INCIDENT 2026-09-05 07:38:53 trigger: php_rss=1538MB ================================================================== load: 2.25 2.28 2.21 4/702 517828 ncpu:10 mem_avail: 6748MB/13777MB (49.0%) swap_used:2192MB swapout:0/s blocked(D):1 running:5 iowait:9.5% steal:0.0% php: 15 procs / 1538MB heaviest user: madalice (9 procs, 1262MB) apache: 23 procs tcp_estab: 38 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2985 root 247 1408 madalice 9 1269 nobody 22 399 netdata 8 258 evolution 11 124 aaa 2 104 dovenull 6 65 vinesit 1 56 wp-toolkit 3 53 infinium 2 28 kurri 2 27 dovecot 3 27 mailman 20 26 mailnull 4 21 cpanellogin 1 16 lowrange 1 15 zabbix 1 12 polkitd 1 7 named 1 5 --- php workers by user --- USER PROCS RSS_MB madalice 9 1272 evolution 3 103 aaa 1 89 vinesit 1 57 root 1 28 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5285 MB Active(file): 3474 MB Inactive(file): 1801 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 548 MB CommitLimit: 10984 MB Committed_AS: 9024 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 4-05:16:27 4832 /usr/bin/imunify-agent-proxy 4109079 root 02:54:05 3136 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 02:54:05 541628 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3057124 11.8 Ssl 2-17:24:42 /usr/sbin/mariadbd 4109105 4109079 root 541628 8.6 Sl 02:54:05 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 1542443 1 netdata 192816 2.6 Ssl 2-05:16:32 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 424514 2601907 madalice 179200 7.7 S 26:37 php-fpm: pool madalice_com_au 424518 2601907 madalice 178748 7.3 S 26:36 php-fpm: pool madalice_com_au 3643624 3626973 root 168568 0.0 S 05:12:04 spamd child 424515 2601907 madalice 163148 7.8 S 26:37 php-fpm: pool madalice_com_au 424516 2601907 madalice 152952 7.8 S 26:37 php-fpm: pool madalice_com_au 496129 2601907 madalice 152888 7.3 S 08:15 php-fpm: pool madalice_com_au 424517 2601907 madalice 149580 7.1 S 26:36 php-fpm: pool madalice_com_au 424513 2601907 madalice 140700 6.9 S 26:37 php-fpm: pool madalice_com_au 515304 2601907 madalice 134100 7.3 R 02:27 php-fpm: pool madalice_com_au 3626973 1 root 128508 0.0 Ss 05:15:39 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 517798 516286 aaa 97324 63.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3643625 3626973 root 90524 0.0 S 05:12:04 spamd child 517799 516153 vinesit 64724 20.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 495842 2601907 madalice 63176 7.2 S 08:38 php-fpm: pool madalice_com_au 509236 509098 root 61236 0.0 Sl 8-05:19:13 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 3127357 3127312 evolution 54536 0.0 Ss 07:38:53 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero_payment_cron.php 3127358 3127320 evolution 51348 0.0 Ss 07:38:53 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 509266 1 root 45508 0.0 Ss 8-05:19:13 /usr/lib/systemd/systemd-journald 1353308 1 root 41880 0.1 Ss 45-04:57:39 cpsrvd (SSL) - waiting for connections 1542981 1542551 netdata 41144 0.1 Sl 2-05:16:28 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1469 1 root 34536 0.1 Ss 67-21:29:08 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1542487 1 wp-toolkit 29348 0.0 Ss 2-05:16:32 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2601907 1 root 28692 0.0 Ss 1-05:15:28 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3626082 1 root 27880 0.0 Ss 05:16:39 lfd - sleeping 1463 1 root 