INCIDENT 2026-09-02 07:39:33 trigger: php_rss=1543MB ================================================================== load: 1.86 1.65 1.60 4/653 1768609 ncpu:10 mem_avail: 6373MB/13777MB (46.3%) swap_used:2288MB swapout:0/s blocked(D):0 running:3 iowait:0.1% steal:0.0% php: 14 procs / 1543MB heaviest user: madalice (8 procs, 1107MB) apache: 41 procs tcp_estab: 36 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3328 madalice 8 1107 root 247 1044 nobody 40 776 mailman 20 354 tubesupplies 2 306 cpanellogin 1 242 netdata 7 204 evolution 9 128 dovenull 6 67 wp-toolkit 3 59 lowrange 2 29 dovecot 3 28 zabbix 1 18 vinesit 1 15 kurri 1 14 aaa 1 13 named 1 12 mailnull 1 9 nscd 1 4 --- php workers by user --- USER PROCS RSS_MB madalice 8 1107 tubesupplies 2 307 evolution 3 113 root 1 25 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4839 MB Active(file): 4254 MB Inactive(file): 713 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 494 MB CommitLimit: 10984 MB Committed_AS: 8864 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 1-05:17:05 4736 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 3407892 10.4 Ssl 5-05:20:25 /usr/sbin/mariadbd 704828 1353308 cpanellogin 248476 0.1 S 05:03:39 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 706070 655564 root 194940 0.0 S 05:01:35 spamd child 508924 1 netdata 182748 2.0 Ssl 5-05:19:54 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 706071 655564 root 181664 0.0 S 05:01:35 spamd child 655564 1 root 174396 0.0 Ss 05:16:11 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1732385 3929444 madalice 163808 5.7 S 10:34 php-fpm: pool madalice_com_au 1767980 1765267 tubesupplies 162000 3.4 S 00:37 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1732381 3929444 madalice 161112 6.5 S 10:36 php-fpm: pool madalice_com_au 1766320 3929444 madalice 159988 7.7 S 02:36 php-fpm: pool madalice_com_au 1733554 3929444 madalice 159428 7.1 S 09:32 php-fpm: pool madalice_com_au 1732351 3929444 madalice 150120 4.9 S 10:40 php-fpm: pool madalice_com_au 1749961 3929444 madalice 145756 6.7 S 05:43 php-fpm: pool madalice_com_au 1749087 3929444 madalice 144296 6.6 S 07:18 php-fpm: pool madalice_com_au 1768579 1767569 evolution 67240 0.0 S 00:00 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1732529 3929444 madalice 49556 5.1 S 10:26 php-fpm: pool madalice_com_au 509236 509098 root 47860 0.0 Sl 5-05:19:51 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1768576 1766689 evolution 40604 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 37752 0.1 Ss 42-04:58:17 cpsrvd (SSL) - waiting for connections 3929420 1 wp-toolkit 37420 0.0 Ss 1-05:16:56 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1768604 1469 root 34812 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 654927 1 root 33252 0.0 Ss 05:16:42 lfd - sleeping 1469 1 root 33204 0.1 Ss 64-21:29:46 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1768569 1766148 tubesupplies 29300 64.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3929444 1 root 26140 0.0 Ss 1-05:16:56 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1733408 506832 nobody 24336 0.0 S 09:33 /usr/sbin/httpd -k start 1463 1 root 24012 0.0 Ss 64-21:29:46 tailwatchd 1749400 506832 nobody 23956 0.1 S 06:39 /usr/sbin/httpd -k start 1765202 506832 nobody 23664 0.1 S 03:53 /usr/sbin/httpd -k start 1765263 506832 nobody 23552 0.1 S 03:50 /usr/sbin/httpd -k start 1750295 506832 nobody 23484 0.0 S 05:21 /usr/sbin/httpd -k start 1766563 506832 nobody 23380 