INCIDENT 2026-09-05 07:12:18 trigger: php_rss=1615MB ================================================================== load: 1.83 1.96 1.81 11/708 424551 ncpu:10 mem_avail: 6225MB/13777MB (45.2%) swap_used:2113MB swapout:0/s blocked(D):1 running:14 iowait:9.0% steal:0.0% php: 13 procs / 1615MB heaviest user: madalice (9 procs, 1481MB) apache: 29 procs tcp_estab: 44 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3043 madalice 9 1572 root 249 1451 nobody 28 467 netdata 8 261 evolution 11 126 dovenull 6 65 cpanellogin 1 59 wp-toolkit 3 53 kurri 3 42 lowrange 2 30 infinium 2 28 dovecot 3 27 candyfabcom 2 27 mailman 20 26 aaa 1 14 zabbix 1 11 polkitd 1 7 named 1 5 nscd 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 9 1580 evolution 3 105 root 1 28 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5660 MB Active(file): 4815 MB Inactive(file): 897 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 678 MB CommitLimit: 10984 MB Committed_AS: 9152 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 4-04:49:52 4836 /usr/bin/imunify-agent-proxy 4109079 root 02:27:30 3624 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 02:27:30 562348 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3116748 11.8 Ssl 2-16:58:07 /usr/sbin/mariadbd 4109105 4109079 root 562348 10.1 Sl 02:27:30 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 407388 2601907 madalice 209368 26.0 S 05:37 php-fpm: pool madalice_com_au 408460 2601907 madalice 206108 20.7 S 03:25 php-fpm: pool madalice_com_au 407474 2601907 madalice 205716 25.4 R 05:24 php-fpm: pool madalice_com_au 424514 2601907 madalice 203172 48.0 S 00:02 php-fpm: pool madalice_com_au 424513 2601907 madalice 199124 53.5 S 00:02 php-fpm: pool madalice_com_au 1542443 1 netdata 195580 2.6 Ssl 2-04:49:57 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 424516 2601907 madalice 193500 52.0 R 00:02 php-fpm: pool madalice_com_au 424515 2601907 madalice 179012 49.5 R 00:02 php-fpm: pool madalice_com_au 3643624 3626973 root 171428 0.0 S 04:45:29 spamd child 424517 2601907 madalice 162356 88.0 R 00:01 php-fpm: pool madalice_com_au 3626973 1 root 140796 0.0 Ss 04:49:04 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 424518 2601907 madalice 121056 64.0 R 00:01 php-fpm: pool madalice_com_au 3643625 3626973 root 101068 0.0 S 04:45:29 spamd child 509236 509098 root 61292 0.0 Sl 8-04:52:38 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 203496 1353308 cpanellogin 60792 0.0 S 01:05:07 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel docroot /usr/local/cpanel/base cpanel_locale 3127357 3127312 evolution 55756 0.0 Ss 07:12:18 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero_payment_cron.php 3127358 3127320 evolution 52372 0.0 Ss 07:12:18 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 509266 1 root 42060 0.0 Ss 8-04:52:38 /usr/lib/systemd/systemd-journald 1353308 1 root 41328 0.1 Ss 45-04:31:04 cpsrvd (SSL) - waiting for connections 1542981 1542551 netdata 41160 0.1 Sl 2-04:49:53 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1469 1 root 35700 0.1 Ss 67-21:02:33 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542487 1 wp-toolkit 29376 0.0 Ss 2-04:49:57 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 3626082 1 root 28840 0.0 Ss 04:50:04 lfd - sleeping 2601907 1 root 28732 0.0 Ss 1-04:48:53 