24096 0.0 Ss 67-21:29:08 tailwatchd 497486 506832 nobody 22268 0.0 S 06:33 /usr/sbin/httpd -k start 516237 506832 nobody 21436 0.0 S 01:52 /usr/sbin/httpd -k start 516292 506832 nobody 21432 0.0 S 01:51 /usr/sbin/httpd -k start 516241 506832 nobody 21084 0.0 S 01:52 /usr/sbin/httpd -k start 516291 506832 nobody 20548 0.0 S 01:51 /usr/sbin/httpd -k start 516309 506832 nobody 20524 0.0 S 01:50 /usr/sbin/httpd -k start 516168 506832 nobody 20336 0.0 S 01:54 /usr/sbin/httpd -k start 516286 506832 nobody 20312 0.0 S 01:51 /usr/sbin/httpd -k start 516333 506832 nobody 20236 0.0 S 01:50 /usr/sbin/httpd -k start 516287 506832 nobody 20212 0.0 S 01:51 /usr/sbin/httpd -k start 516227 506832 nobody 20156 0.0 S 01:53 /usr/sbin/httpd -k start 498241 506832 nobody 19900 0.0 S 05:34 /usr/sbin/httpd -k start 516170 506832 nobody 19900 0.0 S 01:54 /usr/sbin/httpd -k start 516302 506832 nobody 19772 0.0 S 01:51 /usr/sbin/httpd -k start 516235 506832 nobody 19684 0.0 S 01:52 /usr/sbin/httpd -k start 516306 506832 nobody 19500 0.0 S 01:51 /usr/sbin/httpd -k start 2602226 1 root 19316 0.1 Ssl 1-05:15:13 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 516321 506832 nobody 19284 0.0 S 01:50 /usr/sbin/httpd -k start 516315 506832 nobody 19272 0.0 S 01:50 /usr/sbin/httpd -k start 1542531 1 wp-toolkit 19264 0.0 Ss 2-05:16:31 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 516153 506832 nobody 19144 0.0 S 01:56 /usr/sbin/httpd -k start 516282 506832 nobody 18996 0.0 S 01:51 /usr/sbin/httpd -k start 1542982 1542551 netdata 18552 2.2 Sl 2-05:16:28 /usr/libexec/netdata/plugins.d/apps.plugin 1 498558 1353308 cpanellogin 16656 0.0 S 04:59 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 306499 1471 root 16352 0.0 S 59:50 cPhulkd - dbprocessor 424143 508511 aaa 16168 0.0 S 27:25 dovecot/imap 1542141 1 root 15420 0.0 Ss 2-05:16:35 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 3539428 508511 lowrange 15372 0.0 S 05:42:46 dovecot/imap 497531 1471 root 14956 0.0 S 06:28 cPhulkd - processor - http socket 1471 1 root 14864 0.0 Ss 67-21:29:08 cPhulkd - processor 373493 508511 infinium 14744 0.0 S 41:54 dovecot/imap 425142 508511 infinium 14596 0.0 S 26:16 dovecot/imap --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10749778 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 197 evolution/app.evolutionerp.com.au-ssl_log 99 evolution/portal.evolutionerp.com.au-ssl_log 15 tubesupplies/tubesupplies.com.au 12 tubesupplies/tubesupplies.com.au-ssl_log 12 aaa/aaadownunder.com.au-ssl_log 10 evolution/evolutionerp.com.au-ssl_log 5 evolution/my.evolutionerp.com.au-ssl_log 4 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 187 139.28.219.70 99 40.115.94.245 23 62.60.130.198 14 203.54.180.238 4 136.124.35.100 4 118.127.40.55 4 114.119.131.88 3 136.124.33.218 2 52.167.144.18 2 45.61.187.148 2 2001:8a0:db6e:a500:dae:8894:ed85:9a82 2 136.124.35.188 2 114.119.130.40 1 40.77.167.224 1 207.46.13.7 --- top request paths across all vhosts (last 3 min) --- 49 GET /api/getItem/LWPG2001KG 14 GET /heartbeat.php 7 GET / 6 GET /store/kids-custom-cookie-swoosh-muncher-af1/ 5 GET /index.php 4 POST /wp-cron.php 4 GET /wp-includes/ 2 POST / 2 GET /wp-includes/ai-client.php 2 GET /wp-includes/abilities.php 2 GET /wp-includes/abilities-api.php 2 GET /wp-admin/js/widgets/ 2 GET /wp-admin/js/ 2 GET /wp-admin/images/ 2 GET /wp-admin/css/colors/sunrise/%20 2 GET /wp-admin/css/colors/ocean/ 2 GET /api/getItem/SHSG404016-RDP25-8 2 GET /api/getItem/SHSG404016-DP25-24-DI-110 1 POST /wp-login.php 1 GET /wp-login.php --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 6 GET /store/kids-custom-cookie-swoosh-muncher-af1/ 2 POST / 1 GET /wp-content/plugins/woocommerce/assets/client/blocks/wp-content/plugins/woocommerce/assets/client/ 1 GET /wp-content/plugins/woocommerce/assets/client/blocks//wp-content/plugins/woocommerce/assets/client/ 1 GET /wp-content/plugins/woocommerce/assets/client/blocks/@woocommerce/wp-content/plugins/woocommerce/assets/client/blocks/ 1 GET /wp-content/plugins/woocommerce/assets/client/blocks/@woocommerce//wp-content/plugins/woocommerce/assets/client/blocks/ 1 GET /wp-content/plugins/woocommerce/assets/client/blocks/@woocommerce/stores/wp-content/plugins/woocommerce/assets/client/blocks/@woocommerce/ 1 GET /wp-content/plugins/woocommerce/assets/client/blocks/@woocommerce/stores//wp-content/plugins/woocommerce/assets/client/blocks/@woocommerce/ 1 GET /wp-content/plugins/woocommerce/assets/client/blocks/@woocommerce/stores/woocommerce/wp-content/plugins/woocommerce/assets/client/blocks/@woocommerce/stores/ 1 GET /wp-content/plugins/woocommerce/assets/client/blocks/@woocommerce/stores/woocommerce//wp-content/plugins/woocommerce/assets/client/blocks/@woocommerce/stores/ 1 GET /wp-content/plugins/woocommerce/assets/client/blocks/@woocommerce/stores/woocommerce/ 1 GET /wp-content/plugins/woocommerce/assets/client/blocks/@woocommerce/stores/ -- last 10 requests -- 139.28.219.70 - - [05/Sep/2026:07:38:27 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/category-title.asset.php HTTP/1.1" 200 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:38:28 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/category-title/ HTTP/1.1" 200 321 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:38:28 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/category-title//wp-content/plugins/woocommerce/assets/client/blocks/ HTTP/1.1" 301 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:38:30 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/category-title/wp-content/plugins/woocommerce/assets/client/blocks/ HTTP/1.1" 404 36661 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:38:31 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/checkout-frontend.asset.php HTTP/1.1" 200 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:38:32 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/checkout-style.asset.php HTTP/1.1" 200 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:38:32 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/checkout.asset.php HTTP/1.1" 200 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:38:33 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/checkout/ HTTP/1.1" 200 321 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:38:34 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/checkout//wp-content/plugins/woocommerce/assets/client/blocks/ HTTP/1.1" 301 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:38:35 +1000] "GET /wp-content/plugins/woocommerce/assets/client/blocks/checkout/wp-content/plugins/woocommerce/assets/client/blocks/ HTTP/1.1" 404 36660 "-" "-" == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 49 GET /api/getItem/LWPG2001KG 2 GET /api/getItem/SHSG404016-RDP25-8 2 GET /api/getItem/SHSG404016-DP25-24-DI-110 1 GET /api/getItem/SHSG909020-8 1 GET /api/getItem/SHSG898950-8 1 GET /api/getItem/SHSG898935-8 1 GET /api/getItem/SHSG898930-8 1 GET /api/getItem/SHSG898920-8 1 GET /api/getItem/SHSG757550-8 1 GET /api/getItem/SHSG757540-8 1 GET /api/getItem/SHSG757530-8 1 GET /api/getItem/SHSG757525-8 -- last 10 requests -- 40.115.94.245 - - [05/Sep/2026:07:38:04 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:38:04 +1000] "GET /api/getItem/SHSG757520-SP25-8 HTTP/1.1" 200 1547 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:38:04 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:38:05 +1000] "GET /api/getItem/CLSGNSTD50250KK HTTP/1.1" 200 1553 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:38:05 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:38:05 +1000] "GET /api/getItem/CLPBNSTD50250KK HTTP/1.1" 200 1539 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:38:05 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:38:05 +1000] "GET /api/getItem/CLFBNSTD50315KK HTTP/1.1" 200 1551 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:38:06 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:38:06 +1000] "GET /api/getItem/CLPBNSTD50400KK HTTP/1.1" 200 1559 "-" "RestSharp/106.13.0.0" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 14 GET /heartbeat.php 1 GET /index.php -- last 10 requests -- 203.54.180.238 - - [05/Sep/2026:07:36:57 +1000] "GET /heartbeat.php?sentAt=1788557817&bytes=106,155,57,249&_=1788436625348 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:37:07 +1000] "GET /heartbeat.php?sentAt=1788557827&bytes=106,155,58,3&_=1788436625349 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" " 1.145.47.158 - - [05/Sep/2026:07:37:13 +1000] "GET /index.php?page=delivery_calendar&date=2026-09-07 HTTP/1.1" 200 8570 "https://portal.evolutionerp.com.au/index.php?page=delivery_calendar&date=2026-09-06" "Mozilla/5.0 ( 203.54.180.238 - - [05/Sep/2026:07:37:17 +1000] "GET /heartbeat.php?sentAt=1788557837&bytes=106,155,58,13&_=1788436625350 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:37:27 +1000] "GET /heartbeat.php?sentAt=1788557847&bytes=106,155,58,23&_=1788436625351 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:37:37 +1000] "GET /heartbeat.php?sentAt=1788557857&bytes=106,155,58,33&_=1788436625352 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:37:47 +1000] "GET /heartbeat.php?sentAt=1788557867&bytes=106,155,58,43&_=1788436625353 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:37:57 +1000] "GET /heartbeat.php?sentAt=1788557877&bytes=106,155,58,53&_=1788436625354 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:38:07 +1000] "GET /heartbeat.php?sentAt=1788557887&bytes=106,155,58,63&_=1788436625355 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:38:17 +1000] "GET /heartbeat.php?sentAt=1788557897&bytes=106,155,58,73&_=1788436625356 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" --- last 30 samples (run-up to this incident) --- 2026-09-05 07:36:30 L1=2.35 run=3 blk=1 avail=7111 (51.6%) swpO=0 conn=4 myRSS=2982 php=14 phpRSS=1132 ap=26 tcp=36 topuser=madalice 2026-09-05 07:36:32 L1=2.35 run=1 blk=1 avail=7208 (52.3%) swpO=0 conn=3 myRSS=2982 php=13 phpRSS=1005 ap=26 tcp=33 topuser=madalice 2026-09-05 07:36:40 L1=2.22 run=2 blk=1 avail=6755 (49.0%) swpO=0 conn=4 myRSS=2982 php=13 phpRSS=1513 ap=20 tcp=32 topuser=madalice 2026-09-05 07:36:42 L1=2.22 run=2 blk=1 avail=6831 (49.6%) swpO=0 conn=3 myRSS=2982 php=13 phpRSS=1436 ap=20 tcp=36 topuser=madalice 2026-09-05 07:36:51 L1=2.11 run=2 