INCIDENT 2026-09-04 13:48:02 trigger: php_rss=1629MB ================================================================== load: 3.14 2.54 1.83 3/722 984448 ncpu:10 mem_avail: 6444MB/13777MB (46.8%) swap_used:1719MB swapout:0/s blocked(D):0 running:3 iowait:0.2% steal:0.0% php: 15 procs / 1629MB heaviest user: madalice (9 procs, 1418MB) apache: 65 procs tcp_estab: 42 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3197 madalice 10 1432 nobody 64 1269 root 244 956 netdata 8 261 evolution 12 153 cpanellogin 1 108 dovenull 6 66 wp-toolkit 3 61 tubesupplies 1 53 dovecot 3 28 mailman 20 26 alison 1 15 aaa 1 15 vinesit 1 14 kurri 1 14 corpkicks 1 14 zabbix 1 11 polkitd 1 8 named 1 5 --- php workers by user --- USER PROCS RSS_MB madalice 9 1418 evolution 4 130 tubesupplies 1 55 root 1 33 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5008 MB Active(file): 4304 MB Inactive(file): 913 MB Dirty: 1 MB Writeback: 0 MB SReclaimable: 575 MB CommitLimit: 10984 MB Committed_AS: 9219 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 3-11:25:35 4596 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3274452 14.4 Ssl 1-23:33:50 /usr/sbin/mariadbd 1542443 1 netdata 195660 2.6 Ssl 1-11:25:40 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2654375 2603077 root 181292 0.1 S 11:08:55 spamd child 966468 2601907 madalice 165152 15.0 S 03:32 php-fpm: pool madalice_com_au 966567 2601907 madalice 165036 15.0 S 03:24 php-fpm: pool madalice_com_au 982029 2601907 madalice 164584 13.4 S 02:02 php-fpm: pool madalice_com_au 982966 2601907 madalice 163652 9.3 S 01:15 php-fpm: pool madalice_com_au 982058 2601907 madalice 163616 10.6 S 02:01 php-fpm: pool madalice_com_au 981411 2601907 madalice 163544 11.1 S 02:42 php-fpm: pool madalice_com_au 982967 2601907 madalice 159644 12.1 S 01:15 php-fpm: pool madalice_com_au 982961 2601907 madalice 155532 11.3 S 01:15 php-fpm: pool madalice_com_au 983617 2601907 madalice 151916 5.2 S 00:49 php-fpm: pool madalice_com_au 2603077 1 root 145644 0.0 Ss 11:23:51 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2654376 2603077 root 112800 0.0 S 11:08:55 spamd child 552527 1353308 cpanellogin 110912 0.0 S 01:49:38 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 509266 1 root 102636 0.0 Ss 7-11:28:21 /usr/lib/systemd/systemd-journald 984419 982735 tubesupplies 62948 34.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 984378 982837 evolution 58776 5.3 S 00:03 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 509236 509098 root 41980 0.0 Sl 7-11:28:21 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1469 1 root 41912 0.1 Ss 67-03:38:16 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1353308 1 root 41492 0.1 Ss 44-11:06:47 cpsrvd (SSL) - waiting for connections 1542981 1542551 netdata 40920 0.1 Sl 1-11:25:36 /usr/libexec/netdata/plugins.d/go.d.plugin 1 984383 982792 evolution 38504 1.5 S 00:02 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 984414 982794 evolution 36196 3.0 S 00:01 /opt/cpanel/ea-php83/root/usr/bin/php-cgi 1542487 1 wp-toolkit 34288 