INCIDENT 2026-08-17 01:19:00 trigger: php_procs=36 php_rss=5211MB mysql_conn=35 ================================================================== load: 17.18 7.30 3.29 56/709 4097719 ncpu:10 mem_avail: 2496MB/11729MB (21.3%) swap_used:1950MB swapout:0/s blocked(D):0 running:37 iowait:0.0% steal:0.0% php: 36 procs / 5211MB heaviest user: madalice (32 procs, 4764MB) apache: 57 procs tcp_estab: 76 --- RSS by user (all processes) --- USER PROCS RSS_MB madalice 31 4947 mysql 1 2276 nobody 56 883 root 239 877 netdata 8 267 olympic 2 249 evolution 5 111 alison 1 108 mailnull 4 64 cpanellogin 1 60 dovenull 6 26 lowrange 2 25 kurri 2 22 wp-toolkit 6 20 zabbix 1 14 mailman 20 14 infinium 1 12 aaa 1 12 nscd 1 8 dovecot 3 7 --- php workers by user --- USER PROCS RSS_MB madalice 31 4973 olympic 2 249 evolution 1 113 alison 1 108 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 4798 MB Active(file): 1465 MB Inactive(file): 428 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 391 MB CommitLimit: 9960 MB Committed_AS: 13789 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 4090795 root 07:43 7752 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 2575700 1 mysql 2331044 2.7 Ssl 1-17:28:22 /usr/sbin/mariadbd 4097538 4097415 madalice 268736 26.0 R 00:13 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097593 4097472 madalice 268032 26.8 R 00:11 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097673 4097670 madalice 245216 79.2 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097549 4097474 madalice 237356 27.7 R 00:12 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097552 4096215 madalice 230880 25.8 S 00:12 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097544 4097468 madalice 226180 26.6 R 00:12 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1220 1 netdata 218204 2.5 Ssl 48-15:09:04 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 4097570 4097452 madalice 211808 20.3 R 00:12 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097557 4097554 madalice 202132 27.3 R 00:12 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097663 4095612 madalice 199996 36.5 R 00:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097655 4097621 madalice 196228 35.8 R 00:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097596 4092965 madalice 196036 22.8 S 00:11 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097588 4097470 madalice 195000 24.4 R 00:11 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097594 4097589 madalice 194224 19.9 R 00:11 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097604 4097601 madalice 189416 27.9 R 00:10 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097556 4097469 madalice 182876 21.7 R 00:12 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2575382 1 root 171936 0.0 Ss 1-17:28:25 /usr/lib/systemd/systemd-journald 3255082 3247260 root 171348 0.0 S 22:43:11 spamd child 4097657 4096249 madalice 160064 33.0 R 00:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097668 4096327 madalice 158076 37.2 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097595 4097590 madalice 157992 22.7 R 00:11 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097649 4095367 madalice 157784 29.4 R 00:07 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097533 4095319 olympic 142932 12.7 R 00:14 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3247260 1 root 136332 0.0 Ss 22:55:41 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 4097656 