INCIDENT 2026-09-05 07:55:50 trigger: php_rss=1512MB ================================================================== load: 2.76 2.38 2.20 3/728 587775 ncpu:10 mem_avail: 6607MB/13777MB (48.0%) swap_used:2287MB swapout:0/s blocked(D):1 running:2 iowait:9.7% steal:0.0% php: 13 procs / 1512MB heaviest user: madalice (9 procs, 1383MB) apache: 51 procs tcp_estab: 39 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2941 madalice 9 1391 root 248 1387 nobody 50 874 netdata 8 254 evolution 11 121 dovenull 6 65 wp-toolkit 3 53 cpanellogin 1 53 alison 2 31 kurri 2 27 dovecot 3 27 mailman 20 26 aaa 1 15 lowrange 1 14 candyfabcom 1 14 mailnull 3 13 zabbix 1 11 cpanelphpmyadmin 1 10 polkitd 1 7 --- php workers by user --- USER PROCS RSS_MB madalice 9 1393 evolution 3 100 root 1 28 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5799 MB Active(file): 4340 MB Inactive(file): 1523 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 522 MB CommitLimit: 10984 MB Committed_AS: 9419 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 4-05:33:23 4812 /usr/bin/imunify-agent-proxy 4109079 root 03:11:01 3120 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 03:11:01 530228 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 3011780 11.8 Ssl 2-17:41:38 /usr/sbin/mariadbd 4109105 4109079 root 530228 7.8 Sl 03:11:01 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 496129 2601907 madalice 192536 8.1 R 25:11 php-fpm: pool madalice_com_au 1542443 1 netdata 188488 2.6 Ssl 2-05:33:28 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3643624 3626973 root 167412 0.0 S 05:29:00 spamd child 536530 2601907 madalice 164428 9.9 S 11:24 php-fpm: pool madalice_com_au 515304 2601907 madalice 161760 8.3 S 19:23 php-fpm: pool madalice_com_au 536493 2601907 madalice 161572 9.2 S 11:28 php-fpm: pool madalice_com_au 536487 2601907 madalice 161568 9.6 S 11:30 php-fpm: pool madalice_com_au 536420 2601907 madalice 161024 10.7 S 11:38 php-fpm: pool madalice_com_au 495842 2601907 madalice 159024 7.5 S 25:34 php-fpm: pool madalice_com_au 536397 2601907 madalice 146976 8.2 S 11:42 php-fpm: pool madalice_com_au 536452 2601907 madalice 126268 8.8 S 11:34 php-fpm: pool madalice_com_au 3626973 1 root 119140 0.0 Ss 05:32:35 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3643625 3626973 root 84444 0.0 S 05:29:00 spamd child 509236 509098 root 60448 0.0 Sl 8-05:36:09 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 498558 1353308 cpanellogin 54320 0.0 S 21:55 /usr/local/cpanel/base/show_template.stor server_locale en default_login_theme cpanel cpanel_locale docroot /usr/local/cpanel/base 3127357 3127312 evolution 52988 0.0 Ss 07:55:49 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero_payment_cron.php 3127358 3127320 evolution 49980 0.0 Ss 07:55:49 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 509266 1 root 46016 0.0 Ss 8-05:36:09 /usr/lib/systemd/systemd-journald 1469 1 root 41924 0.1 Ss 67-21:46:04 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1353308 1 root 41736 0.1 Ss 45-05:14:35 cpsrvd (SSL) - waiting for connections 1542981 1542551 netdata 41144 0.1 Sl 2-05:33:24 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1542487 1 wp-toolkit 29256 0.0 Ss 2-05:33:28 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2601907 1 root 28680 0.0 Ss 1-05:32:24 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3626082 1 root 26924 0.0 Ss 05:33:35 lfd - sleeping 1463 1 root 23328 0.0 Ss 67-21:46:04 tailwatchd 570791 506832 nobody 22300 0.0 S 04:06 /usr/sbin/httpd -k start 569799 506832 nobody 21940 0.0 S 04:53 /usr/sbin/httpd -k start 572126 506832 nobody 21864 0.0 S 02:35 /usr/sbin/httpd -k start 572709 506832 nobody 21100 0.0 S 01:21 /usr/sbin/httpd -k start 572118 506832 nobody 20864 0.0 S 02:36 /usr/sbin/httpd -k start 571160 506832 nobody 20544 0.0 S 03:22 /usr/sbin/httpd -k start 572705 506832 nobody 20240 0.0 S 01:22 /usr/sbin/httpd -k start 573055 506832 nobody 20052 0.0 S 00:50 /usr/sbin/httpd -k start 572795 506832 nobody 20004 0.0 S 01:12 /usr/sbin/httpd -k start 572999 506832 nobody 19996 0.0 S 00:51 /usr/sbin/httpd -k start 573029 506832 nobody 19996 0.0 S 00:50 /usr/sbin/httpd -k start 572982 506832 nobody 19848 0.0 S 00:52 /usr/sbin/httpd -k start 573058 506832 nobody 19808 0.0 S 00:50 /usr/sbin/httpd -k start 572986 506832 nobody 19760 0.0 S 00:51 /usr/sbin/httpd -k start 572983 506832 nobody 19592 0.0 S 00:52 /usr/sbin/httpd -k start 570802 506832 nobody 19588 0.0 S 04:04 /usr/sbin/httpd -k start 572610 506832 nobody 19520 0.0 S 01:36 /usr/sbin/httpd -k start 572996 506832 nobody 19448 0.0 S 00:51 /usr/sbin/httpd -k start 573048 506832 nobody 19432 0.0 S 00:50 /usr/sbin/httpd -k start 1542531 1 wp-toolkit 19264 0.0 Ss 2-05:33:27 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 572916 506832 nobody 19080 0.0 S 01:00 /usr/sbin/httpd -k start 573042 506832 nobody 18984 0.0 S 00:50 /usr/sbin/httpd -k start 572966 506832 nobody 18964 0.0 S 00:53 /usr/sbin/httpd -k start 2602226 1 root 18928 0.1 Ssl 1-05:32:09 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 572962 506832 nobody 18900 0.0 S 00:54 /usr/sbin/httpd -k start 572984 506832 nobody 18900 0.0 S 00:52 /usr/sbin/httpd -k start 573051 506832 nobody 18780 0.0 S 00:50 /usr/sbin/httpd -k start 573032 506832 nobody 18736 0.0 S 00:50 /usr/sbin/httpd -k start 572989 506832 nobody 18712 0.0 S 00:51 /usr/sbin/httpd -k start 573047 506832 nobody 18684 0.0 S 00:50 /usr/sbin/httpd -k start 572917 506832 nobody 18656 0.0 S 01:00 /usr/sbin/httpd -k start 1542982 1542551 netdata 18520 2.2 Sl 2-05:33:24 /usr/libexec/netdata/plugins.d/apps.plugin 1 573040 506832 nobody 18328 0.0 S 00:50 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10757518 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 423 evolution/app.evolutionerp.com.au-ssl_log 125 evolution/portal.evolutionerp.com.au-ssl_log 15 tubesupplies/tubesupplies.com.au-ssl_log 13 tubesupplies/tubesupplies.com.au 11 alison/alisonarts.com.au-ssl_log 9 evolution/my.evolutionerp.com.au-ssl_log 8 speedlin/speedlinefencing.com.au-ssl_log 5 (total vhosts taking traffic: 8) --- top