INCIDENT 2026-09-05 08:28:21 trigger: php_rss=1504MB ================================================================== load: 1.81 1.94 2.06 2/698 694715 ncpu:10 mem_avail: 6996MB/13777MB (50.8%) swap_used:2446MB swapout:438/s blocked(D):1 running:4 iowait:5.3% steal:0.0% php: 15 procs / 1504MB heaviest user: madalice (9 procs, 1132MB) apache: 24 procs tcp_estab: 35 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2814 root 247 1339 madalice 9 1132 nobody 23 391 netdata 8 250 evolution 11 108 infinium 1 97 dovenull 6 65 wp-toolkit 3 53 dovecot 3 27 mailman 20 26 cpanellogin 1 18 lowrange 1 14 candyfabcom 1 14 mailnull 3 13 kurri 1 13 zabbix 1 10 polkitd 1 7 named 1 5 nscd 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 9 1132 infinium 1 99 evolution 3 89 root 1 27 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6464 MB Active(file): 5212 MB Inactive(file): 1316 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 476 MB CommitLimit: 10984 MB Committed_AS: 8638 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 4-06:05:55 4508 /usr/bin/imunify-agent-proxy 4109079 root 03:43:33 2820 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 03:43:33 488284 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 3238812 1 mysql 2882304 11.7 Ssl 2-18:14:10 /usr/sbin/mariadbd 4109105 4109079 root 488284 6.7 Sl 03:43:33 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 1542443 1 netdata 185216 2.5 Ssl 2-06:06:00 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3643624 3626973 root 169344 0.0 S 06:01:32 spamd child 694054 2601907 madalice 160800 10.4 S 01:17 php-fpm: pool madalice_com_au 694209 2601907 madalice 160680 9.8 S 00:58 php-fpm: pool madalice_com_au 694137 2601907 madalice 160492 7.5 S 01:04 php-fpm: pool madalice_com_au 661101 2601907 madalice 160488 5.8 S 09:06 php-fpm: pool madalice_com_au 694283 2601907 madalice 160240 5.1 S 00:49 php-fpm: pool madalice_com_au 694211 2601907 madalice 134492 4.6 S 00:58 php-fpm: pool madalice_com_au 694685 694541 infinium 110340 36.0 R 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 3643625 3626973 root 103832 0.0 S 06:01:32 spamd child 3626973 1 root 98648 0.0 Ss 06:05:07 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 661518 2601907 madalice 93912 5.1 S 08:21 php-fpm: pool madalice_com_au 694142 2601907 madalice 75532 7.6 S 01:01 php-fpm: pool madalice_com_au 509236 509098 root 62316 0.0 Sl 8-06:08:41 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 677540 2601907 madalice 52660 5.1 S 05:16 php-fpm: pool madalice_com_au 3127357 3127312 evolution 50048 0.0 Ss 08:28:21 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero_payment_cron.php 509266 1 root 46720 0.0 Ss 8-06:08:41 /usr/lib/systemd/systemd-journald 1353308 1 root 41792 0.1 Ss 45-05:47:07 cpsrvd (SSL) - waiting for connections 1469 1 root 41200 0.1 Ss 67-22:18:36 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3127358 3127320 evolution 41164 0.0 Ss 08:28:21 /opt/cpanel/ea-php83/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 1542981 1542551 netdata 41104 0.1 Sl 2-06:05:56 