INCIDENT 2026-08-15 07:40:14 trigger: php_rss=1990MB mysql_conn=15 ================================================================== load: 4.97 3.12 6.95 27/649 2572170 ncpu:10 mem_avail: 7854MB/11729MB (67.0%) swap_used:1436MB swapout:0/s blocked(D):0 running:21 iowait:0.0% steal:0.0% php: 21 procs / 1990MB heaviest user: madalice (21 procs, 1990MB) apache: 59 procs tcp_estab: 52 --- RSS by user (all processes) --- USER PROCS RSS_MB madalice 24 2288 nobody 58 914 mysql 1 543 root 244 394 netdata 8 239 kurri 3 24 wp-toolkit 6 21 mailman 20 19 dovenull 6 18 cpanellogin 1 18 candyfabcom 1 12 zabbix 1 11 dovecot 3 8 dbus 1 3 mailnull 1 2 evolution 4 2 polkitd 1 1 nscd 1 1 named 1 1 cpanelconnecttrack 1 1 --- php workers by user --- USER PROCS RSS_MB madalice 26 2366 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 3482 MB Active(file): 1561 MB Inactive(file): 1178 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 216 MB CommitLimit: 9960 MB Committed_AS: 11385 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 2342983 root 06:28:59 120 /usr/bin/imunify-agent-proxy 2571923 root 00:13 1312 /bin/sh -c bash -c "sleep $((RANDOM % 60))" ; /opt/imunify360/venv/share/imunify360/scripts/check-detached.py > /dev/null 2>&1 || : --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2561012 1 mysql 556056 3.2 Ssl 16:44 /usr/sbin/mariadbd 2572114 2571818 madalice 247456 71.0 S 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572113 2571826 madalice 225440 69.6 R 00:03 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 189724 2.5 Ssl 46-21:30:17 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2572117 2570198 madalice 182952 78.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572116 2571823 madalice 180416 79.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2390233 2382613 root 149348 0.0 S 05:04:37 spamd child 2572120 2566113 madalice 133836 111 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572122 2571794 madalice 133472 106 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572124 2570991 madalice 115940 105 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572126 2571754 madalice 106476 84.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572121 2571800 madalice 104200 72.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572127 2571759 madalice 100092 63.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572125 2570205 madalice 98440 63.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572123 2571791 madalice 94680 61.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572128 2571757 madalice 92600 52.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572129 2571755 madalice 79500 42.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572138 2571801 madalice 72000 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572133 2571720 madalice 71496 29.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572146 2571802 madalice 70532 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572134 2571827 madalice 69840 27.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572132 2570080 madalice 67396 22.