client IPs across all vhosts (last 3 min) --- 300 139.28.219.70 125 40.115.94.245 113 20.151.10.161 21 62.60.130.198 15 203.54.180.238 5 35.231.174.139 3 114.119.140.234 2 91.92.243.249 2 51.81.170.11 2 2607:fb90:1740:c44a:995c:4ba5:d9a5:9260 2 212.43.158.237 2 204.101.161.15 2 157.55.39.48 2 118.127.40.55 2 114.119.159.70 --- top request paths across all vhosts (last 3 min) --- 125 GET /api/getItem/LWPG2001KG 15 GET /heartbeat.php 5 GET /store/hand-painted-nike-cartoonsketchy/ 4 GET /wp-includes/Text/Diff/ 4 GET /wp-includes/Text/ 3 POST /wp-login.php 3 GET /wp-includes/Text/Diff/Engine/ 3 GET /store/hand-painted-nike-bandana/ 3 GET /admin.php 3 GET / 2 POST /wp-cron.php 2 GET /xiugai.php 2 GET /wp.php 2 GET /wp-includes/PHPMailer/POP3.php 2 GET /wp-includes/PHPMailer/OAuthTokenProvider.php 2 GET /wp-includes/PHPMailer/OAuth.php 2 GET /wp-includes/PHPMailer/DSNConfigurator.php 2 GET /site.php 2 GET /simple.php 2 GET /shiny.php --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 5 GET /store/hand-painted-nike-cartoonsketchy/ 3 GET /store/hand-painted-nike-bandana/ 3 GET /admin.php 2 GET /xiugai.php 2 GET /wp.php 2 GET /site.php 2 GET /simple.php 2 GET /shiny.php 2 GET /puc.php 2 GET /pucci.php 2 GET /or.php 2 GET /ops.php -- last 10 requests -- 139.28.219.70 - - [05/Sep/2026:07:55:40 +1000] "GET /wp-content/plugins/woocommerce/includes/export/wp-content/plugins/woocommerce/includes/ HTTP/1.1" 404 36657 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:55:42 +1000] "GET /wp-content/plugins/woocommerce/includes/export/abstract-wc-csv-batch-exporter.php HTTP/1.1" 200 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:55:42 +1000] "GET /wp-content/plugins/woocommerce/includes/export/abstract-wc-csv-exporter.php HTTP/1.1" 200 1 "-" "-" 20.151.10.161 - - [05/Sep/2026:07:55:41 +1000] "GET /btyuio.php HTTP/1.1" 404 36646 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:55:42 +1000] "GET /wp-content/plugins/woocommerce/includes/export/class-wc-product-csv-exporter.php HTTP/1.1" 200 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:55:43 +1000] "GET /wp-content/plugins/woocommerce/includes/gateways/ HTTP/1.1" 200 394 "-" "-" 20.151.10.161 - - [05/Sep/2026:07:55:42 +1000] "GET /or.php HTTP/1.1" 301 1 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:55:43 +1000] "GET /wp-content/plugins/woocommerce/includes/gateways//wp-content/plugins/woocommerce/includes/ HTTP/1.1" 301 1 "-" "-" 20.151.10.161 - - [05/Sep/2026:07:55:44 +1000] "GET /or.php HTTP/1.1" 404 36644 "-" "-" 139.28.219.70 - - [05/Sep/2026:07:55:44 +1000] "GET /wp-content/plugins/woocommerce/includes/gateways/wp-content/plugins/woocommerce/includes/ HTTP/1.1" 404 36657 "-" "-" == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 125 GET /api/getItem/LWPG2001KG -- last 10 requests -- 40.115.94.245 - - [05/Sep/2026:07:54:44 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:54:44 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:54:44 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:54:45 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:54:45 