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1542487 1 wp-toolkit 28888 0.0 Ss 2-06:06:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 2601907 1 root 28652 0.0 Ss 1-06:04:56 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3626082 1 root 24544 0.0 Ss 06:06:07 lfd - sleeping 677942 506832 nobody 23180 0.0 S 04:25 /usr/sbin/httpd -k start 1463 1 root 22964 0.0 Ss 67-22:18:36 tailwatchd 676789 506832 nobody 22880 0.0 S 06:42 /usr/sbin/httpd -k start 677468 506832 nobody 22184 0.0 S 05:21 /usr/sbin/httpd -k start 693889 506832 nobody 20548 0.0 S 01:35 /usr/sbin/httpd -k start 693890 506832 nobody 20408 0.0 S 01:35 /usr/sbin/httpd -k start 694228 506832 nobody 20296 0.0 S 00:54 /usr/sbin/httpd -k start 694375 506832 nobody 19900 0.0 S 00:36 /usr/sbin/httpd -k start 677944 506832 nobody 19784 0.0 S 04:25 /usr/sbin/httpd -k start 694609 506832 nobody 19536 0.0 S 00:14 /usr/sbin/httpd -k start 1542531 1 wp-toolkit 19068 0.0 Ss 2-06:05:59 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 661448 1353308 cpanellogin 18860 0.0 S 08:30 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale default_login_theme cpanel server_locale en 693873 506832 nobody 18624 0.0 S 01:37 /usr/sbin/httpd -k start 1542982 1542551 netdata 18568 2.2 Sl 2-06:05:56 /usr/libexec/netdata/plugins.d/apps.plugin 1 694511 506832 nobody 18480 0.0 S 00:22 /usr/sbin/httpd -k start 694608 506832 nobody 18428 0.0 S 00:14 /usr/sbin/httpd -k start 694509 506832 nobody 18396 0.0 S 00:23 /usr/sbin/httpd -k start 694542 506832 nobody 18292 0.0 S 00:21 /usr/sbin/httpd -k start 2602226 1 root 18172 0.1 Ssl 1-06:04:41 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 693897 506832 nobody 17980 0.0 S 01:35 /usr/sbin/httpd -k start 694541 506832 nobody 17648 0.0 S 00:21 /usr/sbin/httpd -k start 694606 506832 nobody 17352 0.0 S 00:15 /usr/sbin/httpd -k start 694540 506832 nobody 17072 0.0 S 00:21 /usr/sbin/httpd -k start 693903 506832 nobody 16688 0.0 S 01:35 /usr/sbin/httpd -k start 694232 506832 nobody 16196 0.0 S 00:53 /usr/sbin/httpd -k start 306499 1471 root 15664 0.0 S 01:49:18 cPhulkd - dbprocessor 1542141 1 root 15372 0.0 Ss 2-06:06:03 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 1471 1 root 15280 0.0 Ss 67-22:18:36 cPhulkd - processor 3539428 508511 lowrange 14868 0.0 S 06:32:14 dovecot/imap 694610 508511 candyfabcom 14832 0.0 S 00:13 dovecot/imap 694611 1471 root 14596 0.0 S 00:13 cPhulkd - processor - http socket 3141944 508511 kurri 13560 0.0 S 08:27:59 dovecot/imap 690514 508511 dovecot 13252 0.0 S 19:55:32 dovecot/auth 690505 508511 dovenull 13160 0.0 S 19:55:32 dovecot/imap-login --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 10781168 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +----------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 237 evolution/app.evolutionerp.com.au-ssl_log 103 nrg/nrgservices.net.au-ssl_log 35 nrg/nrgservices.net.au 17 speedlin/speedlinefencing.com.au-ssl_log 12 evolution/portal.evolutionerp.com.au-ssl_log 5 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 213 139.28.219.70 103 40.115.94.245 35 