0.0 S 02:13 /usr/sbin/httpd -k start 1765250 506832 nobody 22708 0.1 S 03:51 /usr/sbin/httpd -k start 1768205 506832 nobody 22600 0.3 S 00:23 /usr/sbin/httpd -k start 1767781 506832 nobody 22520 0.0 S 00:53 /usr/sbin/httpd -k start 1766562 506832 nobody 22312 0.0 S 02:13 /usr/sbin/httpd -k start 1767581 506832 nobody 22284 0.1 S 01:08 /usr/sbin/httpd -k start 1766184 506832 nobody 22264 0.1 S 02:44 /usr/sbin/httpd -k start 1765267 506832 nobody 22256 0.0 S 03:50 /usr/sbin/httpd -k start 1766148 506832 nobody 22204 0.0 S 02:47 /usr/sbin/httpd -k start 1767569 506832 nobody 21892 0.0 S 01:09 /usr/sbin/httpd -k start 1766186 506832 nobody 21732 0.0 S 02:44 /usr/sbin/httpd -k start 1766781 506832 nobody 21596 0.0 S 01:55 /usr/sbin/httpd -k start 1766689 506832 nobody 21236 0.1 S 02:03 /usr/sbin/httpd -k start 1767579 506832 nobody 21224 0.1 S 01:08 /usr/sbin/httpd -k start 1767764 506832 nobody 21140 0.0 S 00:55 /usr/sbin/httpd -k start 1766188 506832 nobody 21068 0.0 S 02:44 /usr/sbin/httpd -k start 1767533 506832 nobody 21068 0.1 S 01:10 /usr/sbin/httpd -k start 3929564 1 wp-toolkit 20888 0.0 Ss 1-05:16:55 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1766171 506832 nobody 20636 0.0 S 02:45 /usr/sbin/httpd -k start 1767765 506832 nobody 20584 0.0 S 00:55 /usr/sbin/httpd -k start 1767776 506832 nobody 20152 0.0 S 00:54 /usr/sbin/httpd -k start 1768216 506832 nobody 20136 0.0 S 00:22 /usr/sbin/httpd -k start 1768302 506832 nobody 20092 0.0 S 00:19 /usr/sbin/httpd -k start 1767784 506832 nobody 20044 0.0 S 00:53 /usr/sbin/httpd -k start 1767774 506832 nobody 19856 0.0 S 00:54 /usr/sbin/httpd -k start 1768215 506832 nobody 19828 0.0 S 00:22 /usr/sbin/httpd -k start 1766677 506832 nobody 19748 0.1 S 02:05 /usr/sbin/httpd -k start 654684 654679 mailman 19380 0.0 S 05:16:51 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:1:2 -s 654690 654679 mailman 19368 0.0 S 05:16:51 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 16045576 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 16045575 | root | 108-1481181613 | Execute | 0 | Sending data | SELECT id,name,defaultTemplate,printOptions FROM uploads WHERE category = ? AND subtype LIKE ? AND status = '1' AND (path LIKE '%.htm' OR path LIKE '%.html' OR path IN (?,?)) | +----------+------+----------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 306 evolution/portal.evolutionerp.com.au-ssl_log 288 madalice/madalice.com.au-ssl_log 226 evolution/app.evolutionerp.com.au-ssl_log 115 speedlin/speedlinefencing.com.au-ssl_log 105 kamcool/kamcool.com.au-ssl_log 52 otterfencing/otterfencing.com.au-ssl_log 46 tubesupplies/tubesupplies.com.au-ssl_log 8 alison/alisonarts.com.au-ssl_log 3 evolution/evolutionerp.com.au-ssl_log 1 (total vhosts taking traffic: 10) --- top client IPs across all vhosts (last 3 min) --- 342 203.54.180.238 219 149.88.19.85 115 40.115.94.245 110 20.220.211.172 86 103.104.164.114 72 182.239.240.254 52 158.23.184.117 44 20.63.81.20 42 150.228.151.47 23 101.166.96.210 19 103.104.165.99 5 68.218.165.157 3 118.127.40.55 2 124.168.5.234 2 1.145.118.159 --- top request paths across all vhosts (last 3 min) --- 94 GET /factory_session_checker.php 78 POST /functions.php 57 GET /api/getItem/LWPG2001KG 53 GET /heartbeat.php 48 GET /factory_session_processed_qty.php 48 GET /factory_session_joiner.php 47 GET /app/ajax.php 31 GET /index.php 27 POST /factory_functions.php 25 GET //app/ajax.php 14 POST /quoteditsave.php 11 POST //functions.php 10 POST /clienteditsave.php 10 POST /app/ajax/selectFilter.php 9 POST /app/ajax/selectFilterSingle.php 9 POST /app/ajax.php 8 POST /purchaseaddsave.php 7 POST /portal/register 7 POST //jobeditsave.php 7 GET //index.