INCIDENT 2026-09-05 07:37:41 trigger: php_rss=1528MB ================================================================== load: 2.27 2.32 2.22 2/760 516615 ncpu:10 mem_avail: 6267MB/13777MB (45.5%) swap_used:2192MB swapout:0/s blocked(D):1 running:3 iowait:9.7% steal:0.0% php: 13 procs / 1528MB heaviest user: madalice (9 procs, 1397MB) apache: 83 procs tcp_estab: 39 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2985 nobody 82 1475 root 248 1408 madalice 9 1329 netdata 8 257 evolution 11 124 dovenull 6 65 lowrange 2 62 wp-toolkit 3 53 infinium 3 47 kurri 2 27 dovecot 3 27 mailman 20 26 cpanellogin 1 16 aaa 1 15 mailnull 3 13 zabbix 1 11 polkitd 1 7 named 1 5 nscd 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 9 1332 evolution 3 103 root 1 28 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5520 MB Active(file): 3589 MB Inactive(file): 1972 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 552 MB CommitLimit: 10984 MB Committed_AS: 9998 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 4-05:15:15 4832 /usr/bin/imunify-agent-proxy 4109079 root 02:52:53 3136 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 02:52:53 541780 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3056772 11.8 Ssl 2-17:23:30 /usr/sbin/mariadbd 4109105 4109079 root 541780 8.6 Sl 02:52:53 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 1542443 1 netdata 191780 2.6 Ssl 2-05:15:20 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 424516 2601907 madalice 179604 7.8 S 25:25 php-fpm: pool madalice_com_au 424514 2601907 madalice 179056 7.7 S 25:25 php-fpm: pool madalice_com_au 424518 2601907 madalice 178264 7.4 S 25:24 php-fpm: pool madalice_com_au 3643624 3626973 root 168568 0.0 S 05:10:52 spamd child 424513 2601907 madalice 163616 7.0 S 25:25 php-fpm: pool madalice_com_au 424515 2601907 madalice 163200 7.9 S 25:25 php-fpm: pool madalice_com_au 3626973 1 root 128508 0.0 Ss 05:14:27 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 515304 2601907 madalice 128288 6.0 S 01:15 php-fpm: pool madalice_com_au 496129 2601907 madalice 119756 7.3 S 07:03 php-fpm: pool madalice_com_au 424517 2601907 madalice 98560 7.1 S 25:24 php-fpm: pool madalice_com_au 3643625 3626973 root 90524 0.0 S 05:10:52 spamd child 495842 2601907 madalice 85800 7.3 S 07:26 php-fpm: pool madalice_com_au 509236 509098 root 61236 0.0 Sl 8-05:18:01 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 3127357 3127312 evolution 54536 0.0 Ss 07:37:41 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero_payment_cron.php 3127358 3127320 evolution 51348 0.0 Ss 07:37:41 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 516503 508511 lowrange 49124 1.6 S 00:15 dovecot/imap 509266 1 root 45508 0.0 Ss 8-05:18:01 /usr/lib/systemd/systemd-journald 1353308 1 root 41880 0.1 Ss 45-04:56:27 cpsrvd (SSL) - waiting for connections 1542981 1542551 netdata 41144 0.1 Sl 2-05:15:16 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1469 1 root 34536 0.1 Ss 67-21:27:56 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542487 1 wp-toolkit 29348 0.0 Ss 2-05:15:20 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2601907 1 root 28692 0.0 Ss 1-05:14:16 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3626082 1 root 27880 0.0 Ss 05:15:27 lfd - sleeping 1463 1 root 24100 0.0 Ss 67-21:27:56 tailwatchd 499117 506832 nobody 22604 0.1 S 