INCIDENT 2026-08-15 07:34:22 trigger: php_rss=1723MB ================================================================== load: 1.98 4.07 9.10 18/638 2568395 ncpu:10 mem_avail: 7726MB/11729MB (65.9%) swap_used:1473MB swapout:0/s blocked(D):0 running:19 iowait:0.1% steal:0.0% php: 14 procs / 1723MB heaviest user: madalice (12 procs, 1676MB) apache: 62 procs tcp_estab: 55 --- RSS by user (all processes) --- USER PROCS RSS_MB madalice 12 1778 nobody 61 902 mysql 1 533 root 238 322 netdata 8 230 mailnull 4 27 mailman 20 19 wp-toolkit 6 17 dovenull 6 17 cpanellogin 1 17 zabbix 1 12 kurri 2 12 corpkicks 1 12 candyfabcom 1 12 dovecot 3 6 dbus 1 3 evolution 4 2 polkitd 1 1 nscd 1 1 named 1 1 --- php workers by user --- USER PROCS RSS_MB madalice 12 1807 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 2992 MB Active(file): 1405 MB Inactive(file): 832 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 207 MB CommitLimit: 9960 MB Committed_AS: 9388 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2342983 root 06:23:07 120 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2561012 1 mysql 545844 2.9 Ssl 10:52 /usr/sbin/mariadbd 2568287 2563803 madalice 230636 51.5 S 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2568315 2568224 madalice 218772 99.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2568319 2568210 madalice 199444 90.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2568312 2568220 madalice 181824 78.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 180636 2.5 Ssl 46-21:24:25 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2568316 2568213 madalice 168448 72.0 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2568314 2568211 madalice 165980 71.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2568322 2568212 madalice 129404 51.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2568327 2567378 madalice 126264 96.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2568328 2568280 madalice 106700 75.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2568325 2568227 madalice 101676 66.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2568353 2568292 madalice 76432 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2382613 1 root 66184 0.0 Ss 05:11:11 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2390233 2382613 root 62476 0.0 S 04:58:45 spamd child 4922 2431 netdata 38372 0.1 Sl 46-21:24:20 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1353308 1 root 27708 0.0 Ss 24-04:52:55 cpsrvd (SSL) - waiting for connections 2564186 1276780 nobody 22184 0.0 S 06:04 /usr/sbin/httpd -k start 2563803 1276780 nobody 21980 0.0 S 06:39 /usr/sbin/httpd -k start 2567590 1276780 nobody 21712 0.0 S 01:15 /usr/sbin/httpd -k start 2566473 1276780 nobody 20184 0.0 S 03:09 /usr/sbin/httpd -k start 2567309 1276780 nobody 20024 0.0 S 01:55 /usr/sbin/httpd -k start 2567905 1276780 nobody 19824 0.1 S 00:44 /usr/sbin/httpd -k start 2566113 1276780 nobody 19792 0.0 S 03:44 /usr/sbin/httpd -k start 2565177 1276780 nobody 19720 0.0 S 05:06 /usr/sbin/httpd -k start 2565158 1276780 nobody 19312 0.0 S 05:07 /usr/sbin/httpd -k start 2567908 1276780 nobody 18948 0.0 S 00:43 /usr/sbin/httpd -k start 2567649 1276780 nobody 18868 0.0 S 01:10 /usr/sbin/httpd -k start 2568140 1276780 nobody 18308 0.1 S 00:12 /usr/sbin/httpd -k start 2568222 1276780 nobody 18124 0.1 S 00:09 /usr/sbin/httpd -k start 2568150 1276780 nobody 18080 0.0 S 00:11 /usr/sbin/httpd -k start 2568226 1276780 nobody 18024 0.0 S 00:09 /usr/sbin/httpd -k start 2568149 1276780 nobody 17980 0.1 S 00:11 /usr/sbin/httpd -k start 2568223 1276780 nobody 17968 0.0 S 00:09 /usr/sbin/httpd -k start 2565155 1276780 nobody 17632 0.0 S 05:07 /usr/sbin/httpd -k start 2559203 1353308 cpanellogin 17580 0.0 S 13:23 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base