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 78 POST /functions.php 47 GET /app/ajax.php 25 GET //app/ajax.php 21 GET /index.php 14 POST /quoteditsave.php 11 POST //functions.php 10 POST /clienteditsave.php 10 POST /app/ajax/selectFilter.php 9 POST /app/ajax/selectFilterSingle.php 9 POST /app/ajax.php 8 POST /purchaseaddsave.php 7 POST //jobeditsave.php -- last 10 requests -- 103.104.164.114 - - [02/Sep/2026:07:39:27 +1000] "POST /quoteditsave.php HTTP/1.1" 302 20 "https://my.evolutionerp.com.au/index.php?page=quotedit" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, lik 103.104.164.114 - - [02/Sep/2026:07:39:27 +1000] "GET /index.php?page=quotedit"eid=1848§ionid=0 HTTP/1.1" 200 78945 "https://my.evolutionerp.com.au/index.php?page=quotedit" "Mozilla/5.0 (Windows NT 10.0; Win64; x 103.104.164.114 - - [02/Sep/2026:07:39:27 +1000] "POST /quoteditsave.php?siteid=88&call=getSite HTTP/1.1" 200 385 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=1848§ionid=0" "Mozilla/5.0 (Windows NT 103.104.164.114 - - [02/Sep/2026:07:39:27 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=19711402108 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/ind 103.104.164.114 - - [02/Sep/2026:07:39:27 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=13845524046 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/inde 103.104.164.114 - - [02/Sep/2026:07:39:27 +1000] "GET /app/ajax.php?cn=attachmentcategory&furi=true&uri=page%3Dquotedit%26quoteid%3D1848%26sectionid%3D0&call=getUserSetting&caller=ajaxSubmitLocal&seq=12072262566 HTTP/1.1 103.104.164.114 - - [02/Sep/2026:07:39:28 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dquotedit%26quoteid%3D1848%26sectionid%3D0&call=getUserSetting&caller=ajaxSubmitLocal&seq=14612474065 HTTP/1.1" 200 110 "https:/ 103.104.164.114 - - [02/Sep/2026:07:39:29 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=1848§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 103.104.164.114 - - [02/Sep/2026:07:39:29 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 15911 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=1848§ionid=0" "Mozilla/5.0 (Windows NT 10.0; 103.104.164.114 - - [02/Sep/2026:07:39:30 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=1848§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 94 GET /factory_session_checker.php 53 GET /heartbeat.php 48 GET /factory_session_processed_qty.php 48 GET /factory_session_joiner.php 27 POST /factory_functions.php 10 GET /index.php 7 POST /portal/register 1 GET / -- last 10 requests -- 203.54.180.238 - - [02/Sep/2026:07:39:27 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:07:39:27 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:07:39:27 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [02/Sep/2026:07:39:27 +1000] "GET /factory_session_joiner.php?id=35036 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [02/Sep/2026:07:39:29 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:07:39:29 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [02/Sep/2026:07:39:28 +1000] "GET /heartbeat.php?sentAt=1788298768&bytes=106,151,70,16&_=1788297578597 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=19" 203.54.180.238 - - [02/Sep/2026:07:39:29 +1000] "GET /factory_session_joiner.php?id=35037 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [02/Sep/2026:07:39:30 