03:16 /usr/sbin/httpd -k start 497486 506832 nobody 22268 0.0 S 05:21 /usr/sbin/httpd -k start 499093 506832 nobody 22260 0.0 S 03:17 /usr/sbin/httpd -k start 499120 506832 nobody 21880 0.0 S 03:16 /usr/sbin/httpd -k start 498298 506832 nobody 21724 0.0 S 04:20 /usr/sbin/httpd -k start 499035 506832 nobody 21216 0.0 S 03:19 /usr/sbin/httpd -k start 499052 506832 nobody 21212 0.0 S 03:18 /usr/sbin/httpd -k start 499086 506832 nobody 21152 0.0 S 03:17 /usr/sbin/httpd -k start 499139 506832 nobody 20572 0.0 S 03:16 /usr/sbin/httpd -k start 499074 506832 nobody 20516 0.0 S 03:17 /usr/sbin/httpd -k start 516120 506832 nobody 20192 0.0 S 00:48 /usr/sbin/httpd -k start 498241 506832 nobody 19900 0.0 S 04:22 /usr/sbin/httpd -k start 515230 506832 nobody 19764 0.0 S 01:24 /usr/sbin/httpd -k start 516300 506832 nobody 19720 0.0 S 00:39 /usr/sbin/httpd -k start 516237 506832 nobody 19688 0.0 S 00:40 /usr/sbin/httpd -k start 516297 506832 nobody 19632 0.0 S 00:39 /usr/sbin/httpd -k start 516278 506832 nobody 19548 0.0 S 00:39 /usr/sbin/httpd -k start 516286 506832 nobody 19504 0.0 S 00:39 /usr/sbin/httpd -k start 516275 506832 nobody 19500 0.0 S 00:39 /usr/sbin/httpd -k start 516291 506832 nobody 19496 0.0 S 00:39 /usr/sbin/httpd -k start 516310 506832 nobody 19492 0.0 S 00:38 /usr/sbin/httpd -k start 516509 508511 infinium 19484 1.7 S 00:14 dovecot/imap 516315 506832 nobody 19468 0.0 S 00:38 /usr/sbin/httpd -k start 516281 506832 nobody 19460 0.0 S 00:39 /usr/sbin/httpd -k start 516163 506832 nobody 19432 0.0 S 00:43 /usr/sbin/httpd -k start 516170 506832 nobody 19412 0.0 S 00:42 /usr/sbin/httpd -k start 516248 506832 nobody 19412 0.0 S 00:40 /usr/sbin/httpd -k start 516282 506832 nobody 19412 0.0 S 00:39 /usr/sbin/httpd -k start 516227 506832 nobody 19408 0.0 S 00:41 /usr/sbin/httpd -k start 516277 506832 nobody 19400 0.0 S 00:39 /usr/sbin/httpd -k start 516292 506832 nobody 19396 0.0 S 00:39 /usr/sbin/httpd -k start 516244 506832 nobody 19376 0.0 S 00:40 /usr/sbin/httpd -k start 516236 506832 nobody 19372 0.0 S 00:40 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10749211 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 216 evolution/app.evolutionerp.com.au-ssl_log 98 aaa/aaadownunder.com.au-ssl_log 16 evolution/portal.evolutionerp.com.au-ssl_log 11 (total vhosts taking traffic: 4) --- top client IPs across all vhosts (last 3 min) --- 192 139.28.219.70 98 40.115.94.245 11 203.54.180.238 10 2001:8003:153b:500:25ae:9f58:d8a8:392 5 118.127.40.55 4 114.119.131.88 3 136.124.33.218 2 45.61.187.148 2 2001:8a0:db6e:a500:dae:8894:ed85:9a82 2 141.98.186.30 2 136.124.35.188 1 66.249.73.172 1 66.249.69.226 1 66.249.69.225 1 17.166.154.237 --- top request paths across all vhosts (last 3 min) --- 49 GET /api/getItem/LWPG2001KG 11 GET /heartbeat.php 11 GET / 5 POST / 4 GET /store/kids-custom-cookie-swoosh-muncher-af1/ 3 POST /wp-cron.php 3 POST /wp-admin/admin-ajax.php 3 GET /store/kids-hand-painted-af1-shoes/ 2 POST /wp-login.php 2 GET /wp-login.php 2 GET /api/getItem/SHSG404030-8 1 POST /wp-json/wc-push-notifications/send 1 GET /wp-json/gravitysmtp/v1/tests/mock-data 1 GET /wp-content/plugins/woocommerce/assets/wp-content/plugins/woocommerce/ 1 GET /wp-content/plugins/woocommerce/assets//wp-content/plugins/woocommerce/ 1 GET /wp-content/plugins/woocommerce/assets/js/zoom/wp-content/plugins/woocommerce/assets/js/ 