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 1463 1 root 24492 0.0 Ss 67-21:02:33 tailwatchd 408352 506832 nobody 22672 0.0 S 03:40 /usr/sbin/httpd -k start 408345 506832 nobody 22636 0.0 S 03:41 /usr/sbin/httpd -k start 390640 506832 nobody 22596 0.0 S 10:19 /usr/sbin/httpd -k start 407856 506832 nobody 22220 0.0 S 04:33 /usr/sbin/httpd -k start 423604 506832 nobody 21404 0.0 S 01:42 /usr/sbin/httpd -k start 423643 506832 nobody 21064 0.0 S 01:40 /usr/sbin/httpd -k start 423640 506832 nobody 20200 0.0 S 01:41 /usr/sbin/httpd -k start 423599 506832 nobody 20040 0.0 S 01:43 /usr/sbin/httpd -k start 2602226 1 root 19612 0.1 Ssl 1-04:48:38 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 423598 506832 nobody 19324 0.0 S 01:43 /usr/sbin/httpd -k start 1542531 1 wp-toolkit 19288 0.0 Ss 2-04:49:56 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 424105 506832 nobody 19232 0.0 S 00:55 /usr/sbin/httpd -k start 1542982 1542551 netdata 18544 2.2 Sl 2-04:49:53 /usr/libexec/netdata/plugins.d/apps.plugin 1 424360 506832 nobody 18532 0.0 S 00:21 /usr/sbin/httpd -k start 424496 506832 nobody 18468 0.2 S 00:05 /usr/sbin/httpd -k start 423653 506832 nobody 17940 0.2 S 01:40 /usr/sbin/httpd -k start 424327 506832 nobody 17416 0.0 S 00:27 /usr/sbin/httpd -k start 424495 506832 nobody 17292 0.2 S 00:05 /usr/sbin/httpd -k start 424489 506832 nobody 16956 0.1 S 00:07 /usr/sbin/httpd -k start 306499 1471 root 16604 0.0 S 33:15 cPhulkd - dbprocessor 424506 506832 nobody 16064 0.0 S 00:04 /usr/sbin/httpd -k start 424502 506832 nobody 16056 0.0 S 00:04 /usr/sbin/httpd -k start 424503 506832 nobody 16056 0.0 S 00:04 /usr/sbin/httpd -k start 424507 506832 nobody 16056 0.0 S 00:04 /usr/sbin/httpd -k start 424505 506832 nobody 16040 0.0 S 00:04 /usr/sbin/httpd -k start 424504 506832 nobody 15996 0.0 S 00:04 /usr/sbin/httpd -k start 424501 506832 nobody 15944 0.0 S 00:04 /usr/sbin/httpd -k start 424500 506832 nobody 15936 0.0 S 00:04 /usr/sbin/httpd -k start 4020744 508511 lowrange 15788 0.0 S 02:56:40 dovecot/imap 1542141 1 root 15420 0.0 Ss 2-04:50:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 3539428 508511 lowrange 15396 0.0 S 05:16:11 dovecot/imap 4124271 508511 kurri 15320 0.0 S 02:25:38 dovecot/imap 1471 1 root 15084 0.0 Ss 67-21:02:33 cPhulkd - processor --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10738482 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 82 evolution/app.evolutionerp.com.au-ssl_log 66 evolution/portal.evolutionerp.com.au-ssl_log 10 (total vhosts taking traffic: 3) --- top client IPs across all vhosts (last 3 min) --- 76 139.28.219.70 66 40.115.94.245 8 203.54.180.238 3 114.119.130.40 2 114.119.131.88 2 101.182.108.127 1 114.119.146.16 --- top request paths across all vhosts (last 3 min) --- 54 GET /api/getItem/LWFBW2001KG 12 GET /api/getItem/LWPG2001KG 8 GET /heartbeat.php 6 GET /store/lover-custom-nike-dunks/ 2 GET /index.php 1 GET /wp-includes/php-ai-client/wp-includes/ 1 GET /wp-includes/php-ai-client//wp-includes/ 1 GET /wp-includes/php-ai-client/src/wp-includes/php-ai-client/ 1 GET /wp-includes/php-ai-client/src//wp-includes/php-ai-client/ 1 GET /wp-includes/php-ai-client/src/Common/wp-includes/php-ai-client/src/ 1 GET /wp-includes/php-ai-client/src/Common//wp-includes/php-ai-client/src/ 1 GET /wp-includes/php-ai-client/src/Common/Exception/wp-includes/php-ai-client/src/Common/ 