4097619 madalice 126684 16.6 R 00:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097681 4091117 evolution 125508 16.0 R 00:03 /opt/cpanel/ea-php81/root/usr/bin/php-cgi 4097660 4097617 madalice 120392 20.0 R 00:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097674 4096171 alison 117308 33.2 R 00:04 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097653 4097600 olympic 115888 22.0 R 00:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097662 4096255 madalice 113192 22.6 R 00:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097661 4097623 madalice 111476 17.1 R 00:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097667 4097665 madalice 110844 21.8 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097666 4094089 madalice 102272 24.0 R 00:05 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097654 4097618 madalice 99792 17.1 R 00:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097659 4097624 madalice 94332 18.1 R 00:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097658 4097622 madalice 94208 17.6 R 00:06 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097687 4097680 madalice 74640 21.5 R 00:02 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4062968 1353308 cpanellogin 61904 0.0 S 42:31 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base default_login_theme cpanel server_locale en 4097705 4097678 madalice 60888 18.0 S 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097730 4097677 madalice 60532 23.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 3767579 3247260 root 59460 0.0 S 08:46:23 spamd child 4097737 4095363 madalice 43808 5.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097741 4097471 madalice 42056 3.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 1353308 1 root 41592 0.0 Ss 25-22:37:34 cpsrvd (SSL) - waiting for connections 4097736 4097603 madalice 41588 3.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 2223 1201 root 39276 0.0 Sl 48-15:09:03 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 4097738 4097455 madalice 35712 16.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097676 1353308 root 34696 0.0 S 00:03 webmaild - serving 199.45.154.67 4922 2431 netdata 33788 0.1 Sl 48-15:08:59 /usr/libexec/netdata/plugins.d/go.d.plugin 1 1469 1 root 33424 0.1 Ss 48-15:09:03 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 4097733 4097679 madalice 29492 16.0 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4097551 4097467 madalice 29088 26.5 R 00:12 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4039895 1 root 29052 0.0 Ss 01:19:00 lfd - sleeping 4096249 1276780 nobody 21136 0.1 S 01:31 /usr/sbin/httpd -k start 4096327 1276780 nobody 21068 0.3 S 01:25 /usr/sbin/httpd -k start 4095367 1276780 nobody 20788 0.1 S 02:05 /usr/sbin/httpd -k start 4096171 1276780 nobody 20768 0.1 S 01:34 /usr/sbin/httpd -k start 4095612 1276780 nobody 20736 0.1 S 02:01 /usr/sbin/httpd -k start 4096503 1276780 nobody 20708 0.4 S 01:09 /usr/sbin/httpd -k start --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 427877 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +--------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 232 customkidscom/customkids.com.au-ssl_log 44 evolution/evolutionerp.com.au-ssl_log 34 alison/alisonarts.com.au-ssl_log 30 evolution/portal.evolutionerp.com.au-ssl_log 14 evolution/evolutionerp.com.au 2 (total vhosts taking traffic: 6) --- top client IPs across all vhosts (last 3 min) --- 222 185.93.89.147 