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:54:46 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 429 62 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:55:46 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:55:46 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:55:46 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:07:55:47 +1000] "GET /api/getItem/LWPG2001KG HTTP/1.1" 200 1334 "-" "RestSharp/106.13.0.0" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 15 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [05/Sep/2026:07:53:57 +1000] "GET /heartbeat.php?sentAt=1788558837&bytes=106,155,61,245&_=1788436625450 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:54:07 +1000] "GET /heartbeat.php?sentAt=1788558847&bytes=106,155,61,255&_=1788436625451 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:54:17 +1000] "GET /heartbeat.php?sentAt=1788558857&bytes=106,155,62,9&_=1788436625452 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" " 203.54.180.238 - - [05/Sep/2026:07:54:27 +1000] "GET /heartbeat.php?sentAt=1788558867&bytes=106,155,62,19&_=1788436625453 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:54:37 +1000] "GET /heartbeat.php?sentAt=1788558877&bytes=106,155,62,29&_=1788436625454 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:54:47 +1000] "GET /heartbeat.php?sentAt=1788558887&bytes=106,155,62,39&_=1788436625455 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:55:00 +1000] "GET /heartbeat.php?sentAt=1788558897&bytes=106,155,62,49&_=1788436625456 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:55:07 +1000] "GET /heartbeat.php?sentAt=1788558907&bytes=106,155,62,59&_=1788436625457 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:55:17 +1000] "GET /heartbeat.php?sentAt=1788558917&bytes=106,155,62,69&_=1788436625458 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [05/Sep/2026:07:55:27 +1000] "GET /heartbeat.php?sentAt=1788558927&bytes=106,155,62,79&_=1788436625459 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" --- last 30 samples (run-up to this incident) --- 2026-09-05 07:53:19 L1=2.71 run=3 blk=1 avail=7022 (51.0%) swpO=0 conn=8 myRSS=2965 php=14 phpRSS=1232 ap=30 tcp=44 topuser=madalice 2026-09-05 07:53:29 L1=2.68 run=2 blk=1 avail=6976 (50.6%) swpO=0 conn=7 myRSS=2965 php=13 phpRSS=1258 ap=29 tcp=43 topuser=madalice 2026-09-05 07:53:29 L1=2.68 run=2 blk=1 avail=6975 (50.6%) swpO=0 conn=8 myRSS=2965 php=13 phpRSS=1256 ap=29 tcp=43 topuser=madalice 2026-09-05 07:53:39 L1=2.49 run=3 blk=1 avail=6868 (49.9%) swpO=0 conn=7 myRSS=2965 php=13 phpRSS=1404 ap=24 tcp=42 topuser=madalice 2026-09-05 07:53:39 L1=2.49 run=3 blk=1 avail=6804 (49.4%) swpO=0 conn=8 myRSS=2965 php=13 phpRSS=1475 ap=24 tcp=40 topuser=madalice 2026-09-05 07:53:49 L1=2.49 run=2 blk=1 avail=7040 (51.1%) swpO=0 conn=7 myRSS=2965 php=13 phpRSS=1205 ap=27 tcp=46 topuser=madalice 2026-09-05 07:53:49 L1=2.53 run=3 blk=1 avail=6961 (50.5%) swpO=0 conn=8 myRSS=2965 php=13 phpRSS=1287 ap=27 tcp=44 topuser=madalice 2026-09-05 