INCIDENT 2026-09-06 17:35:15 trigger: php_rss=1594MB ================================================================== load: 2.46 2.21 2.17 3/679 3292447 ncpu:10 mem_avail: 8740MB/13777MB (63.4%) swap_used:2282MB swapout:5/s blocked(D):1 running:5 iowait:8.7% steal:0.0% php: 15 procs / 1594MB heaviest user: madalice (8 procs, 1249MB) apache: 23 procs tcp_estab: 30 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 1485 madalice 8 1249 root 251 843 nobody 22 349 netdata 8 243 infinium 2 206 alison 1 128 mailman 20 125 wp-toolkit 3 56 dovenull 6 55 cpanellogin 1 50 lowrange 3 43 kurri 2 24 dovecot 3 23 named 1 14 mailnull 1 14 zabbix 1 11 evolution 11 10 polkitd 1 8 nscd 1 4 --- php workers by user --- USER PROCS RSS_MB madalice 8 1249 infinium 2 209 alison 1 129 root 1 23 evolution 3 0 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 8029 MB Active(file): 4138 MB Inactive(file): 4008 MB Dirty: 6 MB Writeback: 0 MB SReclaimable: 527 MB CommitLimit: 10984 MB Committed_AS: 9032 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 5-15:12:49 5564 /usr/bin/imunify-agent-proxy 4109079 root 1-12:50:27 1756 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 1-12:50:27 95332 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress / --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2987918 1 mysql 1520720 2.8 Ssl 21:58:44 /usr/sbin/mariadbd 166870 1 netdata 186516 2.6 Ssl 15:12:55 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 3277841 167896 madalice 162524 18.9 S 00:32 php-fpm: pool madalice_com_au 3277771 167896 madalice 162372 23.7 S 00:41 php-fpm: pool madalice_com_au 3277838 167896 madalice 159616 23.3 S 00:32 php-fpm: pool madalice_com_au 3277839 167896 madalice 159580 24.5 S 00:32 php-fpm: pool madalice_com_au 3277837 167896 madalice 159352 21.0 S 00:33 php-fpm: pool madalice_com_au 3277879 167896 madalice 159348 20.4 S 00:30 php-fpm: pool madalice_com_au 3277840 167896 madalice 158884 24.2 S 00:32 php-fpm: pool madalice_com_au 3277878 167896 madalice 157544 20.4 S 00:30 php-fpm: pool madalice_com_au 220207 168913 root 155148 0.0 S 14:56:57 spamd child 3292404 3259745 alison 137264 52.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3292412 3277846 infinium 127196 48.0 S 00:01 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 168913 1 root 95684 0.0 Ss 15:11:45 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3292415 3277874 infinium 95416 0.0 R 00:00 /opt/cpanel/ea-php84/root/usr/bin/php-cgi 4109105 4109079 root 95332 1.5 Sl 1-12:50:27 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2902970 168913 root 92280 0.0 S 01:53:40 spamd child 167871 1 root 57708 0.0 Ss 15:12:48 /usr/lib/systemd/systemd-journald 2988116 1353308 cpanellogin 51236 0.0 S 01:28:12 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale default_login_theme cpanel server_locale en 1353308 1 root 42308 0.1 Ss 46-14:54:01 cpsrvd (SSL) - waiting for connections 1469 1 root 39524 0.1 Ss 69-07:25:30 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 167562 166914 netdata 35964 0.1 Sl 15:12:50 /usr/libexec/netdata/plugins.d/go.d.plugin 1 509236 509098 root 34760 0.0 Sl 9-15:15:35 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 166645 1 wp-toolkit 31856 0.0 Ss 15:12:59 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 