195.178.110.22 17 169.58.234.137 12 65.98.5.196 9 62.60.130.198 5 203.54.180.238 4 143.198.219.236 3 216.73.216.228 3 114.119.140.234 1 116.179.37.95 1 116.179.37.54 1 114.119.159.70 1 114.119.146.16 1 114.119.130.40 --- top request paths across all vhosts (last 3 min) --- 52 GET /api/getItem/LWFBW2001KG 51 GET /api/getItem/LWHG2001KG 12 POST / 5 GET /heartbeat.php 3 GET /wp-includes/css/dist/ 3 GET /store/hand-painted-nike-af1-seaeagles/ 3 GET /store/hand-painted-nike-af1-roses/ 2 GET /wp-includes/widgets/ 2 GET /wp-includes/sitemaps/providers/ 2 GET /wp-includes/css/ 2 GET /robots.txt 2 GET /backup.zip 1 GET //xmlrpc.php 1 GET /www.zip 1 GET /www.tar.gz 1 GET /www.sql 1 GET /wwwroot.zip 1 GET /wwwroot.tar.gz 1 GET /wp-includes/widgets/class-wp-widget-block.php 1 GET /wp-includes/Text/Diff/ --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 12 POST / 3 GET /store/hand-painted-nike-af1-seaeagles/ 3 GET /store/hand-painted-nike-af1-roses/ 1 GET //xmlrpc.php 1 GET /wp-content/plugins/woocommerce/src/Caching/wp-content/plugins/woocommerce/src/ 1 GET /wp-content/plugins/woocommerce/src/Caching//wp-content/plugins/woocommerce/src/ 1 GET /wp-content/plugins/woocommerce/src/Caching/ObjectCache.php 1 GET /wp-content/plugins/woocommerce/src/Caching/CacheNameSpaceTrait.php 1 GET /wp-content/plugins/woocommerce/src/Caching/CacheEngine.php 1 GET /wp-content/plugins/woocommerce/src/Caching/ 1 GET /wp-content/plugins/woocommerce/src/Caches/wp-content/plugins/woocommerce/src/ 1 GET /wp-content/plugins/woocommerce/src/Caches//wp-content/plugins/woocommerce/src/ -- last 10 requests -- 143.198.219.236 - - [05/Sep/2026:08:28:04 +1000] "GET //xmlrpc.php?rsd HTTP/1.1" 301 - "http://lvp.rct.temporary.site//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) 139.28.219.70 - - [05/Sep/2026:08:28:06 +1000] "GET /wp-content/plugins/woocommerce/src/Caching//wp-content/plugins/woocommerce/src/ HTTP/1.1" 301 1 "-" "-" 143.198.219.236 - - [05/Sep/2026:08:28:06 +1000] "GET //blog/robots.txt HTTP/1.1" 301 - "http://lvp.rct.temporary.site//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko 139.28.219.70 - - [05/Sep/2026:08:28:07 +1000] "GET /wp-content/plugins/woocommerce/src/Caching/wp-content/plugins/woocommerce/src/ HTTP/1.1" 404 36653 "-" "-" 143.198.219.236 - - [05/Sep/2026:08:28:07 +1000] "GET //blog/ HTTP/1.1" 301 - "http://lvp.rct.temporary.site//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/1 139.28.219.70 - - [05/Sep/2026:08:28:09 +1000] "GET /wp-content/plugins/woocommerce/src/Caching/CacheEngine.php HTTP/1.1" 200 1 "-" "-" 114.119.140.234 - - [05/Sep/2026:08:28:08 +1000] "GET /store/hand-painted-nike-af1-roses/?wcpr_rating=3&wcpr_page=4&wcpr_image=1&wcpr_verified=1 HTTP/1.1" 404 36670 "https://madalice.com.au/store/hand-painted-nike-af1-ro 139.28.219.70 - - [05/Sep/2026:08:28:09 +1000] "GET /wp-content/plugins/woocommerce/src/Caching/CacheNameSpaceTrait.php HTTP/1.1" 200 1 "-" "-" 143.198.219.236 - - [05/Sep/2026:08:28:09 +1000] "GET //wordpress/ HTTP/1.1" 301 - "http://lvp.rct.temporary.site//blog//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chr 