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2382613 1 root 66172 0.0 Ss 05:17:03 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2572175 2571828 madalice 61368 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572144 2571832 madalice 60480 0.0 S 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572142 2571805 madalice 60368 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572161 2571825 madalice 57816 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572176 2571796 madalice 55192 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572156 2571789 madalice 54972 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2572155 2571793 madalice 54196 0.0 R 00:00 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4922 2431 netdata 38368 0.1 Sl 46-21:30:12 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1353308 1 root 27828 0.0 Ss 24-04:58:47 cpsrvd (SSL) - waiting for connections 2566113 1276780 nobody 21596 0.0 S 09:36 /usr/sbin/httpd -k start 2567378 1276780 nobody 21152 0.0 S 07:35 /usr/sbin/httpd -k start 2570080 1276780 nobody 20916 0.0 S 03:04 /usr/sbin/httpd -k start 2570198 1276780 nobody 19860 0.0 S 02:57 /usr/sbin/httpd -k start 2570196 1276780 nobody 19820 0.0 S 02:57 /usr/sbin/httpd -k start 2570200 1276780 nobody 19356 0.0 S 02:57 /usr/sbin/httpd -k start 2570205 1276780 nobody 19188 0.0 S 02:57 /usr/sbin/httpd -k start 2559203 1353308 cpanellogin 19060 0.0 S 19:15 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base server_locale en default_login_theme cpanel 2570991 1276780 nobody 19008 0.1 S 01:32 /usr/sbin/httpd -k start 159820 1 root 18968 0.0 Ss 25-21:53:25 /usr/lib/systemd/systemd-journald 2571821 1276780 nobody 18112 0.1 S 00:28 /usr/sbin/httpd -k start 2571720 1276780 nobody 17820 0.0 S 00:33 /usr/sbin/httpd -k start 2571832 1276780 nobody 17712 0.0 S 00:28 /usr/sbin/httpd -k start 2571044 1276780 nobody 17604 0.0 S 01:29 /usr/sbin/httpd -k start 2571723 1276780 nobody 17600 0.0 S 00:32 /usr/sbin/httpd -k start 2571826 1276780 nobody 17584 0.1 S 00:28 /usr/sbin/httpd -k start 2571789 1276780 nobody 17464 0.0 S 00:29 /usr/sbin/httpd -k start 2571800 1276780 nobody 17456 0.0 S 00:29 /usr/sbin/httpd -k start 2571828 1276780 nobody 17456 0.0 S 00:28 /usr/sbin/httpd -k start 2571825 1276780 nobody 17396 0.0 S 00:28 /usr/sbin/httpd -k start 2571827 1276780 nobody 17388 0.0 S 00:28 /usr/sbin/httpd -k start 2571049 1276780 nobody 17352 0.0 S 01:28 /usr/sbin/httpd -k start 2571759 1276780 nobody 17344 0.1 S 00:30 /usr/sbin/httpd -k start 2571754 1276780 nobody 17336 0.0 S 00:30 /usr/sbin/httpd -k start 2571122 1276780 nobody 17288 0.0 S 01:15 /usr/sbin/httpd -k start 2571725 1276780 nobody 17288 0.0 S 00:31 /usr/sbin/httpd -k start 2571757 1276780 nobody 17288 0.1 S 00:30 /usr/sbin/httpd -k start 2571796 1276780 nobody 17268 0.0 S 00:29 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +------+----------------------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +------+----------------------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 1358 | unauthenticated user | NULL | Connect | 0 | Reading from net | NULL | | 1357 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +------+----------------------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 171 vinesit/vinesit.com.au-ssl_log 28 evolution/portal.evolutionerp.com.au-ssl_log 26 madalice/madalice.com.au 26 whiz/whizengineering.com.au 21 corpkicks/corporatekicks.com.au-ssl_log 11 evolution/my.evolutionerp.com.au-ssl_log 9 aaa/aaadownunder.com.au-ssl_log 8 coscom/coscom.com.au-ssl_log 4 