1 GET /wp-includes/php-ai-client/src/Common/Exception//wp-includes/php-ai-client/src/Common/ 1 GET /wp-includes/php-ai-client/src/Common/Exception/TokenLimitReachedException.php 1 GET /wp-includes/php-ai-client/src/Common/Exception/RuntimeException.php 1 GET /wp-includes/php-ai-client/src/Common/Exception/InvalidArgumentException.php 1 GET /wp-includes/php-ai-client/src/Common/Contracts/wp-includes/php-ai-client/src/Common/ 1 GET /wp-includes/php-ai-client/src/Common/Contracts//wp-includes/php-ai-client/src/Common/ 1 GET /wp-includes/php-ai-client/src/Common/Contracts/WithArrayTransformationInterface.php 1 GET /wp-includes/php-ai-client/src/Common/AbstractDataTransferObject.php --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 6 GET /store/lover-custom-nike-dunks/ 1 GET /wp-includes/php-ai-client/wp-includes/ 1 GET /wp-includes/php-ai-client//wp-includes/ 1 GET /wp-includes/php-ai-client/src/wp-includes/php-ai-client/ 1 GET /wp-includes/php-ai-client/src//wp-includes/php-ai-client/ 1 GET /wp-includes/php-ai-client/src/Common/wp-includes/php-ai-client/src/ 1 GET /wp-includes/php-ai-client/src/Common//wp-includes/php-ai-client/src/ 1 GET /wp-includes/php-ai-client/src/Common/Exception/wp-includes/php-ai-client/src/Common/ 1 GET /wp-includes/php-ai-client/src/Common/Exception//wp-includes/php-ai-client/src/Common/ 1 GET /wp-includes/php-ai-client/src/Common/Exception/TokenLimitReachedException.php 1 GET /wp-includes/php-ai-client/src/Common/Exception/RuntimeException.php 1 GET /wp-includes/php-ai-client/src/Common/Exception/InvalidArgumentException.php -- last 10 requests -- 139.28.219.70 - - [05/Sep/2026:07:11:50 +1000] "GET /wp-includes/php-ai-client/src/Common/AbstractDataTransferObject.php HTTP/1.1" 500 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:11:51 +1000] "GET /wp-includes/php-ai-client/src/Common/Contracts//wp-includes/php-ai-client/src/Common/ HTTP/1.1" 301 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:11:53 +1000] "GET /wp-includes/php-ai-client/src/Common/Contracts/wp-includes/php-ai-client/src/Common/ HTTP/1.1" 404 36671 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:11:55 +1000] "GET /wp-includes/php-ai-client/src/Common/Contracts/WithArrayTransformationInterface.php HTTP/1.1" 200 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:11:56 +1000] "GET /wp-includes/php-ai-client/src/Common/Exception//wp-includes/php-ai-client/src/Common/ HTTP/1.1" 301 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:11:57 +1000] "GET /wp-includes/php-ai-client/src/Common/Exception/wp-includes/php-ai-client/src/Common/ HTTP/1.1" 404 36668 "-" "-" 114.119.131.88 - - [05/Sep/2026:07:11:57 +1000] "GET /store/lover-custom-nike-dunks/?image=1&verified=1&wcpr_rating=3&wcpr_page=4 HTTP/1.1" 200 52080 "https://madalice.com.au/store/lover-custom-nike-dunks/?image=1&verifi 139.28.219.70 - - [05/Sep/2026:07:11:59 +1000] "GET /wp-includes/php-ai-client/src/Common/Exception/InvalidArgumentException.php HTTP/1.1" 500 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:11:59 +1000] "GET /wp-includes/php-ai-client/src/Common/Exception/RuntimeException.php HTTP/1.1" 500 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:11:59 +1000] "GET /wp-includes/php-ai-client/src/Common/Exception/TokenLimitReachedException.php