INCIDENT 2026-09-07 13:17:12 trigger: php_rss=1718MB ================================================================== load: 4.01 4.04 3.66 3/723 3279599 ncpu:10 mem_avail: 7489MB/13777MB (54.4%) swap_used:2611MB swapout:0/s blocked(D):1 running:2 iowait:8.9% steal:0.0% php: 16 procs / 1718MB heaviest user: madalice (10 procs, 1628MB) apache: 54 procs tcp_estab: 64 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 2340 madalice 10 1636 root 256 1152 nobody 53 955 netdata 8 245 mailman 20 98 evolution 13 74 cpanellogin 1 67 wp-toolkit 3 56 dovenull 6 55 kurri 2 24 dovecot 3 22 alison 1 14 zabbix 1 10 mailnull 1 10 sshd 2 8 named 1 7 polkitd 1 6 nscd 1 5 rpc 1 3 --- php workers by user --- USER PROCS RSS_MB madalice 10 1637 evolution 5 75 root 1 23 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 6076 MB Active(file): 2708 MB Inactive(file): 3474 MB Dirty: 2 MB Writeback: 0 MB SReclaimable: 581 MB CommitLimit: 10984 MB Committed_AS: 10129 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 3926885 root 6-10:54:47 4936 /usr/bin/imunify-agent-proxy 4109079 root 2-08:32:25 1952 /opt/ai-bolit/wrapper /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --mem 4109105 root 2-08:32:25 52296 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 2048M --progress / --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2987918 1 mysql 2396580 7.1 Ssl 1-17:40:42 /usr/sbin/mariadbd 3277845 167896 madalice 251540 15.4 R 01:09 php-fpm: pool madalice_com_au 166870 1 netdata 187092 2.6 Ssl 1-10:54:53 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 167871 1 root 165852 0.0 Ss 1-10:54:46 /usr/lib/systemd/systemd-journald 3223532 167896 madalice 163060 24.2 S 13:07 php-fpm: pool madalice_com_au 923652 904997 root 161472 0.1 S 10:47:29 spamd child 3257243 167896 madalice 158464 24.3 S 06:57 php-fpm: pool madalice_com_au 3257540 167896 madalice 158340 24.5 S 06:37 php-fpm: pool madalice_com_au 3277843 167896 madalice 158112 13.6 S 01:09 php-fpm: pool madalice_com_au 3277847 167896 madalice 158108 14.1 S 01:09 php-fpm: pool madalice_com_au 3277848 167896 madalice 158080 15.5 S 01:09 php-fpm: pool madalice_com_au 3277844 167896 madalice 158076 14.2 S 01:09 php-fpm: pool madalice_com_au 3277842 167896 madalice 158072 15.1 S 01:09 php-fpm: pool madalice_com_au 3277846 167896 madalice 158068 14.9 S 01:09 php-fpm: pool madalice_com_au 923653 904997 root 141224 0.0 S 10:47:28 spamd child 904997 1 root 130716 0.0 Ss 10:54:16 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 3041041 1353308 cpanellogin 68956 0.0 S 01:00:59 /usr/local/cpanel/base/show_template.stor docroot /usr/local/cpanel/base cpanel_locale server_locale en default_login_theme cpanel 4109105 4109079 root 52296 1.4 Sl 2-08:32:25 /opt/rustbolit/rustbolit --smart --deobfuscate --avdb /var/imunify360/files/sigs/v1/aibolit/ai-bolit-hoster-full.db --no-html --memory 3279558 3262227 evolution 40556 3.0 S 00:01 /opt/cpanel/ea-php74/root/usr/bin/php-cgi 1353308 1 root 39776 0.1 