INCIDENT 2026-09-02 06:59:29 trigger: php_rss=1524MB ================================================================== load: 2.36 1.62 1.60 2/640 1621131 ncpu:10 mem_avail: 6423MB/13777MB (46.6%) swap_used:2292MB swapout:0/s blocked(D):0 running:2 iowait:0.0% steal:0.0% php: 13 procs / 1524MB heaviest user: madalice (10 procs, 1394MB) apache: 34 procs tcp_estab: 41 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3322 madalice 10 1404 root 243 983 nobody 33 605 mailman 20 354 cpanellogin 1 238 netdata 7 202 evolution 8 122 dovenull 6 67 wp-toolkit 3 59 kurri 2 29 dovecot 3 28 zabbix 1 20 lowrange 1 14 infinium 1 14 corpkicks 1 14 named 1 12 mailnull 1 9 nscd 1 4 cpanelconnecttrack 1 4 --- php workers by user --- USER PROCS RSS_MB madalice 10 1405 evolution 2 106 root 1 25 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4672 MB Active(file): 4149 MB Inactive(file): 817 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 488 MB CommitLimit: 10984 MB Committed_AS: 8382 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 1-04:37:00 4736 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 3402516 10.4 Ssl 5-04:40:20 /usr/sbin/mariadbd 704828 1353308 cpanellogin 244080 0.1 S 04:23:34 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 706070 655564 root 189660 0.0 S 04:21:30 spamd child 706071 655564 root 181648 0.0 S 04:21:30 spamd child 508924 1 netdata 180632 2.0 Ssl 5-04:39:49 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 655564 1 root 174396 0.0 Ss 04:36:06 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1546591 3929444 madalice 164156 5.6 S 22:20 php-fpm: pool madalice_com_au 1508612 3929444 madalice 164080 5.7 S 32:28 php-fpm: pool madalice_com_au 1508606 3929444 madalice 164040 5.6 S 32:28 php-fpm: pool madalice_com_au 1508613 3929444 madalice 162752 5.6 R 32:27 php-fpm: pool madalice_com_au 1508607 3929444 madalice 161604 5.1 S 32:28 php-fpm: pool madalice_com_au 1510435 3929444 madalice 160832 6.3 S 29:56 php-fpm: pool madalice_com_au 1525403 3929444 madalice 160756 6.2 S 28:09 php-fpm: pool madalice_com_au 1566821 3929444 madalice 146472 5.1 S 15:15 php-fpm: pool madalice_com_au 1508610 3929444 madalice 116112 5.2 S 32:28 php-fpm: pool madalice_com_au 1621095 1619191 evolution 100180 0.0 S 00:00 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1508608 3929444 madalice 48440 5.1 S 32:28 php-fpm: pool madalice_com_au 509236 509098 root 47852 0.0 Sl 5-04:39:46 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 37720 0.1 Ss 42-04:18:12 cpsrvd (SSL) - waiting for connections 3929420 1 wp-toolkit 37420 0.0 Ss 1-04:36:51 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 654927 1 root 33236 0.0 Ss 04:36:37 lfd - sleeping 1469 1 root 33180 0.1 Ss 64-20:49:41 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3929444 1 root 26148 0.0 Ss 1-04:36:51 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1463 1 root 24008 0.0 Ss 64-20:49:41 tailwatchd 1602560 506832 nobody 23256 0.1 S 06:42 /usr/sbin/httpd -k start 1602549 506832 nobody 23232 0.0 S 06:42 /usr/sbin/httpd -k start 1619505 506832 nobody 22356 0.0 S 02:01 /usr/sbin/httpd -k start 1619405 506832 nobody 22160 0.3 S 02:17 /usr/sbin/httpd -k start 1619191 506832 nobody 21916 0.1 S 02:39 /usr/sbin/httpd -k start 1619720 506832 nobody 21864 0.0 S 01:41 /usr/sbin/httpd -k start 1619406 506832 nobody 21312 0.0 S 02:17 /usr/sbin/httpd -k start 1619388 506832 nobody 21292 0.0 S 02:19 /usr/sbin/httpd -k start 1618557 506832 nobody 21180 0.0 S 03:22 /usr/sbin/httpd -k start 1620556 506832 nobody 21076 0.1 S 00:49 /usr/sbin/httpd -k start 1619721 506832 nobody 20996 0.0 S 01:41 /usr/sbin/httpd -k start 3929564 1 wp-toolkit 20888 0.0 Ss 1-04:36:50 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1619572 506832 nobody 20832 0.1 S 01:58 /usr/sbin/httpd -k start 1619598 506832 nobody 20732 0.1 S 01:52 /usr/sbin/httpd -k start 483898 1 zabbix 20672 0.2 Ssl 5-04:41:03 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 1620483 506832 nobody 20664 0.0 S 00:51 /usr/sbin/httpd -k start 1620390 506832 nobody 20632 0.1 S 01:02 /usr/sbin/httpd -k start 1620384 506832 nobody 20392 0.1 S 01:03 /usr/sbin/httpd -k start 1620522 506832 nobody 20276 0.0 S 00:50 /usr/sbin/httpd -k start 1619707 506832 nobody 20264 0.0 S 01:42 /usr/sbin/httpd -k start 1620473 506832 nobody 20216 0.1 S 00:52 /usr/sbin/httpd -k start 1620854 506832 nobody 20168 0.0 S 00:23 /usr/sbin/httpd -k start 1620839 506832 nobody 20064 0.0 S 00:24 /usr/sbin/httpd -k start 1619597 506832 nobody 19956 0.0 S 01:52 /usr/sbin/httpd -k start 654684 654679 mailman 19380 0.0 S 04:36:46 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:1:2 -s 654690 654679 mailman 19368 0.0 S 04:36:46 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s 654699 654679 mailman 19348 0.0 S 04:36:46 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s 654685 654679 mailman 19320 0.0 S 04:36:46 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s 654693 654679 mailman 19200 0.0 S 04:36:46 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:2:8 -s 1620554 506832 nobody 19192 0.0 S 00:49 /usr/sbin/httpd -k start 654687 654679 mailman 19176 0.0 S 04:36:46 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:1:4 -s 654692 654679 mailman 19092 0.0 S 04:36:46 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:1:8 -s 654689 654679 mailman 19048 0.0 S 04:36:46 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s 654686 654679 mailman 19032 0.0 S 04:36:46 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:4 -s 654698 654679 mailman 19016 0.0 S 04:36:46 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:7:8 -s 654691 654679 mailman 18960 0.0 S 04:36:46 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:0:8 -s --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 15849613 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 446 madalice/madalice.com.au-ssl_log 222 evolution/app.evolutionerp.com.au-ssl_log 108 evolution/portal.evolutionerp.com.au-ssl_log 45 (total vhosts taking traffic: 4) --- top client IPs across all vhosts (last 3 min) --- 213 149.88.19.85 206 103.104.165.99 165 203.54.180.238 108 40.115.94.245 55 150.228.151.47 22 1.145.118.159 20 103.104.164.114 16 182.239.240.254 6 40.77.167.51 3 114.119.143.104 1 52.167.144.176 1 2a03:2880:f802:1c:: 1 207.46.13.6 1 114.119.159.70 1 114.119.143.14 --- top request paths across all vhosts (last 3 min) --- 98 POST /functions.php 98 GET /app/ajax.php 54 GET /api/getItem/LWHG2001KG 54 GET /api/getItem/LWFBW2001KG 50 GET /index.php 43 GET /heartbeat.php 36 POST /clienteditsave.php 23 POST /plugins/csvexporter/plugin.php 21 POST /app/ajax/selectFilterSingle.php 16 POST /jobeditsave.php 13 POST /logsave.php 13 POST /app/ajax.php 11 POST /inveditsave.php 10 POST /plugins/fencecosting/plugin.php 10 POST /app/ajax/selectFilter.php 10 GET //app/ajax.php 5 GET /store/af1-richmond9/ 4 POST //functions.php 4 POST //clienteditsave.php 3 POST /print.