server_locale en default_login_theme cpanel 2568210 1276780 nobody 17472 0.2 S 00:10 /usr/sbin/httpd -k start 2567378 1276780 nobody 17392 0.0 S 01:43 /usr/sbin/httpd -k start 2568212 1276780 nobody 17300 0.3 S 00:10 /usr/sbin/httpd -k start 2568227 1276780 nobody 17216 0.2 S 00:09 /usr/sbin/httpd -k start 2568213 1276780 nobody 17120 0.1 S 00:10 /usr/sbin/httpd -k start 2568211 1276780 nobody 17036 0.1 S 00:10 /usr/sbin/httpd -k start 2568277 1276780 nobody 16916 0.0 S 00:04 /usr/sbin/httpd -k start 2568279 1276780 nobody 16780 0.0 S 00:04 /usr/sbin/httpd -k start 2568224 1276780 nobody 16744 0.1 S 00:09 /usr/sbin/httpd -k start 2568263 1276780 nobody 16500 0.0 S 00:05 /usr/sbin/httpd -k start 2568225 1276780 nobody 16436 0.0 S 00:09 /usr/sbin/httpd -k start 2568265 1276780 nobody 16408 0.0 S 00:05 /usr/sbin/httpd -k start 159820 1 root 16388 0.0 Ss 25-21:47:33 /usr/lib/systemd/systemd-journald 2568274 1276780 nobody 16384 0.0 S 00:04 /usr/sbin/httpd -k start 2568276 1276780 nobody 16356 0.0 S 00:04 /usr/sbin/httpd -k start 2568253 1276780 nobody 16316 0.0 S 00:06 /usr/sbin/httpd -k start 2568220 1276780 nobody 16312 0.0 S 00:09 /usr/sbin/httpd -k start 2568275 1276780 nobody 16280 0.0 S 00:04 /usr/sbin/httpd -k start 2568281 1276780 nobody 16276 0.0 S 00:04 /usr/sbin/httpd -k start 2568264 1276780 nobody 16048 0.2 S 00:05 /usr/sbin/httpd -k start 2568262 1276780 nobody 15784 0.0 S 00:05 /usr/sbin/httpd -k start 2568221 1276780 nobody 15720 0.0 S 00:09 /usr/sbin/httpd -k start 2568280 1276780 nobody 15492 0.2 S 00:04 /usr/sbin/httpd -k start 185104 2431 netdata 15460 2.0 Sl 2-11:00:43 /usr/libexec/netdata/plugins.d/apps.plugin 1 --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +-----+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +-----+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 928 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +-----+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 29 evolution/portal.evolutionerp.com.au-ssl_log 18 vinesit/vinesit.com.au-ssl_log 3 lowrange/lowrange.com.au-ssl_log 2 (total vhosts taking traffic: 4) --- top client IPs across all vhosts (last 3 min) --- 18 203.54.180.238 3 51.116.180.165 2 41.248.83.182 2 209.14.156.241 2 205.164.177.244 2 191.99.6.41 2 190.129.103.252 2 187.120.236.196 2 187.103.87.73 2 186.227.227.114 2 151.244.150.167 2 138.121.104.166 2 135.225.75.187 2 105.172.33.32 1 47.82.201.87 --- top request paths across all vhosts (last 3 min) --- 18 GET /heartbeat.php 13 GET / 11 POST / 3 GET /autodiscover/autodiscover.xml 1 GET /unleash-your-style-the-art-of-custom-painted-sneakers/ 1 GET /store/white-classic-clogs-unisex/ 1 GET /store/toystory-buzz-and-woody-custom-af1-kids-10c/ 1 GET /store/toddler-crocs-electric-pink-banded/ 1 GET /store/silver-moth-boot-charms/ 1 GET /store/pearl-and-lace-shoe-bows/ 1 GET /store/nike-court-pastel-bling/ 1 GET /store/mad-alice-kids-custom-sneaker-lab-party/ 1 GET /store/mad-alice-custom-shoe-magnetic-drop-side-display-cases/ 1 GET /store/custom-floral-af1-with-pearl-swoosh/ 1 GET /product-category/process/ 1 GET /product-category/giftwrap/ 1 GET /product-category/customised-shoes/womens/page/2/ 1 GET /product-category/brands/nike 1 GET /n.php 1 GET /designer-christmas-shoes-fashion-enthusiasts/ --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 13 GET / 11 POST / 1 GET /unleash-your-style-the-art-of-custom-painted-sneakers/ 1 GET /store/white-classic-clogs-unisex/ 1 GET /store/toystory-buzz-and-woody-custom-af1-kids-10c/ 1 GET /store/toddler-crocs-electric-pink-banded/ 1 GET /store/silver-moth-boot-charms/ 1 GET /store/pearl-and-lace-shoe-bows/ 1 GET /store/nike-court-pastel-bling/ 1 GET /store/mad-alice-kids-custom-sneaker-lab-party/ 1 GET /store/mad-alice-custom-shoe-magnetic-drop-side-display-cases/ 1 