INCIDENT 2026-09-04 20:13:39 trigger: php_rss=1983MB ================================================================== load: 0.91 0.64 0.63 13/705 2353311 ncpu:10 mem_avail: 6117MB/13777MB (44.4%) swap_used:1541MB swapout:0/s blocked(D):0 running:14 iowait:0.1% steal:0.0% php: 14 procs / 1983MB heaviest user: madalice (10 procs, 1871MB) apache: 46 procs tcp_estab: 45 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3343 madalice 10 1954 root 254 1066 nobody 45 739 netdata 8 253 evolution 11 102 dovenull 6 68 wp-toolkit 3 61 dovecot 3 29 mailman 20 26 cpanellogin 1 24 kurri 1 14 zabbix 1 11 polkitd 1 7 named 1 5 nscd 1 4 mailnull 1 2 dbus 1 2 cpanelconnecttrack 1 2 chrony 1 1 --- php workers by user --- USER PROCS RSS_MB madalice 10 1938 evolution 3 79 root 1 32 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4925 MB Active(file): 4121 MB Inactive(file): 1005 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 533 MB CommitLimit: 10984 MB Committed_AS: 9106 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2302640 root 13:38 1296 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 3926885 root 3-17:51:12 4188 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3423972 13.7 Ssl 2-05:59:27 /usr/sbin/mariadbd 2353234 2601907 madalice 252224 79.5 S 00:02 php-fpm: pool madalice_com_au 2353232 2601907 madalice 252208 82.5 R 00:02 php-fpm: pool madalice_com_au 2353231 2601907 madalice 250104 90.0 R 00:02 php-fpm: pool madalice_com_au 1043892 2603077 root 199304 0.1 S 06:08:43 spamd child 1542443 1 netdata 187940 2.6 Ssl 1-17:51:17 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2353207 2601907 madalice 182076 49.4 S 00:05 php-fpm: pool madalice_com_au 2353184 2601907 madalice 174220 42.4 R 00:09 php-fpm: pool madalice_com_au 2353208 2601907 madalice 162724 68.6 R 00:05 php-fpm: pool madalice_com_au 2352671 2601907 madalice 160648 17.6 S 00:53 php-fpm: pool madalice_com_au 2654376 2603077 root 152836 0.0 S 17:34:32 spamd child 2353220 2601907 madalice 141728 71.0 R 00:03 php-fpm: pool madalice_com_au 2353237 2601907 madalice 137048 74.5 S 00:02 php-fpm: pool madalice_com_au 2353221 2601907 madalice 136988 57.0 S 00:03 php-fpm: pool madalice_com_au 2603077 1 root 136864 0.0 Ss 17:49:28 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 509266 1 root 111248 0.0 Ss 7-17:53:58 /usr/lib/systemd/systemd-journald 509236 509098 root 44008 0.0 Sl 7-17:53:58 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 1353308 1 root 42192 0.1 Ss 44-17:32:24 cpsrvd (SSL) - waiting for connections 1469 1 root 41864 0.1 Ss 67-10:03:53 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542981 1542551 netdata 40828 0.1 Sl 1-17:51:13 /usr/libexec/netdata/plugins.d/go.d.plugin 1 2353256 2353244 evolution 40668 5.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 2353255 2353245 evolution 40524 5.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1542487 1 wp-toolkit 34276 0.0 Ss 1-17:51:17 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2601907 1 root 32956 0.0 Ss 17:50:13 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 2602226 1 root 27540 0.1 Ssl 17:49:58 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 2301002 1353308 cpanellogin 25536 0.0 S 16:49 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 1463 1 root 24692 0.0 Ss 67-10:03:53 tailwatchd 2351427 506832 nobody 23360 0.0 S 03:08 /usr/sbin/httpd -k start 