INCIDENT 2026-09-02 07:55:49 trigger: php_rss=1533MB ================================================================== load: 2.35 1.90 1.93 4/640 1838308 ncpu:10 mem_avail: 6398MB/13777MB (46.4%) swap_used:2283MB swapout:0/s blocked(D):0 running:5 iowait:0.0% steal:0.0% php: 12 procs / 1533MB heaviest user: madalice (8 procs, 1296MB) apache: 32 procs tcp_estab: 37 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3333 madalice 8 1205 root 243 979 nobody 31 580 mailman 20 354 cpanellogin 1 244 tubesupplies 2 207 netdata 7 205 dovenull 6 67 evolution 8 64 wp-toolkit 3 59 dovecot 3 28 mailnull 3 23 zabbix 1 18 lowrange 1 14 kurri 1 14 candyfabcom 1 14 named 1 12 nscd 1 4 cpanelconnecttrack 1 4 --- php workers by user --- USER PROCS RSS_MB madalice 8 1205 tubesupplies 2 208 root 1 25 evolution 1 8 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4922 MB Active(file): 4400 MB Inactive(file): 735 MB Dirty: 3 MB Writeback: 0 MB SReclaimable: 500 MB CommitLimit: 10984 MB Committed_AS: 8406 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 1-05:33:21 5720 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 3413184 10.4 Ssl 5-05:36:41 /usr/sbin/mariadbd 704828 1353308 cpanellogin 250192 0.1 S 05:19:55 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 706070 655564 root 194944 0.0 S 05:17:51 spamd child 508924 1 netdata 184348 2.0 Ssl 5-05:36:10 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 706071 655564 root 181664 0.0 S 05:17:51 spamd child 655564 1 root 174396 0.0 Ss 05:32:27 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1822272 3929444 madalice 161560 4.4 S 03:05 php-fpm: pool madalice_com_au 1821195 3929444 madalice 161308 5.8 S 04:32 php-fpm: pool madalice_com_au 1820670 3929444 madalice 160948 5.3 S 05:15 php-fpm: pool madalice_com_au 1766320 3929444 madalice 160904 7.8 S 18:52 php-fpm: pool madalice_com_au 1820557 3929444 madalice 160644 6.5 S 05:25 php-fpm: pool madalice_com_au 1806225 3929444 madalice 160168 5.9 S 05:55 php-fpm: pool madalice_com_au 1810230 3929444 madalice 157304 4.9 S 05:45 php-fpm: pool madalice_com_au 1838271 1823744 tubesupplies 137156 54.5 S 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1823668 3929444 madalice 112000 5.0 S 01:10 php-fpm: pool madalice_com_au 1838276 1823848 tubesupplies 81712 48.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 509236 509098 root 47860 0.0 Sl 5-05:36:07 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 37752 0.1 Ss 42-05:14:33 cpsrvd (SSL) - waiting for connections 3929420 1 wp-toolkit 37420 0.0 Ss 1-05:33:12 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 654927 1 root 33256 0.0 Ss 05:32:58 lfd - sleeping 1469 1 root 33216 0.1 Ss 64-21:46:02 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3929444 1 root 26140 0.0 Ss 1-05:33:12 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1463 1 root 24012 0.0 Ss 64-21:46:02 tailwatchd 1822672 506832 nobody 23188 0.0 S 02:33 /usr/sbin/httpd -k start 1821743 506832 nobody 23140 0.0 S 03:51 /usr/sbin/httpd -k start 1823743 506832 nobody 22756 0.0 S 01:03 /usr/sbin/httpd -k start 1823179 506832 nobody 22628 0.1 S 01:54 /usr/sbin/httpd -k start 1822985 506832 nobody 22400 0.0 S 02:08 /usr/sbin/httpd -k start 1823878 506832 nobody 22392 0.1 S 00:51 /usr/sbin/httpd -k start 1823481 506832 nobody 22252 0.0 S 01:29 /usr/sbin/httpd -k start 1823744 506832 nobody 21996 0.0 S 01:03 /usr/sbin/httpd -k start 1823477 506832 nobody 21980 0.0 S 01:30 /usr/sbin/httpd -k start 1822205 506832 nobody 21768 0.0 S 03:11 /usr/sbin/httpd -k start 1823844 506832 nobody 21748 0.2 S 00:55 /usr/sbin/httpd -k start 1823478 506832 nobody 21660 0.0 S 01:30 /usr/sbin/httpd -k start 1822542 506832 nobody 21612 0.0 S 02:44 /usr/sbin/httpd -k start 1823853 506832 nobody 21292 0.0 S 00:54 /usr/sbin/httpd -k start 1823483 506832 nobody 21260 0.2 S 01:29 /usr/sbin/httpd -k start 1838057 506832 nobody 20900 0.1 S 00:27 /usr/sbin/httpd -k start 3929564 1 wp-toolkit 20888 0.0 Ss 1-05:33:11 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1822553 506832 nobody 20488 0.0 S 02:43 /usr/sbin/httpd -k start 483898 1 zabbix 20392 0.2 Ssl 5-05:37:24 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 1823913 506832 nobody 20332 0.0 S 00:50 /usr/sbin/httpd -k start 1823915 506832 nobody 19960 0.0 S 00:50 /usr/sbin/httpd -k start 1823854 506832 nobody 19868 0.0 S 00:54 /usr/sbin/httpd -k start 1823848 506832 nobody 19856 0.0 S 00:54 /usr/sbin/httpd -k start 1823871 506832 nobody 19824 0.0 S 00:52 /usr/sbin/httpd -k start 1823914 506832 nobody 19788 0.0 S 00:50 /usr/sbin/httpd -k start 654684 654679 mailman 19380 0.0 S 05:33:07 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=BounceRunner:1:2 -s 654690 654679 mailman 19368 0.0 S 05:33:07 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=NewsRunner:0:1 -s 654699 654679 mailman 19348 0.0 S 05:33:07 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=VirginRunner:0:1 -s 654685 654679 mailman 19320 0.0 S 05:33:07 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=CommandRunner:0:1 -s 654693 654679 mailman 19200 0.0 S 05:33:07 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:2:8 -s 654687 654679 mailman 19176 0.0 S 05:33:07 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:1:4 -s 1823879 506832 nobody 19168 0.0 S 00:51 /usr/sbin/httpd -k start 654692 654679 mailman 19092 0.0 S 05:33:07 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:1:8 -s 654689 654679 mailman 19048 0.0 S 05:33:07 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s 654686 654679 mailman 19032 0.0 S 05:33:07 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:0:4 -s 654698 654679 mailman 19016 0.0 S 05:33:07 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:7:8 -s 654696 654679 mailman 18948 0.0 S 05:33:07 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:5:8 -s --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 16131003 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 333 madalice/madalice.com.au-ssl_log 257 evolution/portal.evolutionerp.com.au-ssl_log 254 coscom/coscom.com.au 133 evolution/app.evolutionerp.com.au-ssl_log 118 otterfencing/otterfencing.com.au-ssl_log 