommerce/stores/woocommerce/wp-content/plugins/woocommerce/assets/client/blocks/@woocommerce/stores/ 1 GET /wp-content/plugins/woocommerce/assets/client/blocks/@woocommerce/stores/woocommerce//wp-content/plugins/woocommerce/assets/client/blocks/@woocommerce/stores/ 1 GET /wp-content/plugins/woocommerce/assets/client/blocks/@woocommerce/stores/woocommerce/ 1 GET /wp-content/plugins/woocommerce/assets/client/blocks/customer-account.asset.php 1 GET /wp-content/plugins/woocommerce/assets/client/blocks/customer-account/ 1 GET /wp-content/plugins/woocommerce/assets/client/blocks/coupon-code/wp-content/plugins/woocommerce/assets/client/blocks/ 1 GET /wp-content/plugins/woocommerce/assets/client/blocks/coupon-code//wp-content/plugins/woocommerce/assets/client/blocks/ 1 GET /wp-content/plugins/woocommerce/assets/client/blocks/coupon-code-style.asset.php -- last 10 requests -- 40.88.21.235 - - [02/Sep/2026:06:38:18 +1000] "GET / HTTP/1.1" 200 42733 "http://madalice.com.au" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 149.88.19.85 - - [02/Sep/2026:06:38:19 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/coming-soon/wp-content/plugins/woocommerce/assets/client/blocks/ HTTP/1.1" 404 36645 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:38:20 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/coupon-code-style.asset.php HTTP/1.1" 200 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:38:21 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/coupon-code.asset.php HTTP/1.1" 200 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:38:21 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/coupon-code/ HTTP/1.1" 200 324 "-" "-" 114.119.143.104 - - [02/Sep/2026:06:38:21 +1000] "GET /store/af1-richmond9/?wcpr_image=1&rating=5&wcpr_rating=1 HTTP/1.1" 200 50176 "https://madalice.com.au/store/af1-richmond9/?wcpr_image=1&rating=5&wcpr_rating=1" "Mozi 149.88.19.85 - - [02/Sep/2026:06:38:22 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/coupon-code//wp-content/plugins/woocommerce/assets/client/blocks/ HTTP/1.1" 301 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:38:23 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/coupon-code/wp-content/plugins/woocommerce/assets/client/blocks/ HTTP/1.1" 404 36650 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:38:25 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/customer-account.asset.php HTTP/1.1" 200 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:38:25 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/customer-account/ HTTP/1.1" 200 323 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-09-02 06:36:10 L1=1.30 run=1 blk=0 avail=6640 (48.2%) swpO=0 conn=2 myRSS=3308 php=12 phpRSS=1371 ap=23 tcp=38 topuser=madalice 2026-09-02 06:36:15 L1=1.20 run=3 blk=0 avail=6644 (48.2%) swpO=2 conn=4 myRSS=3308 php=14 phpRSS=1396 ap=27 tcp=37 topuser=madalice 2026-09-02 06:36:20 L1=1.26 run=1 blk=0 avail=6691 (48.6%) swpO=2 conn=2 myRSS=3308 php=12 phpRSS=1292 ap=27 tcp=40 topuser=madalice 2026-09-02 06:36:25 L1=1.56 run=6 blk=0 avail=6180 (44.9%) swpO=0 conn=8 myRSS=3308 php=20 phpRSS=2005 ap=31 tcp=49 topuser=madalice 2026-09-02 06:36:30 L1=1.84 run=3 blk=0 avail=6508 (47.2%) swpO=0 conn=2 myRSS=3308 php=13 phpRSS=1422 ap=37 tcp=45 topuser=madalice 2026-09-02 06:36:35 