cosgrovecreative/cosgrovecreative.com.au-ssl_log 4 olympic/olympicfencing.com.au-ssl_log 3 tubesupplies/tubesupplies.com.au-ssl_log 3 customc/customcentral.com.au-ssl_log 2 kurri/kurrimotorinn.com.au-ssl_log 2 infinium/infinium.net.au-ssl_log 1 (total vhosts taking traffic: 15) --- top client IPs across all vhosts (last 3 min) --- 117 20.163.43.14 54 135.225.78.186 28 51.116.180.165 26 203.54.180.238 21 146.70.194.220 14 91.92.34.102 6 118.127.40.55 5 76.13.3.78 3 91.92.243.243 3 52.167.144.213 3 2403:580c:6f25:0:3c4d:5c28:49bb:4c6d 2 91.92.243.249 2 91.92.243.248 2 51.68.111.204 2 179.109.40.182 --- top request paths across all vhosts (last 3 min) --- 28 GET /autodiscover/autodiscover.xml 26 GET /heartbeat.php 17 GET / 7 POST /wp-login.php 7 POST / 6 POST /wp-cron.php 5 GET /index.php 4 GET /xmlrpc.php 4 GET /wp-login.php 3 GET /wp-ws68.php 3 GET /wp-content/plugins/hellopress/wp_filemanager.php 3 GET /this_is_a_new_hello_world.php 3 GET /classwithtostring.php 3 GET /admin.php 3 GET /222.php 3 GET /1.php 2 POST /functions.php 2 GET /yj09.php 2 GET /wp-json/ 2 GET /scxy.php --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 10 GET / 7 POST / 2 GET /wp-ws68.php 2 GET /wp-content/plugins/hellopress/wp_filemanager.php 2 GET /this_is_a_new_hello_world.php 2 GET /product-sitemap.xml 2 GET /classwithtostring.php 2 GET /admin.php 2 GET /aa.php 2 GET /222.php 2 GET /1.php 1 GET /zxz.php -- last 10 requests -- 43.119.104.166 - - [15/Aug/2026:07:40:12 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/sparkle-with-style-in-swarovski-customized-sneakers-from-mad-alice/" "Mozilla/5.0 (M 201.224.50.189 - - [15/Aug/2026:07:40:13 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 578 "https://madalice.com.au/tag/af1/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, lik 43.119.100.79 - - [15/Aug/2026:07:40:13 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/tag/af1/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, 37.28.65.69 - - [15/Aug/2026:07:40:12 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 578 "https://madalice.com.au/sparkle-with-style-in-swarovski-customized-sneakers-from-mad-alice/" "Mozilla/5.0 (Macintosh 43.119.100.155 - - [15/Aug/2026:07:40:14 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/store/silver-clip-on-shoe-charms-with-crystal-center/" "Mozilla/5.0 (Macintosh; Inte 43.119.100.187 - - [15/Aug/2026:07:40:13 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/store/custom-buzz-woody-nike-af1/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) 181.199.60.90 - - [15/Aug/2026:07:40:13 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 578 "https://madalice.com.au/store/yellow-duck-shoelace-charms/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Apple 47.82.201.141 - - [15/Aug/2026:07:40:13 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/store/design-your-own-sliders/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Appl 47.82.201.244 - - [15/Aug/2026:07:40:13 +1000] "GET /?commercekit-ajax=commercekit_get_nonce HTTP/1.1" 200 37 "https://madalice.com.au/store/yellow-duck-shoelace-charms/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) 77.29.228.3 - - [15/Aug/2026:07:40:13 +1000] "POST /?wc-ajax=get_refreshed_fragments HTTP/1.1" 200 578 "https://madalice.com.au/store/custom-buzz-woody-nike-af1/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWeb == vinesit/vinesit.com.au-ssl_log == -- top paths -- 28 GET /autodiscover/autodiscover.xml -- last 10 requests -- 51.116.180.165 - - [15/Aug/2026:07:39:36 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 51.116.180.165 - - [15/Aug/2026:07:39:37 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 51.116.180.165 - - [15/Aug/2026:07:39:47 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 51.116.180.165 - - [15/Aug/2026:07:39:51 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 51.116.180.165 - - [15/Aug/2026:07:39:53 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 51.116.180.165 - - [15/Aug/2026:07:39:57 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 51.116.180.165 - - [15/Aug/2026:07:40:01 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 51.116.180.165 - - [15/Aug/2026:07:40:03 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 51.116.180.165 - - [15/Aug/2026:07:40:06 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" 51.116.180.165 - - [15/Aug/2026:07:40:10 +1000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 400 52 "-" "-" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 26 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [15/Aug/2026:07:39:23 +1000] "GET /heartbeat.php?sentAt=1786743563&bytes=106,127,139,11&_=1786683795406 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [15/Aug/2026:07:39:25 +1000] "GET /heartbeat.php?sentAt=1786743566&bytes=106,127,139,14&_=1786712385374 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [15/Aug/2026:07:39:33 +1000] "GET /heartbeat.php?sentAt=1786743573&bytes=106,127,139,21&_=1786683795407 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [15/Aug/2026:07:39:35 +1000] "GET /heartbeat.php?sentAt=1786743576&bytes=106,127,139,24&_=1786712385375 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [15/Aug/2026:07:39:46 +1000] "GET /heartbeat.php?sentAt=1786743583&bytes=106,127,139,31&_=1786683795408 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [15/Aug/2026:07:39:46 +1000] "GET /heartbeat.php?sentAt=1786743586&bytes=106,127,139,34&_=1786712385376 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [15/Aug/2026:07:39:53 +1000] "GET /heartbeat.php?sentAt=1786743593&bytes=106,127,139,41&_=1786683795409 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [15/Aug/2026:07:39:55 +1000] "GET /heartbeat.php?sentAt=1786743596&bytes=106,127,139,44&_=1786712385377 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [15/Aug/2026:07:40:03 +1000] "GET /heartbeat.php?sentAt=1786743603&bytes=106,127,139,51&_=1786683795410 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" 203.54.180.238 - - [15/Aug/2026:07:40:05 +1000] "GET /heartbeat.php?sentAt=1786743606&bytes=106,127,139,54&_=1786712385378 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6" --- last 30 samples (run-up to this incident) --- 2026-08-15 07:37:53 L1=2.90 run=2 blk=0 avail=9322 (79.5%) swpO=0 conn=8 myRSS=540 php=2 phpRSS=141 ap=30 tcp=20 topuser=madalice 2026-08-15 07:37:54 L1=2.75 run=2 blk=0 avail=9240 (78.8%) swpO=0 conn=9 myRSS=540 php=1 phpRSS=202 ap=29 tcp=19 topuser=madalice 2026-08-15 07:38:03 L1=2.61 run=2 blk=0 avail=9270 (79.0%) swpO=0 conn=8 myRSS=540 php=2 phpRSS=246 ap=21 tcp=23 topuser=madalice 2026-08-15 07:38:04 L1=2.48 run=1 blk=0 avail=9457 (80.6%) swpO=0 conn=9 myRSS=540 