Ss 47-10:35:59 cpsrvd (SSL) - waiting for connections 3279567 1469 root 36000 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3279568 1469 root 35900 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 3279566 1469 root 35888 0.0 S 00:00 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 1469 1 root 35116 0.1 Ss 70-03:07:28 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 167562 166914 netdata 34684 0.1 Sl 1-10:54:48 /usr/libexec/netdata/plugins.d/go.d.plugin 1 509236 509098 root 34664 0.0 Sl 10-10:57:33 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 166645 1 wp-toolkit 31464 0.0 Ss 1-10:54:57 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 904447 1 root 29692 0.0 Ss 10:54:48 lfd - sleeping 1463 1 root 23984 0.0 Ss 70-03:07:28 tailwatchd 167896 1 root 23644 0.0 Ss 1-10:54:45 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 3258796 506832 nobody 22032 0.1 S 05:15 /usr/sbin/httpd -k start 3258059 506832 nobody 21996 0.1 S 06:06 /usr/sbin/httpd -k start 3260075 506832 nobody 21816 0.0 S 04:02 /usr/sbin/httpd -k start 3259295 506832 nobody 21596 0.0 S 04:45 /usr/sbin/httpd -k start 3260664 506832 nobody 21316 0.0 S 03:31 /usr/sbin/httpd -k start 3259298 506832 nobody 21156 0.0 S 04:45 /usr/sbin/httpd -k start 3277449 506832 nobody 21020 0.0 S 01:26 /usr/sbin/httpd -k start 3242193 506832 nobody 20840 0.0 S 07:45 /usr/sbin/httpd -k start 3261062 506832 nobody 20460 0.0 S 03:18 /usr/sbin/httpd -k start 3261061 506832 nobody 20312 0.0 S 03:18 /usr/sbin/httpd -k start 3261810 506832 nobody 20304 0.0 S 02:43 /usr/sbin/httpd -k start 3262227 506832 nobody 20136 0.0 S 02:17 /usr/sbin/httpd -k start 3241467 506832 nobody 20128 0.1 S 08:34 /usr/sbin/httpd -k start 3277982 506832 nobody 20128 0.0 S 01:03 /usr/sbin/httpd -k start 3276877 506832 nobody 20068 0.1 S 01:52 /usr/sbin/httpd -k start 3259280 506832 nobody 19980 0.0 S 04:46 /usr/sbin/httpd -k start 3262228 506832 nobody 19908 0.1 S 02:17 /usr/sbin/httpd -k start 3259294 506832 nobody 19884 0.0 S 04:45 /usr/sbin/httpd -k start 3277988 506832 nobody 19864 0.0 S 01:03 /usr/sbin/httpd -k start 3277657 506832 nobody 19788 0.0 S 01:16 /usr/sbin/httpd -k start 3262720 506832 nobody 19724 0.0 S 02:09 /usr/sbin/httpd -k start 3276866 506832 nobody 19624 0.0 S 01:53 /usr/sbin/httpd -k start 3277930 506832 nobody 19624 0.0 S 01:04 /usr/sbin/httpd -k start 167845 1 wp-toolkit 19604 0.0 Ss 1-10:54:46 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 3277990 506832 nobody 19580 0.0 S 01:03 /usr/sbin/httpd -k start 3277972 506832 nobody 19476 0.0 S 01:03 /usr/sbin/httpd -k start 3277984 506832 nobody 19380 0.0 S 01:03 /usr/sbin/httpd -k start 3277973 506832 nobody 19356 0.0 S 01:03 /usr/sbin/httpd -k start 3277929 506832 nobody 19340 0.0 S 01:04 /usr/sbin/httpd -k start 3277882 506832 nobody 19284 0.0 S 01:06 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 3741054 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min evolution/my.evolutionerp.com.au-ssl_log 