139.28.219.70 - - [05/Sep/2026:08:28:10 +1000] "GET /wp-content/plugins/woocommerce/src/Caching/ObjectCache.php HTTP/1.1" 200 1 "-" "-" == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 52 GET /api/getItem/LWFBW2001KG 51 GET /api/getItem/LWHG2001KG -- last 10 requests -- 40.115.94.245 - - [05/Sep/2026:08:27:51 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:08:27:51 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:08:27:51 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:08:27:51 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:08:27:52 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:08:27:52 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:08:27:52 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:08:27:52 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:08:27:52 +1000] "GET /api/getItem/LWFBW2001KG HTTP/1.1" 404 113 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [05/Sep/2026:08:27:52 +1000] "GET /api/getItem/LWHG2001KG HTTP/1.1" 200 1354 "-" "RestSharp/106.13.0.0" == nrg/nrgservices.net.au-ssl_log == -- top paths -- 2 GET /backup.zip 1 GET /www.zip 1 GET /www.tar.gz 1 GET /www.sql 1 GET /wwwroot.zip 1 GET /wwwroot.tar.gz 1 GET /web.zip 1 GET /website.zip 1 GET /users.sql 1 GET /site.zip 1 GET /site.sql 1 GET /public_html.zip -- last 10 requests -- 195.178.110.22 - - [05/Sep/2026:08:26:19 +1000] "GET /database.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:26:19 +1000] "GET /dump.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:26:19 +1000] "GET /db_backup.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:26:20 +1000] "GET /dbdump.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:26:20 +1000] "GET /mysql.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:26:20 +1000] "GET /mysqldump.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:26:20 +1000] "GET /data.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:26:21 +1000] "GET /users.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:26:21 +1000] "GET /www.sql HTTP/1.1" 404 5749 "-" "-" 195.178.110.22 - - [05/Sep/2026:08:26:21 +1000] "GET /site.sql HTTP/1.1" 404 5749 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-09-05 08:26:01 L1=2.13 run=4 blk=1 avail=7779 (56.5%) swpO=0 conn=3 myRSS=2825 php=14 phpRSS=778 ap=17 tcp=25 topuser=madalice 2026-09-05 08:26:01 L1=2.13 run=2 blk=1 avail=7764 (56.4%) swpO=0 conn=1 myRSS=2825 php=14 phpRSS=792 ap=17 tcp=25 topuser=madalice 2026-09-05 08:26:11 L1=2.03 run=2 blk=1 avail=7851 (57.0%) swpO=0 conn=1 myRSS=2826 php=13 phpRSS=665 ap=18 tcp=32 topuser=madalice 2026-09-05 08:26:11 L1=2.03 run=1 blk=1 avail=7849 (57.0%) swpO=0 conn=1 myRSS=2826 php=13 phpRSS=665 ap=18 tcp=32 topuser=madalice 2026-09-05 08:26:21 L1=2.03 run=1 blk=1 avail=7887 (57.2%) swpO=0 conn=1 myRSS=2826 php=13 phpRSS=645 ap=17 tcp=31 topuser=madalice 2026-09-05 08:26:21 L1=2.03 run=1 blk=1 avail=7886 (57.2%) swpO=0 conn=1 myRSS=2826 php=13 phpRSS=645 ap=17 tcp=31 topuser=madalice 2026-09-05 08:26:31 L1=1.87 run=1 blk=1 avail=7792 (56.6%) swpO=0 conn=1 myRSS=2826 php=13 