0.0 Ss 1-11:25:40 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2601907 1 root 34068 0.0 Ss 11:24:36 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 2602226 1 root 27552 0.1 Ssl 11:24:21 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 1463 1 root 24680 0.0 Ss 67-03:38:16 tailwatchd 982107 506832 nobody 24104 0.1 S 01:56 /usr/sbin/httpd -k start 982112 506832 nobody 24064 0.0 S 01:56 /usr/sbin/httpd -k start 965884 506832 nobody 24028 0.0 S 04:17 /usr/sbin/httpd -k start 981875 506832 nobody 23704 0.0 S 02:12 /usr/sbin/httpd -k start 982785 506832 nobody 23640 0.1 S 01:26 /usr/sbin/httpd -k start 982806 506832 nobody 23588 0.2 S 01:24 /usr/sbin/httpd -k start 982795 506832 nobody 23380 0.0 S 01:25 /usr/sbin/httpd -k start 982092 506832 nobody 23192 0.0 S 01:58 /usr/sbin/httpd -k start 978822 506832 nobody 22928 0.0 S 02:53 /usr/sbin/httpd -k start 982721 506832 nobody 22860 0.1 S 01:29 /usr/sbin/httpd -k start 982111 506832 nobody 22836 0.0 S 01:56 /usr/sbin/httpd -k start 982820 506832 nobody 22764 0.0 S 01:24 /usr/sbin/httpd -k start 966196 506832 nobody 22692 0.0 S 03:56 /usr/sbin/httpd -k start 982789 506832 nobody 22652 0.0 S 01:25 /usr/sbin/httpd -k start 981889 506832 nobody 22448 0.0 S 02:11 /usr/sbin/httpd -k start 982732 506832 nobody 22324 0.1 S 01:28 /usr/sbin/httpd -k start 981890 506832 nobody 22272 0.0 S 02:11 /usr/sbin/httpd -k start 1542531 1 wp-toolkit 22232 0.0 Ss 1-11:25:39 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 982142 506832 nobody 22216 0.0 S 01:55 /usr/sbin/httpd -k start 966536 506832 nobody 22192 0.0 S 03:27 /usr/sbin/httpd -k start 982810 506832 nobody 22064 0.0 S 01:24 /usr/sbin/httpd -k start 981511 506832 nobody 21652 0.0 S 02:38 /usr/sbin/httpd -k start 982816 506832 nobody 21564 0.0 S 01:24 /usr/sbin/httpd -k start 965934 506832 nobody 21556 0.0 S 04:14 /usr/sbin/httpd -k start 982744 506832 nobody 21468 0.0 S 01:27 /usr/sbin/httpd -k start 982776 506832 nobody 21368 0.0 S 01:26 /usr/sbin/httpd -k start 982734 506832 nobody 21352 0.0 S 01:28 /usr/sbin/httpd -k start 982740 506832 nobody 21288 0.0 S 01:27 /usr/sbin/httpd -k start 982731 506832 nobody 21276 0.0 S 01:28 /usr/sbin/httpd -k start 982826 506832 nobody 21180 0.0 S 01:24 /usr/sbin/httpd -k start 982735 506832 nobody 21156 0.0 S 01:28 /usr/sbin/httpd -k start 982792 506832 nobody 21156 0.0 S 01:25 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+----------------+---------+------+----------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+----------------+---------+------+----------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 9797357 | root | 108-1481181613 | Execute | 0 | closing tables | SELECT external, workshopnotes, (SELECT cost FROM inventory WHERE id = (SELECT default_cost_item fROM mfprocesses WHERE id = ?)) as cost, itemid as takeup, setupcost, setupTime, leadTime, cost as pcost FROM mfprocesses WHERE id = ? | | 9797353 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+----------------+---------+------+----------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 