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 98 POST /functions.php 98 GET /app/ajax.php 49 GET /index.php 36 POST /clienteditsave.php 23 POST /plugins/csvexporter/plugin.php 21 POST /app/ajax/selectFilterSingle.php 16 POST /jobeditsave.php 13 POST /logsave.php 13 POST /app/ajax.php 11 POST /inveditsave.php 10 POST /plugins/fencecosting/plugin.php 10 POST /app/ajax/selectFilter.php -- last 10 requests -- 150.228.151.47 - - [02/Sep/2026:06:59:26 +1000] "POST /inveditsave.php?call=fetch_inventory HTTP/1.1" 200 29 "https://my.evolutionerp.com.au/index.php?page=inventory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi 150.228.151.47 - - [02/Sep/2026:06:59:27 +1000] "POST /inveditsave.php?call=fetch_inventory HTTP/1.1" 200 29 "https://my.evolutionerp.com.au/index.php?page=inventory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi 103.104.165.99 - - [02/Sep/2026:06:59:20 +1000] "GET /index.php?page=jobedit&id=10002&tab=filestab HTTP/1.1" 200 368526 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=10002" "Mozilla/5.0 (Windows NT 10.0; Win6 103.104.165.99 - - [02/Sep/2026:06:59:21 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 21515 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=10002" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple 103.104.165.99 - - [02/Sep/2026:06:59:25 +1000] "POST /clienteditsave.php?clientid=5781&call=getCategoryDiscounts HTTP/1.1" 200 25 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=10002&tab=filestab" "Mozilla/5. 103.104.165.99 - - [02/Sep/2026:06:59:26 +1000] "POST /logsave.php?call=getHistory&id=10002&module=job HTTP/1.1" 200 3431 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=10002&tab=filestab" "Mozilla/5.0 (Window 1.145.118.159 - - [02/Sep/2026:06:59:24 +1000] "POST /print.php HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=37035§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 103.104.165.99 - - [02/Sep/2026:06:59:27 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 21515 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=10002&tab=filestab" "Mozilla/5.0 (Windows NT 10.0; Win6 103.104.165.99 - - [02/Sep/2026:06:59:25 +1000] "POST /clienteditsave.php?call=getSettings HTTP/1.1" 200 60 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=10002&tab=filestab" "Mozilla/5.0 (Windows NT 10.0; Win 103.104.165.99 - - [02/Sep/2026:06:59:28 +1000] "GET /app/ajax.php?cn=&furi=true&uri=&call=getUserSetting&caller=ajaxSubmitLocal&seq=10075308994 HTTP/1.1" 200 267 "https://my.evolutionerp.com.au/index.php?page=jobedit&id == madalice/madalice.com.au-ssl_log == -- top paths -- 5 GET /store/af1-richmond9/ 1 GET /wp-content/plugins/woocommerce/includes/shipping/wp-content/plugins/woocommerce/includes/ 1 GET /wp-content/plugins/woocommerce/includes/shipping//wp-content/plugins/woocommerce/includes/ 1 GET /wp-content/plugins/woocommerce/includes/shipping/legacy-flat-rate/wp-content/plugins/woocommerce/includes/shipping/ 1 GET /wp-content/plugins/woocommerce/includes/shipping/legacy-flat-rate//wp-content/plugins/woocommerce/includes/shipping/ 1 GET /wp-content/plugins/woocommerce/includes/shipping/legacy-flat-rate/includes/ 1 GET /wp-content/plugins/woocommerce/includes/shipping/legacy-flat-rate/class-wc-shipping-legacy-flat-rate.php 1 GET /wp-content/plugins/woocommerce/includes/shipping/legacy-flat-rate/ 1 GET /wp-content/plugins/woocommerce/includes/shipping/free-shipping/wp-content/plugins/woocommerce/includes/shipping/ 1 GET /wp-content/plugins/woocommerce/includes/shipping/free-shipping//wp-content/plugins/woocommerce/includes/shipping/ 