1463 1 root 24376 0.0 Ss 69-07:25:30 tailwatchd 3225180 506832 nobody 24244 0.0 S 18:16 /usr/sbin/httpd -k start 167896 1 root 23956 0.0 Ss 15:12:47 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3259292 506832 nobody 23344 0.1 S 08:14 /usr/sbin/httpd -k start 3275605 506832 nobody 22856 0.0 S 04:49 /usr/sbin/httpd -k start 3259745 506832 nobody 21756 0.0 S 07:32 /usr/sbin/httpd -k start 3277886 506832 nobody 19736 0.1 S 00:29 /usr/sbin/httpd -k start 167845 1 wp-toolkit 19684 0.0 Ss 15:12:48 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 3277845 506832 nobody 18368 0.0 S 00:31 /usr/sbin/httpd -k start 3277888 506832 nobody 18276 0.0 S 00:29 /usr/sbin/httpd -k start 3277895 506832 nobody 18176 0.0 S 00:28 /usr/sbin/httpd -k start 167566 166914 netdata 17692 2.1 Sl 15:12:50 /usr/libexec/netdata/plugins.d/apps.plugin 1 3277901 506832 nobody 17332 0.0 S 00:28 /usr/sbin/httpd -k start 3277904 506832 nobody 17304 0.0 S 00:28 /usr/sbin/httpd -k start 3277897 506832 nobody 17144 0.0 S 00:28 /usr/sbin/httpd -k start 3277846 506832 nobody 17116 0.0 S 00:31 /usr/sbin/httpd -k start 3277876 506832 nobody 17088 0.0 S 00:30 /usr/sbin/httpd -k start 3277907 506832 nobody 17016 0.1 S 00:28 /usr/sbin/httpd -k start 3277874 506832 nobody 16968 0.0 S 00:30 /usr/sbin/httpd -k start 3277899 506832 nobody 16964 0.0 S 00:28 /usr/sbin/httpd -k start 3277898 506832 nobody 16592 0.0 S 00:28 /usr/sbin/httpd -k start 3277905 506832 nobody 16580 0.0 S 00:28 /usr/sbin/httpd -k start 3277902 506832 nobody 16436 0.5 S 00:28 /usr/sbin/httpd -k start 166757 1 root 15748 0.0 Ss 15:12:58 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) 167814 1 root 15352 0.0 Ss 15:12:48 lfd - sleeping 3291426 167382 lowrange 15128 0.0 S 00:04 dovecot/imap 3291208 167382 lowrange 15016 0.5 S 00:04 dovecot/imap 3277961 167382 kurri 15012 0.0 S 00:20 dovecot/imap 3292400 167382 lowrange 14580 0.0 S 00:03 dovecot/imap 508720 1 mailnull 14548 0.0 Ss 9-15:15:42 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 166809 1 named 14408 0.0 Ssl 15:12:57 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 167017 1 root 13872 0.1 Ssl 15:12:54 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 3291218 167382 root 12780 0.2 S 00:04 dovecot/auth -w 506832 1 root 12728 0.0 Ss 9-15:16:08 /usr/sbin/httpd -k start 167385 167382 dovenull 11864 0.0 S 15:12:51 dovecot/imap-login 167389 167382 dovenull 11756 0.0 S 15:12:51 dovecot/imap-login --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 606789 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/app.evolutionerp.com.au-ssl_log 87 madalice/madalice.com.au-ssl_log 61 evolution/my.evolutionerp.com.au-ssl_log 24 alison/alisonarts.com.au-ssl_log 5 (total vhosts taking traffic: 4) --- top client IPs across all vhosts (last 3 min) --- 87 40.115.94.245 55 34.9.193.249 22 1.159.0.233 3 118.127.40.55 2 43.226.17.71 2 114.119.130.40 1 52.167.144.172 1 34.206.212.24 1 192.178.7.72 1 115.129.56.130 1 114.119.143.14 1 114.119.143.104 --- top request paths across all vhosts (last 3 min) --- 44 GET /api/getItem/LWPB2001KG 7 GET /index.php 5 POST /functions.php 5 GET /app/ajax.php 4 GET /store/design-your-own-send-in/ 3 POST /plugins/csvexporter/plugin.php 3 POST / 3 GET /.env 3 GET /api/proc/self/environ 3 GET /api/fs/read 