blk=1 avail=6961 (50.5%) swpO=0 conn=4 myRSS=2982 php=13 phpRSS=1296 ap=22 tcp=38 topuser=madalice 2026-09-05 07:36:52 L1=2.11 run=4 blk=1 avail=6892 (50.0%) swpO=0 conn=5 myRSS=2982 php=13 phpRSS=1365 ap=22 tcp=38 topuser=madalice 2026-09-05 07:37:01 L1=2.09 run=1 blk=1 avail=6987 (50.7%) swpO=0 conn=3 myRSS=2982 php=13 phpRSS=1207 ap=30 tcp=112 topuser=madalice 2026-09-05 07:37:03 L1=2.09 run=1 blk=1 avail=6805 (49.4%) swpO=0 conn=5 myRSS=2982 php=13 phpRSS=1207 ap=54 tcp=113 topuser=madalice 2026-09-05 07:37:11 L1=2.59 run=2 blk=1 avail=5949 (43.2%) swpO=0 conn=5 myRSS=2982 php=15 phpRSS=1703 ap=113 tcp=43 topuser=madalice 2026-09-05 07:37:13 L1=2.59 run=3 blk=1 avail=6171 (44.8%) swpO=62 conn=5 myRSS=2980 php=13 phpRSS=1432 ap=111 tcp=37 topuser=madalice 2026-09-05 07:37:21 L1=2.50 run=3 blk=1 avail=6289 (45.6%) swpO=62 conn=5 myRSS=2985 php=14 phpRSS=1407 ap=103 tcp=39 topuser=madalice 2026-09-05 07:37:23 L1=2.50 run=2 blk=1 avail=6388 (46.4%) swpO=0 conn=5 myRSS=2985 php=13 phpRSS=1279 ap=101 tcp=40 topuser=madalice 2026-09-05 07:37:31 L1=2.42 run=1 blk=1 avail=6275 (45.5%) swpO=0 conn=5 myRSS=2985 php=13 phpRSS=1449 ap=93 tcp=39 topuser=madalice 2026-09-05 07:37:33 L1=2.42 run=2 blk=1 avail=6137 (44.5%) swpO=0 conn=4 myRSS=2985 php=13 phpRSS=1599 ap=91 tcp=38 topuser=madalice 2026-09-05 07:37:41 L1=2.27 run=3 blk=1 avail=6267 (45.5%) swpO=0 conn=4 myRSS=2985 php=13 phpRSS=1528 ap=83 tcp=39 topuser=madalice 2026-09-05 07:37:43 L1=2.27 run=4 blk=1 avail=6240 (45.3%) swpO=0 conn=4 myRSS=2985 php=13 phpRSS=1470 ap=81 tcp=36 topuser=madalice 2026-09-05 07:37:52 L1=2.15 run=2 blk=1 avail=6419 (46.6%) swpO=0 conn=4 myRSS=2985 php=13 phpRSS=1448 ap=72 tcp=37 topuser=madalice 2026-09-05 07:37:53 L1=2.15 run=1 blk=1 avail=6426 (46.6%) swpO=0 conn=3 myRSS=2985 php=13 phpRSS=1448 ap=71 tcp=33 topuser=madalice 2026-09-05 07:38:02 L1=2.14 run=1 blk=1 avail=6556 (47.6%) swpO=0 conn=3 myRSS=2985 php=13 phpRSS=1376 ap=62 tcp=42 topuser=madalice 2026-09-05 07:38:03 L1=2.14 run=2 blk=1 avail=6394 (46.4%) swpO=0 conn=4 myRSS=2985 php=13 phpRSS=1561 ap=61 tcp=41 topuser=madalice 2026-09-05 07:38:12 L1=1.96 run=2 blk=1 avail=6785 (49.2%) swpO=0 conn=3 myRSS=2985 php=13 phpRSS=1242 ap=52 tcp=44 topuser=madalice 2026-09-05 07:38:13 L1=1.96 run=2 blk=1 avail=6815 (49.5%) swpO=0 conn=4 myRSS=2985 php=13 phpRSS=1219 ap=51 tcp=46 topuser=madalice 2026-09-05 07:38:22 L1=2.19 run=2 blk=1 avail=6782 (49.2%) swpO=7 conn=3 myRSS=2985 php=13 phpRSS=1292 ap=42 tcp=50 topuser=madalice 2026-09-05 07:38:23 L1=2.19 run=2 blk=1 avail=6736 (48.9%) swpO=7 conn=4 myRSS=2985 php=14 phpRSS=1375 ap=41 tcp=40 topuser=madalice 2026-09-05 07:38:32 L1=2.24 run=1 blk=1 avail=6842 (49.7%) swpO=1 conn=3 myRSS=2985 php=13 phpRSS=1309 ap=33 tcp=36 topuser=madalice 2026-09-05 07:38:33 L1=2.24 run=1 blk=1 avail=6872 (49.9%) swpO=1 conn=4 myRSS=2985 php=13 phpRSS=1287 ap=32 tcp=34 topuser=madalice 2026-09-05 07:38:42 L1=2.21 run=1 blk=1 avail=6929 (50.3%) swpO=0 conn=3 myRSS=2985 php=13 phpRSS=1278 ap=24 tcp=39 topuser=madalice 2026-09-05 07:38:43 L1=2.21 run=3 blk=1 avail=6833 (49.6%) swpO=0 conn=4 myRSS=2985 php=14 phpRSS=1410 ap=24 tcp=37 topuser=madalice 2026-09-05 07:38:52 L1=2.25 run=3 blk=1 avail=6833 (49.6%) swpO=0 conn=3 myRSS=2985 php=13 phpRSS=1382 ap=23 tcp=37 topuser=madalice 2026-09-05 07:38:53 L1=2.25 run=5 blk=1 avail=6748 (49.0%) swpO=0 conn=5 myRSS=2985 php=15 phpRSS=1538 ap=23 tcp=38 topuser=madalice