INCIDENT 2026-09-03 19:45:24 trigger: php_rss=1749MB ================================================================== load: 2.47 0.95 0.85 2/718 1184869 ncpu:10 mem_avail: 6808MB/13777MB (49.4%) swap_used:1540MB swapout:0/s blocked(D):0 running:4 iowait:0.1% steal:0.0% php: 14 procs / 1749MB heaviest user: madalice (10 procs, 1593MB) apache: 55 procs tcp_estab: 61 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2960 madalice 10 1593 root 247 1071 nobody 53 974 netdata 8 247 evolution 10 81 wp-toolkit 3 67 vinesit 1 62 cpanellogin 1 28 mailman 20 27 dovenull 6 26 mailnull 4 23 candyfabcom 2 23 zabbix 1 11 polkitd 1 11 kurri 1 11 dovecot 3 8 named 1 5 nscd 1 4 dbus 1 2 --- php workers by user --- USER PROCS RSS_MB madalice 10 1593 vinesit 1 62 evolution 2 62 root 1 30 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5526 MB Active(file): 4790 MB Inactive(file): 973 MB Dirty: 2 MB Writeback: 0 MB SReclaimable: 472 MB CommitLimit: 10984 MB Committed_AS: 9116 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 1170462 root 00:22 1332 /bin/sh -c bash -c 'sleep $((RANDOM % 60))' ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || : 3926885 root 2-17:22:56 4556 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3031356 15.3 Rsl 1-05:31:11 /usr/sbin/mariadbd 1542443 1 netdata 180612 2.5 Ssl 17:23:01 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 1596048 1543747 root 174204 0.0 S 17:07:36 spamd child 509266 1 root 174188 0.0 Ss 6-17:25:42 /usr/lib/systemd/systemd-journald 4117331 1543747 root 173392 0.0 S 05:40:39 spamd child 1184764 1542510 madalice 164264 70.4 S 00:09 php-fpm: pool madalice_com_au 1182869 1542510 madalice 164160 65.8 S 00:13 php-fpm: pool madalice_com_au 1169881 1542510 madalice 163140 33.6 S 01:31 php-fpm: pool madalice_com_au 1170177 1542510 madalice 163116 33.2 S 01:03 php-fpm: pool madalice_com_au 1184745 1542510 madalice 163072 65.7 S 00:10 php-fpm: pool madalice_com_au 1184110 1542510 madalice 163064 65.9 S 00:12 php-fpm: pool madalice_com_au 1170442 1542510 madalice 162780 43.2 S 00:27 php-fpm: pool madalice_com_au 1182884 1542510 madalice 162720 57.6 S 00:13 php-fpm: pool madalice_com_au 1184744 1542510 madalice 162704 66.0 S 00:10 php-fpm: pool madalice_com_au 1184754 1542510 madalice 162572 62.7 S 00:10 php-fpm: pool madalice_com_au 1543747 1 root 119460 0.0 Ss 17:22:31 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 1184819 1169867 vinesit 64624 54.7 R 00:04 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 1170494 1170463 evolution 64396 1.7 Ss 00:22 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 509236 509098 root 45532 0.0 Sl 6-17:25:42 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 42308 0.1 Ss 43-17:04:08 cpsrvd (SSL) - waiting for connections 1542981 1542551 netdata 42068 0.1 Sl 17:22:57 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1469 1 root 41932 0.1 Ss 66-09:35:37 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542487 1 wp-toolkit 37136 0.0 Ss 17:23:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1542072 1 root 32432 0.0 Ss 17:23:05 