INCIDENT 2026-09-02 14:53:04 trigger: php_rss=2024MB ================================================================== load: 2.10 2.08 3.06 3/616 3386994 ncpu:10 mem_avail: 8306MB/13777MB (60.3%) swap_used:1375MB swapout:0/s blocked(D):0 running:3 iowait:0.1% steal:0.0% php: 14 procs / 2024MB heaviest user: madalice (10 procs, 1597MB) apache: 31 procs tcp_estab: 42 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1898 madalice 11 1609 nobody 30 520 corpkicks 3 442 root 247 419 netdata 7 196 cpanellogin 1 47 mailman 20 36 dovenull 6 19 zabbix 1 18 wp-toolkit 3 18 vinesit 1 12 aaa 1 12 dovecot 3 9 kurri 1 4 polkitd 1 3 nscd 1 3 evolution 8 3 dbus 1 3 cpanelconnecttrack 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 10 1597 corpkicks 2 432 root 1 2 evolution 1 0 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5697 MB Active(file): 4149 MB Inactive(file): 1925 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 283 MB CommitLimit: 10984 MB Committed_AS: 8707 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 1-12:30:36 4596 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 1943588 35.7 Ssl 38:51 /usr/sbin/mariadbd 3386930 3386698 corpkicks 281508 69.5 S 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 508924 1 netdata 180560 2.0 Ssl 5-12:33:25 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3386936 3386685 corpkicks 169964 70.0 R 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 3369272 3929444 madalice 166560 14.2 S 04:05 php-fpm: pool madalice_com_au 3292380 3929444 madalice 164836 10.5 S 25:47 php-fpm: pool madalice_com_au 3369926 3929444 madalice 164076 9.6 S 03:11 php-fpm: pool madalice_com_au 3369920 3929444 madalice 164060 10.1 S 03:11 php-fpm: pool madalice_com_au 3369923 3929444 madalice 163864 8.8 S 03:11 php-fpm: pool madalice_com_au 3369924 3929444 madalice 162896 10.1 S 03:11 php-fpm: pool madalice_com_au 3367548 3929444 madalice 162868 17.1 S 06:25 php-fpm: pool madalice_com_au 3369921 3929444 madalice 162532 9.5 S 03:11 php-fpm: pool madalice_com_au 3369925 3929444 madalice 162256 10.8 S 03:11 php-fpm: pool madalice_com_au 3369922 3929444 madalice 161716 10.0 S 03:11 php-fpm: pool madalice_com_au 706071 655564 root 152800 0.0 S 12:15:06 spamd child 3239542 1353308 cpanellogin 48948 0.0 S 38:37 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en docroot /usr/local/cpanel/base cpanel_locale 2900038 655564 root 43520 0.0 S 02:11:02 spamd child 1353308 1 root 42036 0.1 Ss 42-12:11:48 cpsrvd (SSL) - waiting for connections 509236 509098 root 27080 0.0 Sl 5-12:33:22 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 3350957 506832 nobody 22772 0.0 S 09:05 /usr/sbin/httpd -k start 3369981 506832 nobody 22560 0.1 S 03:05 /usr/sbin/httpd -k start 3368097 506832 nobody 22488 0.1 S 05:38 /usr/sbin/httpd -k start 3385588 506832 nobody 21972 0.1 S 01:44 /usr/sbin/httpd -k start 3367130 506832 nobody 21760 0.0 S 07:06 /usr/sbin/httpd -k start 3367440 506832 nobody 21616 0.0 S 06:38 /usr/sbin/httpd -k start 3369694 506832 nobody 21436 0.0 S 03:24 /usr/sbin/httpd -k start 3385566 506832 nobody 21420 0.0 S 01:45 /usr/sbin/httpd -k start 3385542 506832 nobody 21404 0.1 S 01:47 /usr/sbin/httpd -k start 3367451 506832 nobody 21172 0.0 S 06:37 /usr/sbin/httpd -k start 3385589 506832 nobody 20280 0.0 S 01:44 /usr/sbin/httpd -k start 3384956 506832 nobody 19980 0.0 S 02:08 /usr/sbin/httpd -k start 3384893 506832 nobody 19472 0.1 S 02:09 /usr/sbin/httpd -k start 3385893 506832 nobody 19396 0.0 S 01:13 /usr/sbin/httpd -k start 3385895 506832 nobody 19192 0.0 S 01:13 /usr/sbin/httpd -k start 3386354 506832 nobody 18932 0.0 S 00:53 /usr/sbin/httpd -k start 483898 1 zabbix 18432 0.2 Ssl 5-12:34:39 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 509671 508992 netdata 18072 2.1 Sl 5-12:33:20 /usr/libexec/netdata/plugins.d/apps.plugin 1 3386344 506832 nobody 17980 0.1 S 00:54 /usr/sbin/httpd -k start 3385785 506832 nobody 17896 0.0 S 01:25 /usr/sbin/httpd -k start 3386729 506832 nobody 17848 0.0 S 00:21 /usr/sbin/httpd -k start 3386727 506832 nobody 17620 0.0 S 00:21 /usr/sbin/httpd -k start 3386698 506832 nobody 17376 0.0 S 00:23 /usr/sbin/httpd -k start 3386709 506832 nobody 17236 0.0 S 00:22 /usr/sbin/httpd -k start 3386711 506832 nobody 16604 0.0 S 00:22 /usr/sbin/httpd -k start 3386726 506832 nobody 16248 0.0 S 00:21 /usr/sbin/httpd -k start 3386685 506832 nobody 15980 0.0 S 00:24 /usr/sbin/httpd -k start 3386710 506832 nobody 15656 0.0 S 00:22 /usr/sbin/httpd -k start 509266 1 root 13076 0.0 Ss 5-12:33:22 /usr/lib/systemd/systemd-journald 3331934 508511 aaa 12564 0.0 S 14:17 dovecot/imap 3386806 508511 madalice 12560 0.0 S 00:19 dovecot/imap 3386809 508511 corpkicks 12560 0.0 S 00:18 dovecot/imap 3386812 508511 vinesit 12356 0.0 S 00:18 dovecot/imap 654927 1 root 11504 0.0 Ss 12:30:13 lfd - sleeping 1463 1 root 11380 0.0 Ss 65-04:43:17 tailwatchd 3386722 506832 nobody 11360 0.0 S 00:21 /usr/sbin/httpd -k start 3386723 506832 nobody 11360 0.0 S 00:21 /usr/sbin/httpd -k start 3386807 508511 root 11312 0.0 S 00:19 dovecot/auth -w 3386736 1471 root 11236 0.1 S 00:20 cPhulkd - processor - http socket 654163 1 root 11024 0.0 Ss 12:30:39 queueprocd - waiting up to 60s to process a task 655564 1 root 9892 0.0 Ss 12:29:42 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 309845 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 266 lowrange/lowrange.com.au 126 madalice/madalice.com.au-ssl_log 99 evolution/app.evolutionerp.com.au-ssl_log 95 evolution/portal.evolutionerp.com.au-ssl_log 74 aaa/aaadownunder.com.au-ssl_log 17 vinesit/vinesit.com.au 7 corpkicks/corporatekicks.com.au-ssl_log 5 tubesupplies/tubesupplies.com.au-ssl_log 3 alison/alisonarts.com.au-ssl_log 2 (total vhosts taking traffic: 10) --- top client IPs across all vhosts (last 3 min) --- 151 203.54.180.238 126 20.48.179.39 95 40.115.94.245 69 20.48.251.3 66 103.104.164.114 36 103.104.165.99 18 101.182.108.127 15 2.26.172.97 15 180.181.236.49 14 182.239.240.254 11 150.228.151.47 10 2001:8004:14b3:854f:95d1:bdfe:1050:32b5 9 1.144.107.82 6 62.60.130.198 5 101.119.159.209 --- top request paths across all vhosts (last 3 min) --- 118 POST /functions.php 28 GET /app/ajax.php 24 GET /heartbeat.php 23 GET /factory_session_checker.php 16 GET /index.php 15 POST /quoteditsave.php 14 POST /itemModify.php 14 POST /app/ajax/selectFilter.php 14 GET / 12 POST /wp-admin/admin-ajax.php 12 POST /app/ajax.php 11 GET /factory_session_processed_qty.php 11 GET /factory_session_joiner.php 5 POST /plugins/pipe/pipetopostsave.php 5 POST /plugins/csvexporter/plugin.php 5 POST //functions.php 5 POST /billaddsave.php 5 POST /app/ajax/selectFilterSingle.php 5 POST /app/ajax/contactFilter.php 4 GET /modalload.