1 GET /wp-content/plugins/woocommerce/includes/shipping/free-shipping/class-wc-shipping-free-shipping.php 1 GET /wp-content/plugins/woocommerce/includes/shipping/free-shipping/ -- last 10 requests -- 149.88.19.85 - - [02/Sep/2026:06:59:14 +1000] "GET /wp-content/plugins/woocommerce/includes/shipping/free-shipping//wp-content/plugins/woocommerce/includes/shipping/ HTTP/1.1" 301 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:59:16 +1000] "GET /wp-content/plugins/woocommerce/includes/shipping/free-shipping/wp-content/plugins/woocommerce/includes/shipping/ HTTP/1.1" 404 36644 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:59:18 +1000] "GET /wp-content/plugins/woocommerce/includes/shipping/free-shipping/class-wc-shipping-free-shipping.php HTTP/1.1" 200 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:59:18 +1000] "GET /wp-content/plugins/woocommerce/includes/shipping/legacy-flat-rate/ HTTP/1.1" 200 347 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:59:18 +1000] "GET /wp-content/plugins/woocommerce/includes/shipping/legacy-flat-rate//wp-content/plugins/woocommerce/includes/shipping/ HTTP/1.1" 301 1 "-" "-" 207.46.13.6 - - [02/Sep/2026:06:59:18 +1000] "GET /nrl-custom-nike-shoes/ HTTP/1.1" 200 40189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116. 149.88.19.85 - - [02/Sep/2026:06:59:20 +1000] "GET /wp-content/plugins/woocommerce/includes/shipping/legacy-flat-rate/wp-content/plugins/woocommerce/includes/shipping/ HTTP/1.1" 404 36649 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:59:22 +1000] "GET /wp-content/plugins/woocommerce/includes/shipping/legacy-flat-rate/class-wc-shipping-legacy-flat-rate.php HTTP/1.1" 200 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:06:59:22 +1000] "GET /wp-content/plugins/woocommerce/includes/shipping/legacy-flat-rate/includes/ HTTP/1.1" 200 324 "-" "-" 114.119.143.104 - - [02/Sep/2026:06:59:22 +1000] "GET /store/af1-richmond9/?rating=5&verified=1&wcpr_rating=4&wcpr_image=1 HTTP/1.1" 200 50058 "https://madalice.com.au/store/af1-richmond9/?rating=5&verified=1&wcpr_rating == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 54 GET /api/getItem/LWHG2001KG 54 GET /api/getItem/LWFBW2001KG -- last 10 requests -- 40.115.94.245 - - [02/Sep/2026:06:59:04 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:06:59:04 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:06:59:04 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:06:59:04 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:06:59:05 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:06:59:05 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:06:59:05 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:06:59:05 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:06:59:06 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [02/Sep/2026:06:59:06 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1363 "-" "RestSharp/106.13.0.0" --- last 30 samples (run-up to this incident) --- 2026-09-02 06:56:58 L1=1.37 run=1 blk=0 avail=6971 (50.6%) swpO=0 conn=2 myRSS=3320 php=12 phpRSS=1009 ap=25 tcp=36 topuser=madalice 2026-09-02 06:57:07 L1=1.23 run=5 blk=0 avail=7082 (51.4%) swpO=0 conn=3 myRSS=3320 php=14 phpRSS=999 ap=23 tcp=35 topuser=madalice 2026-09-02 06:57:08 L1=1.23 run=3 blk=0 avail=7044 (51.1%) swpO=0 conn=3 myRSS=3320 php=14 phpRSS=1026 ap=23 tcp=36 topuser=madalice 2026-09-02 06:57:18 L1=1.19 run=1 blk=0 avail=6894 (50.0%) swpO=0 conn=3 myRSS=3321 