lfd - sleeping 1542510 1 root 31604 0.0 Ss 17:23:00 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1065238 1353308 cpanellogin 29348 0.0 S 34:20 /usr/local/cpanel/base/show_template.stor default_login_theme cpanel server_locale en docroot /usr/local/cpanel/base cpanel_locale 1542531 1 wp-toolkit 25132 0.0 Ss 17:23:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 1463 1 root 24644 0.0 Ss 66-09:35:37 tailwatchd 1152331 506832 nobody 22952 0.0 S 07:24 /usr/sbin/httpd -k start 1169383 506832 nobody 22752 0.0 S 02:26 /usr/sbin/httpd -k start 1542141 1 root 22732 0.0 Ss 17:23:04 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 1168810 506832 nobody 22364 0.1 S 03:30 /usr/sbin/httpd -k start 1168830 506832 nobody 22356 0.0 S 03:29 /usr/sbin/httpd -k start 1542188 1 root 22280 0.1 Ssl 17:23:03 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 1168751 506832 nobody 22200 0.0 S 03:32 /usr/sbin/httpd -k start 1168752 506832 nobody 22044 0.0 S 03:32 /usr/sbin/httpd -k start 1168834 506832 nobody 21852 0.1 S 03:29 /usr/sbin/httpd -k start 1169033 506832 nobody 21780 0.0 S 03:07 /usr/sbin/httpd -k start 1169869 506832 nobody 21276 0.0 S 01:37 /usr/sbin/httpd -k start 1169867 506832 nobody 21156 0.0 S 01:38 /usr/sbin/httpd -k start 1169017 506832 nobody 21144 0.1 S 03:10 /usr/sbin/httpd -k start 1184696 506832 nobody 20488 0.3 S 00:11 /usr/sbin/httpd -k start 1184721 506832 nobody 20464 0.3 S 00:10 /usr/sbin/httpd -k start 1170492 506832 nobody 20384 0.1 S 00:22 /usr/sbin/httpd -k start 1184722 506832 nobody 20304 0.3 S 00:10 /usr/sbin/httpd -k start 1184697 506832 nobody 20232 0.2 S 00:11 /usr/sbin/httpd -k start 1184104 506832 nobody 20204 0.1 S 00:12 /usr/sbin/httpd -k start 1184763 506832 nobody 19296 0.1 S 00:09 /usr/sbin/httpd -k start 1184758 506832 nobody 19260 0.2 S 00:09 /usr/sbin/httpd -k start 1184760 506832 nobody 19260 0.2 S 00:09 /usr/sbin/httpd -k start 1184761 506832 nobody 19260 0.1 S 00:09 /usr/sbin/httpd -k start 1184767 506832 nobody 19260 0.1 S 00:08 /usr/sbin/httpd -k start 1184768 506832 nobody 19260 0.1 S 00:08 /usr/sbin/httpd -k start 1184769 506832 nobody 19260 0.1 S 00:08 /usr/sbin/httpd -k start 1184775 506832 nobody 19260 0.1 S 00:08 /usr/sbin/httpd -k start 1184771 506832 nobody 19232 0.1 S 00:08 /usr/sbin/httpd -k start 1184813 506832 nobody 19220 0.2 S 00:04 /usr/sbin/httpd -k start 1184814 506832 nobody 19220 0.2 S 00:04 /usr/sbin/httpd -k start 1184781 506832 nobody 19200 0.1 S 00:08 /usr/sbin/httpd -k start 1184782 506832 nobody 19200 0.1 S 00:08 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 6598261 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 103 madalice/madalice.com.au-ssl_log 90 evolution/portal.evolutionerp.com.au-ssl_log 8 (total vhosts taking traffic: 3) --- top client IPs across all vhosts (last 3 min) --- 103 40.115.94.245 17 45.156.129.120 16 45.156.129.123 16 45.156.129.121 15 45.156.129.122 15 118.127.40.55 6 203.54.180.238 2 47.79.13.212 2 114.119.130.40 1 66.249.68.66 1 66.249.68.64 1 52.167.144.233 1 216.244.66.236 1 203.123.106.116 1 129.146.127.123 --- top