2 GET /z9x8c7v6b5-debug-trigger-www.madalice.com.au 2 GET /var/run/secrets/kubernetes.io/serviceaccount/token 2 GET /userfiles 2 GET /proc/self/cmdline 2 GET /proc/self/cgroup 2 GET /.git/config 2 GET /@fs/root/.oci/oci_api_key.pem 2 GET /@fs/root/.oci/config 2 GET /.env.production 2 GET /.env.local --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/app.evolutionerp.com.au-ssl_log == -- top paths -- 50 GET /api/getItem/LWPB2001KG 26 GET /api/getItem/LWFB2001KG 2 GET /api/getItem/IPC90NB 1 GET /api/getItem/SGC-100 1 GET /api/getItem/RGW90-HC 1 GET /api/getItem/RGW%2CBM80 1 GET /api/getItem/RGW%2CBM117T 1 GET /api/getItem/RGW160 1 GET /api/getItem/RGW120 1 GET /api/getItem/RGW100T 1 GET /api/getItem/RGW100 1 GET /api/getItem/PC7550 -- last 10 requests -- 40.115.94.245 - - [06/Sep/2026:17:35:11 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:17:35:11 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:17:35:12 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:17:35:12 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:17:35:13 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:17:35:13 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:17:35:13 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:17:35:14 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:17:35:14 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" 40.115.94.245 - - [06/Sep/2026:17:35:15 +1000] "GET /api/getItem/LWFB2001KG HTTP/1.1" 200 1309 "-" "RestSharp/106.13.0.0" == madalice/madalice.com.au-ssl_log == -- top paths -- 4 GET /store/design-your-own-send-in/ 3 GET /.env 3 GET /api/proc/self/environ 3 GET /api/fs/read 2 POST / 2 GET /z9x8c7v6b5-debug-trigger-www.madalice.com.au 2 GET /var/run/secrets/kubernetes.io/serviceaccount/token 2 GET /userfiles 2 GET /proc/self/cmdline 2 GET /proc/self/cgroup 2 GET /.git/config 2 GET /@fs/root/.oci/oci_api_key.pem -- last 10 requests -- 34.9.193.249 - - [06/Sep/2026:17:34:48 +1000] "POST /api/graphql HTTP/1.1" 404 36656 "https://www.madalice.com.au" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari 34.9.193.249 - - [06/Sep/2026:17:34:49 +1000] "GET /.git/config HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 34.9.193.249 - - [06/Sep/2026:17:34:49 +1000] "GET /@fs/root/.oci/config?raw?? HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 34.9.193.249 - - [06/Sep/2026:17:34:50 +1000] "GET /@fs/root/.oci/oci_api_key.pem?raw?? HTTP/1.1" 301 1 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36 34.9.193.249 - - [06/Sep/2026:17:34:50 +1000] "POST /v1/graphql HTTP/1.1" 404 36655 "https://www.madalice.com.au" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/ 34.9.193.249 - - [06/Sep/2026:17:34:51 +1000] "GET /.git/config HTTP/1.1" 404 36648 "https://www.madalice.com.au/.git/config" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mo 34.9.193.249 - - [06/Sep/2026:17:34:51 +1000] "GET /@fs/root/.oci/config?raw?? HTTP/1.1" 404 36661 "https://www.madalice.com.au/@fs/root/.oci/config?raw??" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, l 34.9.193.249 - - [06/Sep/2026:17:34:53 +1000] "GET /userfiles?path=../../.env HTTP/1.1" 403 6221 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 34.9.193.249 - - [06/Sep/2026:17:34:53 +1000] "GET /userfiles?path=../../../.env HTTP/1.1" 403 6221 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" 34.9.193.249 - - [06/Sep/2026:17:34:52 +1000] "GET /@fs/root/.oci/oci_api_key.pem?raw?? HTTP/1.1" 404 36664 "https://www.madalice.com.au/@fs/root/.oci/oci_api_key.pem?raw??" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKi == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 7 GET /index.php 5 POST /functions.php 5 GET /app/ajax.php 3 POST /plugins/csvexporter/plugin.php 1 POST /login.php 1 POST /login2save.php 1 POST /clienteditsave.php 1 POST /app/ajax/selectFilterSingle.php -- last 10 requests -- 1.159.0.233 - - [06/Sep/2026:17:34:14 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=clientlist" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 1.159.0.233 - - [06/Sep/2026:17:34:15 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dclientlist&call=getUserSetting&caller=ajaxSubmitLocal&seq=19428122025 HTTP/1.1" 200 92 "https://my.evolutionerp.com.au/index.php?pa 1.159.0.233 - - [06/Sep/2026:17:34:16 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 232 "https://my.evolutionerp.com.au/index.php?page=clientlist" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 1.159.0.233 - - [06/Sep/2026:17:34:16 +1000] "POST /clienteditsave.php?call=getClients HTTP/1.1" 200 397 "https://my.evolutionerp.com.au/index.php?page=clientlist" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 1.159.0.233 - - [06/Sep/2026:17:34:19 +1000] "GET /index.php?page=clientedit&clientid=16521 HTTP/1.1" 200 51994 "https://my.evolutionerp.com.au/index.php?page=clientlist" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW 1.159.0.233 - - [06/Sep/2026:17:34:20 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=16521&tab=clienteditgeneral" "Mozilla/5.0 (Windows NT 1.159.0.233 - - [06/Sep/2026:17:34:21 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dclientedit%26clientid%3D16521%26tab%3Dclienteditgeneral&call=getUserSetting&caller=ajaxSubmitLocal&seq=16854503834 HTTP/1.1" 200 11 1.159.0.233 - - [06/Sep/2026:17:34:22 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 51 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=16521&tab=clienteditgeneral" "Mozilla/5.0 (Windows NT 1 1.159.0.233 - - [06/Sep/2026:17:34:23 +1000] "POST /app/ajax/selectFilterSingle.php HTTP/1.1" 200 120738 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=16521&tab=clienteditgeneral" "Mozilla/5.0 (Windo 1.159.0.233 - - [06/Sep/2026:17:34:25 +1000] "GET /index.php?page=report&file=salesMonthyAccount&clientid=16521 HTTP/1.1" 200 22737 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=16521&tab=clienteditg --- last 30 samples (run-up to this incident) --- 2026-09-06 17:32:50 L1=2.25 run=2 blk=1 avail=9791 (71.1%) swpO=0 conn=2 myRSS=1483 php=7 phpRSS=421 ap=14 tcp=25 topuser=madalice 2026-09-06 17:32:54 L1=2.15 run=1 blk=1 avail=9865 (71.6%) swpO=0 conn=2 myRSS=1483 php=6 phpRSS=314 ap=14 tcp=21 topuser=madalice 2026-09-06 17:33:00 L1=2.13 run=1 blk=1 avail=9879 (71.7%) swpO=0 conn=2 myRSS=1484 php=6 phpRSS=314 ap=13 tcp=20 topuser=madalice 2026-09-06 17:33:04 L1=2.20 run=1 blk=1 avail=9871 (71.6%) swpO=0 conn=2 myRSS=1484 php=6 phpRSS=315 ap=13 tcp=25 topuser=madalice 2026-09-06 17:33:10 L1=2.11 run=1 blk=1 avail=9864 (71.6%) swpO=0 conn=2 myRSS=1484 php=6 phpRSS=315 ap=14 