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:07:39:31 +1000] "GET /heartbeat.php?sentAt=1788298770&bytes=106,151,70,18&_=1788298759947 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=8" == madalice/madalice.com.au-ssl_log == -- top paths -- 6 GET /store/af1-richmond9/ 1 POST / 1 GET /wp-content/plugins/woocommerce/src/Internal/Agentic/ 1 GET /wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php 1 GET /wp-content/plugins/woocommerce/src/Internal/Admin/WCPayPromotion/wp-content/plugins/woocommerce/src/Internal/Admin/ 1 GET /wp-content/plugins/woocommerce/src/Internal/Admin/WCPayPromotion//wp-content/plugins/woocommerce/src/Internal/Admin/ 1 GET /wp-content/plugins/woocommerce/src/Internal/Admin/WCPayPromotion/WCPayPromotionDataSourcePoller.php 1 GET /wp-content/plugins/woocommerce/src/Internal/Admin/WCPayPromotion/WCPaymentGatewayPreInstallWCPayPromotion.php 1 GET /wp-content/plugins/woocommerce/src/Internal/Admin/WCPayPromotion/Init.php 1 GET /wp-content/plugins/woocommerce/src/Internal/Admin/WCPayPromotion/DefaultPromotions.php 1 GET /wp-content/plugins/woocommerce/src/Internal/Admin/WCPayPromotion/ 1 GET /wp-content/plugins/woocommerce/src/Internal/Admin/WCAdminUser.php -- last 10 requests -- 149.88.19.85 - - [02/Sep/2026:07:39:12 +1000] "GET /wp-content/plugins/woocommerce/src/Internal/Admin/WCAdminUser.php HTTP/1.1" 200 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:07:39:12 +1000] "GET /wp-content/plugins/woocommerce/src/Internal/Admin/WCPayPromotion/ HTTP/1.1" 200 414 "-" "-" 149.88.19.85 - - [02/Sep/2026:07:39:13 +1000] "GET /wp-content/plugins/woocommerce/src/Internal/Admin/WCPayPromotion//wp-content/plugins/woocommerce/src/Internal/Admin/ HTTP/1.1" 301 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:07:39:14 +1000] "GET /wp-content/plugins/woocommerce/src/Internal/Admin/WCPayPromotion/wp-content/plugins/woocommerce/src/Internal/Admin/ HTTP/1.1" 404 36656 "-" "-" 149.88.19.85 - - [02/Sep/2026:07:39:16 +1000] "GET /wp-content/plugins/woocommerce/src/Internal/Admin/WCPayPromotion/DefaultPromotions.php HTTP/1.1" 200 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:07:39:16 +1000] "GET /wp-content/plugins/woocommerce/src/Internal/Admin/WCPayPromotion/Init.php HTTP/1.1" 200 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:07:39:17 +1000] "GET /wp-content/plugins/woocommerce/src/Internal/Admin/WCPayPromotion/WCPayPromotionDataSourcePoller.php HTTP/1.1" 500 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:07:39:17 +1000] "GET /wp-content/plugins/woocommerce/src/Internal/Admin/WCPayPromotion/WCPaymentGatewayPreInstallWCPayPromotion.php HTTP/1.1" 200 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:07:39:17 +1000] "GET /wp-content/plugins/woocommerce/src/Internal/Admin/WcPayWelcomePage.php HTTP/1.1" 200 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:07:39:18 +1000] "GET /wp-content/plugins/woocommerce/src/Internal/Agentic/ HTTP/1.1" 200 320 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-09-02 07:37:03 L1=1.52 run=2 blk=0 avail=6918 (50.2%) swpO=0 conn=2 myRSS=3327 php=12 phpRSS=961 ap=37 tcp=38 topuser=madalice 2026-09-02 07:37:12 L1=1.53 run=3 blk=0 avail=6905 (50.1%) swpO=0 conn=2 myRSS=3327 php=10 phpRSS=954 ap=33 tcp=37 topuser=madalice 2026-09-02 07:37:13 L1=1.53 run=2 blk=0 avail=6712 (48.7%) swpO=0 conn=2 myRSS=3327 php=11 phpRSS=1170 ap=32 tcp=37 topuser=madalice 2026-09-02 07:37:22 L1=1.37 run=2 blk=0 avail=6799 (49.4%) swpO=0 conn=2 