2335057 506832 nobody 23036 0.0 S 06:59 /usr/sbin/httpd -k start 2319140 506832 nobody 22968 0.0 S 09:51 /usr/sbin/httpd -k start 2319118 506832 nobody 22888 0.0 S 09:53 /usr/sbin/httpd -k start 1542531 1 wp-toolkit 22216 0.0 Ss 1-17:51:16 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 2351973 506832 nobody 22108 0.0 S 02:19 /usr/sbin/httpd -k start 2351976 506832 nobody 21896 0.0 S 02:19 /usr/sbin/httpd -k start 2352496 506832 nobody 21636 0.0 S 01:18 /usr/sbin/httpd -k start 2351826 506832 nobody 19692 0.0 S 02:36 /usr/sbin/httpd -k start 2352500 506832 nobody 19564 0.0 S 01:17 /usr/sbin/httpd -k start 2352973 506832 nobody 19236 0.0 S 00:30 /usr/sbin/httpd -k start 2353217 506832 nobody 19212 0.6 S 00:03 /usr/sbin/httpd -k start 2353218 506832 nobody 19148 0.3 S 00:03 /usr/sbin/httpd -k start 2353213 506832 nobody 19116 0.2 S 00:04 /usr/sbin/httpd -k start 2353228 506832 nobody 19112 1.0 S 00:02 /usr/sbin/httpd -k start 2353219 506832 nobody 19084 0.3 S 00:03 /usr/sbin/httpd -k start 2353216 506832 nobody 19048 0.3 S 00:03 /usr/sbin/httpd -k start 2353224 506832 nobody 18892 0.0 S 00:02 /usr/sbin/httpd -k start 2353227 506832 nobody 18884 0.5 S 00:02 /usr/sbin/httpd -k start 2353210 506832 nobody 18844 0.0 S 00:05 /usr/sbin/httpd -k start 2353214 506832 nobody 18836 0.0 S 00:04 /usr/sbin/httpd -k start 2353225 506832 nobody 18808 0.5 S 00:02 /usr/sbin/httpd -k start 2352974 506832 nobody 18236 0.0 S 00:30 /usr/sbin/httpd -k start 1542982 1542551 netdata 18192 2.1 Sl 1-17:51:13 /usr/libexec/netdata/plugins.d/apps.plugin 1 2352921 506832 nobody 17352 0.0 S 00:31 /usr/sbin/httpd -k start 690513 508511 root 17288 0.0 S 07:40:49 dovecot/config 1542141 1 root 17108 0.0 Ss 1-17:51:20 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 2353241 506832 nobody 16884 0.0 S 00:01 /usr/sbin/httpd -k start 2353238 506832 nobody 16872 0.0 S 00:01 /usr/sbin/httpd -k start 2353239 506832 nobody 16868 0.0 S 00:01 /usr/sbin/httpd -k start 2353230 506832 nobody 16860 0.0 S 00:02 /usr/sbin/httpd -k start 2353243 506832 nobody 16860 0.0 S 00:01 /usr/sbin/httpd -k start 2353229 506832 nobody 16856 0.0 S 00:02 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10462768 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | | 10462751 | madalice_wp | madalice_wp | Query | 0 | Creating sort index | SELECT post_id, meta_key, meta_value FROM AMuqf6qZ_postmeta WHERE post_id IN (30355,30215,24267,28038,28039,31435,27504,29650,31434,30358,30855,29710,33491,34411,30495,24095,24104,33648,28302,24099,30810,30812,30811,24101,24103,34413,31534,30494,29596,31153,31154,30813,31156,31155,31635,33533,33536, | +----------+-------------+-------------+---------+------+----------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 131 madalice/madalice.com.au-ssl_log 32 evolution/portal.evolutionerp.com.au-ssl_log 26 kamcool/kamcool.com.au-ssl_log 8 evolution/my.evolutionerp.com.au-ssl_log 2 (total vhosts taking traffic: 5) --- top client IPs across all vhosts (last 3 min) --- 131 40.115.94.245 26 203.54.180.238 12 82.197.69.56 8 34.134.35.81 4 141.98.11.42 3 85.206.128.219 3 114.119.137.101 2 17.166.235.85 2 114.119.130.40 1 66.249.65.104 1 2a03:2880:f802:3d:: 1 2a03:2880:f802:30:: 1 2a03:2880:f802:18:: 1 207.46.13.64 1 1.144.107.82 --- top request paths across all vhosts (last 3 min) --- 95 GET /api/getItem/LWPB2001KG 26 GET /heartbeat.php 17 GET /api/getItem/LWHG2001KG 3 POST / 3 GET /store/design-your-own-sliders/ 2 GET /api/getItem/PXLG25 2 GET / 1 POST /functions.php 1 GET /wp-content/uploads/2026/09/ 1 GET /wp-content/uploads/2026/08/ 1 GET /wp-content/uploads/ 1 GET /wp-content/plugins/woocommerce-square/woocommerce-square.php 1 GET /wp-content/plugins/woocommerce/readme.txt 1 GET /wp-content/plugins/unlimited-elements-for-elementor/unlimited-elements-for-elementor.php 1 GET /wp-content/plugins/unlimited-elements-for-elementor/readme.txt 1 GET /wp-content/plugins/mage-eventpress/readme.txt 1 GET /wp-content/plugins/mage-eventpress/mage-eventpress.php 1 GET /wp-content/plugins/flexible-shipping/readme.txt 1 GET /wp-content/plugins/flexible-shipping/flexible-shipping.php 1 GET /wp-content/plugins/elementor/elementor.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 95 GET /api/getItem/LWPB2001KG 17 GET /api/getItem/LWHG2001KG 2 GET /api/getItem/PXLG25 1 GET /api/getItem/PXLG50 1 GET /api/getItem/PXLG40 1 GET /api/getItem/PXLG32 1 GET /api/getItem/PXLG20 1 GET /api/getItem/PMG90 1 GET /api/getItem/PMG80 1 GET /api/getItem/PMG65 1 GET /api/getItem/PMG50 1 GET /api/getItem/PMG40 -- last 10 requests -- 40.115.94.245 - - [04/Sep/2026:20:13:27 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:20:13:27 +1000] "GET /api/getItem/PMG40 HTTP/1.1" 200 2432 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:20:13:27 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:20:13:28 +1000] "GET /api/getItem/PMG50 HTTP/1.1" 200 2203 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:20:13:28 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:20:13:28 +1000] "GET /api/getItem/PMG65 HTTP/1.1" 200 1868 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:20:13:28 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:20:13:28 +1000] "GET /api/getItem/PMG80 HTTP/1.1" 200 2200 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:20:13:28 +1000] "GET /api/getItem/LWPB2001KG HTTP/1.1" 200 1336 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [04/Sep/2026:20:13:29 +1000] "GET /api/getItem/PMG90 HTTP/1.1" 200 1862 "-" "RestSharp/106.13.0.0" == madalice/madalice.com.au-ssl_log == -- top paths -- 3 POST / 3 GET /store/design-your-own-sliders/ 2 GET / 1 GET /wp-content/uploads/2026/09/ 1 GET /wp-content/uploads/2026/08/ 1 GET /wp-content/uploads/ 1 GET /wp-content/plugins/woocommerce-square/woocommerce-square.php 1 GET /wp-content/plugins/woocommerce/readme.txt 1 GET /wp-content/plugins/unlimited-elements-for-elementor/unlimited-elements-for-elementor.php 1 GET /wp-content/plugins/unlimited-elements-for-elementor/readme.txt 1 GET /wp-content/plugins/mage-eventpress/readme.txt 1 GET /wp-content/plugins/mage-eventpress/mage-eventpress.php -- last 10 requests -- 82.197.69.56 - - [04/Sep/2026:20:13:34 +1000] "GET /wp-content/plugins/woocommerce-square/woocommerce-square.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrom 82.197.69.56 - - [04/Sep/2026:20:13:34 +1000] "GET /wp-content/plugins/elementor/elementor.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0" 82.197.69.56 - - [04/Sep/2026:20:13:34 +1000] "GET /wp-content/plugins/flexible-shipping/flexible-shipping.