tcp=21 topuser=madalice 2026-09-06 17:33:14 L1=2.02 run=1 blk=1 avail=9886 (71.8%) swpO=0 conn=2 myRSS=1484 php=6 phpRSS=315 ap=13 tcp=19 topuser=madalice 2026-09-06 17:33:20 L1=1.94 run=1 blk=1 avail=9879 (71.7%) swpO=0 conn=2 myRSS=1484 php=6 phpRSS=315 ap=13 tcp=21 topuser=madalice 2026-09-06 17:33:24 L1=1.86 run=1 blk=1 avail=10125(73.5%) swpO=0 conn=1 myRSS=1484 php=4 phpRSS=23 ap=13 tcp=21 topuser=root 2026-09-06 17:33:31 L1=1.79 run=3 blk=1 avail=9944 (72.2%) swpO=0 conn=2 myRSS=1484 php=6 phpRSS=256 ap=13 tcp=22 topuser=madalice 2026-09-06 17:33:34 L1=1.81 run=1 blk=1 avail=10016(72.7%) swpO=0 conn=1 myRSS=1484 php=5 phpRSS=156 ap=13 tcp=21 topuser=madalice 2026-09-06 17:33:41 L1=1.74 run=1 blk=1 avail=10011(72.7%) swpO=0 conn=1 myRSS=1484 php=5 phpRSS=156 ap=13 tcp=23 topuser=madalice 2026-09-06 17:33:44 L1=1.68 run=1 blk=1 avail=10012(72.7%) swpO=0 conn=1 myRSS=1484 php=5 phpRSS=156 ap=13 tcp=22 topuser=madalice 2026-09-06 17:33:51 L1=1.71 run=1 blk=1 avail=10016(72.7%) swpO=0 conn=1 myRSS=1484 php=5 phpRSS=156 ap=13 tcp=21 topuser=madalice 2026-09-06 17:33:54 L1=1.65 run=1 blk=1 avail=10128(73.5%) swpO=0 conn=1 myRSS=1484 php=4 phpRSS=23 ap=13 tcp=22 topuser=root 2026-09-06 17:34:01 L1=1.60 run=1 blk=1 avail=10128(73.5%) swpO=0 conn=1 myRSS=1484 php=4 phpRSS=23 ap=13 tcp=21 topuser=root 2026-09-06 17:34:04 L1=1.55 run=1 blk=1 avail=10126(73.5%) swpO=0 conn=1 myRSS=1484 php=4 phpRSS=23 ap=13 tcp=19 topuser=root 2026-09-06 17:34:11 L1=1.59 run=6 blk=1 avail=9978 (72.4%) swpO=0 conn=1 myRSS=1484 php=6 phpRSS=213 ap=14 tcp=28 topuser=madalice 2026-09-06 17:34:14 L1=1.54 run=2 blk=1 avail=9820 (71.3%) swpO=0 conn=1 myRSS=1484 php=6 phpRSS=333 ap=20 tcp=28 topuser=evolution 2026-09-06 17:34:21 L1=1.50 run=5 blk=1 avail=9978 (72.4%) swpO=0 conn=1 myRSS=1484 php=6 phpRSS=195 ap=17 tcp=26 topuser=madalice 2026-09-06 17:34:24 L1=1.46 run=1 blk=1 avail=9985 (72.5%) swpO=0 conn=1 myRSS=1484 php=5 phpRSS=155 ap=17 tcp=26 topuser=madalice 2026-09-06 17:34:31 L1=1.50 run=1 blk=1 avail=10092(73.3%) swpO=0 conn=1 myRSS=1484 php=4 phpRSS=23 ap=17 tcp=25 topuser=root 2026-09-06 17:34:34 L1=1.46 run=2 blk=1 avail=10042(72.9%) swpO=0 conn=1 myRSS=1484 php=5 phpRSS=97 ap=17 tcp=25 topuser=madalice 2026-09-06 17:34:41 L1=1.42 run=2 blk=1 avail=9994 (72.5%) swpO=0 conn=2 myRSS=1484 php=5 phpRSS=155 ap=15 tcp=24 topuser=madalice 2026-09-06 17:34:44 L1=1.87 run=5 blk=1 avail=9261 (67.2%) swpO=0 conn=1 myRSS=1484 php=10 phpRSS=733 ap=18 tcp=39 topuser=madalice 2026-09-06 17:34:51 L1=2.04 run=4 blk=1 avail=8721 (63.3%) swpO=28 conn=2 myRSS=1484 php=12 phpRSS=1315 ap=44 tcp=54 topuser=madalice 2026-09-06 17:34:54 L1=2.20 run=7 blk=1 avail=8671 (62.9%) swpO=28 conn=1 myRSS=1484 php=12 phpRSS=1437 ap=43 tcp=48 topuser=madalice 2026-09-06 17:35:01 L1=2.10 run=3 blk=1 avail=8846 (64.2%) swpO=0 conn=2 myRSS=1484 php=12 phpRSS=1272 ap=37 tcp=26 topuser=madalice 2026-09-06 17:35:05 L1=2.17 run=2 blk=1 avail=8885 (64.5%) swpO=0 conn=1 myRSS=1484 php=12 phpRSS=1272 ap=33 tcp=26 topuser=madalice 2026-09-06 17:35:11 L1=2.24 run=4 blk=1 avail=8815 (64.0%) swpO=5 conn=2 myRSS=1485 php=13 phpRSS=1426 ap=27 tcp=25 topuser=madalice 2026-09-06 17:35:15 L1=2.46 run=5 blk=1 avail=8740 (63.4%) swpO=5 conn=4 myRSS=1485 php=15 phpRSS=1594 ap=23 tcp=30 topuser=madalice