request paths across all vhosts (last 3 min) --- 53 GET /api/getItem/LWFBW2001KG 47 GET /api/getItem/LWHG2001KG 17 POST / 6 GET /heartbeat.php 3 GET /api/getItem/LWPB2001KG 2 GET /store/travis-af1-custom/ 1 GET /wp-json/wp/v2/posts/26466 1 GET /wp-json 1 GET /wp-content/plugins/wp-video-lightbox/readme.txt 1 GET /wp-content/plugins/wp-user-avatar/readme.txt 1 GET /wp-content/plugins/wp-time-capsule/readme.txt 1 GET /wp-content/plugins/wp-super-cache/readme.txt 1 GET /wp-content/plugins/wps-hide-login/readme.txt 1 GET /wp-content/plugins/wpschoolpress/readme.txt 1 GET /wp-content/plugins/wp-optimize/readme.txt 1 GET /wp-content/plugins/wpforms-lite/readme.txt 1 GET /wp-content/plugins/wp-file-manager/readme.txt 1 GET /wp-content/plugins/wp-fastest-cache/readme.txt 1 GET /wp-content/plugins/wp-central/readme.txt 1 GET /wp-content/plugins/wordpress-seo/readme.txt --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 53 GET /api/getItem/LWFBW2001KG 47 GET /api/getItem/LWHG2001KG 3 GET /api/getItem/LWPB2001KG -- last 10 requests -- 40.115.94.245 - - [03/Sep/2026:19:45:21 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:19:45:22 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:19:45:22 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:19:45:22 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:19:45:22 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:19:45:23 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:19:45:23 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:19:45:23 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:19:45:23 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [03/Sep/2026:19:45:23 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" == madalice/madalice.com.au-ssl_log == -- top paths -- 17 POST / 2 GET /store/travis-af1-custom/ 1 GET /wp-json/wp/v2/posts/26466 1 GET /wp-json 1 GET /wp-content/plugins/wp-video-lightbox/readme.txt 1 GET /wp-content/plugins/wp-user-avatar/readme.txt 1 GET /wp-content/plugins/wp-time-capsule/readme.txt 1 GET /wp-content/plugins/wp-super-cache/readme.txt 1 GET /wp-content/plugins/wps-hide-login/readme.txt 1 GET /wp-content/plugins/wpschoolpress/readme.txt 1 GET /wp-content/plugins/wp-optimize/readme.txt 1 GET /wp-content/plugins/wpforms-lite/readme.txt -- last 10 requests -- 118.127.40.55 - - [03/Sep/2026:19:45:19 +1000] "POST /?wordfence_syncAttackData=1788428717.6296 HTTP/1.1" 200 42771 "-" "WordPress/7.1; https://madalice.com.au" 118.127.40.55 - - [03/Sep/2026:19:45:19 +1000] "POST /?wordfence_syncAttackData=1788428717.6269 HTTP/1.1" 200 42770 "-" "WordPress/7.1; https://madalice.com.au" 118.127.40.55 - - [03/Sep/2026:19:45:19 +1000] "POST /?wordfence_syncAttackData=1788428717.703 HTTP/1.1" 200 42769 "-" "WordPress/7.1; https://madalice.com.au" 118.127.40.55 - - [03/Sep/2026:19:45:19 +1000] "POST /?wordfence_syncAttackData=1788428717.702 HTTP/1.1" 200 42768 "-" "WordPress/7.1; https://madalice.com.au" 118.127.40.55 - - [03/Sep/2026:19:45:19 +1000] "POST /?wordfence_syncAttackData=1788428718.1718 HTTP/1.1" 200 42769 "-" "WordPress/7.1; https://madalice.com.au" 