L1=1.69 run=3 blk=0 avail=6482 (47.0%) swpO=0 conn=4 myRSS=3308 php=14 phpRSS=1506 ap=33 tcp=41 topuser=madalice 2026-09-02 06:36:40 L1=1.72 run=5 blk=0 avail=6350 (46.1%) swpO=0 conn=4 myRSS=3308 php=14 phpRSS=1589 ap=31 tcp=42 topuser=madalice 2026-09-02 06:36:46 L1=1.74 run=4 blk=0 avail=6299 (45.7%) swpO=0 conn=5 myRSS=3309 php=15 phpRSS=1706 ap=32 tcp=50 topuser=madalice 2026-09-02 06:36:50 L1=1.76 run=1 blk=0 avail=6463 (46.9%) swpO=0 conn=4 myRSS=3309 php=12 phpRSS=1418 ap=38 tcp=46 topuser=madalice 2026-09-02 06:36:56 L1=1.78 run=2 blk=0 avail=6541 (47.5%) swpO=0 conn=5 myRSS=3309 php=14 phpRSS=1455 ap=32 tcp=36 topuser=madalice 2026-09-02 06:37:00 L1=1.80 run=5 blk=0 avail=6400 (46.5%) swpO=0 conn=2 myRSS=3309 php=13 phpRSS=1575 ap=29 tcp=38 topuser=madalice 2026-09-02 06:37:06 L1=1.65 run=2 blk=0 avail=6408 (46.5%) swpO=0 conn=3 myRSS=3309 php=14 phpRSS=1592 ap=30 tcp=43 topuser=madalice 2026-09-02 06:37:11 L1=1.60 run=1 blk=0 avail=6695 (48.6%) swpO=0 conn=2 myRSS=3309 php=12 phpRSS=1231 ap=30 tcp=34 topuser=madalice 2026-09-02 06:37:16 L1=1.55 run=8 blk=0 avail=6151 (44.6%) swpO=0 conn=7 myRSS=3309 php=18 phpRSS=1975 ap=27 tcp=48 topuser=madalice 2026-09-02 06:37:21 L1=1.59 run=2 blk=0 avail=6582 (47.8%) swpO=0 conn=2 myRSS=3309 php=13 phpRSS=1377 ap=29 tcp=41 topuser=madalice 2026-09-02 06:37:26 L1=1.62 run=2 blk=0 avail=6643 (48.2%) swpO=0 conn=3 myRSS=3309 php=14 phpRSS=1365 ap=26 tcp=45 topuser=madalice 2026-09-02 06:37:31 L1=1.57 run=2 blk=0 avail=6663 (48.4%) swpO=0 conn=2 myRSS=3309 php=12 phpRSS=1250 ap=33 tcp=39 topuser=madalice 2026-09-02 06:37:36 L1=1.53 run=4 blk=0 avail=6367 (46.2%) swpO=1 conn=3 myRSS=3309 php=15 phpRSS=1662 ap=31 tcp=38 topuser=madalice 2026-09-02 06:37:41 L1=1.80 run=5 blk=0 avail=6383 (46.3%) swpO=1 conn=3 myRSS=3309 php=13 phpRSS=1563 ap=37 tcp=52 topuser=madalice 2026-09-02 06:37:46 L1=2.06 run=3 blk=0 avail=6494 (47.1%) swpO=0 conn=3 myRSS=3309 php=13 phpRSS=1436 ap=40 tcp=48 topuser=madalice 2026-09-02 06:37:51 L1=1.98 run=2 blk=0 avail=6657 (48.3%) swpO=0 conn=3 myRSS=3309 php=12 phpRSS=1245 ap=36 tcp=45 topuser=madalice 2026-09-02 06:37:56 L1=1.82 run=2 blk=0 avail=6719 (48.8%) swpO=0 conn=3 myRSS=3309 php=13 phpRSS=1222 ap=34 tcp=46 topuser=madalice 2026-09-02 06:38:01 L1=1.83 run=3 blk=0 avail=6653 (48.3%) swpO=0 conn=2 myRSS=3309 php=13 phpRSS=1313 ap=32 tcp=38 topuser=madalice 2026-09-02 06:38:07 L1=1.85 run=2 blk=0 avail=6753 (49.0%) swpO=0 conn=3 myRSS=3309 php=13 phpRSS=1206 ap=29 tcp=44 topuser=madalice 2026-09-02 06:38:11 L1=1.86 run=3 blk=0 avail=6650 (48.3%) swpO=0 conn=2 myRSS=3309 php=13 phpRSS=1336 ap=29 tcp=41 topuser=madalice 2026-09-02 06:38:17 L1=1.79 run=4 blk=0 avail=6706 (48.7%) swpO=0 conn=3 myRSS=3309 php=13 phpRSS=1262 ap=30 tcp=43 topuser=madalice 2026-09-02 06:38:21 L1=1.89 run=3 blk=0 avail=6599 (47.9%) swpO=0 conn=2 myRSS=3309 php=14 phpRSS=1394 ap=33 tcp=54 topuser=madalice 2026-09-02 06:38:27 L1=1.74 run=2 blk=0 avail=6492 (47.1%) swpO=0 conn=2 myRSS=3309 php=12 phpRSS=1455 ap=32 tcp=44 topuser=madalice 2026-09-02 06:38:31 L1=1.76 run=2 blk=0 avail=6483 (47.1%) swpO=0 conn=2 myRSS=3309 php=13 phpRSS=1509 ap=29 tcp=42 topuser=madalice 2026-09-02 06:38:37 L1=1.86 run=6 blk=0 avail=6415 (46.6%) swpO=0 conn=3 myRSS=3310 php=13 phpRSS=1572 ap=30 tcp=45 topuser=madalice