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ 82.197.69.56 - - [04/Sep/2026:20:13:34 +1000] "GET /wp-content/plugins/commercegurus-commercekit/readme.txt HTTP/1.1" 200 6854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ 82.197.69.56 - - [04/Sep/2026:20:13:35 +1000] "GET /wp-content/plugins/commercegurus-commercekit/commercegurus-commercekit.php HTTP/1.1" 200 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, lik 82.197.69.56 - - [04/Sep/2026:20:13:35 +1000] "GET /wp-content/plugins/mage-eventpress/readme.txt HTTP/1.1" 200 13362 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0" 82.197.69.56 - - [04/Sep/2026:20:13:35 +1000] "GET /wp-content/plugins/flexible-shipping/readme.txt HTTP/1.1" 200 6382 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0" 82.197.69.56 - - [04/Sep/2026:20:13:34 +1000] "GET /wp-content/plugins/unlimited-elements-for-elementor/unlimited-elements-for-elementor.php HTTP/1.1" 404 36642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ 82.197.69.56 - - [04/Sep/2026:20:13:35 +1000] "GET /wp-content/plugins/mage-eventpress/mage-eventpress.php HTTP/1.1" 404 36636 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ 82.197.69.56 - - [04/Sep/2026:20:13:37 +1000] "GET /wp-content/plugins/unlimited-elements-for-elementor/readme.txt HTTP/1.1" 200 13405 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 26 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [04/Sep/2026:20:12:27 +1000] "GET /heartbeat.php?sentAt=1788516747&bytes=106,154,153,139&_=1788436621241 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [04/Sep/2026:20:12:28 +1000] "GET /heartbeat.php?sentAt=1788516748&bytes=106,154,153,140&_=1788498316674 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [04/Sep/2026:20:12:37 +1000] "GET /heartbeat.php?sentAt=1788516757&bytes=106,154,153,149&_=1788436621242 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [04/Sep/2026:20:12:38 +1000] "GET /heartbeat.php?sentAt=1788516758&bytes=106,154,153,150&_=1788498316675 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [04/Sep/2026:20:12:47 +1000] "GET /heartbeat.php?sentAt=1788516767&bytes=106,154,153,159&_=1788436621243 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [04/Sep/2026:20:12:48 +1000] "GET /heartbeat.php?sentAt=1788516768&bytes=106,154,153,160&_=1788498316676 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [04/Sep/2026:20:12:57 +1000] "GET /heartbeat.php?sentAt=1788516777&bytes=106,154,153,169&_=1788436621244 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [04/Sep/2026:20:12:58 +1000] "GET /heartbeat.php?sentAt=1788516778&bytes=106,154,153,170&_=1788498316677 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [04/Sep/2026:20:13:07 +1000] "GET /heartbeat.php?sentAt=1788516787&bytes=106,154,153,179&_=1788436621245 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [04/Sep/2026:20:13:08 +1000] "GET /heartbeat.php?sentAt=1788516788&bytes=106,154,153,180&_=1788498316678 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 --- last 30 samples (run-up to this incident) --- 2026-09-04 20:11:18 L1=0.52 run=2 blk=0 avail=7747 (56.2%) swpO=0 conn=2 myRSS=3343 php=4 phpRSS=229 ap=28 tcp=37 topuser=madalice 2026-09-04 20:11:18 L1=0.52 run=3 blk=0 avail=7747 (56.2%) swpO=0 conn=2 myRSS=3343 php=4 phpRSS=229 ap=28 tcp=37 topuser=madalice 2026-09-04 20:11:28 L1=0.59 run=3 blk=0 avail=7689 (55.8%) swpO=0 conn=2 myRSS=3343 php=5 phpRSS=313 ap=28 tcp=33 topuser=madalice 2026-09-04 20:11:28 L1=0.59 run=4 blk=0 avail=7688 (55.8%) swpO=0 conn=3 myRSS=3343 php=5 phpRSS=313 ap=28 tcp=33 topuser=madalice 2026-09-04 20:11:38 L1=0.58 