GET /store/custom-floral-af1-with-pearl-swoosh/ -- last 10 requests -- 47.82.201.152 - - [15/Aug/2026:07:34:18 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/brand/adidas/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (K 47.82.201.11 - - [15/Aug/2026:07:34:19 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/store/silver-moth-boot-charms/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Apple 43.119.100.17 - - [15/Aug/2026:07:34:19 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/store/mad-alice-kids-custom-sneaker-lab-party/" "Mozilla/5.0 (Macintosh; Intel Mac OS 205.164.177.244 - - [15/Aug/2026:07:34:19 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 578 "https://madalice.com.au/store/mad-alice-custom-shoe-magnetic-drop-side-display-cases/" "Mozilla/5.0 (Macintosh; 43.119.100.80 - - [15/Aug/2026:07:34:20 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/unleash-your-style-the-art-of-custom-painted-sneakers/" "Mozilla/5.0 (Macintosh; Inte 43.119.104.178 - - [15/Aug/2026:07:34:19 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/store/white-classic-clogs-unisex/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) 43.119.104.135 - - [15/Aug/2026:07:34:19 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/store/nike-court-pastel-bling/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) App 43.119.100.78 - - [15/Aug/2026:07:34:20 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/store/toystory-buzz-and-woody-custom-af1-kids-10c/" "Mozilla/5.0 (Macintosh; Intel Ma 47.82.201.224 - - [15/Aug/2026:07:34:19 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/store/mad-alice-custom-shoe-magnetic-drop-side-display-cases/" "Mozilla/5.0 (Macintos 43.119.100.229 - - [15/Aug/2026:07:34:21 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/product-category/giftwrap/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWe == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 18 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [15/Aug/2026:07:32:43 +1000] "GET /heartbeat.php?sentAt=1786743163&bytes=106,127,137,123&_=1786683795366 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:32:45 +1000] "GET /heartbeat.php?sentAt=1786743166&bytes=106,127,137,126&_=1786712385334 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:32:53 +1000] "GET /heartbeat.php?sentAt=1786743173&bytes=106,127,137,133&_=1786683795367 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:32:55 +1000] "GET /heartbeat.php?sentAt=1786743176&bytes=106,127,137,136&_=1786712385335 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:33:03 +1000] "GET /heartbeat.php?sentAt=1786743183&bytes=106,127,137,143&_=1786683795368 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:33:05 +1000] "GET /heartbeat.php?sentAt=1786743186&bytes=106,127,137,146&_=1786712385336 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:33:13 +1000] "GET /heartbeat.php?sentAt=1786743193&bytes=106,127,137,153&_=1786683795369 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:33:15 +1000] "GET /heartbeat.php?sentAt=1786743196&bytes=106,127,137,156&_=1786712385337 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:33:23 +1000] "GET /heartbeat.php?sentAt=1786743203&bytes=106,127,137,163&_=1786683795370 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [15/Aug/2026:07:33:25 +1000] "GET /heartbeat.php?sentAt=1786743206&bytes=106,127,137,166&_=1786712385338 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 == vinesit/vinesit.com.au-ssl_log == -- top paths -- 3 GET /autodiscover/autodiscover.xml -- last 10 requests -- 51.116.180.165 - - [15/Aug/2026:07:32:02 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 51.116.180.165 - - [15/Aug/2026:07:32:05 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 51.116.180.165 - - [15/Aug/2026:07:32:08 