php=0 phpRSS=0 ap=21 tcp=22 topuser=- 2026-08-15 07:38:13 L1=2.68 run=2 blk=0 avail=9389 (80.0%) swpO=0 conn=3 myRSS=540 php=2 phpRSS=106 ap=25 tcp=24 topuser=madalice 2026-08-15 07:38:15 L1=2.55 run=2 blk=0 avail=9302 (79.3%) swpO=0 conn=2 myRSS=540 php=1 phpRSS=162 ap=25 tcp=24 topuser=madalice 2026-08-15 07:38:23 L1=2.34 run=1 blk=0 avail=9456 (80.6%) swpO=0 conn=3 myRSS=540 php=1 phpRSS=40 ap=21 tcp=17 topuser=evolution 2026-08-15 07:38:25 L1=2.32 run=2 blk=0 avail=9457 (80.6%) swpO=0 conn=2 myRSS=540 php=0 phpRSS=0 ap=20 tcp=17 topuser=- 2026-08-15 07:38:34 L1=2.21 run=1 blk=0 avail=9481 (80.8%) swpO=0 conn=3 myRSS=540 php=1 phpRSS=40 ap=16 tcp=21 topuser=evolution 2026-08-15 07:38:35 L1=2.03 run=1 blk=0 avail=9497 (81.0%) swpO=0 conn=2 myRSS=540 php=0 phpRSS=0 ap=16 tcp=19 topuser=- 2026-08-15 07:38:44 L1=1.95 run=2 blk=0 avail=9376 (79.9%) swpO=0 conn=3 myRSS=540 php=2 phpRSS=173 ap=18 tcp=21 topuser=madalice 2026-08-15 07:38:45 L1=1.95 run=5 blk=0 avail=9146 (78.0%) swpO=0 conn=2 myRSS=540 php=2 phpRSS=407 ap=18 tcp=22 topuser=madalice 2026-08-15 07:38:54 L1=1.80 run=1 blk=0 avail=9446 (80.5%) swpO=0 conn=3 myRSS=541 php=1 phpRSS=40 ap=23 tcp=18 topuser=evolution 2026-08-15 07:38:55 L1=1.73 run=2 blk=0 avail=9364 (79.8%) swpO=0 conn=2 myRSS=541 php=1 phpRSS=133 ap=22 tcp=17 topuser=madalice 2026-08-15 07:39:04 L1=1.67 run=1 blk=1 avail=9371 (79.9%) swpO=0 conn=3 myRSS=541 php=0 phpRSS=0 ap=23 tcp=21 topuser=- 2026-08-15 07:39:05 L1=1.62 run=2 blk=1 avail=9359 (79.8%) swpO=0 conn=2 myRSS=541 php=1 phpRSS=58 ap=23 tcp=21 topuser=madalice 2026-08-15 07:39:14 L1=1.81 run=4 blk=0 avail=9346 (79.7%) swpO=0 conn=2 myRSS=541 php=1 phpRSS=144 ap=21 tcp=21 topuser=madalice 2026-08-15 07:39:15 L1=1.75 run=3 blk=0 avail=9446 (80.5%) swpO=0 conn=1 myRSS=541 php=0 phpRSS=0 ap=21 tcp=23 topuser=- 2026-08-15 07:39:24 L1=1.93 run=4 blk=0 avail=9369 (79.9%) swpO=0 conn=2 myRSS=541 php=1 phpRSS=75 ap=22 tcp=28 topuser=madalice 2026-08-15 07:39:25 L1=1.85 run=3 blk=0 avail=9279 (79.1%) swpO=0 conn=1 myRSS=541 php=1 phpRSS=171 ap=22 tcp=25 topuser=madalice 2026-08-15 07:39:34 L1=1.78 run=1 blk=0 avail=9435 (80.4%) swpO=0 conn=2 myRSS=542 php=0 phpRSS=0 ap=20 tcp=24 topuser=- 2026-08-15 07:39:35 L1=1.64 run=3 blk=0 avail=9435 (80.4%) swpO=0 conn=1 myRSS=542 php=0 phpRSS=0 ap=20 tcp=24 topuser=- 2026-08-15 07:39:44 L1=1.75 run=2 blk=0 avail=9390 (80.1%) swpO=0 conn=2 myRSS=542 php=0 phpRSS=0 ap=27 tcp=94 topuser=- 2026-08-15 07:39:45 L1=1.61 run=1 blk=0 avail=9340 (79.6%) swpO=0 conn=1 myRSS=542 php=0 phpRSS=0 ap=35 tcp=95 topuser=- 2026-08-15 07:39:54 L1=1.56 run=2 blk=0 avail=8889 (75.8%) swpO=0 conn=2 myRSS=542 php=1 phpRSS=184 ap=80 tcp=18 topuser=madalice 2026-08-15 07:39:55 L1=1.52 run=1 blk=0 avail=9049 (77.2%) swpO=0 conn=1 myRSS=542 php=0 phpRSS=0 ap=79 tcp=21 topuser=- 2026-08-15 07:40:04 L1=1.39 run=2 blk=0 avail=9020 (76.9%) swpO=0 conn=2 myRSS=542 php=1 phpRSS=109 ap=70 tcp=15 topuser=madalice 2026-08-15 07:40:05 L1=1.36 run=2 blk=0 avail=8937 (76.2%) swpO=0 conn=1 myRSS=542 php=1 phpRSS=211 ap=68 tcp=15 topuser=madalice 2026-08-15 07:40:14 L1=2.61 run=21 blk=0 avail=7854 (67.0%) swpO=0 conn=15 myRSS=543 php=21 phpRSS=1990 ap=59 tcp=52 topuser=madalice 2026-08-15 07:40:15 L1=4.97 run=31 blk=0 avail=7111 (60.6%) swpO=0 conn=26 myRSS=543 php=26 phpRSS=2786 ap=59 tcp=57 topuser=madalice