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 118 POST /functions.php 28 GET /app/ajax.php 15 POST /quoteditsave.php 14 POST /itemModify.php 14 POST /app/ajax/selectFilter.php 14 GET /index.php 12 POST /app/ajax.php 5 POST /plugins/pipe/pipetopostsave.php 5 POST /plugins/csvexporter/plugin.php 5 POST //functions.php 5 POST /billaddsave.php 5 POST /app/ajax/selectFilterSingle.php -- last 10 requests -- 182.239.240.254 - - [02/Sep/2026:14:52:48 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=3502" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 203.54.180.238 - - [02/Sep/2026:14:52:49 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=invedit&id=7224&tab=generaltab" "Mozilla/5.0 (Windows NT 10.0; Win64; x 103.104.165.99 - - [02/Sep/2026:14:52:49 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=clientlist" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. 182.239.240.254 - - [02/Sep/2026:14:52:49 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 182.239.240.254 - - [02/Sep/2026:14:52:51 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 203.54.180.238 - - [02/Sep/2026:14:52:51 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79037§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win6 150.228.151.47 - - [02/Sep/2026:14:52:54 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 974 "https://my.evolutionerp.com.au/index.php?page=opportunityedit&opportunityid=138" "Mozilla/5.0 (Windows NT 10.0; Win64 103.104.164.114 - - [02/Sep/2026:14:52:55 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) C 203.54.180.238 - - [02/Sep/2026:14:52:56 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=activities" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:153.0) Gecko/ 101.182.108.127 - - [02/Sep/2026:14:52:57 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=79039§ionid=9837" "Mozilla/5.0 (Windows NT 10.0; == lowrange/lowrange.com.au == -- top paths -- 2 GET /wp-content/themes/index.php 1 GET /xnm-apc.php 1 GET /xiugai.php 1 GET /xamp.php 1 GET /wp-temp.php 1 GET /wp.php 1 GET /wp-manager.php 1 GET /wp-mails.php 1 GET /wp-includes/Text/Diff/Engine/about.php 1 GET //wp-includes/Requests/ 1 GET //wp-includes/l10n/ 1 GET //wp-includes/js/jquery/ -- last 10 requests -- 20.48.179.39 - - [02/Sep/2026:14:51:29 +1000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 404 - "-" "-" 20.48.179.39 - - [02/Sep/2026:14:51:29 +1000] "GET //wp-includes/block-bindings/ HTTP/1.1" 404 - "-" "-" 20.48.179.39 - - [02/Sep/2026:14:51:29 +1000] "GET //wp-includes/assets/ HTTP/1.1" 404 - "-" "-" 20.48.179.39 - - [02/Sep/2026:14:51:29 +1000] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 