48 olympic/olympicfencing.com.au-ssl_log 21 otter2/otterfencing.net.au-ssl_log 5 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 308 203.54.180.238 247 149.88.19.85 154 103.104.165.99 133 4.204.224.164 118 40.115.94.245 70 103.104.164.114 48 20.48.250.41 22 150.228.151.47 20 179.43.145.34 16 124.168.5.234 7 1.145.118.159 3 182.239.240.254 3 101.166.96.210 2 205.169.39.50 2 180.181.236.49 --- top request paths across all vhosts (last 3 min) --- 118 GET /api/getItem/LWPG2001KG 112 POST /functions.php 94 GET /factory_session_checker.php 69 GET /app/ajax.php 51 GET /heartbeat.php 48 GET /factory_session_joiner.php 47 GET /factory_session_processed_qty.php 29 GET /index.php 15 POST /app/ajax.php 14 POST /wp-login.php 13 POST /plugins/csvexporter/plugin.php 13 POST /app/ajax/selectFilterSingle.php 11 POST /quoteditsave.php 10 POST /clienteditsave.php 10 POST /app/ajax/selectFilter.php 10 GET / 8 POST /plugins/fencecosting/plugin.php 7 POST /portal/register 7 POST //functions.php 6 GET /wp-login.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 112 POST /functions.php 69 GET /app/ajax.php 22 GET /index.php 15 POST /app/ajax.php 13 POST /plugins/csvexporter/plugin.php 13 POST /app/ajax/selectFilterSingle.php 11 POST /quoteditsave.php 10 POST /clienteditsave.php 10 POST /app/ajax/selectFilter.php 8 POST /plugins/fencecosting/plugin.php 7 POST //functions.php 5 POST /logsave.php -- last 10 requests -- 103.104.165.99 - - [02/Sep/2026:07:55:32 +1000] "GET /app/ajax.php?cn=attachmentListSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=11988897968 HTTP/1.1" 200 95 "https://my.evolutionerp.com.au/index 103.104.165.99 - - [02/Sep/2026:07:55:33 +1000] "GET /app/ajax.php?cn=tsExportSettingstimesheet&furi=false&uri=%2F&call=getUserSetting&caller=ajaxSubmitLocal&seq=14716384446 HTTP/1.1" 200 102 "https://my.evolutionerp.com 103.104.165.99 - - [02/Sep/2026:07:55:34 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 2371 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12112&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 103.104.164.114 - - [02/Sep/2026:07:55:34 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=invoiceadd&invoiceid=4818&tab=maintab" "Mozilla/5.0 (Windows NT 10.0; 103.104.165.99 - - [02/Sep/2026:07:55:34 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 22315 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12112&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Wi 103.104.164.114 - - [02/Sep/2026:07:55:35 +1000] "POST /app/ajax/selectFilter.php?call=filterinv&filter=BUN HTTP/1.1" 200 10800 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=141&tab=jobeditinv" "Mozilla/5.0 ( 103.104.165.99 - - [02/Sep/2026:07:55:36 +1000] "POST /app/ajax.