425 speedlin/speedlinefencing.com.au-ssl_log 159 madalice/madalice.com.au-ssl_log 130 evolution/app.evolutionerp.com.au-ssl_log 111 evolution/portal.evolutionerp.com.au-ssl_log 86 olytis/tis.com.au-ssl_log 86 bigdeals/bigdeals.com.au-ssl_log 76 aaa/aaadownunder.com.au-ssl_log 19 tubesupplies/tubesupplies.com.au-ssl_log 19 customc/customcentral.com.au-ssl_log 3 (total vhosts taking traffic: 10) --- top client IPs across all vhosts (last 3 min) --- 391 203.54.180.238 255 195.178.110.103 111 40.115.94.245 76 34.154.225.250 67 45.148.10.60 60 103.104.164.114 44 2001:8004:14b3:854f:64d9:21f2:4d3b:c730 21 147.161.213.90 16 118.127.40.55 16 101.182.108.127 9 1.144.107.82 7 103.104.165.99 6 14.202.228.182 5 34.1.37.119 4 203.123.106.115 --- top request paths across all vhosts (last 3 min) --- 154 POST /functions.php 83 GET /app/ajax.php 70 GET / 61 GET /index.php 56 GET /api/getItem/LWPB2001KG 38 POST / 35 POST /plugins/csvexporter/plugin.php 30 GET /heartbeat.php 22 GET /factory_session_checker.php 21 POST /blog/ 17 POST /index.php 14 POST /clienteditsave.php 14 POST /blog/wp-json/batch/v1 13 POST /blog/index.php 13 POST /app/ajax/selectFilterSingle.php 12 POST /wp-admin/admin-ajax.php 12 POST /wordpress/ 11 POST /wordpress/wp-json/batch/v1 10 GET /wordpress/ 10 GET /factory_session_processed_qty.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 154 POST /functions.php 83 GET /app/ajax.php 54 GET /index.php 35 POST /plugins/csvexporter/plugin.php 14 POST /clienteditsave.php 13 POST /app/ajax/selectFilterSingle.php 9 POST /app/ajax.php 8 POST /inveditsave.php 7 POST /quoteditsave.php 7 POST /app/ajax/selectFilter.php 6 POST /logsave.php 6 POST /jobeditsave.php -- last 10 requests -- 203.54.180.238 - - [04/Sep/2026:13:47:57 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dclientedit%26clientid%3D15852%26tab%3Dclienteditcontacts&call=getUserSetting&caller=ajaxSubmitLocal&seq=16432714455 HTTP/1.1" 20 203.54.180.238 - - [04/Sep/2026:13:47:57 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 22319 "https://my.evolutionerp.com.au/index.php?page=mfshoporderdetail&id=43985" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [04/Sep/2026:13:47:58 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 51 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=15852&tab=clienteditcontacts" "Mozilla/5.0 (Windows 203.54.180.238 - - [04/Sep/2026:13:47:57 +1000] "GET /index.php?page=jobedit&id=29666 HTTP/1.1" 200 184223 "https://my.evolutionerp.com.au/index.php?page=pickingedit&pickingid=38085" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [04/Sep/2026:13:47:58 +1000] "POST /clienteditsave.php?clientid=16513&call=getCategoryDiscounts HTTP/1.1" 200 649 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29666&tab=jobeditinv" "Mozill 203.54.180.238 - - [04/Sep/2026:13:47:59 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29666&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; Win64; 203.54.180.238 - - [04/Sep/2026:13:47:59 +1000] "POST /clienteditsave.php?call=getSettings