myRSS=3327 php=10 phpRSS=1066 ap=33 tcp=38 topuser=madalice 2026-09-02 07:37:23 L1=1.37 run=3 blk=0 avail=6903 (50.1%) swpO=0 conn=3 myRSS=3327 php=13 phpRSS=1054 ap=32 tcp=37 topuser=madalice 2026-09-02 07:37:32 L1=1.32 run=1 blk=0 avail=7186 (52.2%) swpO=0 conn=2 myRSS=3327 php=10 phpRSS=624 ap=40 tcp=50 topuser=madalice 2026-09-02 07:37:33 L1=1.32 run=1 blk=0 avail=7235 (52.5%) swpO=0 conn=3 myRSS=3327 php=11 phpRSS=602 ap=40 tcp=48 topuser=madalice 2026-09-02 07:37:42 L1=1.51 run=8 blk=0 avail=6806 (49.4%) swpO=2 conn=2 myRSS=3327 php=12 phpRSS=1027 ap=46 tcp=47 topuser=madalice 2026-09-02 07:37:43 L1=1.51 run=1 blk=0 avail=7054 (51.2%) swpO=2 conn=3 myRSS=3327 php=11 phpRSS=750 ap=45 tcp=48 topuser=madalice 2026-09-02 07:37:52 L1=1.44 run=3 blk=0 avail=7021 (51.0%) swpO=0 conn=3 myRSS=3327 php=11 phpRSS=803 ap=44 tcp=46 topuser=madalice 2026-09-02 07:37:54 L1=1.44 run=3 blk=0 avail=7018 (50.9%) swpO=0 conn=3 myRSS=3327 php=11 phpRSS=798 ap=43 tcp=49 topuser=madalice 2026-09-02 07:38:03 L1=1.69 run=2 blk=0 avail=7044 (51.1%) swpO=0 conn=3 myRSS=3327 php=11 phpRSS=748 ap=42 tcp=37 topuser=madalice 2026-09-02 07:38:04 L1=1.69 run=2 blk=0 avail=6999 (50.8%) swpO=0 conn=3 myRSS=3327 php=11 phpRSS=777 ap=41 tcp=41 topuser=madalice 2026-09-02 07:38:13 L1=2.09 run=2 blk=0 avail=6968 (50.6%) swpO=0 conn=3 myRSS=3327 php=11 phpRSS=906 ap=35 tcp=40 topuser=madalice 2026-09-02 07:38:14 L1=2.09 run=1 blk=0 avail=6964 (50.6%) swpO=0 conn=3 myRSS=3327 php=10 phpRSS=871 ap=34 tcp=37 topuser=madalice 2026-09-02 07:38:23 L1=1.85 run=3 blk=0 avail=7144 (51.9%) swpO=0 conn=3 myRSS=3327 php=13 phpRSS=785 ap=33 tcp=49 topuser=madalice 2026-09-02 07:38:24 L1=1.85 run=2 blk=0 avail=7157 (52.0%) swpO=0 conn=2 myRSS=3327 php=10 phpRSS=688 ap=34 tcp=49 topuser=madalice 2026-09-02 07:38:33 L1=1.79 run=6 blk=0 avail=6929 (50.3%) swpO=0 conn=3 myRSS=3327 php=15 phpRSS=1036 ap=39 tcp=51 topuser=madalice 2026-09-02 07:38:34 L1=1.79 run=2 blk=0 avail=6902 (50.1%) swpO=0 conn=2 myRSS=3327 php=10 phpRSS=913 ap=39 tcp=51 topuser=madalice 2026-09-02 07:38:43 L1=1.75 run=4 blk=0 avail=7043 (51.1%) swpO=0 conn=3 myRSS=3327 php=15 phpRSS=823 ap=53 tcp=49 topuser=madalice 2026-09-02 07:38:44 L1=1.75 run=2 blk=0 avail=7102 (51.5%) swpO=0 conn=2 myRSS=3327 php=13 phpRSS=708 ap=52 tcp=52 topuser=madalice 2026-09-02 07:38:53 L1=2.27 run=1 blk=0 avail=7034 (51.1%) swpO=1 conn=2 myRSS=3327 php=11 phpRSS=754 ap=47 tcp=50 topuser=madalice 2026-09-02 07:38:54 L1=2.27 run=2 blk=0 avail=7093 (51.5%) swpO=1 conn=2 myRSS=3327 php=10 phpRSS=667 ap=46 tcp=51 topuser=madalice 2026-09-02 07:39:03 L1=2.08 run=2 blk=0 avail=6951 (50.5%) swpO=0 conn=2 myRSS=3327 php=12 phpRSS=875 ap=44 tcp=45 topuser=madalice 2026-09-02 07:39:04 L1=2.08 run=1 blk=0 avail=6932 (50.3%) swpO=0 conn=2 myRSS=3327 php=11 phpRSS=864 ap=43 tcp=39 topuser=madalice 2026-09-02 07:39:13 L1=1.84 run=2 blk=0 avail=6906 (50.1%) swpO=0 conn=2 myRSS=3327 php=12 phpRSS=908 ap=45 tcp=53 topuser=madalice 2026-09-02 07:39:14 L1=1.84 run=3 blk=0 avail=6784 (49.2%) swpO=0 conn=2 myRSS=3327 php=12 phpRSS=960 ap=45 tcp=51 topuser=madalice 2026-09-02 07:39:23 L1=1.94 run=4 blk=0 avail=6730 (48.9%) swpO=0 conn=2 myRSS=3327 php=14 phpRSS=1146 ap=43 tcp=48 topuser=madalice 2026-09-02 07:39:24 L1=2.02 run=2 blk=0 avail=6681 (48.5%) swpO=0 conn=3 myRSS=3327 php=11 phpRSS=1111 ap=43 tcp=49 topuser=madalice 2026-09-02 07:39:33 L1=1.86 run=3 blk=0 avail=6373 (46.3%) swpO=0 conn=4 myRSS=3328 php=14 phpRSS=1543 ap=41 tcp=36 topuser=madalice