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=12112&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ 103.104.164.114 - - [02/Sep/2026:07:55:36 +1000] "POST /app/ajax/selectFilter.php?call=filterinv&filter=BUNTIN HTTP/1.1" 200 2230 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=141&tab=jobeditinv" "Mozilla/5.0 203.54.180.238 - - [02/Sep/2026:07:55:36 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 283 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29621" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) 103.104.165.99 - - [02/Sep/2026:07:55:38 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 52 "https://my.evolutionerp.com.au/index.php?page=mfreqedit&id=11083" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK == madalice/madalice.com.au-ssl_log == -- top paths -- 4 GET /store/af1-mids-evangelion-theme/ 3 GET /store/af1-custom-carlton-afl-shoes/ 1 GET /wp-content/plugins/woocommerce/vendor/wp-content/plugins/woocommerce/ 1 GET /wp-content/plugins/woocommerce/vendor//wp-content/plugins/woocommerce/ 1 GET /wp-content/plugins/woocommerce/vendor/automattic/wp-content/plugins/woocommerce/vendor/ 1 GET /wp-content/plugins/woocommerce/vendor/automattic//wp-content/plugins/woocommerce/vendor/ 1 GET /wp-content/plugins/woocommerce/vendor/automattic/jetpack-a8c-mc-stats/wp-content/plugins/woocommerce/vendor/automattic/ 1 GET /wp-content/plugins/woocommerce/vendor/automattic/jetpack-a8c-mc-stats//wp-content/plugins/woocommerce/vendor/automattic/ 1 GET /wp-content/plugins/woocommerce/vendor/automattic/jetpack-a8c-mc-stats/src/wp-content/plugins/woocommerce/vendor/automattic/jetpack-a8c-mc-stats/ 1 GET /wp-content/plugins/woocommerce/vendor/automattic/jetpack-a8c-mc-stats/src//wp-content/plugins/woocommerce/vendor/automattic/jetpack-a8c-mc-stats/ 1 GET /wp-content/plugins/woocommerce/vendor/automattic/jetpack-a8c-mc-stats/src/ 1 GET /wp-content/plugins/woocommerce/vendor/automattic/jetpack-a8c-mc-stats/ -- last 10 requests -- 149.88.19.85 - - [02/Sep/2026:07:55:28 +1000] "GET /wp-content/plugins/woocommerce/vendor/automattic/block-delimiter/src//wp-content/plugins/woocommerce/vendor/automattic/block-delimiter/ HTTP/1.1" 301 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:07:55:29 +1000] "GET /wp-content/plugins/woocommerce/vendor/automattic/block-delimiter/src/wp-content/plugins/woocommerce/vendor/automattic/block-delimiter/ HTTP/1.1" 404 36646 "-" "-" 149.88.19.85 - - [02/Sep/2026:07:55:31 +1000] "GET /wp-content/plugins/woocommerce/vendor/automattic/block-delimiter/src/class-block-delimiter.php HTTP/1.1" 200 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:07:55:31 +1000] "GET /wp-content/plugins/woocommerce/vendor/automattic/block-delimiter/src/class-block-scanner.php HTTP/1.1" 200 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:07:55:32 +1000] "GET /wp-content/plugins/woocommerce/vendor/automattic/jetpack-a8c-mc-stats/ HTTP/1.1" 200 355 "-" "-" 149.88.19.85 - - [02/Sep/2026:07:55:32 +1000] "GET /wp-content/plugins/woocommerce/vendor/automattic/jetpack-a8c-mc-stats//wp-content/plugins/woocommerce/vendor/automattic/ HTTP/1.1" 301 1 "-" "-" 149.88.19.85 - - [02/Sep/2026:07:55:33 +1000] "GET /wp-content/plugins/woocommerce/vendor/automattic/jetpack-a8c-mc-stats/wp-content/plugins/woocommerce/vendor/automattic/ HTTP/1.1" 404 36657 "-" "-" 149.88.19.85 - - [02/Sep/2026:07:55:35 +1000] "GET /wp-content/plugins/woocommerce/vendor/automattic/jetpack-a8c-mc-stats/src/ HTTP/1.1" 200 341 "-" "-" 149.88.19.85 - - [02/Sep/2026:07:55:36 +1000] "GET /wp-content/plugins/woocommerce/vendor/automattic/jetpack-a8c-mc-stats/src//wp-content/plugins/woocommerce/vendor/automattic/jetpack-a8c-mc-stats/ HTTP/1.1" 301 1 "-" "- 149.88.19.85 - - [02/Sep/2026:07:55:37 +1000] "GET /wp-content/plugins/woocommerce/vendor/automattic/jetpack-a8c-mc-stats/src/wp-content/plugins/woocommerce/vendor/automattic/jetpack-a8c-mc-stats/ HTTP/1.1" 404 36660 "-" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 94 GET /factory_session_checker.php 51 GET /heartbeat.php 48 GET /factory_session_joiner.php 47 GET /factory_session_processed_qty.php 7 POST /portal/register 7 GET /index.php -- last 10 requests -- 203.54.180.238 - - [02/Sep/2026:07:55:39 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:07:55:39 +1000] "GET /factory_session_processed_qty.php HTTP/1.1" 200 126 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWeb 203.54.180.238 - - [02/Sep/2026:07:55:39 +1000] "GET /factory_session_joiner.php?id=35037 HTTP/1.1" 200 78 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe 203.54.180.238 - - [02/Sep/2026:07:55:40 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:07:55:40 +1000] "GET /heartbeat.php?sentAt=1788299740&bytes=106,151,73,220&_=1788299239847 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=9" 203.54.180.238 - - [02/Sep/2026:07:55:43 +1000] "GET /heartbeat.php?sentAt=1788299743&bytes=106,151,73,223&_=1788238875226 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:07:55:44 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:07:55:45 +1000] "GET /factory_session_checker.php HTTP/1.1" 200 35 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537 203.54.180.238 - - [02/Sep/2026:07:55:45 +1000] "GET /heartbeat.php?sentAt=1788299745&bytes=106,151,73,225&_=1788267564545 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [02/Sep/2026:07:55:47 +1000] "GET /factory_session_joiner.php?id=35036 HTTP/1.1" 200 77 "https://portal.evolutionerp.com.au/index.php?page=factory_workbench" "Mozilla/5.0 (Linux; Android 10; K) AppleWe --- last 30 samples (run-up to this incident) --- 2026-09-02 07:53:19 L1=1.34 run=1 blk=0 avail=7271 (52.8%) swpO=0 conn=1 myRSS=3332 php=10 phpRSS=435 ap=52 tcp=51 topuser=madalice 2026-09-02 07:53:28 L1=1.31 run=1 blk=0 avail=7368 (53.5%) swpO=0 conn=1 myRSS=3332 php=10 phpRSS=394 ap=45 tcp=43 topuser=madalice 2026-09-02 07:53:29 L1=1.21 run=1 blk=0 avail=7377 (53.5%) swpO=0 conn=1 myRSS=3332 php=10 phpRSS=394 ap=44 tcp=40 topuser=madalice 2026-09-02 07:53:38 L1=1.19 run=3 blk=0 avail=7278 (52.8%) swpO=0 conn=1 myRSS=3332 php=11 phpRSS=558 ap=38 tcp=45 topuser=madalice 2026-09-02 07:53:39 L1=1.26 run=2 blk=0 avail=7195 (52.2%) swpO=0 conn=1 myRSS=3332 php=12 phpRSS=666 ap=38 tcp=49 topuser=madalice 2026-09-02 07:53:49 L1=1.32 run=5 blk=0 avail=7134 (51.8%) swpO=0 conn=1 myRSS=3332 php=13 phpRSS=683 ap=48 tcp=56 topuser=madalice 2026-09-02 07:53:49 L1=1.45 run=3 blk=0 avail=7071 (51.3%) swpO=0 conn=1 myRSS=3332 php=13 phpRSS=747 