HTTP/1.1" 500 1 "-" "-" == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 54 GET /api/getItem/LWFBW2001KG 12 GET /api/getItem/LWPG2001KG -- last 10 requests -- 40.115.94.245 - - [05/Sep/2026:07:11:07 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:11:08 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:11:08 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:11:08 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:11:09 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:11:09 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:11:09 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:11:10 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:11:10 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:11:11 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 8 GET /heartbeat.php 2 GET /index.php -- last 10 requests -- 203.54.180.238 - - [05/Sep/2026:07:10:07 +1000] "GET /heartbeat.php?sentAt=1788556207&bytes=106,155,51,175&_=1788436625187 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:10:17 +1000] "GET /heartbeat.php?sentAt=1788556217&bytes=106,155,51,185&_=1788436625188 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:10:27 +1000] "GET /heartbeat.php?sentAt=1788556227&bytes=106,155,51,195&_=1788436625189 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:10:37 +1000] "GET /heartbeat.php?sentAt=1788556237&bytes=106,155,51,205&_=1788436625190 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:10:47 +1000] "GET /heartbeat.php?sentAt=1788556247&bytes=106,155,51,215&_=1788436625191 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:10:57 +1000] "GET /heartbeat.php?sentAt=1788556257&bytes=106,155,51,225&_=1788436625192 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:11:07 +1000] "GET /heartbeat.php?sentAt=1788556267&bytes=106,155,51,235&_=1788436625193 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 101.182.108.127 - - [05/Sep/2026:07:11:12 +1000] "GET /index.php?page=projects_register HTTP/1.1" 200 22180 "https://portal.evolutionerp.com.au/index.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebK 203.54.180.238 - - [05/Sep/2026:07:11:17 +1000] "GET /heartbeat.php?sentAt=1788556277&bytes=106,155,51,245&_=1788436625194 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 101.182.108.127 - - [05/Sep/2026:07:11:22 +1000] "GET /index.php?page=projectinfo&projectid=29032 HTTP/1.1" 200 12854 "https://portal.evolutionerp.com.au/index.php?page=projects_register" "Mozilla/5.0 (iPhone; CPU iPhone --- last 30 samples (run-up to this incident) --- 2026-09-05 07:09:51 L1=2.23 run=2 blk=2 avail=7380 (53.6%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=618 ap=17 tcp=32 topuser=madalice 2026-09-05 07:09:57 L1=2.22 run=3 blk=1 avail=7302 (53.0%) swpO=0 conn=6 myRSS=3049 php=10 phpRSS=820 ap=17 tcp=34 topuser=madalice 2026-09-05 07:10:01 L1=2.20 run=2 blk=1 avail=7435 (54.0%) swpO=1 conn=4 myRSS=3049 php=7 phpRSS=609 ap=17 tcp=32 topuser=madalice 2026-09-05 07:10:07 L1=2.26 run=2 blk=1 avail=7345 (53.3%) swpO=1 conn=6 myRSS=3049 php=8 phpRSS=720 ap=16 tcp=32 topuser=madalice 2026-09-05 07:10:11 L1=2.40 run=3 blk=1 avail=7401 (53.7%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=638 ap=16 tcp=32 topuser=madalice 2026-09-05 07:10:17 L1=2.37 run=2 blk=2 avail=7380 (53.6%) swpO=1 conn=6 myRSS=3049 php=8 phpRSS=695 ap=16 