118.127.40.55 - - [03/Sep/2026:19:45:19 +1000] "POST /?wordfence_syncAttackData=1788428717.8458 HTTP/1.1" 200 42769 "-" "WordPress/7.1; https://madalice.com.au" 118.127.40.55 - - [03/Sep/2026:19:45:19 +1000] "POST /?wordfence_syncAttackData=1788428717.9425 HTTP/1.1" 200 42769 "-" "WordPress/7.1; https://madalice.com.au" 118.127.40.55 - - [03/Sep/2026:19:45:20 +1000] "POST /?wordfence_syncAttackData=1788428718.2699 HTTP/1.1" 200 42765 "-" "WordPress/7.1; https://madalice.com.au" 118.127.40.55 - - [03/Sep/2026:19:45:18 +1000] "POST /?wordfence_syncAttackData=1788428717.4201 HTTP/1.1" 200 42765 "-" "WordPress/7.1; https://madalice.com.au" 118.127.40.55 - - [03/Sep/2026:19:45:20 +1000] "POST /?wordfence_syncAttackData=1788428719.3925 HTTP/1.1" 200 42765 "-" "WordPress/7.1; https://madalice.com.au" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 6 GET /heartbeat.php 1 GET /sitemap_news.xml.gz 1 GET /robots.txt -- last 10 requests -- 203.54.180.238 - - [03/Sep/2026:19:43:05 +1000] "GET /heartbeat.php?sentAt=1788428585&bytes=106,153,65,41&_=1788423432403 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 47.79.13.212 - - [03/Sep/2026:19:43:11 +1000] "GET /robots.txt HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 47.79.13.212 - - [03/Sep/2026:19:43:11 +1000] "GET /sitemap_news.xml.gz HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 203.54.180.238 - - [03/Sep/2026:19:43:15 +1000] "GET /heartbeat.php?sentAt=1788428595&bytes=106,153,65,51&_=1788423432404 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [03/Sep/2026:19:43:25 +1000] "GET /heartbeat.php?sentAt=1788428605&bytes=106,153,65,61&_=1788423432405 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [03/Sep/2026:19:43:35 +1000] "GET /heartbeat.php?sentAt=1788428615&bytes=106,153,65,71&_=1788423432406 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [03/Sep/2026:19:43:45 +1000] "GET /heartbeat.php?sentAt=1788428625&bytes=106,153,65,81&_=1788423432407 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [03/Sep/2026:19:43:55 +1000] "GET /heartbeat.php?sentAt=1788428635&bytes=106,153,65,91&_=1788423432408 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" --- last 30 samples (run-up to this incident) --- 2026-09-03 19:43:03 L1=0.42 run=3 blk=0 avail=8279 (60.1%) swpO=0 conn=1 myRSS=2960 php=4 phpRSS=349 ap=19 tcp=21 topuser=madalice 2026-09-03 19:43:03 L1=0.42 run=3 blk=0 avail=8279 (60.1%) swpO=0 conn=2 myRSS=2960 php=4 phpRSS=349 ap=19 tcp=21 topuser=madalice 2026-09-03 19:43:13 L1=0.43 run=3 blk=0 avail=8435 (61.2%) swpO=0 conn=1 myRSS=2960 php=3 phpRSS=185 ap=16 tcp=24 topuser=madalice 2026-09-03 19:43:13 L1=0.43 run=4 blk=0 avail=8434 (61.2%) swpO=0 conn=2 myRSS=2960 php=3 phpRSS=185 ap=16 tcp=24 topuser=madalice 2026-09-03 19:43:23 L1=0.37 run=1 blk=0 avail=8436 (61.2%) swpO=0 conn=1 myRSS=2960 php=3 phpRSS=185 ap=16 tcp=23 topuser=madalice 2026-09-03 19:43:23 L1=0.37 run=2 blk=0 avail=8435 (61.2%) swpO=0 conn=2 myRSS=2960 php=3 phpRSS=185 ap=16 tcp=23 topuser=madalice 2026-09-03 19:43:33 L1=0.38 run=1 blk=0 avail=8443 (61.3%) swpO=0 