486 aaa/aaadownunder.com.au-ssl_log 296 alison/alisonarts.com.au-ssl_log 272 evolution/portal.evolutionerp.com.au-ssl_log 216 bigdeals/bigdeals.com.au-ssl_log 148 madalice/madalice.com.au-ssl_log 129 candyfabcom/candyfab.com.au-ssl_log 98 tubesupplies/tubesupplies.com.au-ssl_log 93 tubesupplies/tubesupplies.com.au 91 evolution/app.evolutionerp.com.au-ssl_log 8 speedlin/speedlinefencing.com.au-ssl_log 7 corpkicks/corporatekicks.com.au-ssl_log 4 infinium/infinium.net.au-ssl_log 4 speedlin/speedlinefencing.com.au 4 olympic/olympicfencing.com.au-ssl_log 3 (total vhosts taking traffic: 17) --- top client IPs across all vhosts (last 3 min) --- 804 45.148.10.12 295 203.54.180.238 182 84.17.60.251 159 103.104.164.114 110 103.104.165.99 70 185.177.72.24 53 136.66.189.254 41 1.145.70.156 37 116.91.221.245 22 182.239.240.254 17 101.166.96.210 14 165.225.233.87 10 51.68.111.202 8 40.115.94.245 7 180.181.236.49 --- top request paths across all vhosts (last 3 min) --- 181 POST /functions.php 86 GET /factory_session_checker.php 85 GET /app/ajax.php 62 GET /index.php 57 POST / 45 GET /factory_session_processed_qty.php 44 GET /factory_session_joiner.php 42 POST /wp/ 42 POST /wordpress/ 39 GET /heartbeat.php 31 GET / 30 POST /blog/ 28 POST /wp/index.php 28 POST /wordpress/wp-json/batch/v1 28 POST /wordpress/index.php 28 POST /index.php 25 POST /plugins/csvexporter/plugin.php 24 POST /blog/wp-json/batch/v1 24 POST /app/ajax/selectFilter.php 21 POST /clienteditsave.php --- busiest 3 vhosts: top paths + last 10 requests --- == evolution/my.evolutionerp.com.au-ssl_log == -- top paths -- 181 POST /functions.php 85 GET /app/ajax.php 58 GET /index.php 25 POST /plugins/csvexporter/plugin.php 24 POST /app/ajax/selectFilter.php 21 POST /clienteditsave.php 17 POST /app/ajax/selectFilterSingle.php 12 POST /app/ajax.php 8 POST /quoteditsave.php 8 POST /invoiceaddsave.php 7 POST /plugins/fencecosting/plugin.php 7 POST /inveditsave.php -- last 10 requests -- 180.181.236.49 - - [07/Sep/2026:13:17:08 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=quotedit"eid=6953§ionid=0" "Mozilla/5.0 (Windows NT 10.0; Win64 103.104.164.114 - - [07/Sep/2026:13:17:08 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 234 "https://my.evolutionerp.com.au/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 203.54.180.238 - - [07/Sep/2026:13:17:09 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 236 "https://my.evolutionerp.com.au/index.php?page=reqedit&id=9960" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit 203.54.180.238 - - [07/Sep/2026:13:17:09 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=invedithist&id=475&string=" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) 203.54.180.238 - - [07/Sep/2026:13:17:09 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 235 "https://my.evolutionerp.com.au/index.php?page=inventory" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 203.54.180.238 - - [07/Sep/2026:13:17:09 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 