tcp=30 topuser=madalice 2026-09-05 07:10:21 L1=2.34 run=2 blk=1 avail=7381 (53.6%) swpO=1 conn=4 myRSS=3049 php=7 phpRSS=668 ap=16 tcp=32 topuser=madalice 2026-09-05 07:10:27 L1=2.31 run=1 blk=1 avail=7423 (53.9%) swpO=0 conn=6 myRSS=3049 php=8 phpRSS=647 ap=15 tcp=30 topuser=madalice 2026-09-05 07:10:31 L1=2.21 run=3 blk=1 avail=7438 (54.0%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=610 ap=15 tcp=30 topuser=madalice 2026-09-05 07:10:37 L1=2.19 run=2 blk=1 avail=7366 (53.5%) swpO=0 conn=6 myRSS=3049 php=8 phpRSS=670 ap=22 tcp=53 topuser=madalice 2026-09-05 07:10:41 L1=2.50 run=2 blk=1 avail=7214 (52.4%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=653 ap=45 tcp=46 topuser=madalice 2026-09-05 07:10:48 L1=2.46 run=2 blk=1 avail=7272 (52.8%) swpO=0 conn=4 myRSS=3049 php=8 phpRSS=647 ap=39 tcp=35 topuser=madalice 2026-09-05 07:10:51 L1=2.50 run=1 blk=1 avail=7322 (53.1%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=608 ap=35 tcp=36 topuser=madalice 2026-09-05 07:10:58 L1=2.46 run=2 blk=1 avail=7334 (53.2%) swpO=0 conn=4 myRSS=3049 php=8 phpRSS=647 ap=29 tcp=31 topuser=madalice 2026-09-05 07:11:01 L1=2.34 run=4 blk=1 avail=7383 (53.6%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=610 ap=25 tcp=32 topuser=madalice 2026-09-05 07:11:08 L1=2.23 run=5 blk=1 avail=7398 (53.7%) swpO=0 conn=4 myRSS=3049 php=8 phpRSS=652 ap=19 tcp=38 topuser=madalice 2026-09-05 07:11:11 L1=2.14 run=3 blk=1 avail=7338 (53.3%) swpO=0 conn=4 myRSS=3049 php=8 phpRSS=729 ap=18 tcp=38 topuser=madalice 2026-09-05 07:11:18 L1=2.20 run=4 blk=1 avail=7378 (53.6%) swpO=0 conn=4 myRSS=3049 php=8 phpRSS=685 ap=18 tcp=37 topuser=madalice 2026-09-05 07:11:21 L1=2.19 run=6 blk=1 avail=7399 (53.7%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=650 ap=17 tcp=35 topuser=madalice 2026-09-05 07:11:28 L1=2.33 run=1 blk=1 avail=7502 (54.5%) swpO=2 conn=4 myRSS=3049 php=8 phpRSS=561 ap=18 tcp=32 topuser=madalice 2026-09-05 07:11:31 L1=2.23 run=1 blk=1 avail=7558 (54.9%) swpO=2 conn=4 myRSS=3049 php=7 phpRSS=482 ap=17 tcp=33 topuser=madalice 2026-09-05 07:11:38 L1=2.29 run=2 blk=1 avail=7401 (53.7%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=660 ap=14 tcp=36 topuser=madalice 2026-09-05 07:11:41 L1=2.18 run=2 blk=1 avail=7448 (54.1%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=612 ap=14 tcp=33 topuser=madalice 2026-09-05 07:11:48 L1=2.17 run=2 blk=1 avail=7444 (54.0%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=614 ap=14 tcp=33 topuser=madalice 2026-09-05 07:11:51 L1=2.16 run=1 blk=1 avail=7477 (54.3%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=580 ap=14 tcp=32 topuser=madalice 2026-09-05 07:11:58 L1=2.06 run=3 blk=1 avail=7435 (54.0%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=621 ap=15 tcp=37 topuser=madalice 2026-09-05 07:12:01 L1=1.98 run=1 blk=1 avail=7506 (54.5%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=535 ap=16 tcp=33 topuser=madalice 2026-09-05 07:12:08 L1=1.98 run=2 blk=1 avail=7433 (54.0%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=610 ap=16 tcp=32 topuser=madalice 2026-09-05 07:12:11 L1=1.90 run=2 blk=1 avail=7433 (54.0%) swpO=0 conn=4 myRSS=3049 php=7 phpRSS=612 ap=16 tcp=43 topuser=madalice 2026-09-05 07:12:18 L1=1.83 run=14 blk=1 avail=6225 (45.2%) swpO=0 conn=12 myRSS=3049 php=13 phpRSS=1615 ap=29 tcp=44 topuser=madalice