run=1 blk=0 avail=7757 (56.3%) swpO=0 conn=2 myRSS=3343 php=4 phpRSS=229 ap=25 tcp=28 topuser=madalice 2026-09-04 20:11:38 L1=0.58 run=2 blk=0 avail=7756 (56.3%) swpO=0 conn=3 myRSS=3343 php=4 phpRSS=229 ap=25 tcp=28 topuser=madalice 2026-09-04 20:11:48 L1=0.57 run=2 blk=0 avail=7820 (56.8%) swpO=0 conn=2 myRSS=3343 php=4 phpRSS=227 ap=17 tcp=22 topuser=madalice 2026-09-04 20:11:48 L1=0.57 run=3 blk=0 avail=7820 (56.8%) swpO=0 conn=3 myRSS=3343 php=4 phpRSS=227 ap=17 tcp=22 topuser=madalice 2026-09-04 20:11:58 L1=0.48 run=4 blk=0 avail=7822 (56.8%) swpO=0 conn=2 myRSS=3343 php=5 phpRSS=269 ap=15 tcp=19 topuser=madalice 2026-09-04 20:11:58 L1=0.48 run=4 blk=0 avail=7821 (56.8%) swpO=0 conn=3 myRSS=3343 php=5 phpRSS=270 ap=15 tcp=19 topuser=madalice 2026-09-04 20:12:08 L1=0.41 run=2 blk=0 avail=7717 (56.0%) swpO=0 conn=2 myRSS=3343 php=5 phpRSS=363 ap=15 tcp=21 topuser=madalice 2026-09-04 20:12:08 L1=0.41 run=2 blk=0 avail=7717 (56.0%) swpO=0 conn=3 myRSS=3343 php=5 phpRSS=363 ap=15 tcp=21 topuser=madalice 2026-09-04 20:12:19 L1=0.34 run=4 blk=0 avail=7714 (56.0%) swpO=0 conn=3 myRSS=3343 php=5 phpRSS=371 ap=15 tcp=23 topuser=madalice 2026-09-04 20:12:19 L1=0.34 run=4 blk=0 avail=7714 (56.0%) swpO=0 conn=3 myRSS=3343 php=5 phpRSS=371 ap=15 tcp=23 topuser=madalice 2026-09-04 20:12:29 L1=0.44 run=1 blk=0 avail=7662 (55.6%) swpO=0 conn=2 myRSS=3343 php=5 phpRSS=384 ap=18 tcp=22 topuser=madalice 2026-09-04 20:12:29 L1=0.44 run=3 blk=0 avail=7661 (55.6%) swpO=0 conn=3 myRSS=3343 php=5 phpRSS=384 ap=18 tcp=22 topuser=madalice 2026-09-04 20:12:39 L1=0.53 run=2 blk=0 avail=7701 (55.9%) swpO=1 conn=2 myRSS=3343 php=5 phpRSS=384 ap=15 tcp=18 topuser=madalice 2026-09-04 20:12:39 L1=0.53 run=2 blk=0 avail=7700 (55.9%) swpO=1 conn=3 myRSS=3343 php=5 phpRSS=384 ap=15 tcp=18 topuser=madalice 2026-09-04 20:12:49 L1=0.45 run=2 blk=0 avail=7864 (57.1%) swpO=0 conn=2 myRSS=3343 php=4 phpRSS=204 ap=13 tcp=23 topuser=madalice 2026-09-04 20:12:49 L1=0.45 run=2 blk=0 avail=7864 (57.1%) swpO=0 conn=3 myRSS=3343 php=4 phpRSS=204 ap=13 tcp=23 topuser=madalice 2026-09-04 20:12:59 L1=0.38 run=1 blk=0 avail=7857 (57.0%) swpO=0 conn=2 myRSS=3343 php=4 phpRSS=205 ap=13 tcp=22 topuser=madalice 2026-09-04 20:12:59 L1=0.38 run=3 blk=0 avail=7856 (57.0%) swpO=0 conn=3 myRSS=3343 php=4 phpRSS=205 ap=13 tcp=22 topuser=madalice 2026-09-04 20:13:09 L1=0.40 run=3 blk=0 avail=7309 (53.1%) swpO=0 conn=2 myRSS=3343 php=8 phpRSS=777 ap=14 tcp=25 topuser=evolution 2026-09-04 20:13:09 L1=0.40 run=4 blk=0 avail=7305 (53.0%) swpO=0 conn=3 myRSS=3343 php=8 phpRSS=781 ap=14 tcp=25 topuser=evolution 2026-09-04 20:13:19 L1=0.49 run=1 blk=0 avail=7820 (56.8%) swpO=0 conn=2 myRSS=3343 php=4 phpRSS=230 ap=15 tcp=21 topuser=madalice 2026-09-04 20:13:19 L1=0.49 run=2 blk=0 avail=7819 (56.8%) swpO=0 conn=2 myRSS=3343 php=4 phpRSS=230 ap=15 tcp=21 topuser=madalice 2026-09-04 20:13:29 L1=0.42 run=1 blk=0 avail=7820 (56.8%) swpO=0 conn=1 myRSS=3343 php=3 phpRSS=189 ap=15 tcp=20 topuser=madalice 2026-09-04 20:13:29 L1=0.42 run=4 blk=0 avail=7833 (56.9%) swpO=0 conn=2 myRSS=3343 php=3 phpRSS=189 ap=15 tcp=20 topuser=madalice 2026-09-04 20:13:39 L1=0.91 run=14 blk=0 avail=6117 (44.4%) swpO=0 conn=13 myRSS=3343 php=14 phpRSS=1983 ap=46 tcp=45 topuser=madalice 2026-09-04 20:13:39 L1=0.91 run=13 blk=0 avail=6092 (44.2%) swpO=0 conn=12 myRSS=3343 php=14 phpRSS=1984 ap=46 tcp=45 topuser=madalice