ap=48 tcp=61 topuser=madalice 2026-09-02 07:53:59 L1=1.50 run=4 blk=0 avail=7010 (50.9%) swpO=0 conn=1 myRSS=3332 php=12 phpRSS=741 ap=58 tcp=62 topuser=madalice 2026-09-02 07:53:59 L1=1.54 run=3 blk=0 avail=7016 (50.9%) swpO=0 conn=3 myRSS=3332 php=11 phpRSS=709 ap=58 tcp=56 topuser=madalice 2026-09-02 07:54:09 L1=1.73 run=4 blk=0 avail=6960 (50.5%) swpO=0 conn=1 myRSS=3332 php=12 phpRSS=863 ap=48 tcp=45 topuser=madalice 2026-09-02 07:54:09 L1=1.67 run=1 blk=0 avail=7120 (51.7%) swpO=0 conn=3 myRSS=3332 php=10 phpRSS=643 ap=48 tcp=45 topuser=madalice 2026-09-02 07:54:19 L1=1.78 run=2 blk=0 avail=7177 (52.1%) swpO=0 conn=1 myRSS=3332 php=10 phpRSS=638 ap=41 tcp=48 topuser=madalice 2026-09-02 07:54:19 L1=1.80 run=3 blk=0 avail=7160 (52.0%) swpO=0 conn=3 myRSS=3332 php=12 phpRSS=704 ap=41 tcp=48 topuser=madalice 2026-09-02 07:54:29 L1=1.97 run=4 blk=0 avail=6966 (50.6%) swpO=0 conn=2 myRSS=3332 php=12 phpRSS=933 ap=40 tcp=47 topuser=madalice 2026-09-02 07:54:30 L1=1.90 run=4 blk=0 avail=6825 (49.5%) swpO=0 conn=3 myRSS=3332 php=11 phpRSS=1018 ap=40 tcp=46 topuser=madalice 2026-09-02 07:54:39 L1=1.74 run=3 blk=0 avail=6980 (50.7%) swpO=0 conn=2 myRSS=3332 php=10 phpRSS=844 ap=40 tcp=41 topuser=madalice 2026-09-02 07:54:40 L1=1.60 run=2 blk=0 avail=7169 (52.0%) swpO=0 conn=3 myRSS=3332 php=10 phpRSS=638 ap=40 tcp=41 topuser=madalice 2026-09-02 07:54:49 L1=1.56 run=4 blk=0 avail=6900 (50.1%) swpO=0 conn=2 myRSS=3332 php=11 phpRSS=907 ap=46 tcp=52 topuser=madalice 2026-09-02 07:54:50 L1=1.59 run=1 blk=0 avail=6881 (50.0%) swpO=0 conn=3 myRSS=3332 php=10 phpRSS=884 ap=46 tcp=52 topuser=madalice 2026-09-02 07:54:59 L1=1.78 run=3 blk=0 avail=7056 (51.2%) swpO=0 conn=2 myRSS=3332 php=10 phpRSS=579 ap=64 tcp=70 topuser=madalice 2026-09-02 07:55:00 L1=1.64 run=3 blk=0 avail=7029 (51.0%) swpO=0 conn=2 myRSS=3332 php=11 phpRSS=623 ap=68 tcp=66 topuser=madalice 2026-09-02 07:55:09 L1=1.75 run=5 blk=0 avail=7024 (51.0%) swpO=0 conn=2 myRSS=3332 php=11 phpRSS=641 ap=61 tcp=52 topuser=madalice 2026-09-02 07:55:10 L1=1.93 run=6 blk=0 avail=6801 (49.4%) swpO=0 conn=2 myRSS=3332 php=12 phpRSS=932 ap=60 tcp=55 topuser=madalice 2026-09-02 07:55:19 L1=2.10 run=3 blk=0 avail=6599 (47.9%) swpO=0 conn=2 myRSS=3332 php=11 phpRSS=1163 ap=51 tcp=54 topuser=madalice 2026-09-02 07:55:20 L1=2.25 run=3 blk=0 avail=6643 (48.2%) swpO=0 conn=2 myRSS=3333 php=12 phpRSS=1130 ap=50 tcp=54 topuser=madalice 2026-09-02 07:55:29 L1=2.07 run=3 blk=0 avail=6575 (47.7%) swpO=0 conn=2 myRSS=3333 php=11 phpRSS=1209 ap=47 tcp=47 topuser=madalice 2026-09-02 07:55:30 L1=2.06 run=4 blk=0 avail=6531 (47.4%) swpO=0 conn=2 myRSS=3333 php=12 phpRSS=1304 ap=46 tcp=42 topuser=madalice 2026-09-02 07:55:39 L1=2.22 run=1 blk=0 avail=6688 (48.5%) swpO=0 conn=2 myRSS=3333 php=10 phpRSS=1121 ap=40 tcp=34 topuser=madalice 2026-09-02 07:55:40 L1=2.04 run=3 blk=0 avail=6678 (48.5%) swpO=0 conn=2 myRSS=3333 php=11 phpRSS=1168 ap=39 tcp=37 topuser=madalice 2026-09-02 07:55:49 L1=2.12 run=5 blk=0 avail=6398 (46.4%) swpO=0 conn=3 myRSS=3333 php=12 phpRSS=1533 ap=32 tcp=37 topuser=madalice