HTTP/1.1" 200 60 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29666&tab=jobeditinv" "Mozilla/5.0 (Windows NT 10.0; W 203.54.180.238 - - [04/Sep/2026:13:47:58 +1000] "POST /logsave.php?call=getHistory&id=29666&module=job HTTP/1.1" 200 867 "https://my.evolutionerp.com.au/index.php?page=jobedit&id=29666" "Mozilla/5.0 (Windows NT 10.0; Win 203.54.180.238 - - [04/Sep/2026:13:47:59 +1000] "GET /app/ajax.php?cn=&furi=true&uri=&call=getUserSetting&caller=ajaxSubmitLocal&seq=18533062858 HTTP/1.1" 200 75 "https://my.evolutionerp.com.au/index.php?page=jobedit&id= 203.54.180.238 - - [04/Sep/2026:13:47:59 +1000] "GET /app/ajax.php?cn=attachmentThumbSize&furi=true&uri=job&call=getUserSetting&caller=ajaxSubmitLocal&seq=19642016646 HTTP/1.1" 200 96 "https://my.evolutionerp.com.au/inde == speedlin/speedlinefencing.com.au-ssl_log == -- top paths -- 21 POST /blog/ 13 POST /blog/index.php 12 POST /wordpress/ 9 GET /wordpress/ 8 POST /wordpress/index.php 8 GET /blog/ 7 POST /blog/wp-json/Batch/v1 7 POST /blog/wp-json/batch/v1/ 7 POST /blog/wp-json/batch/v1 7 POST /blog//wp-json/batch/v1 7 POST /blog/wordpress/wp-json/batch/v1 7 POST /blog/blog/wp-json/batch/v1 -- last 10 requests -- 195.178.110.103 - - [04/Sep/2026:13:47:05 +1000] "GET /blog/?rest_route=/wp/v2/categories HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/5 195.178.110.103 - - [04/Sep/2026:13:47:05 +1000] "GET /blog/wp/v2/tags HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.103 - - [04/Sep/2026:13:47:06 +1000] "GET /blog/?rest_route=/wp/v2/tags HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.103 - - [04/Sep/2026:13:47:06 +1000] "GET /blog/wp/v2/posts/999998 HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.103 - - [04/Sep/2026:13:47:06 +1000] "GET /blog/?rest_route=/wp/v2/posts/999998 HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari 195.178.110.103 - - [04/Sep/2026:13:47:07 +1000] "GET /blog/wp/v2/posts/99999 HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.103 - - [04/Sep/2026:13:47:07 +1000] "GET /blog/?rest_route=/wp/v2/posts/99999 HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/ 195.178.110.103 - - [04/Sep/2026:13:47:07 +1000] "GET /blog/wp/v2/posts/9999999 HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 195.178.110.103 - - [04/Sep/2026:13:47:08 +1000] "GET /blog/?rest_route=/wp/v2/posts/9999999 HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safar 195.178.110.103 - - [04/Sep/2026:13:47:08 +1000] "GET /blog/wp/v2/users HTTP/1.1" 404 3417 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" == madalice/madalice.com.au-ssl_log == -- top paths -- 63 GET / 12 POST /wp-admin/admin-ajax.php 12 POST / 7 GET /wp-json/wc-admin/options 4 GET /wp-json/wc-analytics/products/count-low-in-stock 4 GET /wp-json/wc-analytics/orders 4 GET /store/graffiti-airmax-90-custom-shoes/ 3 GET /wp-json/wc-analytics/products/reviews 3 GET /wp-json/wc-analytics/admin/notes 3 GET /wp-json/gravitysmtp/v1/tests/mock-data 3 GET /wp-admin/ 2 GET /wp-admin/post.php -- last 10 requests -- 45.148.10.60 - - [04/Sep/2026:13:47:26 +1000] "GET /index.php?rest_route=/gravitysmtp/v1/tests/mock-data&page=gravitysmtp-settings HTTP/1.1" 403 6221 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKi 45.148.10.60 - - [04/Sep/2026:13:47:27 +1000] "GET /wp-json/gravitysmtp/v1/tests/mock-data HTTP/1.1" 404 95 "-" "Mozilla/5.0 (Linux; Android 13; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Sa 118.127.40.55 - - [04/Sep/2026:13:47:34 +1000] "POST /?wordfence_syncAttackData=1788493654.8664 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://madalice.com.au" 2001:8004:14b3:854f:64d9:21f2:4d3b:c730 - - [04/Sep/2026:13:47:34 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 77 "https://madalice.com.au/wp-admin/post.php?post=34711&action=edit" "Mozilla/5.0 (Windows NT 10.0; W 118.127.40.55 - - [04/Sep/2026:13:47:35 +1000] "POST /?wordfence_syncAttackData=1788493655.5073 HTTP/1.1" 200 42778 "-" "WordPress/7.1; https://madalice.com.au" 2001:8004:14b3:854f:64d9:21f2:4d3b:c730 - - [04/Sep/2026:13:47:34 +1000] "GET /wp-admin/edit.php?post_type=shop_order HTTP/1.1" 200 123442 "https://madalice.com.au/wp-admin/post.php?post=34711&action=edit" "Mozilla/5.0 ( 2001:8004:14b3:854f:64d9:21f2:4d3b:c730 - - [04/Sep/2026:13:47:38 +1000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 200 5 "https://madalice.com.au/wp-admin/post.php?post=34711&action=edit" "Mozilla/5.0 (Windows NT 10.0; Wi 2001:8004:14b3:854f:64d9:21f2:4d3b:c730 - - [04/Sep/2026:13:47:38 +1000] "GET /wp-json/wc-admin/options?options=woocommerce_ces_tracks_queue&_locale=user HTTP/1.1" 200 39 "https://madalice.com.au/wp-admin/edit.php?post_t 2001:8004:14b3:854f:64d9:21f2:4d3b:c730 - - [04/Sep/2026:13:47:38 +1000] "GET /wp-json/wc-analytics/products/count-low-in-stock?status=publish&page=1&per_page=1&_locale=user HTTP/1.1" 200 17 "https://madalice.com.au/wp-a 2001:8004:14b3:854f:64d9:21f2:4d3b:c730 - - [04/Sep/2026:13:47:38 +1000] "GET /wp-json/wc-analytics/orders?page=1&per_page=1&status%5B0%5D=processing&status%5B1%5D=on-hold&_fields%5B0%5D=id&_locale=user HTTP/1.1" 200 18 --- last 30 samples (run-up to this incident) --- 2026-09-04 13:45:39 L1=3.72 run=4 blk=0 avail=7513 (54.5%) swpO=0 conn=1 myRSS=3200 php=6 phpRSS=619 ap=36 tcp=38 topuser=madalice 2026-09-04 13:45:41 L1=3.72 run=3 blk=0 avail=7422 (53.9%) swpO=0 conn=5 myRSS=3200 php=6 phpRSS=709 ap=36 tcp=35 topuser=madalice 2026-09-04 13:45:49 L1=3.46 run=3 blk=0 avail=7799 (56.6%) swpO=0 conn=1 myRSS=3200 php=9 phpRSS=428 ap=34 tcp=49 topuser=madalice 2026-09-04 13:45:51 L1=3.46 run=3 blk=0 avail=7778 (56.5%) swpO=0 conn=5 myRSS=3200 php=7 phpRSS=409 ap=36 tcp=52 topuser=madalice 2026-09-04 13:45:59 L1=3.09 run=3 blk=0 avail=7847 (57.0%) swpO=0 conn=1 myRSS=3200 php=7 phpRSS=271 ap=45 tcp=49 topuser=madalice 2026-09-04 13:46:01 L1=3.09 run=3 blk=0 avail=7637 (55.4%) swpO=0 conn=5 myRSS=3200 php=5 phpRSS=429 ap=44 tcp=50 topuser=madalice 2026-09-04 13:46:09 L1=2.91 run=3 blk=0 avail=7296 (53.0%) swpO=0 conn=1 myRSS=3200 php=8 phpRSS=631 ap=74 tcp=61 topuser=madalice 2026-09-04 13:46:11 