php=12 phpRSS=1080 ap=30 tcp=33 topuser=madalice 2026-09-02 06:57:18 L1=1.19 run=1 blk=0 avail=6901 (50.1%) swpO=0 conn=3 myRSS=3321 php=12 phpRSS=1071 ap=30 tcp=32 topuser=madalice 2026-09-02 06:57:28 L1=1.09 run=2 blk=0 avail=6782 (49.2%) swpO=0 conn=3 myRSS=3321 php=13 phpRSS=1237 ap=26 tcp=35 topuser=madalice 2026-09-02 06:57:28 L1=1.09 run=2 blk=0 avail=6672 (48.4%) swpO=0 conn=3 myRSS=3321 php=14 phpRSS=1378 ap=26 tcp=38 topuser=madalice 2026-09-02 06:57:38 L1=1.07 run=1 blk=0 avail=6758 (49.1%) swpO=0 conn=1 myRSS=3322 php=12 phpRSS=1203 ap=29 tcp=42 topuser=madalice 2026-09-02 06:57:38 L1=1.07 run=2 blk=0 avail=6692 (48.6%) swpO=0 conn=3 myRSS=3322 php=13 phpRSS=1298 ap=29 tcp=43 topuser=madalice 2026-09-02 06:57:48 L1=0.98 run=6 blk=0 avail=6568 (47.7%) swpO=0 conn=1 myRSS=3322 php=15 phpRSS=1459 ap=34 tcp=41 topuser=madalice 2026-09-02 06:57:48 L1=0.98 run=4 blk=0 avail=6636 (48.2%) swpO=0 conn=3 myRSS=3322 php=15 phpRSS=1383 ap=34 tcp=41 topuser=madalice 2026-09-02 06:57:58 L1=1.29 run=4 blk=0 avail=6333 (46.0%) swpO=0 conn=4 myRSS=3322 php=15 phpRSS=1689 ap=32 tcp=46 topuser=madalice 2026-09-02 06:57:58 L1=1.29 run=4 blk=0 avail=6230 (45.2%) swpO=0 conn=5 myRSS=3322 php=15 phpRSS=1803 ap=32 tcp=48 topuser=madalice 2026-09-02 06:58:08 L1=1.39 run=2 blk=0 avail=6956 (50.5%) swpO=0 conn=4 myRSS=3322 php=13 phpRSS=1005 ap=32 tcp=40 topuser=madalice 2026-09-02 06:58:08 L1=1.39 run=3 blk=0 avail=7094 (51.5%) swpO=0 conn=2 myRSS=3322 php=13 phpRSS=829 ap=32 tcp=40 topuser=madalice 2026-09-02 06:58:18 L1=1.25 run=1 blk=0 avail=7225 (52.4%) swpO=0 conn=4 myRSS=3322 php=12 phpRSS=738 ap=28 tcp=33 topuser=madalice 2026-09-02 06:58:18 L1=1.25 run=2 blk=0 avail=7230 (52.5%) swpO=0 conn=2 myRSS=3322 php=12 phpRSS=738 ap=27 tcp=34 topuser=madalice 2026-09-02 06:58:28 L1=1.28 run=4 blk=0 avail=7240 (52.5%) swpO=0 conn=4 myRSS=3322 php=14 phpRSS=803 ap=27 tcp=40 topuser=madalice 2026-09-02 06:58:29 L1=1.42 run=3 blk=0 avail=7172 (52.1%) swpO=0 conn=2 myRSS=3322 php=14 phpRSS=858 ap=28 tcp=41 topuser=madalice 2026-09-02 06:58:38 L1=1.47 run=8 blk=1 avail=7319 (53.1%) swpO=0 conn=3 myRSS=3322 php=14 phpRSS=703 ap=29 tcp=54 topuser=madalice 2026-09-02 06:58:39 L1=1.59 run=5 blk=0 avail=7227 (52.5%) swpO=0 conn=2 myRSS=3322 php=14 phpRSS=765 ap=33 tcp=55 topuser=madalice 2026-09-02 06:58:48 L1=1.46 run=2 blk=0 avail=7395 (53.7%) swpO=0 conn=3 myRSS=3322 php=12 phpRSS=543 ap=34 tcp=31 topuser=madalice 2026-09-02 06:58:49 L1=1.51 run=2 blk=0 avail=7361 (53.4%) swpO=0 conn=2 myRSS=3322 php=13 phpRSS=609 ap=33 tcp=33 topuser=madalice 2026-09-02 06:58:58 L1=1.47 run=4 blk=0 avail=7077 (51.4%) swpO=0 conn=3 myRSS=3322 php=12 phpRSS=830 ap=30 tcp=40 topuser=madalice 2026-09-02 06:58:59 L1=1.51 run=4 blk=0 avail=7075 (51.4%) swpO=0 conn=2 myRSS=3322 php=12 phpRSS=871 ap=30 tcp=38 topuser=madalice 2026-09-02 06:59:08 L1=1.47 run=2 blk=0 avail=6640 (48.2%) swpO=0 conn=3 myRSS=3322 php=12 phpRSS=1297 ap=31 tcp=48 topuser=madalice 2026-09-02 06:59:09 L1=1.43 run=3 blk=0 avail=6588 (47.8%) swpO=0 conn=1 myRSS=3322 php=12 phpRSS=1333 ap=32 tcp=47 topuser=madalice 2026-09-02 06:59:18 L1=1.40 run=4 blk=0 avail=6580 (47.8%) swpO=0 conn=3 myRSS=3322 php=13 phpRSS=1372 ap=32 tcp=43 topuser=madalice 2026-09-02 06:59:19 L1=1.60 run=7 blk=0 avail=6538 (47.5%) swpO=0 conn=1 myRSS=3322 php=14 phpRSS=1447 ap=32 tcp=43 topuser=madalice 2026-09-02 06:59:29 L1=2.36 run=2 blk=0 avail=6423 (46.6%) swpO=0 conn=3 myRSS=3322 php=13 phpRSS=1524 ap=34 tcp=41 topuser=madalice