51 "https://my.evolutionerp.com.au/index.php?page=clientedit&clientid=19122&tab=clienteditcontacts" "Mozilla/5.0 (Windows 203.54.180.238 - - [07/Sep/2026:13:17:09 +1000] "POST /functions.php?call=heartbeat HTTP/1.1" 200 237 "https://my.evolutionerp.com.au/index.php?page=purchaseadd&purchaseid=12263" "Mozilla/5.0 (Windows NT 10.0; Win64; x64 103.104.165.99 - - [07/Sep/2026:13:17:09 +1000] "GET /index.php?page=quotereg HTTP/1.1" 200 50142 "https://my.evolutionerp.com.au/index.php?page=jobregister" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 103.104.165.99 - - [07/Sep/2026:13:17:09 +1000] "POST /plugins/csvexporter/plugin.php HTTP/1.1" 200 20 "https://my.evolutionerp.com.au/index.php?page=quotereg" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 103.104.165.99 - - [07/Sep/2026:13:17:09 +1000] "GET /app/ajax.php?cn=&furi=true&uri=page%3Dquotereg&call=getUserSetting&caller=ajaxSubmitLocal&seq=18096955974 HTTP/1.1" 200 159 "https://my.evolutionerp.com.au/index.php? == aaa/aaadownunder.com.au-ssl_log == -- top paths -- 21 POST /wp/ 21 POST /wordpress/ 21 POST /blog/ 14 POST /wp/index.php 14 POST /wordpress/index.php 14 POST /blog/index.php 9 GET /wp/ 9 GET /wordpress/ 9 GET /blog/ 7 POST /wp/wp-json/Batch/v1 7 POST /wp/wp-json/batch/v1/ 7 POST /wp/wp-json/batch/v1 -- last 10 requests -- 45.148.10.12 - - [07/Sep/2026:13:16:40 +1000] "GET /blog/?rest_route=/wp/v2/tags HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.12 - - [07/Sep/2026:13:16:40 +1000] "GET /blog/wp/v2/posts/999998 HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.12 - - [07/Sep/2026:13:16:40 +1000] "GET /blog/?rest_route=/wp/v2/posts/999998 HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537. 45.148.10.12 - - [07/Sep/2026:13:16:40 +1000] "GET /blog/wp/v2/posts/99999 HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.12 - - [07/Sep/2026:13:16:41 +1000] "GET /blog/?rest_route=/wp/v2/posts/99999 HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.3 45.148.10.12 - - [07/Sep/2026:13:16:41 +1000] "GET /blog/wp/v2/posts/9999999 HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.12 - - [07/Sep/2026:13:16:42 +1000] "GET /blog/?rest_route=/wp/v2/posts/9999999 HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537 45.148.10.12 - - [07/Sep/2026:13:16:42 +1000] "GET /blog/wp/v2/users HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 45.148.10.12 - - [07/Sep/2026:13:16:42 +1000] "GET /blog/?rest_route=/wp/v2/users HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 103.104.164.114 - - [07/Sep/2026:13:16:43 +1000] "-" 408 - "-" "-" == alison/alisonarts.com.au-ssl_log == -- top paths -- 21 POST /wp/ 21 POST /wordpress/ 14 POST /wp/index.php 14 POST /wordpress/index.php 12 POST /admin 11 POST /account 9 POST /blog/ 9 GET /wp/ 9 GET /wordpress/ 7 POST /wp/wp-json/Batch/v1 7 POST /wp/wp-json/batch/v1/ 7 POST /wp/wp-json/batch/v1 -- last 10 requests -- 45.148.10.12 - - [07/Sep/2026:13:17:06 +1000] "POST /blog/index.php?