phpRSS=744 ap=17 tcp=29 topuser=madalice 2026-09-05 08:26:31 L1=1.87 run=1 blk=1 avail=7789 (56.5%) swpO=0 conn=1 myRSS=2826 php=13 phpRSS=744 ap=17 tcp=29 topuser=madalice 2026-09-05 08:26:41 L1=1.74 run=4 blk=1 avail=7693 (55.8%) swpO=0 conn=1 myRSS=2826 php=14 phpRSS=856 ap=20 tcp=36 topuser=madalice 2026-09-05 08:26:41 L1=1.74 run=3 blk=1 avail=7647 (55.5%) swpO=0 conn=1 myRSS=2826 php=13 phpRSS=861 ap=21 tcp=36 topuser=madalice 2026-09-05 08:26:51 L1=1.63 run=1 blk=1 avail=7139 (51.8%) swpO=0 conn=1 myRSS=2826 php=13 phpRSS=1172 ap=50 tcp=42 topuser=madalice 2026-09-05 08:26:51 L1=1.63 run=1 blk=1 avail=7145 (51.9%) swpO=0 conn=1 myRSS=2826 php=13 phpRSS=1172 ap=49 tcp=43 topuser=madalice 2026-09-05 08:27:01 L1=1.68 run=4 blk=1 avail=7382 (53.6%) swpO=0 conn=1 myRSS=2826 php=13 phpRSS=990 ap=40 tcp=31 topuser=madalice 2026-09-05 08:27:01 L1=1.68 run=4 blk=1 avail=7358 (53.4%) swpO=0 conn=1 myRSS=2826 php=13 phpRSS=1022 ap=39 tcp=32 topuser=madalice 2026-09-05 08:27:11 L1=1.74 run=3 blk=1 avail=7185 (52.2%) swpO=0 conn=3 myRSS=2826 php=14 phpRSS=1281 ap=30 tcp=35 topuser=madalice 2026-09-05 08:27:11 L1=1.74 run=3 blk=1 avail=7119 (51.7%) swpO=0 conn=1 myRSS=2826 php=15 phpRSS=1385 ap=29 tcp=37 topuser=madalice 2026-09-05 08:27:21 L1=1.86 run=1 blk=1 avail=7441 (54.0%) swpO=0 conn=3 myRSS=2826 php=13 phpRSS=1015 ap=22 tcp=31 topuser=madalice 2026-09-05 08:27:21 L1=1.86 run=1 blk=1 avail=7464 (54.2%) swpO=0 conn=1 myRSS=2826 php=13 phpRSS=992 ap=22 tcp=31 topuser=madalice 2026-09-05 08:27:31 L1=2.04 run=2 blk=1 avail=7313 (53.1%) swpO=0 conn=3 myRSS=2826 php=13 phpRSS=1125 ap=24 tcp=38 topuser=madalice 2026-09-05 08:27:31 L1=2.04 run=3 blk=1 avail=7311 (53.1%) swpO=0 conn=1 myRSS=2826 php=13 phpRSS=1127 ap=24 tcp=38 topuser=madalice 2026-09-05 08:27:41 L1=1.95 run=2 blk=1 avail=7068 (51.3%) swpO=0 conn=3 myRSS=2826 php=13 phpRSS=1359 ap=22 tcp=32 topuser=madalice 2026-09-05 08:27:41 L1=1.95 run=3 blk=1 avail=7046 (51.1%) swpO=0 conn=1 myRSS=2826 php=13 phpRSS=1271 ap=22 tcp=31 topuser=madalice 2026-09-05 08:27:51 L1=1.88 run=1 blk=1 avail=7781 (56.5%) swpO=0 conn=3 myRSS=2826 php=13 phpRSS=694 ap=23 tcp=31 topuser=madalice 2026-09-05 08:27:51 L1=1.88 run=3 blk=1 avail=7794 (56.6%) swpO=0 conn=1 myRSS=2826 php=14 phpRSS=704 ap=23 tcp=30 topuser=madalice 2026-09-05 08:28:01 L1=1.82 run=1 blk=1 avail=7686 (55.8%) swpO=0 conn=3 myRSS=2826 php=13 phpRSS=751 ap=28 tcp=38 topuser=madalice 2026-09-05 08:28:01 L1=1.82 run=2 blk=1 avail=7684 (55.8%) swpO=0 conn=1 myRSS=2826 php=13 phpRSS=751 ap=28 tcp=37 topuser=madalice 2026-09-05 08:28:11 L1=1.76 run=2 blk=1 avail=7293 (52.9%) swpO=0 conn=2 myRSS=2826 php=13 phpRSS=1152 ap=27 tcp=38 topuser=madalice 2026-09-05 08:28:11 L1=1.76 run=3 blk=1 avail=7283 (52.9%) swpO=0 conn=1 myRSS=2826 php=14 phpRSS=1196 ap=27 tcp=36 topuser=madalice 2026-09-05 08:28:21 L1=1.81 run=4 blk=1 avail=6996 (50.8%) swpO=438 conn=2 myRSS=2814 php=15 phpRSS=1504 ap=24 tcp=35 topuser=madalice 2026-09-05 08:28:21 L1=1.81 run=4 blk=1 avail=7099 (51.5%) swpO=438 conn=2 myRSS=2814 php=14 phpRSS=1369 ap=24 tcp=34 topuser=madalice