07:53:59 L1=2.48 run=2 blk=1 avail=6794 (49.3%) swpO=0 conn=7 myRSS=2965 php=13 phpRSS=1432 ap=27 tcp=41 topuser=madalice 2026-09-05 07:53:59 L1=2.45 run=2 blk=1 avail=6781 (49.2%) swpO=0 conn=4 myRSS=2966 php=13 phpRSS=1452 ap=27 tcp=40 topuser=madalice 2026-09-05 07:54:09 L1=2.49 run=3 blk=1 avail=7116 (51.7%) swpO=0 conn=4 myRSS=2966 php=13 phpRSS=1111 ap=28 tcp=41 topuser=madalice 2026-09-05 07:54:09 L1=2.45 run=2 blk=1 avail=7119 (51.7%) swpO=0 conn=4 myRSS=2966 php=13 phpRSS=1109 ap=27 tcp=42 topuser=madalice 2026-09-05 07:54:19 L1=2.41 run=3 blk=1 avail=6851 (49.7%) swpO=0 conn=4 myRSS=2966 php=13 phpRSS=1356 ap=30 tcp=41 topuser=madalice 2026-09-05 07:54:20 L1=2.38 run=2 blk=1 avail=6828 (49.6%) swpO=0 conn=4 myRSS=2966 php=13 phpRSS=1387 ap=30 tcp=41 topuser=madalice 2026-09-05 07:54:29 L1=2.35 run=3 blk=1 avail=7239 (52.5%) swpO=0 conn=4 myRSS=2966 php=13 phpRSS=944 ap=30 tcp=47 topuser=madalice 2026-09-05 07:54:30 L1=2.32 run=3 blk=1 avail=7205 (52.3%) swpO=0 conn=4 myRSS=2966 php=13 phpRSS=1001 ap=30 tcp=46 topuser=madalice 2026-09-05 07:54:39 L1=2.22 run=2 blk=1 avail=7224 (52.4%) swpO=0 conn=4 myRSS=2966 php=13 phpRSS=984 ap=30 tcp=49 topuser=madalice 2026-09-05 07:54:40 L1=2.20 run=2 blk=1 avail=7153 (51.9%) swpO=0 conn=4 myRSS=2966 php=13 phpRSS=1054 ap=30 tcp=48 topuser=madalice 2026-09-05 07:54:49 L1=2.26 run=3 blk=1 avail=7140 (51.8%) swpO=0 conn=4 myRSS=2966 php=14 phpRSS=1081 ap=32 tcp=51 topuser=madalice 2026-09-05 07:54:50 L1=2.48 run=4 blk=1 avail=6966 (50.6%) swpO=0 conn=4 myRSS=2966 php=16 phpRSS=1304 ap=34 tcp=52 topuser=madalice 2026-09-05 07:54:59 L1=2.44 run=1 blk=1 avail=6931 (50.3%) swpO=0 conn=4 myRSS=2966 php=13 phpRSS=1010 ap=68 tcp=96 topuser=madalice 2026-09-05 07:55:00 L1=2.49 run=5 blk=1 avail=6752 (49.0%) swpO=0 conn=3 myRSS=2966 php=13 phpRSS=1012 ap=100 tcp=93 topuser=madalice 2026-09-05 07:55:09 L1=3.10 run=5 blk=1 avail=6579 (47.8%) swpO=1523 conn=5 myRSS=2941 php=13 phpRSS=1232 ap=92 tcp=49 topuser=madalice 2026-09-05 07:55:10 L1=3.10 run=7 blk=1 avail=6466 (46.9%) swpO=1523 conn=3 myRSS=2941 php=14 phpRSS=1388 ap=91 tcp=52 topuser=madalice 2026-09-05 07:55:19 L1=2.93 run=2 blk=1 avail=6729 (48.8%) swpO=0 conn=5 myRSS=2941 php=13 phpRSS=1157 ap=82 tcp=47 topuser=madalice 2026-09-05 07:55:20 L1=2.93 run=2 blk=1 avail=6755 (49.0%) swpO=0 conn=3 myRSS=2941 php=13 phpRSS=1107 ap=81 tcp=48 topuser=madalice 2026-09-05 07:55:29 L1=2.87 run=3 blk=1 avail=6679 (48.5%) swpO=0 conn=5 myRSS=2941 php=13 phpRSS=1273 ap=72 tcp=42 topuser=madalice 2026-09-05 07:55:30 L1=2.87 run=2 blk=1 avail=6647 (48.3%) swpO=0 conn=3 myRSS=2941 php=13 phpRSS=1311 ap=71 tcp=41 topuser=madalice 2026-09-05 07:55:40 L1=2.90 run=4 blk=1 avail=6938 (50.4%) swpO=0 conn=5 myRSS=2941 php=13 phpRSS=1102 ap=62 tcp=43 topuser=madalice 2026-09-05 07:55:40 L1=2.90 run=3 blk=1 avail=6867 (49.8%) swpO=0 conn=3 myRSS=2941 php=13 phpRSS=1181 ap=61 tcp=42 topuser=madalice 2026-09-05 07:55:50 L1=2.76 run=2 blk=1 avail=6607 (48.0%) swpO=0 conn=4 myRSS=2941 php=13 phpRSS=1512 ap=51 tcp=39 topuser=madalice