404 - "-" "-" 20.48.179.39 - - [02/Sep/2026:14:51:29 +1000] "GET /wp-admin/network/plugins.php HTTP/1.1" 404 - "-" "-" 20.48.179.39 - - [02/Sep/2026:14:51:30 +1000] "GET /wp-admin/maint/index.php HTTP/1.1" 404 - "-" "-" 20.48.179.39 - - [02/Sep/2026:14:51:30 +1000] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 404 - "-" "-" 20.48.179.39 - - [02/Sep/2026:14:51:30 +1000] "GET /qazwsx.php HTTP/1.1" 404 - "-" "-" 20.48.179.39 - - [02/Sep/2026:14:51:30 +1000] "GET /cae2.2.php HTTP/1.1" 404 - "-" "-" 20.48.179.39 - - [02/Sep/2026:14:51:30 +1000] "GET /b8.php HTTP/1.1" 404 - "-" "-" == madalice/madalice.com.au-ssl_log == -- top paths -- 12 POST /wp-admin/admin-ajax.php 2 POST / 1 GET /xve22.php 1 GET //xve22.php 1 GET /xmy.php 1 GET /xin1.php 1 GET /wsws.php 1 GET /ws79.php 1 GET /ws61.php 1 GET /wp-content/plugins/elementor/vendor/elementor/ 1 GET /wp-content/plugins/elementor/migrations/operations/ 1 GET /wp-content/plugins/elementor/includes/managers/icons.php -- last 10 requests -- 34.196.6.199 - - [02/Sep/2026:14:52:33 +1000] "GET /wp-content/plugins/elementor/data/base/sub-endpoint.php HTTP/1.1" 500 1 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://deve 20.48.251.3 - - [02/Sep/2026:14:52:31 +1000] "GET /public/rip.php.php HTTP/1.1" 404 36649 "-" "-" 20.48.251.3 - - [02/Sep/2026:14:52:33 +1000] "GET /wsws.php HTTP/1.1" 404 36644 "-" "-" 20.48.251.3 - - [02/Sep/2026:14:52:34 +1000] "GET /nlnub.php HTTP/1.1" 404 36645 "-" "-" 98.83.177.42 - - [02/Sep/2026:14:52:37 +1000] "GET /wp-content/plugins/elementor/includes/managers/icons.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://dev 20.48.251.3 - - [02/Sep/2026:14:52:36 +1000] "GET //sys.php HTTP/1.1" 301 1 "-" "-" 20.48.251.3 - - [02/Sep/2026:14:52:38 +1000] "GET /sys.php HTTP/1.1" 404 36644 "-" "-" 2001:8004:14b3:854f:95d1:bdfe:1050:32b5 - - [02/Sep/2026:14:52:38 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 77 "https://madalice.com.au/wp-admin/post.php?post=34699&action=edit" "Mozilla/5.0 (Windows NT 10.0; W 20.48.251.3 - - [02/Sep/2026:14:52:39 +1000] "GET /sadd.php HTTP/1.1" 404 36642 "-" "-" 20.48.251.3 - - [02/Sep/2026:14:52:41 +1000] "GET /cloud.php HTTP/1.1" 404 36643 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-09-02 14:50:43 L1=2.30 run=5 blk=0 avail=8563 (62.2%) swpO=0 conn=3 myRSS=1891 php=14 phpRSS=1706 ap=37 tcp=45 topuser=madalice 2026-09-02 14:50:43 L1=2.30 run=1 blk=0 avail=8624 (62.6%) swpO=0 conn=2 myRSS=1892 php=13 phpRSS=1637 ap=37 tcp=46 topuser=madalice 2026-09-02 14:50:53 L1=2.26 run=2 blk=0 avail=8629 (62.6%) swpO=0 conn=3 myRSS=1893 php=13 phpRSS=1645 ap=35 tcp=42 topuser=madalice 2026-09-02 14:50:53 L1=2.26 run=5 blk=0 avail=8535 (62.0%) swpO=0 conn=4 myRSS=1893 php=14 phpRSS=1758 ap=35 tcp=43 topuser=madalice 2026-09-02 14:51:03 L1=2.22 run=2 blk=0 avail=8524 (61.9%) swpO=0 conn=3 myRSS=1893 php=14 phpRSS=1734 ap=39 tcp=39 topuser=madalice 2026-09-02 14:51:03 L1=2.22 run=3 blk=0 avail=8557 (62.1%) swpO=0 conn=4 myRSS=1893 php=14 phpRSS=1706 ap=39 tcp=41 topuser=madalice 2026-09-02 14:51:13 L1=2.35 run=3 blk=0 avail=8452 (61.3%) swpO=0 conn=5 