1 GET /wp-content/plugins/woocommerce/assets/js/zoom//wp-content/plugins/woocommerce/assets/js/ 1 GET /wp-content/plugins/woocommerce/assets/js/zoom/ 1 GET /wp-content/plugins/woocommerce/assets/js/stupidtable/wp-content/plugins/woocommerce/assets/js/ 1 GET /wp-content/plugins/woocommerce/assets/js/stupidtable//wp-content/plugins/woocommerce/assets/js/ --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 5 POST / 5 GET / 4 GET /store/kids-custom-cookie-swoosh-muncher-af1/ 3 POST /wp-admin/admin-ajax.php 3 GET /store/kids-hand-painted-af1-shoes/ 1 POST /wp-json/wc-push-notifications/send 1 GET /wp-content/plugins/woocommerce/assets/wp-content/plugins/woocommerce/ 1 GET /wp-content/plugins/woocommerce/assets//wp-content/plugins/woocommerce/ 1 GET /wp-content/plugins/woocommerce/assets/js/zoom/wp-content/plugins/woocommerce/assets/js/ 1 GET /wp-content/plugins/woocommerce/assets/js/zoom//wp-content/plugins/woocommerce/assets/js/ 1 GET /wp-content/plugins/woocommerce/assets/js/zoom/ 1 GET /wp-content/plugins/woocommerce/assets/js/stupidtable/wp-content/plugins/woocommerce/assets/js/ -- last 10 requests -- 139.28.219.70 - - [05/Sep/2026:07:37:35 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/add-to-cart-with-options-variation-selector-attribute-name-style.asset.php HTTP/1.1" 200 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:37:35 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/add-to-cart-with-options-variation-selector-attribute-name.asset.php HTTP/1.1" 200 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:37:36 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/add-to-cart-with-options-variation-selector-attribute-name/ HTTP/1.1" 200 352 "-" "-" 114.119.131.88 - - [05/Sep/2026:07:37:35 +1000] "GET /store/kids-custom-cookie-swoosh-muncher-af1/?rating=1&wcpr_page=2&wcpr_image=1&wcpr_verified=1 HTTP/1.1" 404 36675 "https://madalice.com.au/store/kids-custom-cookie-s 139.28.219.70 - - [05/Sep/2026:07:37:36 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/add-to-cart-with-options-variation-selector-attribute-name//wp-content/plugins/woocommerce/assets/client/blocks/ HT 139.28.219.70 - - [05/Sep/2026:07:37:37 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/add-to-cart-with-options-variation-selector-attribute-name/wp-content/plugins/woocommerce/assets/client/blocks/ HTT 139.28.219.70 - - [05/Sep/2026:07:37:39 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/add-to-cart-with-options-variation-selector-attribute-style.asset.php HTTP/1.1" 200 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:37:39 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/add-to-cart-with-options-variation-selector-attribute.asset.php HTTP/1.1" 200 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:37:40 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/add-to-cart-with-options-variation-selector-attribute/ HTTP/1.1" 200 349 "-" "-" 17.166.154.237 - - [05/Sep/2026:07:37:40 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 601 "https://madalice.com.au/store/veja-custom-swarovskius9/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWe == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 49 GET /api/getItem/LWPG2001KG 2 GET /api/getItem/SHSG404030-8 1 GET /api/getItem/SHSG757550-8 1 GET /api/getItem/SHSG757540-8 1 GET /api/getItem/SHSG757530-8 1 GET /api/getItem/SHSG757525-8 1 GET /api/getItem/SHSG757520-9 1 GET /api/getItem/SHSG757520-8 1 GET /api/getItem/SHSG656540-8 1 GET /api/getItem/SHSG656530-8 1 GET /api/getItem/SHSG656525-8 1 GET /api/getItem/SHSG656525-12 -- last 10 requests -- 40.115.94.245 - - [05/Sep/2026:07:36:52 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:36:52 +1000] "GET /api/getItem/SHSG757520-9 HTTP/1.1" 200 1353 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:36:53 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:36:53 +1000] "GET /api/getItem/SHSG757525-8 HTTP/1.1" 200 1980 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:36:53 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:36:53 +1000] "GET /api/getItem/SHSG757530-8 HTTP/1.1" 200 2120 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:36:53 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:36:53 +1000] "GET /api/getItem/SHSG757540-8 HTTP/1.1" 200 1557 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:36:54 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:36:54 +1000] "GET /api/getItem/SHSG757550-8 HTTP/1.1" 200 1944 "-" "RestSharp/106.13.0.0" == aaa/aaadownunder.com.au-ssl_log == -- top paths -- 6 GET / 3 POST /wp-cron.php 2 POST /wp-login.php 2 GET /wp-login.php 1 GET /wp-json/gravitysmtp/v1/tests/mock-data 1 GET /robots.txt 1 GET /index.php/blog/page/2/ -- last 10 requests -- 118.127.40.55 - - [05/Sep/2026:07:36:07 +1000] "POST /wp-cron.php?doing_wp_cron=1788557767.9577078819274902343750 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://aaadownunder.com.au" 45.61.187.148 - - [05/Sep/2026:07:36:07 +1000] "GET /wp-login.php HTTP/1.1" 200 6921 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" 45.61.187.148 - - [05/Sep/2026:07:36:09 +1000] "POST /wp-login.php HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" 169.40.142.131 - - [05/Sep/2026:07:36:49 +1000] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 118.127.40.55 - - [05/Sep/2026:07:37:22 +1000] "POST /wp-cron.php?doing_wp_cron=1788557842.4502210617065429687500 HTTP/1.1" 200 1 "-" "WordPress/7.1; https://aaadownunder.com.au" 136.124.33.218 - - [05/Sep/2026:07:37:21 +1000] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 Edge/16.16299" 136.124.35.188 - - [05/Sep/2026:07:37:23 +1000] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36 Edge/16.16299" 136.124.33.218 - - [05/Sep/2026:07:37:23 +1000] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" 136.124.35.188 - - [05/Sep/2026:07:37:24 +1000] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" 136.124.33.218 - - [05/Sep/2026:07:37:25 +1000] "GET / HTTP/1.1" 200 50681 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36" --- last 30 samples (run-up to this incident) --- 2026-09-05 07:35:12 L1=2.26 run=7 blk=1 avail=6088 (44.2%) swpO=0 conn=5 myRSS=2982 php=14 phpRSS=1860 ap=69 tcp=39 topuser=madalice 2026-09-05 07:35:19 L1=2.48 run=3 blk=1 avail=6277 (45.6%) swpO=0 conn=5 myRSS=2982 php=13 phpRSS=1679 ap=63 tcp=43 topuser=madalice 2026-09-05 07:35:22 L1=2.44 run=1 blk=1 avail=6277 (45.6%) swpO=0 conn=4 myRSS=2982 php=13 phpRSS=1704 ap=59 tcp=40 topuser=madalice 2026-09-05 07:35:30 L1=2.45 run=2 blk=1 avail=6407 (46.5%) swpO=0 conn=4 myRSS=2982 php=13 phpRSS=1624 ap=52 tcp=40 topuser=madalice 2026-09-05 07:35:32 L1=2.45 run=1 blk=1 avail=6433 (46.7%) swpO=0 conn=3 myRSS=2982 php=13 phpRSS=1620 ap=49 