L1=2.91 run=2 blk=0 avail=7304 (53.0%) swpO=0 conn=5 myRSS=3200 php=7 phpRSS=601 ap=73 tcp=57 topuser=madalice 2026-09-04 13:46:19 L1=2.47 run=1 blk=0 avail=7609 (55.2%) swpO=1 conn=1 myRSS=3200 php=8 phpRSS=360 ap=64 tcp=48 topuser=madalice 2026-09-04 13:46:21 L1=2.47 run=4 blk=0 avail=7624 (55.3%) swpO=1 conn=2 myRSS=3200 php=8 phpRSS=376 ap=63 tcp=51 topuser=madalice 2026-09-04 13:46:29 L1=2.64 run=1 blk=0 avail=7501 (54.4%) swpO=0 conn=2 myRSS=3200 php=7 phpRSS=531 ap=54 tcp=53 topuser=madalice 2026-09-04 13:46:31 L1=2.64 run=1 blk=0 avail=7513 (54.5%) swpO=0 conn=2 myRSS=3200 php=7 phpRSS=530 ap=53 tcp=44 topuser=madalice 2026-09-04 13:46:39 L1=2.78 run=9 blk=0 avail=6468 (47.0%) swpO=0 conn=2 myRSS=3200 php=8 phpRSS=965 ap=146 tcp=154 topuser=madalice 2026-09-04 13:46:41 L1=2.78 run=1 blk=0 avail=6610 (48.0%) swpO=0 conn=2 myRSS=3200 php=7 phpRSS=779 ap=146 tcp=142 topuser=madalice 2026-09-04 13:46:49 L1=2.58 run=4 blk=0 avail=6123 (44.4%) swpO=0 conn=2 myRSS=3200 php=10 phpRSS=1385 ap=137 tcp=103 topuser=madalice 2026-09-04 13:46:51 L1=2.58 run=3 blk=0 avail=6363 (46.2%) swpO=0 conn=2 myRSS=3200 php=10 phpRSS=1146 ap=136 tcp=103 topuser=madalice 2026-09-04 13:46:59 L1=2.34 run=5 blk=0 avail=6269 (45.5%) swpO=0 conn=2 myRSS=3200 php=10 phpRSS=1297 ap=127 tcp=44 topuser=madalice 2026-09-04 13:47:01 L1=2.34 run=13 blk=0 avail=5882 (42.7%) swpO=0 conn=9 myRSS=3200 php=11 phpRSS=1767 ap=125 tcp=87 topuser=madalice 2026-09-04 13:47:09 L1=2.74 run=4 blk=0 avail=6192 (44.9%) swpO=124 conn=2 myRSS=3198 php=11 phpRSS=1440 ap=117 tcp=43 topuser=madalice 2026-09-04 13:47:11 L1=2.74 run=4 blk=0 avail=6112 (44.4%) swpO=124 conn=5 myRSS=3198 php=15 phpRSS=1642 ap=115 tcp=42 topuser=madalice 2026-09-04 13:47:19 L1=2.39 run=2 blk=0 avail=6327 (45.9%) swpO=88 conn=2 myRSS=3196 php=12 phpRSS=1418 ap=107 tcp=39 topuser=madalice 2026-09-04 13:47:22 L1=2.39 run=6 blk=0 avail=6162 (44.7%) swpO=80 conn=4 myRSS=3196 php=13 phpRSS=1625 ap=105 tcp=37 topuser=madalice 2026-09-04 13:47:29 L1=3.03 run=7 blk=0 avail=6347 (46.1%) swpO=0 conn=2 myRSS=3196 php=14 phpRSS=1501 ap=97 tcp=59 topuser=madalice 2026-09-04 13:47:32 L1=3.03 run=2 blk=0 avail=6406 (46.5%) swpO=0 conn=4 myRSS=3197 php=11 phpRSS=1362 ap=95 tcp=57 topuser=madalice 2026-09-04 13:47:39 L1=2.72 run=16 blk=0 avail=5936 (43.1%) swpO=0 conn=13 myRSS=3197 php=16 phpRSS=2066 ap=87 tcp=59 topuser=madalice 2026-09-04 13:47:42 L1=2.72 run=6 blk=0 avail=6327 (45.9%) swpO=0 conn=3 myRSS=3197 php=18 phpRSS=1747 ap=85 tcp=57 topuser=madalice 2026-09-04 13:47:49 L1=3.44 run=3 blk=0 avail=6326 (45.9%) swpO=0 conn=2 myRSS=3197 php=15 phpRSS=1676 ap=77 tcp=56 topuser=madalice 2026-09-04 13:47:52 L1=3.44 run=3 blk=0 avail=6289 (45.7%) swpO=0 conn=3 myRSS=3197 php=13 phpRSS=1678 ap=75 tcp=55 topuser=madalice 2026-09-04 13:47:59 L1=3.14 run=2 blk=0 avail=6504 (47.2%) swpO=0 conn=2 myRSS=3197 php=11 phpRSS=1451 ap=67 tcp=41 topuser=madalice 2026-09-04 13:48:02 L1=3.14 run=3 blk=0 avail=6444 (46.8%) swpO=0 conn=3 myRSS=3197 php=15 phpRSS=1629 ap=65 tcp=42 topuser=madalice