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 401 53 "https://cpcalendars.alisonarts.com.au/blog/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/ 45.148.10.12 - - [07/Sep/2026:13:17:06 +1000] "POST /blog/?rest_route=%2Fbatch%2Fv1 HTTP/1.1" 401 53 "https://cpcalendars.alisonarts.com.au/blog/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K 45.148.10.12 - - [07/Sep/2026:13:17:07 +1000] "POST /blog/?rest_route=/batch%2Fv1 HTTP/1.1" 401 53 "https://cpcalendars.alisonarts.com.au/blog/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHT 45.148.10.12 - - [07/Sep/2026:13:17:07 +1000] "POST /blog/?rest_route=/batch/v1 HTTP/1.1" 401 53 "https://cpcalendars.alisonarts.com.au/blog/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML 45.148.10.12 - - [07/Sep/2026:13:17:07 +1000] "POST /blog/wp-json/batch/v1 HTTP/1.1" 401 53 "https://cpcalendars.alisonarts.com.au/blog/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, lik 45.148.10.12 - - [07/Sep/2026:13:17:07 +1000] "POST /blog/wp-json/Batch/v1 HTTP/1.1" 401 53 "https://cpcalendars.alisonarts.com.au/blog/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, lik 45.148.10.12 - - [07/Sep/2026:13:17:08 +1000] "POST /blog//wp-json/batch/v1 HTTP/1.1" 401 53 "https://cpcalendars.alisonarts.com.au/blog/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li 45.148.10.12 - - [07/Sep/2026:13:17:08 +1000] "POST /blog/wp-json/batch/v1/ HTTP/1.1" 401 53 "https://cpcalendars.alisonarts.com.au/blog/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li 45.148.10.12 - - [07/Sep/2026:13:17:08 +1000] "POST /blog/blog/wp-json/batch/v1 HTTP/1.1" 401 53 "https://cpcalendars.alisonarts.com.au/blog/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML 45.148.10.12 - - [07/Sep/2026:13:17:09 +1000] "POST /blog/wordpress/wp-json/batch/v1 HTTP/1.1" 401 53 "https://cpcalendars.alisonarts.com.au/blog/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ( --- last 30 samples (run-up to this incident) --- 2026-09-07 13:14:51 L1=3.87 run=4 blk=1 avail=8348 (60.6%) swpO=0 conn=1 myRSS=2380 php=9 phpRSS=768 ap=41 tcp=41 topuser=madalice 2026-09-07 13:14:52 L1=3.96 run=3 blk=1 avail=8524 (61.9%) swpO=0 conn=3 myRSS=2380 php=8 phpRSS=552 ap=40 tcp=44 topuser=madalice 2026-09-07 13:15:01 L1=4.05 run=10 blk=1 avail=8382 (60.8%) swpO=0 conn=1 myRSS=2380 php=12 phpRSS=757 ap=46 tcp=60 topuser=madalice 2026-09-07 13:15:02 L1=5.24 run=10 blk=2 avail=8199 (59.5%) swpO=79 conn=3 myRSS=2378 php=11 phpRSS=890 ap=46 tcp=59 topuser=madalice 2026-09-07 13:15:11 L1=5.06 run=5 blk=2 avail=8249 (59.9%) swpO=155 conn=1 myRSS=2376 php=9 phpRSS=787 ap=49 tcp=53 topuser=madalice 2026-09-07 13:15:12 L1=4.90 run=6 blk=1 avail=8380 (60.8%) swpO=76 conn=3 myRSS=2376 php=9 phpRSS=666 ap=48 tcp=53 topuser=madalice 2026-09-07 13:15:21 L1=5.15 run=3 blk=1 avail=8388 (60.9%) swpO=0 conn=1 myRSS=2376 php=9 phpRSS=616 ap=51 tcp=66 topuser=madalice 2026-09-07 13:15:22 L1=5.05 run=5 blk=1 avail=8217 (59.6%) swpO=0 conn=6 