tcp=38 topuser=madalice 2026-09-05 07:35:40 L1=2.54 run=6 blk=1 avail=6472 (47.0%) swpO=0 conn=4 myRSS=2982 php=13 phpRSS=1602 ap=42 tcp=51 topuser=madalice 2026-09-05 07:35:42 L1=2.54 run=4 blk=1 avail=6442 (46.8%) swpO=0 conn=5 myRSS=2982 php=13 phpRSS=1664 ap=41 tcp=51 topuser=madalice 2026-09-05 07:35:50 L1=2.75 run=1 blk=1 avail=6584 (47.8%) swpO=0 conn=3 myRSS=2982 php=13 phpRSS=1582 ap=35 tcp=35 topuser=madalice 2026-09-05 07:35:52 L1=2.75 run=1 blk=1 avail=6633 (48.1%) swpO=0 conn=3 myRSS=2982 php=13 phpRSS=1537 ap=33 tcp=41 topuser=madalice 2026-09-05 07:36:00 L1=2.63 run=1 blk=1 avail=6728 (48.8%) swpO=0 conn=3 myRSS=2982 php=13 phpRSS=1514 ap=26 tcp=35 topuser=madalice 2026-09-05 07:36:02 L1=2.63 run=2 blk=1 avail=6669 (48.4%) swpO=0 conn=3 myRSS=2982 php=13 phpRSS=1586 ap=24 tcp=34 topuser=madalice 2026-09-05 07:36:10 L1=2.69 run=2 blk=1 avail=6723 (48.8%) swpO=0 conn=4 myRSS=2982 php=13 phpRSS=1529 ap=23 tcp=39 topuser=madalice 2026-09-05 07:36:12 L1=2.69 run=3 blk=1 avail=6604 (47.9%) swpO=0 conn=3 myRSS=2982 php=13 phpRSS=1646 ap=23 tcp=37 topuser=madalice 2026-09-05 07:36:20 L1=2.51 run=1 blk=1 avail=7285 (52.9%) swpO=0 conn=4 myRSS=2982 php=13 phpRSS=943 ap=26 tcp=41 topuser=madalice 2026-09-05 07:36:22 L1=2.51 run=1 blk=1 avail=7392 (53.7%) swpO=0 conn=3 myRSS=2982 php=13 phpRSS=834 ap=26 tcp=40 topuser=madalice 2026-09-05 07:36:30 L1=2.35 run=3 blk=1 avail=7111 (51.6%) swpO=0 conn=4 myRSS=2982 php=14 phpRSS=1132 ap=26 tcp=36 topuser=madalice 2026-09-05 07:36:32 L1=2.35 run=1 blk=1 avail=7208 (52.3%) swpO=0 conn=3 myRSS=2982 php=13 phpRSS=1005 ap=26 tcp=33 topuser=madalice 2026-09-05 07:36:40 L1=2.22 run=2 blk=1 avail=6755 (49.0%) swpO=0 conn=4 myRSS=2982 php=13 phpRSS=1513 ap=20 tcp=32 topuser=madalice 2026-09-05 07:36:42 L1=2.22 run=2 blk=1 avail=6831 (49.6%) swpO=0 conn=3 myRSS=2982 php=13 phpRSS=1436 ap=20 tcp=36 topuser=madalice 2026-09-05 07:36:51 L1=2.11 run=2 blk=1 avail=6961 (50.5%) swpO=0 conn=4 myRSS=2982 php=13 phpRSS=1296 ap=22 tcp=38 topuser=madalice 2026-09-05 07:36:52 L1=2.11 run=4 blk=1 avail=6892 (50.0%) swpO=0 conn=5 myRSS=2982 php=13 phpRSS=1365 ap=22 tcp=38 topuser=madalice 2026-09-05 07:37:01 L1=2.09 run=1 blk=1 avail=6987 (50.7%) swpO=0 conn=3 myRSS=2982 php=13 phpRSS=1207 ap=30 tcp=112 topuser=madalice 2026-09-05 07:37:03 L1=2.09 run=1 blk=1 avail=6805 (49.4%) swpO=0 conn=5 myRSS=2982 php=13 phpRSS=1207 ap=54 tcp=113 topuser=madalice 2026-09-05 07:37:11 L1=2.59 run=2 blk=1 avail=5949 (43.2%) swpO=0 conn=5 myRSS=2982 php=15 phpRSS=1703 ap=113 tcp=43 topuser=madalice 2026-09-05 07:37:13 L1=2.59 run=3 blk=1 avail=6171 (44.8%) swpO=62 conn=5 myRSS=2980 php=13 phpRSS=1432 ap=111 tcp=37 topuser=madalice 2026-09-05 07:37:21 L1=2.50 run=3 blk=1 avail=6289 (45.6%) swpO=62 conn=5 myRSS=2985 php=14 phpRSS=1407 ap=103 tcp=39 topuser=madalice 2026-09-05 07:37:23 L1=2.50 run=2 blk=1 avail=6388 (46.4%) swpO=0 conn=5 myRSS=2985 php=13 phpRSS=1279 ap=101 tcp=40 topuser=madalice 2026-09-05 07:37:31 L1=2.42 run=1 blk=1 avail=6275 (45.5%) swpO=0 conn=5 myRSS=2985 php=13 phpRSS=1449 ap=93 tcp=39 topuser=madalice 2026-09-05 07:37:33 L1=2.42 run=2 blk=1 avail=6137 (44.5%) swpO=0 conn=4 myRSS=2985 php=13 phpRSS=1599 ap=91 tcp=38 topuser=madalice 2026-09-05 07:37:41 L1=2.27 run=3 blk=1 avail=6267 (45.5%) swpO=0 conn=4 myRSS=2985 php=13 phpRSS=1528 ap=83 tcp=39 topuser=madalice