INCIDENT 2026-09-02 14:52:03 trigger: php_rss=1638MB ================================================================== load: 2.20 2.09 3.14 1/629 3386042 ncpu:10 mem_avail: 8528MB/13777MB (61.9%) swap_used:1375MB swapout:0/s blocked(D):0 running:1 iowait:0.1% steal:0.0% php: 13 procs / 1638MB heaviest user: madalice (10 procs, 1594MB) apache: 48 procs tcp_estab: 45 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1896 madalice 10 1594 nobody 47 819 root 245 417 netdata 7 196 cpanellogin 1 47 evolution 9 43 mailman 20 36 dovenull 6 19 wp-toolkit 3 18 zabbix 1 17 aaa 1 12 mailnull 2 9 dovecot 3 9 kurri 1 4 polkitd 1 3 nscd 1 3 dbus 1 3 cpanelconnecttrack 1 3 named 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 10 1594 evolution 2 40 root 1 2 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5696 MB Active(file): 4145 MB Inactive(file): 1927 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 282 MB CommitLimit: 10984 MB Committed_AS: 8644 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 1-12:29:35 4596 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 1942432 36.4 Ssl 37:50 /usr/sbin/mariadbd 508924 1 netdata 180932 2.0 Ssl 5-12:32:24 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3369272 3929444 madalice 165316 15.6 S 03:04 php-fpm: pool madalice_com_au 3292380 3929444 madalice 164416 10.5 R 24:46 php-fpm: pool madalice_com_au 3369925 3929444 madalice 164172 10.8 S 02:10 php-fpm: pool madalice_com_au 3369921 3929444 madalice 163944 9.5 S 02:10 php-fpm: pool madalice_com_au 3369920 3929444 madalice 163184 9.7 S 02:10 php-fpm: pool madalice_com_au 3367548 3929444 madalice 162744 18.2 S 05:24 php-fpm: pool madalice_com_au 3369923 3929444 madalice 162652 10.3 S 02:10 php-fpm: pool madalice_com_au 3369924 3929444 madalice 162464 9.8 S 02:10 php-fpm: pool madalice_com_au 3369926 3929444 madalice 162204 9.8 S 02:10 php-fpm: pool madalice_com_au 3369922 3929444 madalice 161760 10.6 S 02:10 php-fpm: pool madalice_com_au 706071 655564 root 152800 0.0 S 12:14:05 spamd child 3239542 1353308 cpanellogin 48948 0.0 S 37:36 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en docroot /usr/local/cpanel/base cpanel_locale 2900038 655564 root 43520 0.0 S 02:10:01 spamd child 1353308 1 root 42036 0.1 Ss 42-12:10:47 cpsrvd (SSL) - waiting for connections 509236 509098 root 27080 0.0 Sl 5-12:32:21 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 3368444 506832 nobody 22192 0.0 S 04:04 /usr/sbin/httpd -k start 3350957 506832 nobody 22064 0.0 S 08:04 /usr/sbin/httpd -k start 3369244 506832 nobody 21764 0.0 S 03:10 /usr/sbin/httpd -k start 3368965 506832 nobody 21744 0.1 S 03:38 /usr/sbin/httpd -k start 3368213 506832 nobody 21732 0.0 S 04:29 /usr/sbin/httpd -k start 3367130 506832 nobody 21624 0.0 S 06:05 /usr/sbin/httpd -k start 3384791 506832 nobody 21552 0.1 S 01:14 /usr/sbin/httpd -k start 3370013 506832 nobody 21292 0.1 S 02:02 /usr/sbin/httpd -k start 3367451 506832 nobody 21064 0.0 S 05:36 /usr/sbin/httpd -k start 3369251 506832 nobody 21040 0.1 S 03:09 /usr/sbin/httpd -k start 3369981 506832 nobody 21032 0.1 S 02:04 /usr/sbin/httpd -k start 3369694 506832 nobody 