44 20.24.67.246 32 20.104.100.201 30 20.102.65.165 14 203.54.180.238 6 85.204.70.102 1 173.239.213.88 1 173.239.213.75 1 173.239.213.72 1 173.239.213.68 1 114.119.159.70 1 114.119.143.104 1 114.119.137.101 1 114.119.131.88 --- top request paths across all vhosts (last 3 min) --- 14 GET /heartbeat.php 8 GET /store/dont-be-a-goose-custom-nike-air-force-1/ 8 GET /store/blue-crystal-swoosh-lace-charms-blue-pair/ 7 GET /store/custom-vans-shoes-bridal-pearl-edition/ 7 GET /store/boot-charm-butterfly-heart/ 6 GET /store/boot-charms-heart/ 6 GET /product-category/customised-shoes/ 5 GET /store/multi-colour-drippy-cartoon-af1/ 5 GET /store/custom-mushroom-nike-air-force-1-psychedelic-sneakers/ 5 GET /product-category/brands/nike/ 4 POST /wp-login.php 4 GET /product-tag/nike/ 3 GET /store/boot-charms-sacred-heart/ 3 GET /product-category/accessories/ 3 GET /domvf.php 2 GET /xx.php 2 GET /wp-content/plugins/hellopress/wp_filemanager.php 2 GET /wp-admin/css/colors/modern/ 2 GET /this_is_a_new_hello_world.php 2 GET /store/tropical-twist-nike-court/ --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 8 GET /store/dont-be-a-goose-custom-nike-air-force-1/ 8 GET /store/blue-crystal-swoosh-lace-charms-blue-pair/ 7 GET /store/custom-vans-shoes-bridal-pearl-edition/ 7 GET /store/boot-charm-butterfly-heart/ 6 GET /store/boot-charms-heart/ 6 GET /product-category/customised-shoes/ 5 GET /store/multi-colour-drippy-cartoon-af1/ 5 GET /store/custom-mushroom-nike-air-force-1-psychedelic-sneakers/ 5 GET /product-category/brands/nike/ 4 GET /product-tag/nike/ 3 GET /store/boot-charms-sacred-heart/ 3 GET /product-category/accessories/ -- last 10 requests -- 185.93.89.147 - - [17/Aug/2026:01:18:49 +1000] "GET /store/air-max-90-blue-and-black-drippy-copy/ HTTP/1.1" 200 43682 "http://madalice.com.au/store/air-max-90-blue-and-black-drippy-copy/" "Mozilla/5.0 (compatible; jscraw 185.93.89.147 - - [17/Aug/2026:01:18:49 +1000] "GET /store/highlife-custom-af1-shoes-copy/ HTTP/1.1" 200 47814 "http://madalice.com.au/store/highlife-custom-af1-shoes-copy/" "Mozilla/5.0 (compatible; jscrawler/0.1; +http 185.93.89.147 - - [17/Aug/2026:01:18:47 +1000] "GET /store/custom-veja-womens-shoes/ HTTP/1.1" 200 43346 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)" 185.93.89.147 - - [17/Aug/2026:01:18:48 +1000] "GET /store/highlife-custom-af1-shoes-copy/ HTTP/1.1" 200 47853 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)" 185.93.89.147 - - [17/Aug/2026:01:18:48 +1000] "GET /store/custom-ice-cream-sneakers-3d-waffle-cone-sprinkles/ HTTP/1.1" 200 48293 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)" 185.93.89.147 - - [17/Aug/2026:01:18:49 +1000] "GET /store/nike-af1-ice-cream-sneakers-with-sprinkles/ HTTP/1.1" 200 47231 "http://madalice.com.au/store/nike-af1-ice-cream-sneakers-with-sprinkles/" "Mozilla/5.0 (compatib 185.93.89.147 - - [17/Aug/2026:01:18:49 +1000] "GET /store/hand-painted-af1-swoosh-inkydrip/ HTTP/1.1" 200 47334 "http://madalice.com.au/store/hand-painted-af1-swoosh-inkydrip/" "Mozilla/5.0 (compatible; jscrawler/0.1; + 185.93.89.147 - - [17/Aug/2026:01:18:48 +1000] "GET /store/tropical-twist-nike-court/ HTTP/1.1" 200 47550 "http://madalice.com.au/store/tropical-twist-nike-court/" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github 85.204.70.102 - - [17/Aug/2026:01:18:59 +1000] "GET /wp-includes/functions.wp-styles.php HTTP/1.1" 200 1 "-" "-" 185.93.89.147 - - [17/Aug/2026:01:18:49 +1000] "GET /product-category/custom-shoes/page/2/ HTTP/1.1" 200 32134 "http://madalice.com.au/product-category/custom-shoes/page/2/" "Mozilla/5.0 (compatible; jscrawler/0.1; +http == customkidscom/customkids.com.au-ssl_log == -- top paths -- 1 GET /xx.php 1 GET /wp-includes/Text/ 1 GET /wp-includes/l10n/ 1 GET /wp-includes/js/jquery/ 1 GET /wp-includes/css/dist/ 1 GET /wp-includes/assets/ 1 GET /w.php 1 GET /wp-content/uploads/ 1 GET /wp-content/themes/index.php 1 GET /wp-content/plugins/hellopress/wp_filemanager.php 1 GET /wp-content/admin.php 1 GET /wp-blog.php -- last 10 requests -- 20.24.67.246 - - [17/Aug/2026:01:17:21 +1000] "GET /cgi-bin/index.php HTTP/1.1" 401 36 "-" "-" 20.24.67.246 - - [17/Aug/2026:01:17:21 +1000] "GET /wp-includes/css/dist/ HTTP/1.1" 401 36 "-" "-" 20.24.67.246 - - [17/Aug/2026:01:17:22 +1000] "GET /abcd.php HTTP/1.1" 401 36 "-" "-" 20.24.67.246 - - [17/Aug/2026:01:17:22 +1000] "GET /wp-content/themes/index.php HTTP/1.1" 401 36 "-" "-" 20.24.67.246 - - [17/Aug/2026:01:17:22 +1000] "GET /wp-includes/Text/ HTTP/1.1" 401 36 "-" "-" 20.24.67.246 - - [17/Aug/2026:01:17:22 +1000] "GET /wp-blog.php HTTP/1.1" 401 36 "-" "-" 20.24.67.246 - - [17/Aug/2026:01:17:23 +1000] "GET /chosen.php HTTP/1.1" 401 36 "-" "-" 20.24.67.246 - - [17/Aug/2026:01:17:23 +1000] "GET /about.php HTTP/1.1" 401 36 "-" "-" 20.24.67.246 - - [17/Aug/2026:01:17:23 +1000] "GET /inputs.php HTTP/1.1" 401 36 "-" "-" 20.24.67.246 - - [17/Aug/2026:01:17:24 +1000] "GET /w.php HTTP/1.1" 401 36 "-" "-" == evolution/evolutionerp.com.au-ssl_log == -- top paths -- 4 POST /wp-login.php 1 GET /z43agz.php 1 GET /wpxml.php 1 GET /wp-includes/Text/Diff/Engine/file_cdd9.php 1 GET /wp-content/uploads/users.php 1 GET /wp-content/uploads/panel.php 1 GET /wp-content/uploads/file1.php 1 GET /wp-content/options.php 1 GET /wp-content/ms-files.php 1 GET /wp-content/min.php 1 GET /wp-asudo.php 1 GET /wp-admin/css/index.php -- last 10 requests -- 20.104.100.201 - - [17/Aug/2026:01:18:00 +1000] "GET /ty.php HTTP/1.1" 404 203807 "-" "-" 20.104.100.201 - - [17/Aug/2026:01:18:02 +1000] "GET /wp-content/uploads/panel.php HTTP/1.1" 403 12 "-" "-" 20.104.100.201 - - [17/Aug/2026:01:18:03 +1000] "GET /dot.php HTTP/1.1" 404 203808 "-" "-" 20.104.100.201 - - [17/Aug/2026:01:18:05 +1000] "GET /005.php HTTP/1.1" 404 203808 "-" "-" 20.104.100.201 - - [17/Aug/2026:01:18:07 +1000] "GET /v2.php HTTP/1.1" 404 203807 "-" "-" 20.104.100.201 - - [17/Aug/2026:01:18:09 +1000] "GET /wkl.php HTTP/1.1" 404 203808 "-" "-" 20.104.100.201 - - [17/Aug/2026:01:18:12 +1000] "GET /wp-asudo.php HTTP/1.1" 404 203813 "-" "-" 20.104.100.201 - - [17/Aug/2026:01:18:14 +1000] "GET /fm.php HTTP/1.1" 404 203807 "-" "-" 20.104.100.201 - - [17/Aug/2026:01:18:17 +1000] "GET /az.php HTTP/1.1" 404 203807 "-" "-" 20.104.100.201 - - [17/Aug/2026:01:18:20 +1000] "GET /z43agz.php HTTP/1.1" 404 203811 "-" "-" --- last 30 samples (run-up to this incident) --- 2026-08-17 01:16:31 L1=0.72 run=2 blk=0 avail=6841 (58.3%) swpO=0 conn=1 myRSS=2369 php=1 phpRSS=90 ap=19 tcp=26 topuser=evolution 2026-08-17 01:16:31 L1=0.72 run=2 blk=0 avail=6832 (58.3%) swpO=0 conn=1 myRSS=2369 php=1 phpRSS=99 ap=19 tcp=26 topuser=evolution 2026-08-17 01:16:41 L1=0.76 run=2 blk=0 avail=6791 (57.9%) swpO=0 conn=1 myRSS=2369 php=1 phpRSS=153 ap=19 tcp=27 topuser=evolution 2026-08-17 01:16:41 L1=0.76 run=2 blk=0 avail=6780 (57.8%) swpO=0 conn=1 myRSS=2369 php=1 phpRSS=160 ap=19 tcp=27 topuser=evolution 2026-08-17 01:16:51 L1=1.92 run=21 blk=0 avail=5364 (45.7%) swpO=401 