myRSS=1894 php=17 phpRSS=1923 ap=36 tcp=43 topuser=madalice 2026-09-02 14:51:13 L1=2.35 run=6 blk=0 avail=8394 (60.9%) swpO=0 conn=4 myRSS=1894 php=18 phpRSS=2011 ap=36 tcp=43 topuser=madalice 2026-09-02 14:51:23 L1=2.38 run=2 blk=0 avail=8540 (62.0%) swpO=0 conn=3 myRSS=1896 php=13 phpRSS=1639 ap=49 tcp=42 topuser=madalice 2026-09-02 14:51:24 L1=2.38 run=4 blk=0 avail=8512 (61.8%) swpO=0 conn=3 myRSS=1896 php=13 phpRSS=1673 ap=49 tcp=42 topuser=madalice 2026-09-02 14:51:33 L1=2.33 run=2 blk=0 avail=8611 (62.5%) swpO=0 conn=3 myRSS=1896 php=13 phpRSS=1650 ap=39 tcp=38 topuser=madalice 2026-09-02 14:51:34 L1=2.33 run=3 blk=0 avail=8544 (62.0%) swpO=0 conn=3 myRSS=1896 php=13 phpRSS=1722 ap=39 tcp=39 topuser=madalice 2026-09-02 14:51:43 L1=2.28 run=1 blk=0 avail=8601 (62.4%) swpO=0 conn=2 myRSS=1896 php=13 phpRSS=1640 ap=40 tcp=46 topuser=madalice 2026-09-02 14:51:44 L1=2.28 run=2 blk=0 avail=8614 (62.5%) swpO=0 conn=1 myRSS=1896 php=12 phpRSS=1600 ap=40 tcp=46 topuser=madalice 2026-09-02 14:51:53 L1=2.24 run=4 blk=0 avail=8466 (61.5%) swpO=0 conn=3 myRSS=1896 php=14 phpRSS=1674 ap=56 tcp=61 topuser=madalice 2026-09-02 14:51:54 L1=2.24 run=3 blk=0 avail=8437 (61.2%) swpO=0 conn=3 myRSS=1896 php=13 phpRSS=1667 ap=56 tcp=62 topuser=madalice 2026-09-02 14:52:03 L1=2.20 run=1 blk=0 avail=8528 (61.9%) swpO=0 conn=2 myRSS=1896 php=13 phpRSS=1638 ap=48 tcp=45 topuser=madalice 2026-09-02 14:52:04 L1=2.20 run=4 blk=0 avail=8536 (62.0%) swpO=0 conn=2 myRSS=1896 php=12 phpRSS=1601 ap=48 tcp=43 topuser=madalice 2026-09-02 14:52:14 L1=2.10 run=4 blk=0 avail=8546 (62.0%) swpO=0 conn=2 myRSS=1896 php=13 phpRSS=1638 ap=45 tcp=55 topuser=madalice 2026-09-02 14:52:14 L1=2.10 run=6 blk=0 avail=8535 (61.9%) swpO=0 conn=2 myRSS=1896 php=12 phpRSS=1600 ap=45 tcp=55 topuser=madalice 2026-09-02 14:52:24 L1=2.08 run=2 blk=0 avail=8538 (62.0%) swpO=0 conn=3 myRSS=1897 php=12 phpRSS=1644 ap=42 tcp=46 topuser=madalice 2026-09-02 14:52:24 L1=2.08 run=4 blk=0 avail=8537 (62.0%) swpO=0 conn=4 myRSS=1897 php=12 phpRSS=1642 ap=42 tcp=46 topuser=madalice 2026-09-02 14:52:34 L1=2.37 run=2 blk=0 avail=8585 (62.3%) swpO=0 conn=2 myRSS=1897 php=12 phpRSS=1637 ap=37 tcp=37 topuser=madalice 2026-09-02 14:52:34 L1=2.37 run=3 blk=0 avail=8578 (62.3%) swpO=0 conn=3 myRSS=1897 php=13 phpRSS=1659 ap=37 tcp=37 topuser=madalice 2026-09-02 14:52:44 L1=2.16 run=4 blk=1 avail=8523 (61.9%) swpO=0 conn=4 myRSS=1897 php=13 phpRSS=1654 ap=48 tcp=50 topuser=madalice 2026-09-02 14:52:44 L1=2.16 run=11 blk=0 avail=8527 (61.9%) swpO=0 conn=3 myRSS=1897 php=13 phpRSS=1654 ap=48 tcp=50 topuser=madalice 2026-09-02 14:52:54 L1=2.14 run=2 blk=0 avail=8611 (62.5%) swpO=0 conn=2 myRSS=1897 php=12 phpRSS=1600 ap=39 tcp=43 topuser=madalice 2026-09-02 14:52:54 L1=2.14 run=2 blk=0 avail=8611 (62.5%) swpO=0 conn=1 myRSS=1897 php=12 phpRSS=1600 ap=39 tcp=42 topuser=madalice 2026-09-02 14:53:04 L1=2.10 run=3 blk=0 avail=8306 (60.3%) swpO=0 conn=3 myRSS=1898 php=14 phpRSS=2024 ap=31 tcp=42 topuser=madalice 2026-09-02 14:53:04 L1=2.10 run=4 blk=0 avail=8305 (60.3%) swpO=0 conn=3 myRSS=1898 php=14 phpRSS=2024 ap=31 tcp=42 topuser=madalice