20620 0.0 S 02:23 /usr/sbin/httpd -k start 3368097 506832 nobody 20604 0.1 S 04:37 /usr/sbin/httpd -k start 3385564 506832 nobody 20516 0.3 S 00:44 /usr/sbin/httpd -k start 3385566 506832 nobody 20224 0.0 S 00:44 /usr/sbin/httpd -k start 3369476 506832 nobody 20124 0.0 S 02:49 /usr/sbin/httpd -k start 3367440 506832 nobody 20064 0.0 S 05:37 /usr/sbin/httpd -k start 3384956 506832 nobody 19832 0.0 S 01:07 /usr/sbin/httpd -k start 3369712 506832 nobody 19672 0.0 S 02:22 /usr/sbin/httpd -k start 3370003 506832 nobody 19548 0.0 S 02:02 /usr/sbin/httpd -k start 3385556 506832 nobody 19256 0.1 S 00:45 /usr/sbin/httpd -k start 3385583 506832 nobody 19228 0.1 S 00:43 /usr/sbin/httpd -k start 3384893 506832 nobody 19160 0.0 S 01:08 /usr/sbin/httpd -k start 3385588 506832 nobody 19000 0.1 S 00:43 /usr/sbin/httpd -k start 3385542 506832 nobody 18996 0.1 S 00:46 /usr/sbin/httpd -k start 3385794 506832 nobody 18592 0.1 S 00:23 /usr/sbin/httpd -k start 3385584 506832 nobody 18388 0.0 S 00:43 /usr/sbin/httpd -k start 483898 1 zabbix 18384 0.2 Ssl 5-12:33:38 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 3385893 506832 nobody 18376 0.0 S 00:12 /usr/sbin/httpd -k start 3385901 506832 nobody 18204 0.2 S 00:11 /usr/sbin/httpd -k start 509671 508992 netdata 18072 2.1 Sl 5-12:32:19 /usr/libexec/netdata/plugins.d/apps.plugin 1 3385888 506832 nobody 17852 0.1 S 00:13 /usr/sbin/httpd -k start 3385899 506832 nobody 17848 0.0 S 00:11 /usr/sbin/httpd -k start 3385589 506832 nobody 17812 0.0 S 00:43 /usr/sbin/httpd -k start 3385895 506832 nobody 17764 0.0 S 00:12 /usr/sbin/httpd -k start 3385785 506832 nobody 17760 0.0 S 00:24 /usr/sbin/httpd -k start 3369695 506832 nobody 17620 0.0 S 02:23 /usr/sbin/httpd -k start 3385900 506832 nobody 17588 0.1 S 00:11 /usr/sbin/httpd -k start 3385903 506832 nobody 17520 0.0 S 00:11 /usr/sbin/httpd -k start 3385793 506832 nobody 17468 0.0 S 00:23 /usr/sbin/httpd -k start 3385904 506832 nobody 16104 0.0 S 00:11 /usr/sbin/httpd -k start 3385587 506832 nobody 15632 0.0 S 00:43 /usr/sbin/httpd -k start 3385876 506832 nobody 15324 0.0 S 00:16 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 307801 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 361 lowrange/lowrange.com.au 126 madalice/madalice.com.au-ssl_log 105 coscom/swms.coscom.com.au 89 evolution/portal.evolutionerp.com.au-ssl_log 83 evolution/app.evolutionerp.com.au-ssl_log 61 corpkicks/corporatekicks.com.au-ssl_log 5 tubesupplies/tubesupplies.com.au-ssl_log 3 vinesit/vinesit.com.au-ssl_log 1 (total vhosts taking traffic: 9) --- top client IPs across all vhosts (last 3 min) --- 215 20.48.179.39 149 203.54.180.238 97 103.104.165.99 81 20.48.251.3 63 103.104.164.114 61 40.115.94.245 30 180.181.236.49 19 150.228.151.47 16 120.154.88.130 15 124.168.5.234 14 182.239.240.254 14 101.182.108.127 12 2001:8004:14b3:854f:95d1:bdfe:1050:32b5 10 1.144.107.82 5 101.119.159.209 --- top request paths across all vhosts (last 3 min) --- 128 POST /functions.php 58 GET /app/ajax.php 28 GET /factory_session_checker.php 26 GET /index.php 22 GET /heartbeat.php 21 POST /app/ajax/selectFilter.php 19 POST /app/ajax.php 16 POST /quoteditsave.php 