myRSS=2376 php=12 phpRSS=867 ap=51 tcp=59 topuser=madalice 2026-09-07 13:15:31 L1=4.81 run=2 blk=1 avail=8381 (60.8%) swpO=0 conn=1 myRSS=2376 php=7 phpRSS=559 ap=50 tcp=59 topuser=madalice 2026-09-07 13:15:32 L1=4.50 run=3 blk=1 avail=8443 (61.3%) swpO=0 conn=6 myRSS=2376 php=8 phpRSS=532 ap=50 tcp=59 topuser=madalice 2026-09-07 13:15:41 L1=4.30 run=4 blk=1 avail=8291 (60.2%) swpO=0 conn=1 myRSS=2376 php=9 phpRSS=673 ap=48 tcp=53 topuser=madalice 2026-09-07 13:15:42 L1=4.36 run=3 blk=2 avail=8358 (60.7%) swpO=0 conn=6 myRSS=2376 php=10 phpRSS=707 ap=48 tcp=56 topuser=madalice 2026-09-07 13:15:51 L1=4.41 run=2 blk=1 avail=8427 (61.2%) swpO=0 conn=1 myRSS=2376 php=8 phpRSS=551 ap=50 tcp=58 topuser=madalice 2026-09-07 13:15:52 L1=4.30 run=4 blk=1 avail=8328 (60.5%) swpO=0 conn=6 myRSS=2376 php=10 phpRSS=699 ap=49 tcp=58 topuser=madalice 2026-09-07 13:16:01 L1=4.27 run=3 blk=1 avail=8309 (60.3%) swpO=0 conn=1 myRSS=2376 php=8 phpRSS=681 ap=49 tcp=49 topuser=madalice 2026-09-07 13:16:02 L1=4.17 run=2 blk=1 avail=8281 (60.1%) swpO=0 conn=6 myRSS=2376 php=10 phpRSS=772 ap=48 tcp=51 topuser=madalice 2026-09-07 13:16:11 L1=4.56 run=10 blk=1 avail=6996 (50.8%) swpO=1189 conn=10 myRSS=2340 php=18 phpRSS=1849 ap=108 tcp=105 topuser=madalice 2026-09-07 13:16:12 L1=5.72 run=15 blk=1 avail=6720 (48.8%) swpO=1189 conn=10 myRSS=2340 php=20 phpRSS=2101 ap=107 tcp=98 topuser=madalice 2026-09-07 13:16:22 L1=6.11 run=3 blk=1 avail=7225 (52.4%) swpO=0 conn=3 myRSS=2340 php=16 phpRSS=1664 ap=98 tcp=54 topuser=madalice 2026-09-07 13:16:22 L1=6.11 run=4 blk=1 avail=7244 (52.6%) swpO=0 conn=3 myRSS=2340 php=15 phpRSS=1627 ap=97 tcp=55 topuser=madalice 2026-09-07 13:16:32 L1=5.40 run=2 blk=1 avail=7206 (52.3%) swpO=0 conn=3 myRSS=2340 php=15 phpRSS=1712 ap=88 tcp=54 topuser=madalice 2026-09-07 13:16:32 L1=5.40 run=1 blk=1 avail=7295 (53.0%) swpO=0 conn=2 myRSS=2340 php=15 phpRSS=1624 ap=87 tcp=54 topuser=madalice 2026-09-07 13:16:42 L1=4.89 run=8 blk=1 avail=7300 (53.0%) swpO=0 conn=4 myRSS=2340 php=16 phpRSS=1719 ap=78 tcp=55 topuser=madalice 2026-09-07 13:16:42 L1=4.89 run=5 blk=1 avail=7239 (52.5%) swpO=0 conn=4 myRSS=2340 php=17 phpRSS=1829 ap=77 tcp=59 topuser=madalice 2026-09-07 13:16:52 L1=4.59 run=3 blk=1 avail=7455 (54.1%) swpO=0 conn=3 myRSS=2340 php=15 phpRSS=1631 ap=68 tcp=49 topuser=madalice 2026-09-07 13:16:53 L1=4.59 run=3 blk=1 avail=7421 (53.9%) swpO=0 conn=3 myRSS=2340 php=15 phpRSS=1664 ap=67 tcp=48 topuser=madalice 2026-09-07 13:17:02 L1=4.20 run=2 blk=1 avail=7529 (54.6%) swpO=0 conn=3 myRSS=2340 php=16 phpRSS=1678 ap=57 tcp=51 topuser=madalice 2026-09-07 13:17:03 L1=4.20 run=4 blk=1 avail=7507 (54.5%) swpO=0 conn=3 myRSS=2340 php=15 phpRSS=1660 ap=57 tcp=50 topuser=madalice 2026-09-07 13:17:12 L1=4.01 run=2 blk=1 avail=7489 (54.4%) swpO=0 conn=3 myRSS=2340 php=16 phpRSS=1718 ap=54 tcp=64 topuser=madalice 2026-09-07 13:17:13 L1=4.01 run=2 blk=2 avail=7571 (55.0%) swpO=0 conn=1 myRSS=2340 php=14 phpRSS=1572 ap=54 tcp=63 topuser=madalice