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-15 07:32:01 L1=0.51 run=4 blk=0 avail=9608 (81.9%) swpO=0 conn=2 myRSS=523 php=0 phpRSS=0 ap=18 tcp=18 topuser=- 2026-08-15 07:32:01 L1=0.51 run=2 blk=0 avail=9608 (81.9%) swpO=0 conn=2 myRSS=523 php=0 phpRSS=0 ap=18 tcp=18 topuser=- 2026-08-15 07:32:11 L1=0.43 run=3 blk=0 avail=9576 (81.6%) swpO=0 conn=3 myRSS=523 php=1 phpRSS=70 ap=18 tcp=17 topuser=madalice 2026-08-15 07:32:11 L1=0.43 run=4 blk=0 avail=9576 (81.6%) swpO=0 conn=3 myRSS=523 php=1 phpRSS=70 ap=18 tcp=17 topuser=madalice 2026-08-15 07:32:21 L1=0.52 run=4 blk=0 avail=9544 (81.4%) swpO=0 conn=3 myRSS=524 php=1 phpRSS=99 ap=18 tcp=18 topuser=madalice 2026-08-15 07:32:21 L1=0.52 run=4 blk=0 avail=9544 (81.4%) swpO=0 conn=3 myRSS=524 php=1 phpRSS=99 ap=18 tcp=18 topuser=madalice 2026-08-15 07:32:31 L1=0.44 run=2 blk=0 avail=9543 (81.4%) swpO=0 conn=3 myRSS=525 php=1 phpRSS=97 ap=18 tcp=20 topuser=madalice 2026-08-15 07:32:31 L1=0.44 run=4 blk=0 avail=9542 (81.4%) swpO=0 conn=3 myRSS=525 php=1 phpRSS=99 ap=18 tcp=20 topuser=madalice 2026-08-15 07:32:41 L1=0.37 run=2 blk=0 avail=9604 (81.9%) swpO=0 conn=3 myRSS=525 php=0 phpRSS=0 ap=19 tcp=20 topuser=- 2026-08-15 07:32:41 L1=0.37 run=3 blk=0 avail=9603 (81.9%) swpO=0 conn=3 myRSS=525 php=0 phpRSS=0 ap=19 tcp=19 topuser=- 2026-08-15 07:32:51 L1=0.31 run=2 blk=0 avail=9614 (82.0%) swpO=0 conn=3 myRSS=525 php=0 phpRSS=0 ap=18 tcp=14 topuser=- 2026-08-15 07:32:51 L1=0.31 run=2 blk=0 avail=9614 (82.0%) swpO=0 conn=3 myRSS=525 php=0 phpRSS=0 ap=18 tcp=14 topuser=- 2026-08-15 07:33:01 L1=0.35 run=5 blk=0 avail=9624 (82.1%) swpO=0 conn=3 myRSS=525 php=0 phpRSS=0 ap=16 tcp=16 topuser=- 2026-08-15 07:33:01 L1=0.35 run=2 blk=0 avail=9624 (82.1%) swpO=0 conn=3 myRSS=525 php=0 phpRSS=0 ap=16 tcp=16 topuser=- 2026-08-15 07:33:11 L1=0.29 run=4 blk=0 avail=9570 (81.6%) swpO=0 conn=2 myRSS=525 php=1 phpRSS=75 ap=18 tcp=21 topuser=corpkicks 2026-08-15 07:33:11 L1=0.29 run=3 blk=0 avail=9570 (81.6%) swpO=0 conn=2 myRSS=525 php=1 phpRSS=75 ap=18 tcp=21 topuser=corpkicks 2026-08-15 07:33:22 L1=0.25 run=3 blk=0 avail=9610 (81.9%) swpO=0 conn=2 myRSS=525 php=0 phpRSS=0 ap=18 tcp=12 topuser=- 2026-08-15 07:33:22 L1=0.25 run=3 blk=0 avail=9609 (81.9%) swpO=0 conn=2 myRSS=525 php=0 phpRSS=0 ap=18 tcp=12 topuser=- 2026-08-15 07:33:32 L1=0.29 run=3 blk=0 avail=9615 (82.0%) swpO=0 conn=2 myRSS=526 php=0 phpRSS=0 ap=16 tcp=16 topuser=- 2026-08-15 07:33:32 L1=0.29 run=3 blk=0 avail=9614 (82.0%) swpO=0 conn=2 myRSS=526 php=0 phpRSS=0 ap=16 tcp=16 topuser=- 2026-08-15 07:33:42 L1=0.24 run=1 blk=0 avail=9608 (81.9%) swpO=0 conn=2 myRSS=526 php=0 phpRSS=0 ap=19 tcp=16 topuser=- 2026-08-15 07:33:42 L1=0.24 run=2 blk=0 avail=9608 (81.9%) swpO=0 conn=2 myRSS=526 php=0 phpRSS=0 ap=19 tcp=16 topuser=- 2026-08-15 07:33:52 L1=0.21 run=1 blk=0 avail=9611 (81.9%) swpO=0 conn=2 myRSS=526 php=0 phpRSS=0 ap=18 tcp=15 topuser=- 2026-08-15 07:33:52 L1=0.21 run=2 blk=0 avail=9611 (81.9%) swpO=0 conn=2 myRSS=526 php=0 phpRSS=0 ap=18 tcp=15 topuser=- 2026-08-15 07:34:02 L1=0.17 run=1 blk=0 avail=9614 (82.0%) swpO=0 conn=2 myRSS=526 php=0 phpRSS=0 ap=17 tcp=16 topuser=- 2026-08-15 07:34:02 L1=0.17 run=2 blk=0 avail=9614 (82.0%) swpO=0 conn=2 myRSS=526 php=0 phpRSS=0 ap=17 tcp=16 topuser=- 2026-08-15 07:34:12 L1=0.15 run=14 blk=0 avail=8585 (73.2%) swpO=0 conn=11 myRSS=526 php=11 phpRSS=1379 ap=20 tcp=34 topuser=madalice 2026-08-15 07:34:12 L1=0.15 run=19 blk=0 avail=8584 (73.2%) swpO=0 conn=11 myRSS=526 php=11 phpRSS=1397 ap=20 tcp=35 topuser=madalice 2026-08-15 07:34:22 L1=1.98 run=19 blk=0 avail=7726 (65.9%) swpO=0 conn=13 myRSS=533 php=14 phpRSS=1723 ap=62 tcp=55 topuser=madalice 2026-08-15 07:34:22 L1=1.98 run=20 blk=0 avail=7787 (66.4%) swpO=0 conn=13 myRSS=533 php=12 phpRSS=1726 ap=62 tcp=55 topuser=madalice