14 POST /wp-admin/admin-ajax.php 14 GET /factory_session_processed_qty.php 14 GET /factory_session_joiner.php 12 POST /itemModify.php 11 POST /plugins/csvexporter/plugin.php 9 HEAD /index.php 8 POST /app/ajax/selectFilterSingle.php 7 POST /purchaseaddsave.php 7 POST /plugins/fencecosting/plugin.php 6 POST /clienteditsave.php 6 GET //app/ajax.php 5 POST /plugins/pipe/pipetopostsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 128 POST /functions.php 58 GET /app/ajax.php 24 GET /index.php 21 POST /app/ajax/selectFilter.php 19 POST /app/ajax.php 16 POST /quoteditsave.php 12 POST /itemModify.php 11 POST /plugins/csvexporter/plugin.php 9 HEAD /index.php 8 POST /app/ajax/selectFilterSingle.php 7 POST /purchaseaddsave.php 7 POST /plugins/fencecosting/plugin.php -- last 10 requests -- 103.104.164.114 - - [02/Sep/2026:14:51:50 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=1864" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl 182.239.240.254 - - [02/Sep/2026:14:51:51 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 150.228.151.47 - - [02/Sep/2026:14:51:52 +1000] "POST //functions.php?call=heartbeat HTTP/1.1" 200 281 "https://my.evolutionerp.com.au//index.php?page=jobedit&id=79&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; x 103.104.164.114 - - [02/Sep/2026:14:51:55 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C 101.182.108.127 - - [02/Sep/2026:14:51:56 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79039§ionid=9837" "Mozilla/5.0 (Windows NT 10.0; 203.54.180.238 - - [02/Sep/2026:14:51:57 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 103.104.165.99 - - [02/Sep/2026:14:51:57 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=invedit&id=5674&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x 103.104.164.114 - - [02/Sep/2026:14:51:58 +1000] "POST /quoteditsave.php?call=addLineItem HTTP/1.1" 200 284 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=1864" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 101.182.108.127 - - [02/Sep/2026:14:51:59 +1000] "POST /quoteditsave.php?call=addLineItem HTTP/1.1" 200 342 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79039§ionid=9837" "Mozilla/5.0 (Windows NT 1 103.104.165.99 - - [02/Sep/2026:14:52:02 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=pickingedit&pickingid=16423" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) == lowrange/lowrange.com.au == -- top paths -- 2 GET /wp-content/themes/index.php 1 GET /xnm-apc.php 1 GET /xiugai.php 1 GET /xamp.php 1 GET /wp-temp.php 1 GET /wp.php 1 GET /wp-manager.php 1 GET /wp-mails.php 1 GET /wp-includes/Text/Diff/Engine/about.php 1 GET //wp-includes/Requests/ 1 GET //wp-includes/l10n/ 1 GET //wp-includes/js/jquery/ -- last 10 requests -- 20.48.179.39 - - [02/Sep/2026:14:51:29 +1000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 404 - "-" "-" 20.48.179.39 - - [02/Sep/2026:14:51:29 +1000] "GET //wp-includes/block-bindings/ HTTP/1.1" 404 - "-" "-" 20.48.179.39 - - [02/Sep/2026:14:51:29 +1000] "GET //wp-includes/assets/ HTTP/1.1" 404 - "-" "-" 20.48.179.39 - - [02/Sep/2026:14:51:29 +1000] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 