conn=14 myRSS=2370 php=14 phpRSS=1975 ap=35 tcp=51 topuser=madalice 2026-08-17 01:16:52 L1=1.92 run=20 blk=0 avail=5272 (45.0%) swpO=374 conn=13 myRSS=2369 php=16 phpRSS=1860 ap=34 tcp=74 topuser=madalice 2026-08-17 01:17:02 L1=7.03 run=34 blk=0 avail=2920 (24.9%) swpO=3603 conn=33 myRSS=2308 php=31 phpRSS=4883 ap=54 tcp=57 topuser=madalice 2026-08-17 01:17:08 L1=8.79 run=1 blk=1 avail=6814 (58.1%) swpO=2367 conn=2 myRSS=2306 php=1 phpRSS=87 ap=48 tcp=26 topuser=corpkicks 2026-08-17 01:17:12 L1=8.16 run=3 blk=0 avail=6651 (56.7%) swpO=410 conn=33 myRSS=2306 php=3 phpRSS=326 ap=44 tcp=29 topuser=corpkicks 2026-08-17 01:17:19 L1=7.59 run=24 blk=0 avail=4047 (34.5%) swpO=0 conn=20 myRSS=2306 php=19 phpRSS=3486 ap=41 tcp=46 topuser=madalice 2026-08-17 01:17:23 L1=8.58 run=23 blk=0 avail=6188 (52.8%) swpO=0 conn=33 myRSS=2306 php=14 phpRSS=1198 ap=39 tcp=41 topuser=madalice 2026-08-17 01:17:29 L1=10.69 run=34 blk=0 avail=4578 (39.0%) swpO=0 conn=25 myRSS=2306 php=25 phpRSS=3133 ap=42 tcp=61 topuser=madalice 2026-08-17 01:17:33 L1=10.69 run=33 blk=0 avail=3419 (29.2%) swpO=0 conn=29 myRSS=2306 php=28 phpRSS=4308 ap=50 tcp=55 topuser=madalice 2026-08-17 01:17:39 L1=12.20 run=30 blk=0 avail=2838 (24.2%) swpO=1239 conn=31 myRSS=2295 php=33 phpRSS=4937 ap=53 tcp=60 topuser=madalice 2026-08-17 01:17:43 L1=12.20 run=30 blk=0 avail=5288 (45.1%) swpO=1239 conn=13 myRSS=2295 php=12 phpRSS=1900 ap=49 tcp=44 topuser=madalice 2026-08-17 01:17:50 L1=13.47 run=26 blk=0 avail=3997 (34.1%) swpO=0 conn=24 myRSS=2295 php=24 phpRSS=3560 ap=49 tcp=56 topuser=madalice 2026-08-17 01:17:54 L1=13.47 run=43 blk=0 avail=2046 (17.4%) swpO=872 conn=35 myRSS=2276 php=36 phpRSS=5850 ap=57 tcp=67 topuser=madalice 2026-08-17 01:18:01 L1=15.94 run=18 blk=0 avail=5243 (44.7%) swpO=874 conn=10 myRSS=2276 php=9 phpRSS=1762 ap=51 tcp=41 topuser=madalice 2026-08-17 01:18:08 L1=15.06 run=3 blk=0 avail=6878 (58.6%) swpO=1 conn=2 myRSS=2276 php=1 phpRSS=65 ap=44 tcp=30 topuser=madalice 2026-08-17 01:18:11 L1=14.02 run=21 blk=0 avail=5340 (45.5%) swpO=0 conn=17 myRSS=2276 php=16 phpRSS=2124 ap=42 tcp=38 topuser=madalice 2026-08-17 01:18:19 L1=13.13 run=26 blk=0 avail=4937 (42.1%) swpO=0 conn=14 myRSS=2276 php=15 phpRSS=2359 ap=36 tcp=43 topuser=madalice 2026-08-17 01:18:21 L1=13.36 run=17 blk=0 avail=5844 (49.8%) swpO=0 conn=14 myRSS=2276 php=13 phpRSS=1554 ap=35 tcp=40 topuser=madalice 2026-08-17 01:18:29 L1=13.78 run=3 blk=0 avail=6734 (57.4%) swpO=0 conn=14 myRSS=2276 php=1 phpRSS=164 ap=29 tcp=35 topuser=madalice 2026-08-17 01:18:31 L1=13.78 run=2 blk=0 avail=7007 (59.7%) swpO=0 conn=14 myRSS=2276 php=1 phpRSS=59 ap=27 tcp=33 topuser=evolution 2026-08-17 01:18:39 L1=12.78 run=16 blk=0 avail=5544 (47.3%) swpO=0 conn=13 myRSS=2276 php=12 phpRSS=1886 ap=26 tcp=49 topuser=madalice 2026-08-17 01:18:41 L1=12.78 run=17 blk=0 avail=6098 (52.0%) swpO=0 conn=14 myRSS=2276 php=11 phpRSS=1212 ap=38 tcp=50 topuser=madalice 2026-08-17 01:18:49 L1=13.84 run=35 blk=0 avail=5082 (43.3%) swpO=0 conn=23 myRSS=2276 php=26 phpRSS=2530 ap=37 tcp=54 topuser=madalice 2026-08-17 01:18:52 L1=13.84 run=44 blk=0 avail=3887 (33.1%) swpO=0 conn=32 myRSS=2276 php=31 phpRSS=3975 ap=51 tcp=53 topuser=madalice 2026-08-17 01:19:00 L1=17.18 run=37 blk=0 avail=2496 (21.3%) swpO=0 conn=35 myRSS=2276 php=36 phpRSS=5211 ap=57 tcp=76 topuser=madalice 2026-08-17 01:19:03 L1=17.18 run=45 blk=0 avail=2074 (17.7%) swpO=1532 conn=39 myRSS=2251 php=40 phpRSS=5815 ap=58 tcp=65 topuser=madalice