conn=1 myRSS=2960 php=3 phpRSS=186 ap=15 tcp=20 topuser=madalice 2026-09-03 19:43:33 L1=0.38 run=3 blk=0 avail=8442 (61.3%) swpO=0 conn=2 myRSS=2960 php=3 phpRSS=186 ap=15 tcp=20 topuser=madalice 2026-09-03 19:43:43 L1=0.49 run=1 blk=0 avail=8425 (61.2%) swpO=0 conn=1 myRSS=2960 php=3 phpRSS=186 ap=16 tcp=25 topuser=madalice 2026-09-03 19:43:43 L1=0.49 run=2 blk=0 avail=8425 (61.2%) swpO=0 conn=2 myRSS=2960 php=3 phpRSS=186 ap=16 tcp=25 topuser=madalice 2026-09-03 19:43:53 L1=0.41 run=2 blk=0 avail=8511 (61.8%) swpO=0 conn=2 myRSS=2960 php=3 phpRSS=90 ap=19 tcp=24 topuser=madalice 2026-09-03 19:43:53 L1=0.41 run=5 blk=0 avail=8505 (61.7%) swpO=0 conn=2 myRSS=2960 php=3 phpRSS=96 ap=19 tcp=23 topuser=madalice 2026-09-03 19:44:03 L1=0.35 run=2 blk=0 avail=8404 (61.0%) swpO=0 conn=2 myRSS=2960 php=3 phpRSS=187 ap=18 tcp=24 topuser=madalice 2026-09-03 19:44:03 L1=0.35 run=2 blk=0 avail=8417 (61.1%) swpO=0 conn=1 myRSS=2960 php=3 phpRSS=187 ap=18 tcp=24 topuser=madalice 2026-09-03 19:44:13 L1=0.44 run=1 blk=0 avail=8416 (61.1%) swpO=0 conn=2 myRSS=2960 php=3 phpRSS=187 ap=18 tcp=24 topuser=madalice 2026-09-03 19:44:13 L1=0.44 run=3 blk=0 avail=8416 (61.1%) swpO=0 conn=1 myRSS=2960 php=3 phpRSS=187 ap=18 tcp=24 topuser=madalice 2026-09-03 19:44:23 L1=0.45 run=2 blk=0 avail=8306 (60.3%) swpO=0 conn=2 myRSS=2960 php=4 phpRSS=320 ap=17 tcp=28 topuser=madalice 2026-09-03 19:44:23 L1=0.45 run=3 blk=0 avail=8305 (60.3%) swpO=0 conn=1 myRSS=2960 php=4 phpRSS=322 ap=17 tcp=28 topuser=madalice 2026-09-03 19:44:33 L1=0.45 run=1 blk=0 avail=8276 (60.1%) swpO=0 conn=2 myRSS=2960 php=4 phpRSS=348 ap=16 tcp=27 topuser=madalice 2026-09-03 19:44:33 L1=0.45 run=5 blk=0 avail=8274 (60.1%) swpO=0 conn=1 myRSS=2960 php=4 phpRSS=348 ap=16 tcp=27 topuser=madalice 2026-09-03 19:44:43 L1=0.46 run=1 blk=0 avail=8272 (60.0%) swpO=0 conn=2 myRSS=2960 php=4 phpRSS=348 ap=16 tcp=27 topuser=madalice 2026-09-03 19:44:43 L1=0.46 run=2 blk=0 avail=8270 (60.0%) swpO=0 conn=1 myRSS=2960 php=4 phpRSS=348 ap=16 tcp=27 topuser=madalice 2026-09-03 19:44:53 L1=0.47 run=2 blk=0 avail=8212 (59.6%) swpO=0 conn=2 myRSS=2960 php=4 phpRSS=411 ap=16 tcp=26 topuser=madalice 2026-09-03 19:44:53 L1=0.47 run=4 blk=0 avail=8207 (59.6%) swpO=0 conn=1 myRSS=2960 php=4 phpRSS=416 ap=16 tcp=26 topuser=madalice 2026-09-03 19:45:03 L1=0.48 run=2 blk=0 avail=8080 (58.6%) swpO=0 conn=2 myRSS=2960 php=6 phpRSS=567 ap=17 tcp=29 topuser=madalice 2026-09-03 19:45:04 L1=0.48 run=3 blk=0 avail=8080 (58.7%) swpO=0 conn=2 myRSS=2960 php=6 phpRSS=567 ap=17 tcp=29 topuser=madalice 2026-09-03 19:45:14 L1=0.71 run=8 blk=0 avail=7574 (55.0%) swpO=0 conn=2 myRSS=2960 php=9 phpRSS=1130 ap=20 tcp=78 topuser=madalice 2026-09-03 19:45:14 L1=0.71 run=8 blk=0 avail=7541 (54.7%) swpO=0 conn=2 myRSS=2960 php=9 phpRSS=1154 ap=24 tcp=78 topuser=madalice 2026-09-03 19:45:24 L1=2.47 run=4 blk=0 avail=6808 (49.4%) swpO=0 conn=2 myRSS=2960 php=14 phpRSS=1749 ap=55 tcp=61 topuser=madalice 2026-09-03 19:45:24 L1=2.47 run=3 blk=0 avail=6815 (49.5%) swpO=0 conn=2 myRSS=2960 php=14 phpRSS=1749 ap=54 tcp=60 topuser=madalice