404 - "-" "-" 20.48.179.39 - - [02/Sep/2026:14:51:29 +1000] "GET /wp-admin/network/plugins.php HTTP/1.1" 404 - "-" "-" 20.48.179.39 - - [02/Sep/2026:14:51:30 +1000] "GET /wp-admin/maint/index.php HTTP/1.1" 404 - "-" "-" 20.48.179.39 - - [02/Sep/2026:14:51:30 +1000] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 404 - "-" "-" 20.48.179.39 - - [02/Sep/2026:14:51:30 +1000] "GET /qazwsx.php HTTP/1.1" 404 - "-" "-" 20.48.179.39 - - [02/Sep/2026:14:51:30 +1000] "GET /cae2.2.php HTTP/1.1" 404 - "-" "-" 20.48.179.39 - - [02/Sep/2026:14:51:30 +1000] "GET /b8.php HTTP/1.1" 404 - "-" "-" == madalice/madalice.com.au-ssl_log == -- top paths -- 14 POST /wp-admin/admin-ajax.php 2 POST / 2 GET /ms-edit.php 2 GET /koiy.php 1 GET /zz.php 1 GET /zaza.php 1 GET /xve22.php 1 GET //xve22.php 1 GET /xp.php 1 GET /xmy.php 1 GET /xin1.php 1 GET /xa.php -- last 10 requests -- 20.48.251.3 - - [02/Sep/2026:14:51:53 +1000] "GET /atex1.php HTTP/1.1" 404 36644 "-" "-" 20.48.251.3 - - [02/Sep/2026:14:51:55 +1000] "GET /mcebraed.php HTTP/1.1" 404 36647 "-" "-" 3.212.205.90 - - [02/Sep/2026:14:51:57 +1000] "GET /wp-content/plugins/elementor/assets/js/packages/site-builder/?C=M;O%3DA HTTP/1.1" 200 368 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/ 20.48.251.3 - - [02/Sep/2026:14:51:56 +1000] "GET /php-details.php HTTP/1.1" 404 36647 "-" "-" 20.48.251.3 - - [02/Sep/2026:14:51:58 +1000] "GET /grsiuk.php HTTP/1.1" 404 36645 "-" "-" 2001:4860:7:807::a3 - - [02/Sep/2026:14:51:58 +1000] "GET /nike-by-you-australia/?srsltid=AfmBOop2bsscjNjHI_QM5oOVCFlE1fWyipTAr2GlmyesjtqUfvavg0Ox HTTP/1.1" 200 40062 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10 2001:8004:14b3:854f:95d1:bdfe:1050:32b5 - - [02/Sep/2026:14:51:58 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 77 "https://madalice.com.au/wp-admin/post.php?post=34699&action=edit" "Mozilla/5.0 (Windows NT 10.0; W 20.48.251.3 - - [02/Sep/2026:14:51:59 +1000] "GET /config_dev.php HTTP/1.1" 404 36646 "-" "-" 20.48.251.3 - - [02/Sep/2026:14:52:01 +1000] "GET /vx.php HTTP/1.1" 404 36641 "-" "-" 52.45.15.233 - - [02/Sep/2026:14:52:03 +1000] "GET /wp-content/plugins/elementor/assets/lib/nprogress/?C=S;O%3DD HTTP/1.1" 200 323 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https --- last 30 samples (run-up to this incident) --- 2026-09-02 14:49:32 L1=2.09 run=4 blk=0 avail=9547 (69.3%) swpO=0 conn=2 myRSS=1886 php=5 phpRSS=484 ap=33 tcp=39 topuser=madalice 2026-09-02 14:49:42 L1=2.08 run=5 blk=0 avail=9401 (68.2%) swpO=0 conn=3 myRSS=1887 php=6 phpRSS=553 ap=48 tcp=51 topuser=madalice 2026-09-02 14:49:42 L1=2.08 run=4 blk=0 avail=9383 (68.1%) swpO=0 conn=2 myRSS=1887 php=7 phpRSS=575 ap=48 tcp=52 topuser=madalice 2026-09-02 14:49:52 L1=1.99 run=2 blk=0 avail=9395 (68.2%) swpO=0 conn=3 myRSS=1887 php=5 phpRSS=555 ap=44 tcp=47 topuser=madalice 2026-09-02 14:49:52 L1=1.99 run=5 blk=0 avail=9354 (67.9%) swpO=0 conn=2 myRSS=1887 php=6 phpRSS=544 ap=44 tcp=47 topuser=madalice 2026-09-02 14:50:02 L1=2.87 run=2 blk=1 avail=8303 (60.3%) swpO=0 conn=2 myRSS=1889 php=12 phpRSS=1663 ap=73 tcp=60 topuser=madalice 2026-09-02 14:50:02 L1=2.87 run=9 blk=0 avail=8270 (60.0%) swpO=0 conn=3 myRSS=1889 php=13 phpRSS=1726 ap=73 tcp=57 topuser=madalice 2026-09-02 14:50:12 L1=2.82 run=2 blk=0 avail=8431 (61.2%) swpO=0 conn=2 myRSS=1891 php=12 phpRSS=1637 ap=63 tcp=55 topuser=madalice 2026-09-02 14:50:13 L1=2.82 run=1 blk=0 avail=8459 (61.4%) swpO=0 conn=2 myRSS=1891 php=13 phpRSS=1639 ap=62 tcp=55 topuser=madalice 2026-09-02 14:50:23 L1=2.70 run=3 blk=0 avail=8523 (61.9%) swpO=0 conn=3 myRSS=1891 php=13 phpRSS=1637 ap=53 tcp=48 topuser=madalice 2026-09-02 14:50:23 L1=2.70 run=2 blk=0 avail=8490 (61.6%) swpO=0 conn=3 myRSS=1891 php=13 phpRSS=1680 ap=52 tcp=46 topuser=madalice 2026-09-02 14:50:33 L1=2.44 run=1 blk=0 avail=8590 (62.3%) swpO=0 conn=2 myRSS=1891 php=13 phpRSS=1638 ap=43 tcp=49 topuser=madalice 2026-09-02 14:50:33 L1=2.44 run=2 blk=0 avail=8583 (62.3%) swpO=0 conn=3 myRSS=1891 php=13 phpRSS=1642 ap=42 tcp=49 topuser=madalice 2026-09-02 14:50:43 L1=2.30 run=5 blk=0 avail=8563 (62.2%) swpO=0 conn=3 myRSS=1891 php=14 phpRSS=1706 ap=37 tcp=45 topuser=madalice 2026-09-02 14:50:43 L1=2.30 run=1 blk=0 avail=8624 (62.6%) swpO=0 conn=2 myRSS=1892 php=13 phpRSS=1637 ap=37 tcp=46 topuser=madalice 2026-09-02 14:50:53 L1=2.26 run=2 blk=0 avail=8629 (62.6%) swpO=0 conn=3 myRSS=1893 php=13 phpRSS=1645 ap=35 tcp=42 topuser=madalice 2026-09-02 14:50:53 L1=2.26 run=5 blk=0 avail=8535 (62.0%) swpO=0 conn=4 myRSS=1893 php=14 phpRSS=1758 ap=35 tcp=43 topuser=madalice 2026-09-02 14:51:03 L1=2.22 run=2 blk=0 avail=8524 (61.9%) swpO=0 conn=3 myRSS=1893 php=14 phpRSS=1734 ap=39 tcp=39 topuser=madalice 2026-09-02 14:51:03 L1=2.22 run=3 blk=0 avail=8557 (62.1%) swpO=0 conn=4 myRSS=1893 php=14 phpRSS=1706 ap=39 tcp=41 topuser=madalice 2026-09-02 14:51:13 L1=2.35 run=3 blk=0 avail=8452 (61.3%) swpO=0 conn=5 myRSS=1894 php=17 phpRSS=1923 ap=36 tcp=43 topuser=madalice 2026-09-02 14:51:13 L1=2.35 run=6 blk=0 avail=8394 (60.9%) swpO=0 conn=4 myRSS=1894 php=18 phpRSS=2011 ap=36 tcp=43 topuser=madalice 2026-09-02 14:51:23 L1=2.38 run=2 blk=0 avail=8540 (62.0%) swpO=0 conn=3 myRSS=1896 php=13 phpRSS=1639 ap=49 tcp=42 topuser=madalice 2026-09-02 14:51:24 L1=2.38 run=4 blk=0 avail=8512 (61.8%) swpO=0 conn=3 myRSS=1896 php=13 phpRSS=1673 ap=49 tcp=42 topuser=madalice 2026-09-02 14:51:33 L1=2.33 run=2 blk=0 avail=8611 (62.5%) swpO=0 conn=3 myRSS=1896 php=13 phpRSS=1650 ap=39 tcp=38 topuser=madalice 2026-09-02 14:51:34 L1=2.33 run=3 blk=0 avail=8544 (62.0%) swpO=0 conn=3 myRSS=1896 php=13 phpRSS=1722 ap=39 tcp=39 topuser=madalice 2026-09-02 14:51:43 L1=2.28 run=1 blk=0 avail=8601 (62.4%) swpO=0 conn=2 myRSS=1896 php=13 phpRSS=1640 ap=40 tcp=46 topuser=madalice 2026-09-02 14:51:44 L1=2.28 run=2 blk=0 avail=8614 (62.5%) swpO=0 conn=1 myRSS=1896 php=12 phpRSS=1600 ap=40 tcp=46 topuser=madalice 2026-09-02 14:51:53 L1=2.24 run=4 blk=0 avail=8466 (61.5%) swpO=0 conn=3 myRSS=1896 php=14 phpRSS=1674 ap=56 tcp=61 topuser=madalice 2026-09-02 14:51:54 L1=2.24 run=3 blk=0 avail=8437 (61.2%) swpO=0 conn=3 myRSS=1896 php=13 phpRSS=1667 ap=56 tcp=62 topuser=madalice 2026-09-02 14:52:03 L1=2.20 run=1 blk=0 avail=8528 (61.9%) swpO=0 conn=2 myRSS=1896 php=13 phpRSS=1638 ap=48 tcp=45 topuser=madalice